$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: ZQW/21UDIZ48lKZxYDrahxXKq43jzHqmDxLYaqbjbIw= Subject key identifier: 3E:C2:82:A4:A9:AD:ED:EF:6A:A1:7E:BA:17:4F:77:22:6F:4F:B4:A7 Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 829A15E4F71E5CCFA0712CCB459B95E7413C06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:06:03 +0000 Manifest this update: Wed 13 May 2026 02:01:03 +0000 Manifest next update: Thu 14 May 2026 05:45:03 +0000 Files and hashes: 1: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: RIR5ozdeOCDN7pAEjXATn3vJUYkQaFyqvpdEW8Jw8r0=) 2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82:9a:15:e4:f7:1e:5c:cf:a0:71:2c:cb:45:9b:95:e7:41:3c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: May 13 02:01:03 2026 GMT Not After : May 14 05:45:03 2026 GMT Subject: CN=3EC282A4A9ADEDEF6AA17EBA174F77226F4FB4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:74:c4:40:7a:18:6c:c4:26:89:4f:e0:38: 52:7b:12:df:04:53:a4:08:da:4c:32:19:2a:c7:3f: a8:db:42:f9:1a:d8:2d:37:c5:3f:45:4a:f9:1d:f6: 34:4b:b1:a2:6c:bb:c3:be:fc:96:f4:1f:a7:1c:46: 8d:34:b6:3e:b4:1f:35:ba:3f:96:ea:7c:b0:81:63: d9:4f:90:c5:dc:48:f7:16:90:b3:d7:52:ea:ea:a4: 4a:99:f7:4f:79:43:1a:63:af:70:db:51:76:72:e6: e3:e0:fb:5c:b5:03:b7:d7:f0:15:e8:59:f7:21:f6: 8b:bf:b5:75:a7:2d:c5:d8:f1:5b:96:4a:94:89:87: 39:13:8b:c7:a1:d8:b1:97:c8:48:34:80:57:16:73: fb:e1:dc:aa:fc:d0:5e:b4:b3:07:af:a4:b5:1d:6a: cb:14:18:83:7a:5f:35:f0:8c:fb:40:b9:c1:7e:83: 2d:f1:0e:16:3d:2c:e6:16:36:2a:d4:36:dc:a6:c3: c6:48:15:5b:db:48:eb:d2:b7:1a:72:b7:95:ed:15: 2a:7f:e9:2d:78:67:ef:13:74:4f:14:18:66:1e:15: bc:04:9c:1b:94:96:40:0e:19:7c:8a:20:dc:f9:ba: c0:9f:3b:a0:4b:1e:0f:3d:15:d6:df:30:63:cd:54: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C2:82:A4:A9:AD:ED:EF:6A:A1:7E:BA:17:4F:77:22:6F:4F:B4:A7 X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:53:6f:ab:8f:08:cd:1f:6e:19:b7:03:e2:87:4d:6b:3f:f7: 1b:ad:ae:4c:51:42:bb:dd:78:c4:9d:42:c1:1e:4e:60:1e:04: e8:d2:15:6d:c6:64:79:bd:5a:8a:3a:70:41:f2:23:81:6b:3b: cb:cf:82:53:be:00:21:20:79:99:6f:b7:70:d0:06:ba:b7:85: e0:cb:b6:5b:45:1a:e0:e5:fd:12:eb:37:49:d5:b3:62:5c:62: 64:f6:35:4a:51:89:45:a0:ad:6d:9b:b6:a9:4a:6f:8f:37:c8: 1e:bd:b7:71:a8:e9:7b:41:18:29:84:0d:69:1a:ba:ce:18:60: 83:e0:c0:6d:b1:35:0b:91:cd:df:2b:8d:45:04:06:55:25:b5: 60:cd:d2:23:cd:94:9e:2b:14:5b:0b:00:fc:f0:cf:75:84:86: 36:ae:3b:37:d7:f6:25:d2:bd:7c:06:7e:cb:8d:50:8f:32:2c: 35:c3:d0:1f:2f:97:04:b8:01:da:c9:49:c3:0d:6a:42:1e:7d: 22:07:b9:a9:cc:e0:5b:f9:37:f1:1f:46:d3:36:38:27:bf:c0: 69:fd:0f:43:af:04:f0:1f:3b:08:04:05:fc:d5:0a:dd:b0:a6: 84:3e:ab:26:95:dd:9d:60:6e:d4:76:2e:42:4f:01:2d:7f:25: 41:48:4e:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIKaFeT3HlzPoHEsy0WbledBPAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA1MTMwMjAxMDNaFw0yNjA1MTQwNTQ1MDNaMDMxMTAvBgNV BAMTKDNFQzI4MkE0QTlBREVERUY2QUExN0VCQTE3NEY3NzIyNkY0RkI0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7x3TEQHoYbMQmiU/gOFJ7Et8E U6QI2kwyGSrHP6jbQvka2C03xT9FSvkd9jRLsaJsu8O+/Jb0H6ccRo00tj60HzW6 P5bqfLCBY9lPkMXcSPcWkLPXUurqpEqZ9095Qxpjr3DbUXZy5uPg+1y1A7fX8BXo Wfch9ou/tXWnLcXY8VuWSpSJhzkTi8eh2LGXyEg0gFcWc/vh3Kr80F60swevpLUd assUGIN6XzXwjPtAucF+gy3xDhY9LOYWNirUNtymw8ZIFVvbSOvStxpyt5XtFSp/ 6S14Z+8TdE8UGGYeFbwEnBuUlkAOGXyKINz5usCfO6BLHg89FdbfMGPNVIuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPsKCpKmt7e9qoX66F093Im9PtKcwHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9Tb6uPCM0fbhm3A+KHTWs/9xutrkxRQrvd eMSdQsEeTmAeBOjSFW3GZHm9Woo6cEHyI4FrO8vPglO+ACEgeZlvt3DQBrq3heDL tltFGuDl/RLrN0nVs2JcYmT2NUpRiUWgrW2btqlKb483yB69t3Go6XtBGCmEDWka us4YYIPgwG2xNQuRzd8rjUUEBlUltWDN0iPNlJ4rFFsLAPzwz3WEhjauOzfX9iXS vXwGfsuNUI8yLDXD0B8vlwS4AdrJScMNakIefSIHuanM4Fv5N/EfRtM2OCe/wGn9 D0OvBPAfOwgEBfzVCt2wpoQ+qyaV3Z1gbtR2LkJPAS1/JUFIToA= -----END CERTIFICATE-----Generated at Wed May 13 05:25:04 2026 by rpki-client