$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json) Hash identifier: HVG2jhnaugrs+RtCkQxpjhq3bfa1isAS64a38Lz5hts= Subject key identifier: 00:C7:6A:2A:AE:3F:95:31:89:5F:A2:86:CB:C6:21:23:79:7C:53:0E Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Certificate serial: 414520F807887937C716C019C371B52F6992FBB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft Manifest number: 10 Signing time: Wed 13 May 2026 06:04:07 +0000 Manifest this update: Wed 13 May 2026 05:59:07 +0000 Manifest next update: Thu 14 May 2026 09:10:07 +0000 Files and hashes: 1: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=) 2: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=) 3: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: RqYp16svo5AKgt7OsCWRKIa763NhEbLnfe7a06W9pRQ=) 4: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=) 5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=) 6: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=) 7: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:20:f8:07:88:79:37:c7:16:c0:19:c3:71:b5:2f:69:92:fb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Validity Not Before: May 13 05:59:07 2026 GMT Not After : May 14 09:10:07 2026 GMT Subject: CN=00C76A2AAE3F9531895FA286CBC62123797C530E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:fa:89:ad:84:7d:72:15:25:6c:65:c1:81: 03:e3:16:bd:ea:be:60:cb:7b:a7:51:6f:e9:55:a8: 9d:35:be:a7:de:6e:fc:d4:6e:a9:1e:76:ea:91:a2: 4c:6c:5c:5e:c0:6d:9c:21:e3:03:f6:05:84:87:50: 11:45:86:22:20:a0:36:5c:52:8f:b1:7d:5e:f1:e6: 0e:0a:21:4e:6d:d8:67:69:4c:84:29:15:fa:5c:e9: ef:e9:63:bf:70:58:fb:6e:5b:a7:d2:bf:74:c2:86: 76:27:11:67:f2:99:f8:be:4a:23:77:77:41:82:52: 31:9a:91:c8:e7:b5:6f:d8:a2:db:6d:29:d1:9a:82: d0:ba:2f:7e:e1:49:14:3c:b6:5f:49:22:99:9c:41: d6:18:1e:01:53:a5:81:c9:4b:6f:03:49:2c:b9:a7: 35:67:9c:ef:74:e9:44:a3:35:70:db:76:1d:08:1c: de:19:7f:93:a5:ca:83:dc:d8:f1:eb:de:ee:20:22: 0f:94:65:ee:0a:b4:ad:58:c2:67:2f:60:ed:4e:37: e8:dc:e9:01:e4:24:ba:74:d4:5a:79:ed:27:b6:b0: 0d:f0:71:dc:dc:c9:ec:7b:2b:a3:23:f3:64:73:6e: 8b:08:23:51:b6:93:28:26:a9:aa:4a:af:17:ac:98: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:6A:2A:AE:3F:95:31:89:5F:A2:86:CB:C6:21:23:79:7C:53:0E X509v3 Authority Key Identifier: keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e5:d2:c2:66:21:54:8b:8d:a0:cd:50:da:34:71:10:29:19: c8:bb:66:26:1a:93:4c:ef:ab:45:c3:78:27:3d:8b:5d:21:84: 38:02:0e:66:fd:35:aa:4d:bb:d5:e7:5b:21:db:09:5f:fa:10: 1a:a7:52:54:19:d7:77:63:c7:ad:cf:f3:42:c5:01:2b:40:1d: 4e:11:6d:0a:6e:03:03:31:8c:19:88:b0:48:82:45:97:ad:6f: ac:60:27:c5:d2:e3:59:db:1a:c9:16:fb:a7:2b:66:27:48:95: 09:74:45:17:53:f1:ea:dc:ff:3a:4a:d1:c0:f8:da:92:02:8e: d0:9c:82:b4:24:e3:77:9a:e0:15:34:13:e5:b5:c7:d3:df:85: 45:ad:a7:45:d0:ca:be:e7:ef:b0:2c:f5:af:b5:a6:0b:7e:1f: 58:b6:f9:7c:a0:fc:5f:fc:59:fe:6f:dd:97:a5:93:9a:4c:8d: f8:92:4a:10:ad:c0:af:04:57:cd:97:26:f3:2d:dd:01:0b:d8: ea:59:b4:d4:5c:c8:e4:dc:97:38:9f:69:e2:a3:f0:66:4c:1f: f7:ec:f4:64:5f:37:8f:a4:da:fa:86:09:e6:f0:4d:cf:ba:8a: 92:c7:cf:b2:f7:df:63:fc:a5:a0:00:aa:84:99:85:50:fc:fe: c9:d8:0d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUUg+AeIeTfHFsAZw3G1L2mS+7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQxOTAw MTFFNDYzRDAeFw0yNjA1MTMwNTU5MDdaFw0yNjA1MTQwOTEwMDdaMDMxMTAvBgNV BAMTKDAwQzc2QTJBQUUzRjk1MzE4OTVGQTI4NkNCQzYyMTIzNzk3QzUzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqPqJrYR9chUlbGXBgQPjFr3q vmDLe6dRb+lVqJ01vqfebvzUbqkeduqRokxsXF7AbZwh4wP2BYSHUBFFhiIgoDZc Uo+xfV7x5g4KIU5t2GdpTIQpFfpc6e/pY79wWPtuW6fSv3TChnYnEWfymfi+SiN3 d0GCUjGakcjntW/YotttKdGagtC6L37hSRQ8tl9JIpmcQdYYHgFTpYHJS28DSSy5 pzVnnO906USjNXDbdh0IHN4Zf5OlyoPc2PHr3u4gIg+UZe4KtK1YwmcvYO1ON+jc 6QHkJLp01Fp57Se2sA3wcdzcyex7K6Mj82RzbosII1G2kygmqapKrxesmBVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMdqKq4/lTGJX6KGy8YhI3l8Uw4wHwYDVR0j BBgwFoAUs+j9PRc70Yn4CAxMHenRkAEeRj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcyODA0MDAtOTY1NC00ZDQ1LTg4OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0Qx NzNCRDE4OUY4MDgwQzRDMURFOUQxOTAwMTFFNDYzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0U4RkQzRDE3M0JEMTg5RjgwODBDNEMxREU5RDE5MDAxMUU0 NjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQx OTAwMTFFNDYzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3l0sJmIVSLjaDNUNo0cRApGci7ZiYak0zv q0XDeCc9i10hhDgCDmb9NapNu9XnWyHbCV/6EBqnUlQZ13djx63P80LFAStAHU4R bQpuAwMxjBmIsEiCRZetb6xgJ8XS41nbGskW+6crZidIlQl0RRdT8erc/zpK0cD4 2pICjtCcgrQk43ea4BU0E+W1x9PfhUWtp0XQyr7n77As9a+1pgt+H1i2+Xyg/F/8 Wf5v3Zelk5pMjfiSShCtwK8EV82XJvMt3QEL2OpZtNRcyOTclzifaeKj8GZMH/fs 9GRfN4+k2vqGCebwTc+6ipLHz7L332P8paAAqoSZhVD8/snYDfE= -----END CERTIFICATE-----Generated at Wed May 13 10:20:13 2026 by rpki-client