$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: /dYplzcA8wuKZqo74+32ylxaeFSmKGJ7NtKbkOxjsCI= Subject key identifier: 9C:72:3C:4C:1A:B0:EA:B8:AC:F6:2E:66:8A:7D:03:B7:12:69:A4:4F Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 57634E4F80D1D2DBA2E61C436DD1F0022D7E98E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:14 +0000 Manifest this update: Tue 12 May 2026 19:15:14 +0000 Manifest next update: Wed 13 May 2026 22:40:14 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: P1MA9x0M+ZPMi0gvc2j00FjFb1su7czLRf8CEC3yKZ0=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:63:4e:4f:80:d1:d2:db:a2:e6:1c:43:6d:d1:f0:02:2d:7e:98:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: May 12 19:15:14 2026 GMT Not After : May 13 22:40:14 2026 GMT Subject: CN=9C723C4C1AB0EAB8ACF62E668A7D03B71269A44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:52:08:c8:fc:e8:80:73:b3:5f:cb:2a:19:32: a8:ef:6e:be:c7:72:f3:35:4f:97:a5:39:7f:bd:9a: 64:eb:40:8a:00:9a:71:e4:92:e2:ff:23:c9:d9:96: 59:27:2e:3b:4e:f5:9c:45:d6:ac:30:b8:55:aa:15: e4:c3:13:ba:df:b5:be:ec:3f:f6:e3:27:ca:a1:d1: 67:fc:96:a8:b9:a7:80:d2:7c:8e:ea:d6:38:16:bd: 86:a0:40:37:c9:0b:71:da:2b:d5:b7:e6:37:27:b1: 29:46:1f:40:5a:95:89:cf:2f:c5:a3:e8:55:dc:20: f6:70:86:37:37:0f:28:ef:54:67:4a:f9:21:22:98: b8:83:0e:b5:78:70:4d:d4:7a:0d:61:9a:e0:cd:c4: 5b:c9:49:82:cb:db:b5:45:51:b1:f4:4a:bf:5d:fd: 19:1b:ad:bd:21:8c:fd:c4:59:65:3d:6a:20:44:1e: 53:b2:16:99:2c:6a:06:08:33:47:85:bb:cc:75:90: fc:91:c0:8a:88:f6:b9:a6:33:fd:93:54:5b:e6:ac: 73:a2:35:44:63:16:5e:dd:25:ff:74:06:33:80:fb: 6f:23:a6:e2:7a:d6:8f:37:56:22:4c:b9:dd:d4:15: e1:35:e1:88:5e:8e:4b:cc:b8:e1:a2:13:99:f7:f2: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:72:3C:4C:1A:B0:EA:B8:AC:F6:2E:66:8A:7D:03:B7:12:69:A4:4F X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:17:c5:ef:93:4b:77:91:bf:e6:48:22:fe:1a:8b:e0:ea:dc: 87:24:9f:dd:58:88:1b:88:44:26:48:fc:f1:ba:aa:f8:2b:58: 54:90:70:24:8d:b7:47:8f:5c:53:67:eb:09:b1:ec:8e:78:40: 91:e6:c6:7f:56:86:41:6a:fe:e1:a6:ed:e1:ef:f4:cd:3a:f0: 0d:88:ce:12:be:92:b3:78:1a:e0:ff:47:38:8b:d8:90:70:62: 7a:fb:7c:e6:0a:da:57:e5:f7:a2:d9:ca:19:75:96:cf:66:cc: db:4c:0a:7b:c3:c0:4e:35:07:7b:d8:fc:4d:41:e2:91:6a:ce: f2:33:a1:fe:5d:dd:86:29:4b:7b:6c:97:39:29:fb:41:a5:d7: 8b:85:0f:07:3d:d2:3e:e7:54:c7:56:b2:03:67:b8:61:db:df: 28:f4:de:cc:d4:dd:82:3b:ff:83:86:40:d3:a8:fc:f2:80:91: d1:76:5b:fa:e6:c2:2e:ff:bb:d7:0d:6f:9f:17:43:8e:29:da: 4d:16:b4:51:30:f6:d8:92:d0:ec:67:df:43:09:4b:92:ca:6b: c9:11:73:a0:66:40:89:b0:17:d4:c7:5f:a6:3c:0a:04:47:19: ad:2c:70:f3:e5:e0:3f:5c:1b:5b:5c:bd:fa:98:e8:23:7d:19: 9d:02:c8:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2NOT4DR0tui5hxDbdHwAi1+mOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA1MTIxOTE1MTRaFw0yNjA1MTMyMjQwMTRaMDMxMTAvBgNV BAMTKDlDNzIzQzRDMUFCMEVBQjhBQ0Y2MkU2NjhBN0QwM0I3MTI2OUE0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyUgjI/OiAc7NfyyoZMqjvbr7H cvM1T5elOX+9mmTrQIoAmnHkkuL/I8nZllknLjtO9ZxF1qwwuFWqFeTDE7rftb7s P/bjJ8qh0Wf8lqi5p4DSfI7q1jgWvYagQDfJC3HaK9W35jcnsSlGH0BalYnPL8Wj 6FXcIPZwhjc3DyjvVGdK+SEimLiDDrV4cE3Ueg1hmuDNxFvJSYLL27VFUbH0Sr9d /Rkbrb0hjP3EWWU9aiBEHlOyFpksagYIM0eFu8x1kPyRwIqI9rmmM/2TVFvmrHOi NURjFl7dJf90BjOA+28jpuJ61o83ViJMud3UFeE14YhejkvMuOGiE5n38j2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHI8TBqw6ris9i5min0DtxJppE8wHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcXxe+TS3eRv+ZIIv4ai+Dq3Ickn91YiBuI RCZI/PG6qvgrWFSQcCSNt0ePXFNn6wmx7I54QJHmxn9WhkFq/uGm7eHv9M068A2I zhK+krN4GuD/RziL2JBwYnr7fOYK2lfl96LZyhl1ls9mzNtMCnvDwE41B3vY/E1B 4pFqzvIzof5d3YYpS3tslzkp+0Gl14uFDwc90j7nVMdWsgNnuGHb3yj03szU3YI7 /4OGQNOo/PKAkdF2W/rmwi7/u9cNb58XQ44p2k0WtFEw9tiS0Oxn30MJS5LKa8kR c6BmQImwF9THX6Y8CgRHGa0scPPl4D9cG1tcvfqY6CN9GZ0CyKo= -----END CERTIFICATE-----Generated at Wed May 13 04:10:11 2026 by rpki-client