$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: GaC6U+HEhF1nQK66ukQKovk9QccjmDQrL9aa6nPzOIU= Subject key identifier: F6:2C:95:6A:5F:63:2A:0C:B7:54:F4:31:23:A6:A1:D4:1A:08:5D:35 Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 2F92F9251D9A12E1022B8E003ABE085DFBB239A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:09:55 +0000 Manifest this update: Wed 13 May 2026 01:04:55 +0000 Manifest next update: Thu 14 May 2026 04:17:55 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) 2: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: DOuMM97ag200gSvxuBbX/ZLtuHQ6jnvYQMMzWJJsz6c=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:92:f9:25:1d:9a:12:e1:02:2b:8e:00:3a:be:08:5d:fb:b2:39:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: May 13 01:04:55 2026 GMT Not After : May 14 04:17:55 2026 GMT Subject: CN=F62C956A5F632A0CB754F43123A6A1D41A085D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bd:b1:da:05:6a:f9:b6:7b:31:e3:87:7d:40: 48:ce:1d:91:7a:a3:c0:06:da:5f:73:ff:0c:14:a2: bf:e1:e5:a9:7a:2d:4f:03:e3:01:89:6d:79:cb:34: 07:63:9f:d8:00:2e:05:3c:99:4b:2a:d8:11:11:5f: 16:0d:2c:60:20:02:0f:48:8e:a1:ec:d6:0a:d3:10: dd:88:53:58:49:05:8b:51:4b:68:20:38:e4:fa:36: 16:cf:f3:44:50:0e:0b:07:57:89:8f:2d:e0:dc:df: 62:c9:97:4a:06:dd:31:71:78:ee:20:b4:08:cc:0e: 26:7f:1d:8a:1b:62:32:78:40:cd:79:a8:3c:c1:bf: ae:fb:de:af:38:ff:27:80:04:21:68:8c:3c:98:82: 8b:e4:14:bf:35:36:f2:2c:0c:53:58:f6:92:50:03: 7f:1a:ea:11:c5:99:f8:07:26:ce:fe:22:d8:12:99: 6f:9c:dc:86:42:35:85:3a:3c:ae:6b:b5:67:14:b0: 09:ba:ba:f3:99:b7:fb:0b:fa:47:cb:ee:e2:b4:89: 01:da:7e:65:27:5d:b8:d4:47:81:d7:63:d8:2a:e9: 13:1d:dd:a7:b9:c0:f3:5f:f9:dd:74:b0:71:6d:3d: 2c:b5:84:51:b5:16:31:db:07:3b:60:19:20:14:db: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:95:6A:5F:63:2A:0C:B7:54:F4:31:23:A6:A1:D4:1A:08:5D:35 X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b2:a9:45:ce:8e:6a:f1:2e:0d:23:e7:a0:98:c4:cb:34:2c: 38:76:f7:ca:b4:4d:e9:20:cd:d2:49:4c:32:43:15:b9:25:43: 9e:e9:0a:37:c1:1a:38:ad:1e:4d:86:9a:6c:8f:62:b8:fe:aa: 81:16:e8:4a:85:15:3f:f5:04:de:51:2d:09:44:b5:a5:12:fb: e1:a3:ff:15:d9:44:50:74:1b:e0:0f:c7:3c:97:e5:c9:6f:a9: ad:14:3e:e0:03:94:8f:b7:d4:35:bf:9b:4c:ed:a9:1d:4b:f6: d1:35:f9:e1:74:89:60:47:46:d9:a7:00:21:ad:fb:60:70:5b: 2d:e3:6f:c9:37:b2:c3:a7:e6:87:02:b3:7f:36:ec:ca:42:b3: 75:5f:7d:dd:b9:f0:76:d8:de:42:1b:21:1b:04:bd:83:75:91: e6:24:61:ae:d8:03:b6:49:b0:54:4d:2c:22:8f:70:00:f1:78: df:d8:f9:12:88:37:84:61:e7:6c:b0:2b:69:3f:cc:af:1b:7c: 7a:e6:35:b9:b8:4f:dc:ad:50:27:78:14:7b:d2:0a:a1:5a:6e: 4b:dd:09:d0:bf:44:41:e0:aa:4d:5a:a6:e8:40:0d:29:d0:ba: 09:2e:be:75:be:22:3c:06:18:41:1a:f2:5b:ba:46:47:5a:a3: 6b:23:2c:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5L5JR2aEuECK44AOr4IXfuyOaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA1MTMwMTA0NTVaFw0yNjA1MTQwNDE3NTVaMDMxMTAvBgNV BAMTKEY2MkM5NTZBNUY2MzJBMENCNzU0RjQzMTIzQTZBMUQ0MUEwODVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5vbHaBWr5tnsx44d9QEjOHZF6 o8AG2l9z/wwUor/h5al6LU8D4wGJbXnLNAdjn9gALgU8mUsq2BERXxYNLGAgAg9I jqHs1grTEN2IU1hJBYtRS2ggOOT6NhbP80RQDgsHV4mPLeDc32LJl0oG3TFxeO4g tAjMDiZ/HYobYjJ4QM15qDzBv6773q84/yeABCFojDyYgovkFL81NvIsDFNY9pJQ A38a6hHFmfgHJs7+ItgSmW+c3IZCNYU6PK5rtWcUsAm6uvOZt/sL+kfL7uK0iQHa fmUnXbjUR4HXY9gq6RMd3ae5wPNf+d10sHFtPSy1hFG1FjHbBztgGSAU26QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iyVal9jKgy3VPQxI6ah1BoIXTUwHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+yqUXOjmrxLg0j56CYxMs0LDh298q0Tekg zdJJTDJDFbklQ57pCjfBGjitHk2GmmyPYrj+qoEW6EqFFT/1BN5RLQlEtaUS++Gj /xXZRFB0G+APxzyX5clvqa0UPuADlI+31DW/m0ztqR1L9tE1+eF0iWBHRtmnACGt +2BwWy3jb8k3ssOn5ocCs3827MpCs3Vffd258HbY3kIbIRsEvYN1keYkYa7YA7ZJ sFRNLCKPcADxeN/Y+RKIN4Rh52ywK2k/zK8bfHrmNbm4T9ytUCd4FHvSCqFabkvd CdC/REHgqk1apuhADSnQugkuvnW+IjwGGEEa8lu6Rkdao2sjLPI= -----END CERTIFICATE-----Generated at Wed May 13 04:25:55 2026 by rpki-client