$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: 7s3bkjatakoNxvgvcbvewvfssO5ZC3YPkm6X9G4GjGI= Subject key identifier: F8:BB:8C:59:C9:B2:D1:5A:B2:CF:3B:90:4A:A3:63:E2:A8:40:33:D6 Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 184E5B061E313AA6E27EDC939FE13A883E0457FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:53:25 +0000 Manifest this update: Tue 12 May 2026 03:48:25 +0000 Manifest next update: Wed 13 May 2026 06:45:25 +0000 Files and hashes: 1: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) 2: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: t+9tPi0ExhZ8QxV9tigmqzSNzMKZX/cSGEmAmkEdSoI=) 3: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) 4: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4e:5b:06:1e:31:3a:a6:e2:7e:dc:93:9f:e1:3a:88:3e:04:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: May 12 03:48:25 2026 GMT Not After : May 13 06:45:25 2026 GMT Subject: CN=F8BB8C59C9B2D15AB2CF3B904AA363E2A84033D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:a2:bb:63:60:8f:be:73:96:15:ac:8e:a4: f4:71:1d:6d:fb:a4:06:ba:b4:ac:70:6d:3c:0f:2a: dd:bc:cf:57:9a:03:f9:e7:fc:ba:08:7e:df:65:50: 87:73:9c:a9:3a:00:5b:59:26:d6:72:af:74:2d:23: 32:19:dd:c5:c4:9f:01:67:24:4e:41:1a:05:dd:5b: de:fd:8d:27:40:5b:97:4b:40:6a:0b:5f:79:cb:70: c5:b8:bc:38:5e:b0:f2:43:af:c4:bd:c1:61:4e:37: ec:2b:5f:22:f4:b9:e6:45:45:22:94:75:a1:50:f5: c2:92:fb:95:ce:8e:03:dc:d6:bc:2a:33:75:4c:f1: 28:d5:51:0e:94:db:64:59:57:ba:62:19:af:62:6e: ca:0f:58:75:b5:74:69:36:f9:7c:7b:fa:58:d8:b6: 92:ed:3d:c8:a1:e2:c1:28:eb:25:59:ac:88:3f:91: 03:9d:73:37:0b:ea:97:ff:c2:7b:be:ad:03:40:9c: ce:d8:62:11:f8:b8:8e:36:c0:17:b7:85:e9:55:e7: bc:82:3e:27:ab:07:50:93:16:2e:53:a4:c1:c8:5b: 86:ff:29:89:be:3a:8d:b9:49:c0:18:1e:ae:c0:f5: bf:22:d8:4a:02:9f:0a:5d:1c:bc:b9:03:02:7c:f4: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:8C:59:C9:B2:D1:5A:B2:CF:3B:90:4A:A3:63:E2:A8:40:33:D6 X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:51:77:35:51:69:2f:3d:2e:2e:c3:b4:32:f4:93:2b:54:92: 69:75:e5:c2:62:b0:b6:f2:54:cc:5d:85:60:50:f1:59:bc:76: 52:d0:91:bb:0c:c7:41:a8:e0:2f:bc:69:49:57:59:b1:5c:1d: 37:7f:1a:71:b9:3d:05:8e:74:ff:29:65:81:4a:85:db:5a:00: e8:16:98:47:aa:64:6f:0e:d4:de:a8:6c:10:f6:cf:5b:5b:96: d3:4a:f5:fd:d3:3b:a8:c1:ee:33:5d:3e:63:48:5d:40:20:d3: a2:f3:68:ee:18:db:b6:08:b9:08:d8:d8:68:d9:85:c8:c3:44: 71:1d:b1:69:da:49:ad:6b:b5:bc:df:37:8f:f9:8b:fe:97:1a: 06:34:f6:03:5e:c4:7a:33:f1:67:91:2a:13:8f:71:b2:ad:88: 0f:5d:38:d5:97:9d:6a:8a:99:9c:62:60:6f:e7:00:f5:5a:df: 51:80:a6:fb:92:e3:af:1d:77:cf:2f:a5:73:12:d1:0e:41:fa: eb:16:3c:ba:5a:b9:06:95:aa:52:f9:ce:2a:f1:35:24:15:66: 22:a2:38:34:5c:fc:ad:14:76:24:4f:37:91:c9:54:2a:42:a2: 96:67:91:66:1e:3f:a3:5d:4c:61:0a:aa:70:41:44:05:9c:74: 11:d3:34:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGE5bBh4xOqbiftyTn+E6iD4EV/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjA1MTIwMzQ4MjVaFw0yNjA1MTMwNjQ1MjVaMDMxMTAvBgNV BAMTKEY4QkI4QzU5QzlCMkQxNUFCMkNGM0I5MDRBQTM2M0UyQTg0MDMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYqK7Y2CPvnOWFayOpPRxHW37 pAa6tKxwbTwPKt28z1eaA/nn/LoIft9lUIdznKk6AFtZJtZyr3QtIzIZ3cXEnwFn JE5BGgXdW979jSdAW5dLQGoLX3nLcMW4vDhesPJDr8S9wWFON+wrXyL0ueZFRSKU daFQ9cKS+5XOjgPc1rwqM3VM8SjVUQ6U22RZV7piGa9ibsoPWHW1dGk2+Xx7+ljY tpLtPcih4sEo6yVZrIg/kQOdczcL6pf/wnu+rQNAnM7YYhH4uI42wBe3helV57yC PierB1CTFi5TpMHIW4b/KYm+Oo25ScAYHq7A9b8i2EoCnwpdHLy5AwJ89EyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+LuMWcmy0VqyzzuQSqNj4qhAM9YwHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNRdzVRaS89Li7DtDL0kytUkml15cJisLby VMxdhWBQ8Vm8dlLQkbsMx0Go4C+8aUlXWbFcHTd/GnG5PQWOdP8pZYFKhdtaAOgW mEeqZG8O1N6obBD2z1tbltNK9f3TO6jB7jNdPmNIXUAg06LzaO4Y27YIuQjY2GjZ hcjDRHEdsWnaSa1rtbzfN4/5i/6XGgY09gNexHoz8WeRKhOPcbKtiA9dONWXnWqK mZxiYG/nAPVa31GApvuS468dd88vpXMS0Q5B+usWPLpauQaVqlL5zirxNSQVZiKi ODRc/K0UdiRPN5HJVCpCopZnkWYeP6NdTGEKqnBBRAWcdBHTNG0= -----END CERTIFICATE-----Generated at Tue May 12 22:31:52 2026 by rpki-client