$ rpki-client -vvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: 2WjXTWf7+3e5EcJNaVMaQG944l8xBNpLroo57UpPrL0= Subject key identifier: 4A:27:1E:9A:B2:60:9D:BD:91:35:C6:E8:D9:80:4C:FE:45:F5:D0:D8 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 3AC2E664F187F574C8D3FE08BD8859D43625ED4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:27:28 +0000 Manifest this update: Tue 12 May 2026 23:22:28 +0000 Manifest next update: Thu 14 May 2026 00:07:28 +0000 Files and hashes: 1: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: opj0EGYImv0Iy/+ZihqVKnj/Zc9sZ9HzHdl2eqKyJxA=) 2: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c2:e6:64:f1:87:f5:74:c8:d3:fe:08:bd:88:59:d4:36:25:ed:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: May 12 23:22:28 2026 GMT Not After : May 14 00:07:28 2026 GMT Subject: CN=4A271E9AB2609DBD9135C6E8D9804CFE45F5D0D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:57:ed:9f:53:15:ec:a0:60:2f:da:da:44: 80:d0:b0:ec:e7:3e:92:3a:9e:75:16:82:9b:ed:67: 22:2f:ff:ca:85:00:68:2c:37:99:c3:80:99:2e:fb: 3d:cb:30:d0:ba:47:17:93:d9:37:3c:56:82:7a:28: 8b:c8:09:a5:10:a2:7c:48:e3:44:a0:14:91:97:66: 8e:b3:23:47:de:b1:2c:40:7a:4f:16:e4:20:27:8c: 0c:2b:ec:04:1a:c5:00:b4:f1:5b:42:3c:db:54:5a: e6:7b:eb:08:43:6a:57:2f:6f:2a:e0:27:26:7d:31: c5:84:45:ac:20:e4:10:26:80:6c:2d:98:1a:88:e1: 09:08:39:15:b5:29:22:b3:87:b3:30:47:af:b9:cb: 03:0b:c0:7a:7e:60:af:d0:8d:9a:4a:bf:f9:1b:27: 2c:74:92:3a:d3:a7:53:f7:9d:59:bc:53:f2:31:be: 83:0c:35:f7:de:3a:07:d2:3e:68:b4:a1:50:3e:97: 5e:80:47:d1:b0:3f:9c:9a:1d:38:9c:f7:40:3c:e3: 5e:90:d7:9d:27:e7:ff:a5:e0:eb:a5:41:7a:10:43: e6:cc:57:66:7a:70:2a:9c:a0:9e:86:0a:c6:bc:01: b3:68:c3:1e:d2:78:99:23:01:d1:d6:d6:50:94:45: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:27:1E:9A:B2:60:9D:BD:91:35:C6:E8:D9:80:4C:FE:45:F5:D0:D8 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5b:1e:23:0c:43:c5:a5:6d:b6:de:93:20:02:6e:07:3e:21: 41:1a:9d:86:fa:d0:64:23:5b:72:f1:b3:90:c4:e7:91:cf:8c: 00:d3:70:4e:61:da:25:c0:c0:55:12:c1:9b:fe:5e:b8:c6:d8: 03:13:78:d6:a8:66:3c:dc:61:f9:f4:4b:ee:c6:3d:50:cd:ef: c2:1a:10:70:b4:fd:35:16:74:05:75:28:7c:ce:3d:7e:ed:33: be:fe:07:d2:bd:a3:26:5e:7e:8c:ff:7d:33:31:87:5d:4f:a1: 0e:ed:24:dd:65:7a:e4:ef:8f:b7:22:84:33:32:87:60:d4:ea: 34:6a:b4:a3:6e:ed:28:c4:9f:6d:32:99:d9:5e:e4:d3:66:ec: f0:24:ae:61:cd:1f:54:28:09:0f:c2:c3:71:56:41:d8:5f:08: cc:d2:e2:3e:79:33:27:ca:0f:28:16:f8:97:7f:c5:cb:94:85: 58:f2:3e:4b:5c:a6:75:b9:6f:32:11:74:1f:22:b9:d1:94:cd: fc:da:73:e3:36:0e:24:04:96:88:fe:ea:e0:21:64:41:8f:b5: 0c:21:ee:7b:73:f4:98:e9:91:db:fa:c3:58:a8:0e:cd:9d:28: a3:64:7f:10:d0:69:0c:42:0f:aa:40:5e:01:b7:0e:e9:f1:2f: 67:47:85:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsLmZPGH9XTI0/4IvYhZ1DYl7U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA1MTIyMzIyMjhaFw0yNjA1MTQwMDA3MjhaMDMxMTAvBgNV BAMTKDRBMjcxRTlBQjI2MDlEQkQ5MTM1QzZFOEQ5ODA0Q0ZFNDVGNUQwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiVftn1MV7KBgL9raRIDQsOzn PpI6nnUWgpvtZyIv/8qFAGgsN5nDgJku+z3LMNC6RxeT2Tc8VoJ6KIvICaUQonxI 40SgFJGXZo6zI0fesSxAek8W5CAnjAwr7AQaxQC08VtCPNtUWuZ76whDalcvbyrg JyZ9McWERawg5BAmgGwtmBqI4QkIORW1KSKzh7MwR6+5ywMLwHp+YK/QjZpKv/kb Jyx0kjrTp1P3nVm8U/IxvoMMNffeOgfSPmi0oVA+l16AR9GwP5yaHTic90A8416Q 150n5/+l4OulQXoQQ+bMV2Z6cCqcoJ6GCsa8AbNowx7SeJkjAdHW1lCURU+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSicemrJgnb2RNcbo2YBM/kX10NgwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJbHiMMQ8WlbbbekyACbgc+IUEanYb60GQj W3Lxs5DE55HPjADTcE5h2iXAwFUSwZv+XrjG2AMTeNaoZjzcYfn0S+7GPVDN78Ia EHC0/TUWdAV1KHzOPX7tM77+B9K9oyZefoz/fTMxh11PoQ7tJN1leuTvj7cihDMy h2DU6jRqtKNu7SjEn20ymdle5NNm7PAkrmHNH1QoCQ/Cw3FWQdhfCMzS4j55MyfK DygW+Jd/xcuUhVjyPktcpnW5bzIRdB8iudGUzfzac+M2DiQEloj+6uAhZEGPtQwh 7ntz9Jjpkdv6w1ioDs2dKKNkfxDQaQxCD6pAXgG3DunxL2dHhXU= -----END CERTIFICATE-----Generated at Wed May 13 02:59:28 2026 by rpki-client