$ rpki-client -vvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: 8FtdWuRZJPYY70Gqg3t/t5bJJXBNM8GkolHoPdDnLIg= Subject key identifier: 42:F7:4D:DF:8D:B5:39:90:03:9C:CA:62:DD:65:26:4B:03:5C:61:16 Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 57A5A024ECFBD72F4BE9F7239CB9F1688080AC98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:13:45 +0000 Manifest this update: Wed 13 May 2026 00:08:45 +0000 Manifest next update: Thu 14 May 2026 02:33:45 +0000 Files and hashes: 1: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: 6rKUNcez/H/VKRPtOzgsxsD6571wltzbN9YRgvy1k5Y=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:a0:24:ec:fb:d7:2f:4b:e9:f7:23:9c:b9:f1:68:80:80:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: May 13 00:08:45 2026 GMT Not After : May 14 02:33:45 2026 GMT Subject: CN=42F74DDF8DB53990039CCA62DD65264B035C6116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:ff:3e:da:83:3e:5d:97:07:eb:00:da:26: d4:23:f0:d3:73:32:1a:ac:6c:7a:89:71:b2:8c:6e: 85:98:90:cb:1e:20:81:98:1c:2f:39:0a:52:84:c7: e8:62:1b:02:a0:96:38:86:29:f2:46:20:87:e7:f9: 24:23:6a:d4:98:ff:11:b0:a0:99:e4:4d:c2:e6:ff: 70:d2:1c:35:bb:24:15:fd:17:04:24:65:3f:e6:e3: 72:a7:77:85:fb:8e:59:84:a1:de:c1:c6:2c:80:9b: eb:cb:b5:4f:4d:23:f8:79:eb:76:e3:c3:d2:54:2a: d6:b4:06:2f:18:1e:ed:e6:f8:65:3a:fc:ac:27:0d: ad:e7:df:c3:df:2c:8a:88:77:53:a8:29:b7:4e:cf: da:f3:86:c4:e8:43:de:f6:ad:ba:f9:17:48:d3:ee: fe:f9:16:a8:9c:ce:f5:b1:6e:31:3a:dd:c7:28:0d: 96:ce:d1:57:10:07:e9:6b:f3:84:ea:4a:fc:19:26: 61:ab:e3:de:b9:fa:90:ab:59:6d:82:28:ec:dc:2f: 65:39:96:ec:d3:ae:9c:9b:a8:b6:49:bd:be:e3:a8: 1d:20:40:87:9a:f8:66:3e:e1:1d:59:b4:f0:33:98: 88:ee:9a:1e:f2:69:41:67:36:4f:dc:ed:ec:49:72: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:4D:DF:8D:B5:39:90:03:9C:CA:62:DD:65:26:4B:03:5C:61:16 X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:8c:8b:36:79:ba:cb:b6:90:96:30:76:21:88:29:a9:47: e4:0e:9c:f7:0e:11:6e:70:6d:4f:f1:2a:e8:6f:8f:f4:e1:45: ec:91:40:3b:5c:9f:f0:60:6d:07:50:28:39:98:b4:5b:00:a0: b2:7e:b9:ca:6c:d2:18:68:a8:e4:e3:c1:b6:23:3c:dc:5c:5a: c0:00:c9:42:f9:30:c1:59:47:74:25:79:2e:a1:ae:34:9b:c9: 8a:44:11:1f:b8:98:ff:7d:a9:fb:24:8b:35:6c:fc:93:30:12: 4e:97:96:eb:18:9b:ee:8f:34:e4:02:08:8a:25:c9:6d:21:68: 30:67:6b:4b:75:5b:38:e3:08:5c:49:83:b3:f4:9d:bc:8d:d5: c9:10:fe:85:f4:16:da:65:cd:c3:d4:91:19:9e:38:23:79:97: 3e:39:a2:97:23:92:4c:ed:df:d9:ac:bb:4d:56:5c:8e:9e:1a: 6d:f3:93:82:7c:bb:bc:53:4b:b5:4a:f6:b3:a9:bc:93:39:83: 31:a6:1b:f9:3b:90:02:f7:c4:0c:40:52:3a:8e:d3:d2:2b:33: 12:94:d6:18:10:88:f4:d5:09:0c:0b:d8:f9:da:52:00:f6:82: 96:1a:59:55:5d:9d:14:50:1e:ba:de:e6:80:e4:69:cb:80:30: f9:9c:66:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6WgJOz71y9L6fcjnLnxaICArJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA1MTMwMDA4NDVaFw0yNjA1MTQwMjMzNDVaMDMxMTAvBgNV BAMTKDQyRjc0RERGOERCNTM5OTAwMzlDQ0E2MkRENjUyNjRCMDM1QzYxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Xv8+2oM+XZcH6wDaJtQj8NNz MhqsbHqJcbKMboWYkMseIIGYHC85ClKEx+hiGwKgljiGKfJGIIfn+SQjatSY/xGw oJnkTcLm/3DSHDW7JBX9FwQkZT/m43Knd4X7jlmEod7BxiyAm+vLtU9NI/h563bj w9JUKta0Bi8YHu3m+GU6/KwnDa3n38PfLIqId1OoKbdOz9rzhsToQ972rbr5F0jT 7v75FqiczvWxbjE63ccoDZbO0VcQB+lr84TqSvwZJmGr4965+pCrWW2CKOzcL2U5 luzTrpybqLZJvb7jqB0gQIea+GY+4R1ZtPAzmIjumh7yaUFnNk/c7exJcpZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvdN3421OZADnMpi3WUmSwNcYRYwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmdjIs2ebrLtpCWMHYhiCmpR+QOnPcOEW5w bU/xKuhvj/ThReyRQDtcn/BgbQdQKDmYtFsAoLJ+ucps0hhoqOTjwbYjPNxcWsAA yUL5MMFZR3QleS6hrjSbyYpEER+4mP99qfskizVs/JMwEk6XlusYm+6PNOQCCIol yW0haDBna0t1WzjjCFxJg7P0nbyN1ckQ/oX0FtplzcPUkRmeOCN5lz45opcjkkzt 39msu01WXI6eGm3zk4J8u7xTS7VK9rOpvJM5gzGmG/k7kAL3xAxAUjqO09IrMxKU 1hgQiPTVCQwL2PnaUgD2gpYaWVVdnRRQHrre5oDkacuAMPmcZnc= -----END CERTIFICATE-----Generated at Wed May 13 04:09:22 2026 by rpki-client