$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft File: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft (raw, json) Hash identifier: lJh1a6GHgvk/nFOtlMkmcUCEa1+FdI520iQaWNci+8w= Subject key identifier: 96:A1:E4:7F:08:0C:A1:57:5D:9C:67:AE:78:4E:6A:13:85:E7:B7:9C Authority key identifier: 3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 Certificate issuer: /CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Certificate serial: 62154E1C19AE63E0DB1D4EF4C975A0E45E8BEA8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft Manifest number: 0D Signing time: Tue 12 May 2026 06:37:39 +0000 Manifest this update: Tue 12 May 2026 06:32:39 +0000 Manifest next update: Wed 13 May 2026 09:26:39 +0000 Files and hashes: 1: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl (hash: 7R7uvFNXcFMZ2GPRrjI+5x7w9YSuCiQoZ5vH3Uz4R9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:15:4e:1c:19:ae:63:e0:db:1d:4e:f4:c9:75:a0:e4:5e:8b:ea:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Validity Not Before: May 12 06:32:39 2026 GMT Not After : May 13 09:26:39 2026 GMT Subject: CN=96A1E47F080CA1575D9C67AE784E6A1385E7B79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:7b:6b:34:d5:ff:7e:0a:fb:85:d9:03:bf: 38:82:e2:2f:74:e9:e1:5b:b5:cf:8b:62:85:ac:08: 7b:c5:11:f5:1c:fc:72:02:df:fa:ec:1f:b4:78:61: 08:c7:2e:04:e2:7e:af:e9:fb:13:b4:c6:7f:e8:88: c9:30:22:b2:1e:d0:72:19:b6:86:6d:2b:06:99:57: 25:4b:99:69:39:00:72:f8:35:97:df:f2:fe:77:72: 72:38:4d:a1:71:60:4b:2c:95:6f:95:90:1f:35:dc: 1d:54:13:31:4e:ae:ee:d4:07:37:29:78:2c:fa:9c: db:b5:88:fb:aa:7f:03:fe:b1:cc:4d:e3:b9:d4:77: 5b:7b:a9:53:d7:bc:3f:30:5b:87:30:29:09:e1:13: 31:6a:d8:b7:82:2c:54:c5:b2:e3:c3:5c:06:06:49: 91:58:a2:f9:07:23:0e:78:16:b3:23:57:46:cb:0e: 42:ec:3e:c6:ae:ee:b3:aa:d9:e3:91:11:41:92:cb: a4:1e:59:87:6c:99:51:c2:c3:9e:4e:38:63:84:a3: 04:81:05:c2:63:96:18:b6:cf:3c:85:e6:6d:d4:c3: 3e:0c:46:95:b9:94:98:5c:e7:32:07:67:d5:e3:b6: a1:0c:53:93:62:e4:8c:07:e2:dd:bb:6c:00:7e:61: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:E4:7F:08:0C:A1:57:5D:9C:67:AE:78:4E:6A:13:85:E7:B7:9C X509v3 Authority Key Identifier: keyid:3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:ab:db:f0:a1:01:45:a9:b1:45:ef:43:ba:74:4b:8b:2d: 72:0c:5d:f1:85:cc:0a:71:0d:d2:7c:20:10:15:8c:69:f8:52: ce:fe:6b:8e:55:b6:72:d9:7f:ea:59:fd:2e:a3:44:3c:4e:77: 23:e7:9d:ea:c5:29:5b:56:70:1b:81:2c:97:5b:26:55:2b:c4: 65:08:77:da:be:c2:37:d0:02:e6:b6:b6:29:2c:df:e4:c3:40: 75:b2:64:08:6f:b7:7d:4f:a6:16:86:b6:fe:ab:2f:ff:c6:56: cb:64:b7:91:44:68:fd:35:13:23:ca:2e:b4:74:88:b8:93:9d: 20:2e:67:59:8c:b7:49:3e:a5:69:f1:bf:eb:12:74:c4:0e:68: 08:80:4a:1e:60:ca:5f:0a:1a:49:b2:70:2e:44:86:d6:b1:e2: f4:55:0a:0f:2b:d4:cc:1e:a3:1c:06:79:d8:54:81:41:00:87: ec:1f:f8:c4:a1:10:a3:ab:86:20:bf:90:75:00:3f:e1:25:33: 51:3c:a9:12:cc:4b:7f:52:91:aa:5e:88:20:f8:60:96:e1:e3: 49:8d:68:cf:90:fa:49:e4:cd:f6:3d:d6:9b:9f:11:5b:a4:ac: 7c:26:dc:90:08:8e:8b:a7:3f:cd:94:4a:ee:51:0b:99:1b:c6: fb:07:6f:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhVOHBmuY+DbHU70yXWg5F6L6o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0 NjFFQjlCNTAeFw0yNjA1MTIwNjMyMzlaFw0yNjA1MTMwOTI2MzlaMDMxMTAvBgNV BAMTKDk2QTFFNDdGMDgwQ0ExNTc1RDlDNjdBRTc4NEU2QTEzODVFN0I3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yHtrNNX/fgr7hdkDvziC4i90 6eFbtc+LYoWsCHvFEfUc/HIC3/rsH7R4YQjHLgTifq/p+xO0xn/oiMkwIrIe0HIZ toZtKwaZVyVLmWk5AHL4NZff8v53cnI4TaFxYEsslW+VkB813B1UEzFOru7UBzcp eCz6nNu1iPuqfwP+scxN47nUd1t7qVPXvD8wW4cwKQnhEzFq2LeCLFTFsuPDXAYG SZFYovkHIw54FrMjV0bLDkLsPsau7rOq2eOREUGSy6QeWYdsmVHCw55OOGOEowSB BcJjlhi2zzyF5m3Uwz4MRpW5lJhc5zIHZ9XjtqEMU5Ni5IwH4t27bAB+YeaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlqHkfwgMoVddnGeueE5qE4Xnt5wwHwYDVR0j BBgwFoAUOnIM3Qni+XqRK5t98sM1KUYeubUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJhYzYxOWItMjFlNi00MWQ2LThlOTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQw OUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0NjFFQjlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTcyMENERDA5RTJGOTdBOTEyQjlCN0RGMkMzMzUyOTQ2MUVC OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1 Mjk0NjFFQjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFtq9vwoQFFqbFF70O6dEuLLXIMXfGFzApx DdJ8IBAVjGn4Us7+a45VtnLZf+pZ/S6jRDxOdyPnnerFKVtWcBuBLJdbJlUrxGUI d9q+wjfQAua2tiks3+TDQHWyZAhvt31PphaGtv6rL//GVstkt5FEaP01EyPKLrR0 iLiTnSAuZ1mMt0k+pWnxv+sSdMQOaAiASh5gyl8KGkmycC5Ehtax4vRVCg8r1Mwe oxwGedhUgUEAh+wf+MShEKOrhiC/kHUAP+ElM1E8qRLMS39SkapeiCD4YJbh40mN aM+Q+knkzfY91pufEVukrHwm3JAIjounP82USu5RC5kbxvsHb6E= -----END CERTIFICATE-----Generated at Tue May 12 22:46:58 2026 by rpki-client