$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: ute1c5QOX1/bJ4xG3yRM8WgATkcAyPfoGQktXk7w1lo= Subject key identifier: D8:22:7A:33:B6:BF:7D:18:2D:C4:99:40:BB:0B:E9:BD:D1:9D:B7:34 Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 4644E4CAA8EEE20C0ED8CA81FD48CF6156C071FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:49 +0000 Manifest this update: Tue 12 May 2026 22:25:49 +0000 Manifest next update: Thu 14 May 2026 00:58:49 +0000 Files and hashes: 1: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: bFcXahflwk0tklOVOv/KFv54XZNJJtURixJIP6ovoic=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) 3: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) 4: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:44:e4:ca:a8:ee:e2:0c:0e:d8:ca:81:fd:48:cf:61:56:c0:71:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: May 12 22:25:49 2026 GMT Not After : May 14 00:58:49 2026 GMT Subject: CN=D8227A33B6BF7D182DC49940BB0BE9BDD19DB734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:58:f0:48:98:50:f4:cb:2c:ce:f9:c2:08: 68:ac:f8:e6:fd:ba:ba:85:c5:2b:ec:04:94:ac:d4: db:31:a9:bc:0f:6e:46:1a:97:2b:86:97:06:70:06: e6:f8:c0:90:61:cb:69:42:ae:5e:12:1a:ca:e3:1d: 4c:26:0a:49:df:d5:71:09:d0:54:f2:1b:c4:b0:4f: f2:60:53:fd:83:17:91:55:ab:c1:83:d0:2c:c9:b9: 9e:29:cf:e3:a3:53:05:73:b5:6b:74:ee:d9:39:23: b2:28:a6:1e:f2:bd:e0:5f:5e:f4:e4:73:45:97:a8: 90:b6:54:b9:7c:3b:a4:f6:8b:ff:bc:9e:41:b8:03: d0:4e:81:00:d0:1b:4c:af:fa:79:d4:cf:73:89:1a: 5d:e9:fc:19:ee:8b:f2:76:5f:48:57:e9:96:57:c4: 54:ec:18:28:d3:c9:71:7d:f2:ec:81:65:83:68:d0: 01:ed:e0:79:df:a4:50:59:8a:8a:27:66:9d:14:dd: f9:22:13:78:77:21:80:06:61:70:d5:e7:7b:86:2f: 02:6f:55:f8:59:4a:ee:a7:bc:30:8a:ea:f7:d0:ec: 11:b1:98:12:6e:73:a6:37:e5:84:4d:08:67:f0:76: ce:f6:f3:53:39:54:0e:0f:af:41:84:8d:8f:a0:c3: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:22:7A:33:B6:BF:7D:18:2D:C4:99:40:BB:0B:E9:BD:D1:9D:B7:34 X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:de:d1:b5:67:d1:a5:cb:ad:cb:4c:a2:b0:38:f7:53:90:f5: 29:d9:26:90:9b:74:ce:0f:bc:55:59:ac:6a:fe:34:24:57:86: 39:64:1d:3a:bc:a1:01:89:be:bb:96:ab:02:18:9b:de:49:f1: 31:93:f3:7d:6a:bd:24:69:73:6c:15:ee:1b:b4:ae:d4:b6:96: 31:ee:f7:2a:ba:93:96:59:c8:26:37:93:41:76:ab:d6:6a:1d: 07:5f:4c:eb:a7:74:7f:81:65:4a:f0:2e:a1:eb:28:f2:34:4b: 55:bb:64:ea:23:6c:95:de:03:1f:84:06:33:2e:f9:d1:9f:4e: 5c:39:5e:ce:49:66:3d:f5:d5:f3:39:3e:7e:53:95:b4:fb:ab: 14:25:40:d1:01:96:ff:49:f3:8c:97:e1:50:92:22:4c:54:7a: 92:e6:21:32:4b:d7:d1:fc:ce:0c:d8:38:41:4f:b8:3f:04:62: 57:a3:29:36:92:a6:d6:55:f7:9a:d5:e3:de:0e:8a:26:50:4a: 21:98:4b:bf:d9:e2:9e:08:14:66:47:2c:94:65:a1:42:86:3f: 51:0a:28:48:b6:c2:ea:ec:21:c7:39:d6:8d:f3:20:53:8a:be: fc:de:e1:7c:86:55:fb:32:c1:58:12:88:d7:56:53:44:4f:c5: ef:d7:cd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkTkyqju4gwO2MqB/UjPYVbAcfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA1MTIyMjI1NDlaFw0yNjA1MTQwMDU4NDlaMDMxMTAvBgNV BAMTKEQ4MjI3QTMzQjZCRjdEMTgyREM0OTk0MEJCMEJFOUJERDE5REI3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0FjwSJhQ9MsszvnCCGis+Ob9 urqFxSvsBJSs1NsxqbwPbkYalyuGlwZwBub4wJBhy2lCrl4SGsrjHUwmCknf1XEJ 0FTyG8SwT/JgU/2DF5FVq8GD0CzJuZ4pz+OjUwVztWt07tk5I7Ioph7yveBfXvTk c0WXqJC2VLl8O6T2i/+8nkG4A9BOgQDQG0yv+nnUz3OJGl3p/Bnui/J2X0hX6ZZX xFTsGCjTyXF98uyBZYNo0AHt4HnfpFBZioonZp0U3fkiE3h3IYAGYXDV53uGLwJv VfhZSu6nvDCK6vfQ7BGxmBJuc6Y35YRNCGfwds7281M5VA4Pr0GEjY+gw703AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CJ6M7a/fRgtxJlAuwvpvdGdtzQwHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3e0bVn0aXLrctMorA491OQ9SnZJpCbdM4P vFVZrGr+NCRXhjlkHTq8oQGJvruWqwIYm95J8TGT831qvSRpc2wV7hu0rtS2ljHu 9yq6k5ZZyCY3k0F2q9ZqHQdfTOundH+BZUrwLqHrKPI0S1W7ZOojbJXeAx+EBjMu +dGfTlw5Xs5JZj311fM5Pn5TlbT7qxQlQNEBlv9J84yX4VCSIkxUepLmITJL19H8 zgzYOEFPuD8EYlejKTaSptZV95rV494OiiZQSiGYS7/Z4p4IFGZHLJRloUKGP1EK KEi2wursIcc51o3zIFOKvvze4XyGVfsywVgSiNdWU0RPxe/Xza0= -----END CERTIFICATE-----Generated at Wed May 13 02:15:22 2026 by rpki-client