$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: QFfznC/bBgShE0252znZE5bDg82y3KnEca8xZRZrd3o= Subject key identifier: 8A:83:43:29:6D:6D:9F:A5:34:CE:9E:DA:47:12:9B:B4:22:97:1C:7A Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 3B625FA464F8ACE011F145970B2A5E27328D5892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:55:28 +0000 Manifest this update: Tue 12 May 2026 15:50:28 +0000 Manifest next update: Wed 13 May 2026 16:53:28 +0000 Files and hashes: 1: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: fCj7+q3678GjgqIKtk09eJRRc5mLBuZd0Efroig6u/o=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:62:5f:a4:64:f8:ac:e0:11:f1:45:97:0b:2a:5e:27:32:8d:58:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: May 12 15:50:28 2026 GMT Not After : May 13 16:53:28 2026 GMT Subject: CN=8A8343296D6D9FA534CE9EDA47129BB422971C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:47:93:db:b8:f3:70:a2:ef:0e:13:27:54: d0:f2:07:4a:d3:e1:d3:4a:31:c3:ea:a5:a5:a9:41: 3a:03:dc:c9:66:20:99:93:db:cb:74:52:ae:35:01: fd:d3:83:c4:e9:4c:ce:7d:e2:86:1f:50:ca:97:96: f0:9b:69:31:a7:39:71:f5:fe:a6:75:be:c2:88:a4: 9a:c8:b8:4c:b7:62:07:b8:3c:0a:df:bc:9a:19:1a: 4f:69:48:e1:df:0f:9a:87:ae:51:79:ca:aa:be:16: c5:e4:78:c5:0a:a4:46:b4:12:dd:1c:9d:7d:af:03: b4:27:62:ef:aa:f6:b9:4e:ab:c7:56:97:eb:c1:8f: bd:7b:8b:8f:14:c9:57:3e:91:c0:f8:25:26:a8:81: 17:cc:2f:e9:04:1c:ae:01:76:1e:c3:46:c6:8a:52: a1:92:fa:e5:45:ab:72:c2:15:c0:a7:a3:64:95:59: cb:6a:fa:45:55:76:36:a2:87:ab:71:a4:dc:13:6b: a1:24:24:71:e6:aa:35:3d:62:17:9f:61:d0:e7:3b: 09:7a:89:77:1f:95:92:6b:0e:ca:b5:23:9a:97:8a: e9:f2:6f:67:01:0d:35:10:bc:69:f4:c7:0c:e9:b9: 94:98:63:c5:aa:e7:18:31:4c:00:bd:4f:4a:dd:89: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:83:43:29:6D:6D:9F:A5:34:CE:9E:DA:47:12:9B:B4:22:97:1C:7A X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:e5:e7:8d:85:fd:72:f9:d4:9a:14:7b:d1:00:0b:b1:9f: 19:5a:45:72:df:a6:6f:f7:a5:91:5d:b9:20:ad:8e:09:b1:99: 7e:df:79:d4:19:84:02:68:03:3f:7e:79:c8:38:5e:d2:61:54: d5:e8:58:0f:d1:a4:a8:95:67:b8:d0:04:b8:13:cb:cd:1c:32: e6:f0:bd:75:0d:05:51:9b:3d:e5:ac:59:b9:11:b1:94:28:b9: b8:18:0a:1b:14:f0:bf:fd:4b:5e:1a:6f:85:4c:1d:9b:75:66: 8e:00:d5:e6:c7:8f:41:c9:10:a3:f2:e1:f3:31:33:7b:76:bd: 30:95:fb:6b:87:60:a1:dd:25:b0:56:fc:a2:9c:97:82:e2:ac: 53:bb:32:4f:c7:2e:11:7a:a1:e3:bb:01:e9:6a:cd:d8:5f:ee: f5:e7:97:91:d1:86:2c:b3:37:ac:20:08:0a:01:09:d7:50:85: 05:a4:07:0a:0c:92:8a:95:c5:c9:06:cc:58:1b:27:4b:06:b1: 42:3f:63:71:1e:84:f2:5a:da:1a:91:dc:b5:cc:3c:c8:d6:30: a2:a8:d7:3d:76:fc:4f:e1:5d:06:01:c2:21:c2:66:02:57:a8: 8c:8f:03:f0:3d:ad:6e:c2:ca:15:ea:5e:ef:8a:cb:f3:37:cf: fe:5d:d6:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2JfpGT4rOAR8UWXCypeJzKNWJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA1MTIxNTUwMjhaFw0yNjA1MTMxNjUzMjhaMDMxMTAvBgNV BAMTKDhBODM0MzI5NkQ2RDlGQTUzNENFOUVEQTQ3MTI5QkI0MjI5NzFDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLkeT27jzcKLvDhMnVNDyB0rT 4dNKMcPqpaWpQToD3MlmIJmT28t0Uq41Af3Tg8TpTM594oYfUMqXlvCbaTGnOXH1 /qZ1vsKIpJrIuEy3Yge4PArfvJoZGk9pSOHfD5qHrlF5yqq+FsXkeMUKpEa0Et0c nX2vA7QnYu+q9rlOq8dWl+vBj717i48UyVc+kcD4JSaogRfML+kEHK4Bdh7DRsaK UqGS+uVFq3LCFcCno2SVWctq+kVVdjaih6txpNwTa6EkJHHmqjU9YhefYdDnOwl6 iXcflZJrDsq1I5qXiunyb2cBDTUQvGn0xwzpuZSYY8Wq5xgxTAC9T0rdiS/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUioNDKW1tn6U0zp7aRxKbtCKXHHowHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENq5eeNhf1y+dSaFHvRAAuxnxlaRXLfpm/3 pZFduSCtjgmxmX7fedQZhAJoAz9+ecg4XtJhVNXoWA/RpKiVZ7jQBLgTy80cMubw vXUNBVGbPeWsWbkRsZQoubgYChsU8L/9S14ab4VMHZt1Zo4A1ebHj0HJEKPy4fMx M3t2vTCV+2uHYKHdJbBW/KKcl4LirFO7Mk/HLhF6oeO7Aelqzdhf7vXnl5HRhiyz N6wgCAoBCddQhQWkBwoMkoqVxckGzFgbJ0sGsUI/Y3EehPJa2hqR3LXMPMjWMKKo 1z12/E/hXQYBwiHCZgJXqIyPA/A9rW7CyhXqXu+Ky/M3z/5d1k0= -----END CERTIFICATE-----Generated at Wed May 13 00:43:39 2026 by rpki-client