$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft File: 3FB91A5366225ED818B1E745D18CD5555C3F9180.mft (raw, json) Hash identifier: tQugZXrC276tRgl6tWeZyTGP/LGGST2HVOYu4FYbYt4= Subject key identifier: 22:6B:6B:55:F0:0F:69:AD:02:62:21:7B:ED:8E:50:F3:A9:09:FA:1E Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Certificate serial: 174F9F1F48E9AECB695982047CC8BA2EE5C15187 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:46:14 +0000 Manifest this update: Tue 12 May 2026 22:41:14 +0000 Manifest next update: Thu 14 May 2026 01:10:14 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=) 2: 3FB91A5366225ED818B1E745D18CD5555C3F9180.crl (hash: ug5MMkA/jwAlToLyx2sI5cXv5qkr0oQoz0asZE5qeBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4f:9f:1f:48:e9:ae:cb:69:59:82:04:7c:c8:ba:2e:e5:c1:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Validity Not Before: May 12 22:41:14 2026 GMT Not After : May 14 01:10:14 2026 GMT Subject: CN=226B6B55F00F69AD0262217BED8E50F3A909FA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:71:9b:49:d7:03:50:c0:98:1b:34:9b:15: 03:1a:a4:47:ec:79:b3:a5:d9:73:31:56:74:91:d3: 7a:f7:e0:bb:55:b0:02:62:ed:8b:93:b7:13:57:a8: 5b:de:24:e9:5c:b0:07:3e:cd:3c:f0:42:bd:d5:06: ed:b4:7b:34:db:38:5c:55:e6:b9:b9:69:e6:e4:04: ef:cb:de:36:e0:2c:d3:0c:0f:d2:4f:d3:f3:06:82: 24:15:15:b4:9a:10:c6:c4:5f:c9:90:54:8a:da:86: 37:3a:2d:34:56:e5:c7:ad:9a:3e:3a:a6:aa:81:b1: b8:cb:f1:c9:1a:a2:d6:fd:69:12:01:8b:f3:0d:0f: 1a:f9:7f:5e:95:fe:31:6e:6c:7f:46:52:f4:37:16: 3f:32:ff:f2:e1:be:7f:ba:6f:1b:74:f2:4e:33:89: a4:b7:6e:10:2d:ac:1a:d1:c8:99:a0:82:c2:12:fa: d6:22:bc:df:c2:bf:aa:54:f7:d5:74:fb:11:5a:ac: b5:f8:48:ec:bb:6b:73:21:24:34:c3:1a:ad:fa:78: 8e:c1:63:6a:a0:b9:b3:77:fb:6c:49:6e:37:ac:c7: dc:1f:6a:05:fb:bc:2c:66:0c:1c:5f:c1:34:3c:25: ea:22:6c:ee:86:4c:3a:7f:71:a8:b3:90:bd:28:4e: af:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:6B:55:F0:0F:69:AD:02:62:21:7B:ED:8E:50:F3:A9:09:FA:1E X509v3 Authority Key Identifier: keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:52:f3:e5:55:f9:d8:d0:6d:30:3c:85:e4:34:2a:f5:61: 12:42:2e:5d:4a:d4:39:b9:9d:83:82:ec:ba:08:f1:45:ad:d3: 45:11:dc:18:51:93:98:67:50:0f:a6:1c:fc:b7:32:12:9c:75: fa:ad:29:a7:0f:74:5c:72:19:22:49:09:c0:b8:72:98:a9:28: 91:4d:ab:aa:21:96:b7:88:c3:97:6f:22:0e:06:2d:09:67:6a: 86:1f:5e:64:93:a5:7e:d3:de:ac:50:04:0e:3d:39:a9:f4:f8: 4b:4d:a7:5f:b4:fa:5a:cd:2f:3d:c9:ea:32:f4:65:27:c7:9b: a7:27:b1:89:c7:a9:c4:0b:4f:a0:85:11:f7:9e:e2:aa:67:7b: 5a:52:49:91:2e:15:80:94:a0:9c:ad:55:de:7d:19:65:1f:f9: 34:a3:5c:44:66:46:c4:9a:0a:46:38:66:88:c1:78:8a:e6:a3: 5d:33:d7:7e:84:2f:b8:af:1b:9b:50:bd:c7:cb:22:93:2f:71: 2a:35:3e:f7:b2:2c:0c:d9:eb:76:20:81:13:e0:9f:af:08:09: 03:31:8c:2c:c7:e7:4d:46:9d:9a:ef:dc:c9:1a:62:f8:c3:c6: 0d:bf:fc:e1:92:30:82:55:d1:06:9c:cc:43:9e:38:68:37:7e: 3e:1d:37:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0+fH0jprstpWYIEfMi6LuXBUYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1 QzNGOTE4MDAeFw0yNjA1MTIyMjQxMTRaFw0yNjA1MTQwMTEwMTRaMDMxMTAvBgNV BAMTKDIyNkI2QjU1RjAwRjY5QUQwMjYyMjE3QkVEOEU1MEYzQTkwOUZBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WXGbSdcDUMCYGzSbFQMapEfs ebOl2XMxVnSR03r34LtVsAJi7YuTtxNXqFveJOlcsAc+zTzwQr3VBu20ezTbOFxV 5rm5aebkBO/L3jbgLNMMD9JP0/MGgiQVFbSaEMbEX8mQVIrahjc6LTRW5cetmj46 pqqBsbjL8ckaotb9aRIBi/MNDxr5f16V/jFubH9GUvQ3Fj8y//Lhvn+6bxt08k4z iaS3bhAtrBrRyJmggsIS+tYivN/Cv6pU99V0+xFarLX4SOy7a3MhJDTDGq36eI7B Y2qgubN3+2xJbjesx9wfagX7vCxmDBxfwTQ8JeoibO6GTDp/caizkL0oTq/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImtrVfAPaa0CYiF77Y5Q86kJ+h4wHwYDVR0j BBgwFoAUP7kaU2YiXtgYsedF0YzVVVw/kYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzVjZTktMGVhNS00N2Q4LTlmY2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2 NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1QzNGOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkI5MUE1MzY2MjI1RUQ4MThCMUU3NDVEMThDRDU1NTVDM0Y5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1 NTU1QzNGOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPqUvPlVfnY0G0wPIXkNCr1YRJCLl1K1Dm5 nYOC7LoI8UWt00UR3BhRk5hnUA+mHPy3MhKcdfqtKacPdFxyGSJJCcC4cpipKJFN q6ohlreIw5dvIg4GLQlnaoYfXmSTpX7T3qxQBA49Oan0+EtNp1+0+lrNLz3J6jL0 ZSfHm6cnsYnHqcQLT6CFEfee4qpne1pSSZEuFYCUoJytVd59GWUf+TSjXERmRsSa CkY4ZojBeIrmo10z136EL7ivG5tQvcfLIpMvcSo1PveyLAzZ63YggRPgn68ICQMx jCzH501GnZrv3MkaYvjDxg2//OGSMIJV0QaczEOeOGg3fj4dN4U= -----END CERTIFICATE-----Generated at Wed May 13 02:47:20 2026 by rpki-client