$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: aPgN5P15crdIJrw1XjXV9aVsmoaSNSOCF6cVX4PbpYA= Subject key identifier: 3A:56:93:47:72:8B:9E:13:A1:F3:E2:EB:B9:DF:F2:21:B1:CC:89:A8 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 5582C365CD1980609CE2466894A52816127E1C2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:33:58 +0000 Manifest this update: Tue 12 May 2026 07:28:58 +0000 Manifest next update: Wed 13 May 2026 10:38:58 +0000 Files and hashes: 1: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: Tr3FYlh7VLW/Oxvbr+IRJ2hvURl4U0sI3QJQUfzl4zY=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 3: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) 4: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:82:c3:65:cd:19:80:60:9c:e2:46:68:94:a5:28:16:12:7e:1c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: May 12 07:28:58 2026 GMT Not After : May 13 10:38:58 2026 GMT Subject: CN=3A569347728B9E13A1F3E2EBB9DFF221B1CC89A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:e9:3b:21:b0:68:c7:e0:00:97:bd:99:1c: 58:2d:dc:08:12:14:29:83:c1:16:b3:56:ca:c0:59: d6:8f:79:94:a3:4a:b4:1c:cf:05:cc:3e:da:fc:72: 00:3e:6a:08:fc:c3:66:35:d0:7f:ac:d7:45:fc:8f: 92:10:44:32:a1:a1:96:55:ef:39:db:5f:bb:99:8b: 60:a0:98:ed:c5:6a:b6:3a:6d:5b:2a:08:46:93:26: f1:6b:04:20:95:f7:d7:f8:84:32:f3:8a:d5:64:8e: 07:10:16:2a:d4:1d:6c:52:c2:ac:69:13:1a:54:91: 7b:07:55:7b:bd:79:07:d8:93:62:a9:e4:0f:3f:c3: c6:39:1d:6b:23:ed:d4:9b:6b:d6:ff:66:9f:49:98: 63:d9:5d:82:07:7a:9b:d6:0a:86:27:42:93:d8:5c: 1f:c0:69:8f:51:20:cf:f3:17:43:6d:62:e5:bc:22: cd:a1:f7:bc:fc:47:1c:ad:cf:d8:ac:1b:7f:a2:68: 69:87:4e:c9:bf:88:05:ea:e8:5f:fc:9e:c0:9a:e1: f8:f8:01:b1:b4:aa:b1:1e:eb:0d:66:d9:35:e1:c4: 12:aa:a3:2e:a8:e8:7a:13:77:85:83:2b:b7:b9:a8: 17:b1:21:34:9b:64:59:22:9e:ac:5e:a0:fb:bb:db: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:56:93:47:72:8B:9E:13:A1:F3:E2:EB:B9:DF:F2:21:B1:CC:89:A8 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:aa:9b:47:19:bb:c7:0b:16:8e:e7:7a:87:92:7a:56:f4:1d: eb:ba:a3:b4:35:2f:48:1f:e0:d8:14:e4:aa:d1:d3:f1:c1:3b: 83:85:e5:1e:e6:35:c3:91:3b:47:5a:ce:1b:24:11:2c:87:f4: 3a:c9:aa:60:df:a1:a8:97:ce:de:1e:9f:66:8b:87:e5:a2:17: fd:e2:d9:97:c9:3e:25:d3:5c:ad:11:8f:89:ec:a8:59:f6:07: 96:26:82:c7:42:24:1a:1f:11:17:0f:36:92:e6:2c:d4:f6:c8: f0:f9:da:78:94:51:4c:ec:7e:e5:2a:77:92:71:3c:0a:2f:a4: d5:28:d4:84:e7:10:d1:a1:e0:ca:5f:81:bd:45:55:17:ae:42: 96:84:2b:ea:77:c0:fc:2f:04:35:e8:48:c7:ce:84:ea:36:2f: 8c:c6:d8:a8:0d:b9:d9:42:ab:09:b1:7b:14:da:00:91:63:1f: d3:d6:14:b9:5e:fe:df:e0:79:60:a0:6f:98:89:60:3b:3c:58: b9:91:cc:75:fc:f4:a7:53:e8:6f:0a:d8:72:e2:5b:9c:b8:87: 6b:55:3a:dd:2f:d5:ff:8c:83:7d:68:f7:e5:b7:72:22:34:25: dc:a0:d9:14:f6:05:e9:34:4f:2f:d8:0d:5a:d4:9a:e4:f1:c6: bd:19:30:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYLDZc0ZgGCc4kZolKUoFhJ+HCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA1MTIwNzI4NThaFw0yNjA1MTMxMDM4NThaMDMxMTAvBgNV BAMTKDNBNTY5MzQ3NzI4QjlFMTNBMUYzRTJFQkI5REZGMjIxQjFDQzg5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLek7IbBox+AAl72ZHFgt3AgS FCmDwRazVsrAWdaPeZSjSrQczwXMPtr8cgA+agj8w2Y10H+s10X8j5IQRDKhoZZV 7znbX7uZi2CgmO3FarY6bVsqCEaTJvFrBCCV99f4hDLzitVkjgcQFirUHWxSwqxp ExpUkXsHVXu9eQfYk2Kp5A8/w8Y5HWsj7dSba9b/Zp9JmGPZXYIHepvWCoYnQpPY XB/AaY9RIM/zF0NtYuW8Is2h97z8Rxytz9isG3+iaGmHTsm/iAXq6F/8nsCa4fj4 AbG0qrEe6w1m2TXhxBKqoy6o6HoTd4WDK7e5qBexITSbZFkinqxeoPu721ebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlaTR3KLnhOh8+Lrud/yIbHMiagwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2qm0cZu8cLFo7neoeSelb0Heu6o7Q1L0gf 4NgU5KrR0/HBO4OF5R7mNcORO0dazhskESyH9DrJqmDfoaiXzt4en2aLh+WiF/3i 2ZfJPiXTXK0Rj4nsqFn2B5YmgsdCJBofERcPNpLmLNT2yPD52niUUUzsfuUqd5Jx PAovpNUo1ITnENGh4Mpfgb1FVReuQpaEK+p3wPwvBDXoSMfOhOo2L4zG2KgNudlC qwmxexTaAJFjH9PWFLle/t/geWCgb5iJYDs8WLmRzHX89KdT6G8K2HLiW5y4h2tV Ot0v1f+Mg31o9+W3ciI0Jdyg2RT2Bek0Ty/YDVrUmuTxxr0ZME4= -----END CERTIFICATE-----Generated at Wed May 13 01:16:59 2026 by rpki-client