$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft File: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json) Hash identifier: 1fzjD0uusxpr/TuO5V17sKC0JMGdTdLoT24in7OgMiQ= Subject key identifier: 54:B9:05:E5:A4:34:E2:7E:CF:30:D7:8F:9B:B1:41:73:45:46:A7:EB Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 0A10578F23A0D31F5229438F83FEF07F8261F978 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:29 +0000 Manifest this update: Tue 12 May 2026 20:27:29 +0000 Manifest next update: Wed 13 May 2026 20:34:29 +0000 Files and hashes: 1: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=) 2: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=) 3: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=) 4: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=) 5: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=) 6: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=) 7: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=) 8: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=) 9: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: 4jUZvRn4fT/aANyoirEi90vvbksmN68dckpZ1Vz625o=) 10: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=) 11: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=) 12: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=) 13: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=) 14: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=) 15: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=) 16: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:10:57:8f:23:a0:d3:1f:52:29:43:8f:83:fe:f0:7f:82:61:f9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: May 12 20:27:29 2026 GMT Not After : May 13 20:34:29 2026 GMT Subject: CN=54B905E5A434E27ECF30D78F9BB141734546A7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:ce:9d:81:56:47:f6:f7:32:3b:d5:9e:ea: 96:21:21:ab:0b:cd:d1:76:b7:0e:fd:e9:9b:90:92: 49:72:e6:b6:25:20:97:03:5d:a0:b5:e2:fd:af:f4: b8:ae:ce:ac:c9:2e:fc:72:e9:8a:ad:0f:fa:21:5e: 1a:e4:a0:b5:0e:21:d3:67:83:d4:59:b7:f6:cb:37: 7c:7c:da:78:21:7d:72:69:16:b0:41:9c:2a:60:a5: 09:47:70:d3:23:ce:23:dd:92:17:26:e7:85:0d:51: c7:05:96:3d:6b:1a:26:dc:72:02:37:a8:99:2d:dc: 7f:55:66:5f:7d:6f:17:9a:9d:2b:2b:60:20:7e:13: fa:71:1c:2b:fc:bd:a4:af:7a:a9:88:1e:d0:98:9c: 73:9f:c1:b9:c5:da:22:76:b0:2a:f7:e3:75:86:2c: c7:71:27:2d:bb:6d:f1:b6:53:de:06:25:24:18:0b: 75:85:bc:91:1a:c4:67:76:10:8f:89:ac:ec:83:43: 19:06:87:d6:8c:22:0f:58:ae:59:d4:c5:e1:45:68: c5:bb:7c:17:6f:6d:fe:fe:08:28:7a:27:e4:36:c4: 57:d5:19:6c:bc:06:00:66:4e:c6:df:ea:24:4f:9c: 0f:0f:fa:70:b1:c7:64:d9:33:27:73:85:fd:cc:4c: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B9:05:E5:A4:34:E2:7E:CF:30:D7:8F:9B:B1:41:73:45:46:A7:EB X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3c:0b:4d:75:02:27:26:52:32:9d:82:b6:d5:31:6a:bf:ab: 68:01:81:49:48:32:1c:43:3b:78:ac:9d:3d:11:a0:74:a3:1f: 12:0d:c5:28:48:9a:98:b9:07:09:f8:82:13:d7:9c:13:09:f5: 27:9b:a4:8f:b9:26:02:86:4c:57:71:f2:6b:b3:e9:d0:6e:6d: e7:f9:06:c3:e6:f2:66:e3:49:f6:1f:4b:08:cf:ad:7d:19:73: 33:96:42:ee:06:9c:ed:4a:a3:28:56:7d:29:0c:14:09:9f:5a: 5d:e4:91:cc:60:7b:c2:f7:e9:f2:80:0d:c3:4d:54:8b:fa:09: ef:1b:56:df:7e:93:79:7f:cc:fe:fa:9d:f5:99:eb:aa:4d:8e: 1d:67:7f:d8:f4:a9:f2:bd:2c:30:e6:ce:df:06:81:2f:64:25: 10:05:25:39:f5:24:c1:0f:dd:0c:a3:9f:49:87:41:65:b2:ae: bd:8f:cf:38:00:fc:12:3d:87:22:86:8c:58:d3:90:be:ff:bb: 8a:a8:1e:39:92:28:4e:a8:0e:53:0c:bb:3e:a7:c1:d8:37:15: 21:fd:b3:0a:52:71:85:75:10:f7:01:22:de:c7:bd:a4:1e:5e: 19:89:bd:27:2c:31:94:6f:da:04:2c:84:ba:10:64:a8:24:32: 80:ef:ea:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChBXjyOg0x9SKUOPg/7wf4Jh+XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA1MTIyMDI3MjlaFw0yNjA1MTMyMDM0MjlaMDMxMTAvBgNV BAMTKDU0QjkwNUU1QTQzNEUyN0VDRjMwRDc4RjlCQjE0MTczNDU0NkE3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzts6dgVZH9vcyO9We6pYhIasL zdF2tw796ZuQkkly5rYlIJcDXaC14v2v9LiuzqzJLvxy6YqtD/ohXhrkoLUOIdNn g9RZt/bLN3x82nghfXJpFrBBnCpgpQlHcNMjziPdkhcm54UNUccFlj1rGibccgI3 qJkt3H9VZl99bxeanSsrYCB+E/pxHCv8vaSveqmIHtCYnHOfwbnF2iJ2sCr343WG LMdxJy27bfG2U94GJSQYC3WFvJEaxGd2EI+JrOyDQxkGh9aMIg9YrlnUxeFFaMW7 fBdvbf7+CCh6J+Q2xFfVGWy8BgBmTsbf6iRPnA8P+nCxx2TZMydzhf3MTNK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLkF5aQ04n7PMNePm7FBc0VGp+swHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExNDE3YzAtMzdiYi00NDZkLTg3 ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3 OEVGMzUxNTFFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg8C011AicmUjKdgrbVMWq/q2gBgUlIMhxD O3isnT0RoHSjHxINxShImpi5Bwn4ghPXnBMJ9SebpI+5JgKGTFdx8muz6dBubef5 BsPm8mbjSfYfSwjPrX0ZczOWQu4GnO1KoyhWfSkMFAmfWl3kkcxge8L36fKADcNN VIv6Ce8bVt9+k3l/zP76nfWZ66pNjh1nf9j0qfK9LDDmzt8GgS9kJRAFJTn1JMEP 3Qyjn0mHQWWyrr2PzzgA/BI9hyKGjFjTkL7/u4qoHjmSKE6oDlMMuz6nwdg3FSH9 swpScYV1EPcBIt7HvaQeXhmJvScsMZRv2gQshLoQZKgkMoDv6gg= -----END CERTIFICATE-----Generated at Tue May 12 22:46:44 2026 by rpki-client