$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: YwVl7hQN5IfZzIYwHCdsIHybul4QPyP++iD3Mmq+eD4= Subject key identifier: 2C:EA:D4:69:9D:35:B5:47:88:3C:B0:5B:E9:67:B0:64:FF:C9:30:53 Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 06477524640155827B5B0284CAD7620677439C2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:28:31 +0000 Manifest this update: Tue 12 May 2026 13:23:31 +0000 Manifest next update: Wed 13 May 2026 17:24:31 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) 2: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: 99kH/oUdimBnw+/qC1c0vGEAtARY6NUiTaXOeRQSI0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:47:75:24:64:01:55:82:7b:5b:02:84:ca:d7:62:06:77:43:9c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: May 12 13:23:31 2026 GMT Not After : May 13 17:24:31 2026 GMT Subject: CN=2CEAD4699D35B547883CB05BE967B064FFC93053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:c0:36:24:74:52:e2:df:e1:81:ef:68:e4: f6:e4:e2:c6:d5:d2:55:03:ed:fc:c7:7f:32:e2:0e: 2f:97:4b:86:14:d0:91:f3:05:23:63:0d:e0:34:af: f6:2e:16:6c:74:c7:aa:97:83:af:a2:74:98:a9:ac: 15:fa:1e:72:42:65:de:c2:da:b8:9d:0c:28:e7:59: ba:4b:a6:89:39:74:ad:26:e1:ee:6c:e4:41:43:56: d2:18:c9:7b:b7:e6:d0:38:dc:f2:ee:2d:7d:e9:65: 1f:7a:cd:2a:3d:d4:ee:8f:cb:11:58:d2:73:d1:52: bd:08:df:ab:2a:f0:93:59:0e:0f:0b:85:d7:7f:d2: 84:a0:9c:ec:20:0c:0f:2b:91:54:2f:a6:a8:ee:6d: 78:82:92:bf:58:c4:29:59:35:a6:96:86:43:3a:af: a5:06:fb:6f:99:f7:64:a3:47:a4:d7:93:cd:de:4d: 9e:79:d3:45:37:f6:30:11:01:d2:2f:92:a6:12:d4: eb:1d:89:cc:70:4e:c7:88:87:ad:3b:55:a2:3c:4d: e4:5b:33:8a:09:b2:a2:0c:75:cf:fa:03:81:35:9a: 3a:fa:07:4a:44:3a:f9:03:da:cd:91:28:00:33:6c: b4:79:ee:2f:88:99:73:68:e1:49:7d:ba:46:d0:85: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:D4:69:9D:35:B5:47:88:3C:B0:5B:E9:67:B0:64:FF:C9:30:53 X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:b8:89:b8:33:68:f3:6f:84:b6:d4:55:30:b8:18:5e:7a: 47:08:c1:31:74:a4:cd:62:18:a2:c5:9e:fe:9e:e3:4a:86:32: f8:17:7a:36:74:e4:c6:d5:c8:ec:e5:ba:78:6e:d7:3b:cc:a9: a0:36:c5:42:10:26:5f:84:88:52:4d:f8:72:55:16:af:2a:f6: b0:95:42:2e:44:d4:56:75:7e:71:c4:1a:3c:2b:0f:2e:4e:3c: 2f:0b:c5:9c:b3:cf:8e:f9:cc:b5:fe:1f:49:18:33:2e:00:d9: ec:a6:32:ed:a1:88:e4:89:1d:fd:8f:22:5b:8b:f6:d8:94:cb: a7:3f:41:4c:29:ca:7f:43:02:7b:8e:a5:e1:44:88:41:d1:65: 13:33:ba:3b:2f:27:f0:16:08:d0:38:a0:15:e3:83:57:99:5a: 2c:f9:36:74:8a:08:db:9b:21:b1:ed:2f:3a:8c:6e:28:aa:d2: 8f:4e:33:91:cf:95:a9:32:8e:75:13:25:43:2b:80:93:ef:1a: 9e:6e:85:ba:db:0e:23:5d:63:c3:bc:b8:51:05:8f:f4:e3:46: 9f:d4:72:3d:8d:6f:a6:c7:d9:97:8c:d2:5e:3a:e8:af:d1:ba: 45:20:95:9d:88:57:3d:ff:5e:ff:38:95:57:03:6b:7b:8b:97: 4c:da:69:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkd1JGQBVYJ7WwKEytdiBndDnCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA1MTIxMzIzMzFaFw0yNjA1MTMxNzI0MzFaMDMxMTAvBgNV BAMTKDJDRUFENDY5OUQzNUI1NDc4ODNDQjA1QkU5NjdCMDY0RkZDOTMwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4L8A2JHRS4t/hge9o5Pbk4sbV 0lUD7fzHfzLiDi+XS4YU0JHzBSNjDeA0r/YuFmx0x6qXg6+idJiprBX6HnJCZd7C 2ridDCjnWbpLpok5dK0m4e5s5EFDVtIYyXu35tA43PLuLX3pZR96zSo91O6PyxFY 0nPRUr0I36sq8JNZDg8Lhdd/0oSgnOwgDA8rkVQvpqjubXiCkr9YxClZNaaWhkM6 r6UG+2+Z92SjR6TXk83eTZ5500U39jARAdIvkqYS1OsdicxwTseIh607VaI8TeRb M4oJsqIMdc/6A4E1mjr6B0pEOvkD2s2RKAAzbLR57i+ImXNo4Ul9ukbQhR61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOrUaZ01tUeIPLBb6WewZP/JMFMwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH0uIm4M2jzb4S21FUwuBheekcIwTF0pM1i GKLFnv6e40qGMvgXejZ05MbVyOzlunhu1zvMqaA2xUIQJl+EiFJN+HJVFq8q9rCV Qi5E1FZ1fnHEGjwrDy5OPC8LxZyzz475zLX+H0kYMy4A2eymMu2hiOSJHf2PIluL 9tiUy6c/QUwpyn9DAnuOpeFEiEHRZRMzujsvJ/AWCNA4oBXjg1eZWiz5NnSKCNub IbHtLzqMbiiq0o9OM5HPlakyjnUTJUMrgJPvGp5uhbrbDiNdY8O8uFEFj/TjRp/U cj2Nb6bH2ZeM0l466K/RukUglZ2IVz3/Xv84lVcDa3uLl0zaaZo= -----END CERTIFICATE-----Generated at Tue May 12 22:13:33 2026 by rpki-client