$ rpki-client -vvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: eZvpLXDLubugQGVtchlw2PBZv/rRQ5w+pggWk3NAndc= Subject key identifier: D8:BE:CD:C5:8D:88:5E:C4:62:C8:44:73:8C:92:F1:A1:B1:45:07:1D Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 5D513C63CE84DBBBB67F09263BF8499FE15EB01A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:42:50 +0000 Manifest this update: Tue 12 May 2026 23:37:50 +0000 Manifest next update: Thu 14 May 2026 02:55:50 +0000 Files and hashes: 1: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: rHJLSmUF0tpMwHY8BE9PoeM1UXl07+nvrmk7cNogCZM=) 2: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) 3: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 5: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:51:3c:63:ce:84:db:bb:b6:7f:09:26:3b:f8:49:9f:e1:5e:b0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: May 12 23:37:50 2026 GMT Not After : May 14 02:55:50 2026 GMT Subject: CN=D8BECDC58D885EC462C844738C92F1A1B145071D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:94:e8:13:14:f1:fa:81:85:ec:55:a0:82: ca:47:1f:f9:8a:dd:61:ce:99:16:7b:61:77:65:4c: 6f:b0:f7:c1:45:55:ff:04:0f:c1:b1:f7:5c:08:aa: 34:f6:a0:82:38:20:1a:06:03:c0:b5:ff:fc:b9:46: d7:c8:58:46:6d:9f:e3:26:69:04:51:f7:66:da:14: 16:f4:92:a9:02:c3:99:50:44:20:b2:11:a0:c2:b5: d0:fc:bc:28:c9:47:28:b2:e6:1e:13:dd:85:1f:b8: f1:74:59:1c:39:4d:96:9e:d8:99:49:4a:31:0b:0e: d1:a5:86:8e:e7:14:d6:b7:0b:6c:03:60:5f:f4:ef: 63:02:82:53:e6:09:4c:2e:73:6c:e4:91:4f:21:45: 91:59:71:e2:ee:0b:04:8d:5d:e4:70:14:17:b2:10: 15:4f:91:4e:4b:be:5d:3e:26:39:7c:73:46:25:d6: a6:72:79:ee:c8:80:53:4e:2c:69:dc:45:95:0c:e1: 1f:fb:55:f1:0d:ae:7b:19:a0:8d:f8:c7:b9:fb:41: 36:35:2a:a9:88:e1:22:7f:9b:cd:59:d3:56:8a:e7: c3:b8:45:56:29:bf:b4:61:dd:e6:9d:61:65:a6:3d: 90:7f:09:ee:63:a4:3d:88:a0:25:a3:84:50:3b:9a: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:CD:C5:8D:88:5E:C4:62:C8:44:73:8C:92:F1:A1:B1:45:07:1D X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:77:bd:9b:28:8f:c8:20:3a:c1:8a:d2:44:3d:2d:03:0d:6f: e3:6d:69:4e:8b:9f:b7:82:e5:9c:a1:d1:dc:58:ce:d7:e1:41: a2:ad:cd:0c:fa:6e:e1:75:a0:8a:3f:0c:87:46:5f:f4:c3:77: 4e:2c:20:71:9b:aa:3b:05:cf:28:44:2d:a2:1d:ad:72:f6:19: f8:a6:00:30:62:1f:7c:8f:0b:df:6a:b1:62:e0:f9:fa:a9:3b: ea:7f:cd:89:17:50:35:0f:56:a8:b0:74:17:9c:10:08:fd:03: 40:e7:14:f5:5c:1e:6c:1a:b9:6f:b3:89:ac:6b:2c:fb:5c:4c: 3a:88:92:d0:f6:c9:d1:31:fe:19:84:20:fb:27:6b:bf:90:3b: 16:8b:ea:70:a3:1a:cb:88:46:e3:a1:74:a1:b5:eb:c0:2c:e2: 59:60:57:f2:64:71:43:b1:1b:a8:10:62:c8:11:4d:53:2c:18: a8:06:36:3b:1e:a0:27:c9:1e:8e:90:03:70:64:c4:8e:08:6d: 98:cb:88:f0:15:3f:c5:02:ed:c7:58:f3:cf:12:75:b1:cb:18: 23:7b:bb:eb:3d:26:92:ba:f4:c0:42:3b:95:90:02:b2:b0:8b: 0f:ae:1c:06:a8:dc:f5:35:87:60:2c:5a:39:77:6a:a9:f6:2a: 04:d2:3f:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVE8Y86E27u2fwkmO/hJn+FesBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA1MTIyMzM3NTBaFw0yNjA1MTQwMjU1NTBaMDMxMTAvBgNV BAMTKEQ4QkVDREM1OEQ4ODVFQzQ2MkM4NDQ3MzhDOTJGMUExQjE0NTA3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4n5ToExTx+oGF7FWggspHH/mK 3WHOmRZ7YXdlTG+w98FFVf8ED8Gx91wIqjT2oII4IBoGA8C1//y5RtfIWEZtn+Mm aQRR92baFBb0kqkCw5lQRCCyEaDCtdD8vCjJRyiy5h4T3YUfuPF0WRw5TZae2JlJ SjELDtGlho7nFNa3C2wDYF/072MCglPmCUwuc2zkkU8hRZFZceLuCwSNXeRwFBey EBVPkU5Lvl0+Jjl8c0Yl1qZyee7IgFNOLGncRZUM4R/7VfENrnsZoI34x7n7QTY1 KqmI4SJ/m81Z01aK58O4RVYpv7Rh3eadYWWmPZB/Ce5jpD2IoCWjhFA7mvZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2L7NxY2IXsRiyERzjJLxobFFBx0wHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd3vZsoj8ggOsGK0kQ9LQMNb+NtaU6Ln7eC 5Zyh0dxYztfhQaKtzQz6buF1oIo/DIdGX/TDd04sIHGbqjsFzyhELaIdrXL2Gfim ADBiH3yPC99qsWLg+fqpO+p/zYkXUDUPVqiwdBecEAj9A0DnFPVcHmwauW+ziaxr LPtcTDqIktD2ydEx/hmEIPsna7+QOxaL6nCjGsuIRuOhdKG168As4llgV/JkcUOx G6gQYsgRTVMsGKgGNjseoCfJHo6QA3BkxI4IbZjLiPAVP8UC7cdY888SdbHLGCN7 u+s9JpK69MBCO5WQArKwiw+uHAao3PU1h2AsWjl3aqn2KgTSP7g= -----END CERTIFICATE-----Generated at Wed May 13 02:15:24 2026 by rpki-client