$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: KyQf2faFnY4izSfogn4mFmmtlht/iIwlPepMSY1b4G0= Subject key identifier: 82:13:A7:9A:BD:9F:D5:43:0A:7A:0A:E2:BA:30:8C:CE:FD:A6:CE:07 Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 72F3BFDAF3AC57CCA743E050C02D00F39F9F4DE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:08:17 +0000 Manifest this update: Tue 12 May 2026 07:03:17 +0000 Manifest next update: Wed 13 May 2026 10:37:17 +0000 Files and hashes: 1: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: 5x3lx4K/nzil419/YVbHla6FhL3WB/X5Jm/EbTMm5cQ=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f3:bf:da:f3:ac:57:cc:a7:43:e0:50:c0:2d:00:f3:9f:9f:4d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: May 12 07:03:17 2026 GMT Not After : May 13 10:37:17 2026 GMT Subject: CN=8213A79ABD9FD5430A7A0AE2BA308CCEFDA6CE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:1d:bc:78:26:9d:d5:3f:9d:a9:c6:a7:5d: 4f:4e:b5:43:34:7e:d5:45:1f:99:1e:7e:75:43:7e: 41:36:3b:da:0d:d4:2a:f6:ed:ed:30:9d:e8:71:de: c4:59:e8:c8:49:e2:09:23:94:57:3e:8d:5f:bf:e1: 0b:4b:dc:aa:be:7c:a4:5f:6d:eb:44:0b:9d:7f:f8: 10:b9:a4:43:bd:b8:d9:a8:06:6c:44:4e:a2:af:bd: 47:d8:ab:fc:6d:15:e8:f6:c1:6f:23:d1:c7:1e:cf: d5:df:b4:bc:e4:2f:9b:92:dd:49:7e:cd:5a:14:7a: 20:67:ac:6e:49:04:4d:ed:9d:4d:75:fa:29:13:b0: 15:a6:2e:98:f0:23:17:bf:28:5a:13:5a:4d:2f:ff: cf:d4:a2:ce:8b:76:03:cb:94:23:0d:5f:4e:89:2f: 6b:5d:c0:6b:2a:47:7a:df:8c:d2:c3:e2:10:39:1c: 54:4b:53:bd:f8:33:73:de:7d:56:d0:80:b1:72:59: 06:78:a3:99:e4:37:42:dc:f6:31:3b:52:33:89:82: 2f:38:74:df:15:80:c6:eb:49:05:94:09:41:e8:c0: ba:5a:85:84:8f:28:5f:c6:5d:33:52:16:5f:52:a0: 5d:29:bf:43:c4:16:88:f7:24:90:b8:7c:9b:6d:f9: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:13:A7:9A:BD:9F:D5:43:0A:7A:0A:E2:BA:30:8C:CE:FD:A6:CE:07 X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:a1:31:04:46:83:5a:f6:6d:66:8e:8f:36:ab:46:4e:1e: 1a:5d:0f:62:a0:21:35:b6:de:0c:19:6a:cc:83:d2:58:af:19: e2:0e:90:11:ae:57:dd:82:8e:67:d6:1b:78:c6:5d:26:17:70: 2c:79:18:ba:1f:2c:c5:a7:4b:fb:57:ca:16:2e:bc:5e:5d:7f: d8:0a:bd:1f:e2:e6:25:b7:d7:a6:e8:f3:f9:32:e7:a4:48:3d: c2:e1:e8:d0:72:29:bf:f7:66:d2:d3:e9:e8:a3:62:02:e0:3e: 80:25:65:22:ae:8d:97:0e:8a:92:54:8d:e7:2a:8a:3e:ae:aa: 0a:d8:2e:c5:17:e9:2e:39:ff:a9:50:6d:d7:54:7f:8e:d2:7b: 0a:71:05:a2:db:54:36:c1:63:39:88:bf:a9:6e:4f:fc:73:97: b2:a0:1e:f8:3c:54:2a:c8:1b:e3:19:a3:a2:94:17:83:01:0a: 84:d2:4d:95:33:b6:e7:6a:a1:fb:c8:d5:8e:98:8b:96:91:15: 74:be:06:7b:4c:73:1b:31:56:6b:d5:34:a0:0a:55:b2:bd:4b: aa:17:45:9d:9c:d1:67:86:f6:f4:06:16:eb:f6:95:0c:16:a8: 7b:60:92:9a:f8:09:c9:07:40:bf:41:77:98:a2:9d:ce:5c:96: 92:2f:81:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvO/2vOsV8ynQ+BQwC0A85+fTegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA1MTIwNzAzMTdaFw0yNjA1MTMxMDM3MTdaMDMxMTAvBgNV BAMTKDgyMTNBNzlBQkQ5RkQ1NDMwQTdBMEFFMkJBMzA4Q0NFRkRBNkNFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Uh28eCad1T+dqcanXU9OtUM0 ftVFH5kefnVDfkE2O9oN1Cr27e0wnehx3sRZ6MhJ4gkjlFc+jV+/4QtL3Kq+fKRf betEC51/+BC5pEO9uNmoBmxETqKvvUfYq/xtFej2wW8j0ccez9XftLzkL5uS3Ul+ zVoUeiBnrG5JBE3tnU11+ikTsBWmLpjwIxe/KFoTWk0v/8/Uos6LdgPLlCMNX06J L2tdwGsqR3rfjNLD4hA5HFRLU734M3PefVbQgLFyWQZ4o5nkN0Lc9jE7UjOJgi84 dN8VgMbrSQWUCUHowLpahYSPKF/GXTNSFl9SoF0pv0PEFoj3JJC4fJtt+XG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghOnmr2f1UMKegriujCMzv2mzgcwHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBZoTEERoNa9m1mjo82q0ZOHhpdD2KgITW2 3gwZasyD0livGeIOkBGuV92CjmfWG3jGXSYXcCx5GLofLMWnS/tXyhYuvF5df9gK vR/i5iW316bo8/ky56RIPcLh6NByKb/3ZtLT6eijYgLgPoAlZSKujZcOipJUjecq ij6uqgrYLsUX6S45/6lQbddUf47SewpxBaLbVDbBYzmIv6luT/xzl7KgHvg8VCrI G+MZo6KUF4MBCoTSTZUztudqofvI1Y6Yi5aRFXS+BntMcxsxVmvVNKAKVbK9S6oX RZ2c0WeG9vQGFuv2lQwWqHtgkpr4CckHQL9Bd5iinc5clpIvgfY= -----END CERTIFICATE-----Generated at Wed May 13 03:48:41 2026 by rpki-client