$ rpki-client -vvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json) Hash identifier: xTsL8iOifbpY55R5WMO6KGtrkMaR+K4MAMg+Ng1CruM= Subject key identifier: CF:F1:AD:E5:E3:F4:41:97:2A:B4:F0:15:B1:63:3A:5C:82:6B:19:60 Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Certificate serial: 509881E7A2989E574CA6838F76CBCBC70EAAC4C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:54:31 +0000 Manifest this update: Tue 12 May 2026 14:49:31 +0000 Manifest next update: Wed 13 May 2026 18:53:31 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=) 2: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: oXD04v7yCgzIDsPEsEcHKD3h2E46Ypet0EV+ITmDh68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:98:81:e7:a2:98:9e:57:4c:a6:83:8f:76:cb:cb:c7:0e:aa:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Validity Not Before: May 12 14:49:31 2026 GMT Not After : May 13 18:53:31 2026 GMT Subject: CN=CFF1ADE5E3F441972AB4F015B1633A5C826B1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:43:a5:4d:11:54:87:19:72:70:00:e8:54: f0:07:7b:a2:04:82:e1:bf:26:f5:c0:4d:61:58:82: 2c:3d:b5:14:a6:8d:c3:5c:92:5c:85:35:92:0c:4c: 64:c1:7d:bd:32:37:50:87:c9:b5:da:ec:e1:31:20: 9a:d6:86:fb:0e:be:3d:d2:fc:32:f9:69:60:d5:f5: c6:1f:38:9c:3f:95:86:0c:47:e4:a4:a2:31:d6:f6: 88:cf:b1:04:64:ee:50:bc:dc:6f:9d:f9:92:d2:5b: 55:ca:a8:f3:87:12:37:98:3b:f8:bc:4c:59:ee:ed: e2:54:bc:42:82:e3:4b:24:8d:bf:37:59:65:39:90: 57:7d:d8:e9:f1:da:5f:f6:c6:1a:6d:9f:53:3e:25: 23:1e:ec:8f:84:5c:dd:36:67:99:a0:6a:74:01:d2: aa:39:42:fd:61:7a:96:9f:82:76:04:49:21:85:48: 11:f2:a3:00:13:cc:89:60:37:f8:a2:68:05:48:82: f7:ec:92:1c:26:28:0b:58:c3:ce:90:f7:4f:84:e1: c5:2d:f3:f1:94:c9:64:2b:29:43:55:b3:36:f6:b9: be:71:a2:b5:85:94:66:ae:3d:bd:f9:dd:96:0e:48: 90:c2:c1:bb:25:15:67:da:36:df:b2:8f:f7:8f:ae: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:AD:E5:E3:F4:41:97:2A:B4:F0:15:B1:63:3A:5C:82:6B:19:60 X509v3 Authority Key Identifier: keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:89:f6:5d:d5:b5:44:f5:39:3e:05:d0:85:7e:c6:4c:75:65: 05:2a:48:84:23:75:1b:df:f7:c6:d3:20:1f:ed:3f:81:41:9b: 41:40:2d:1b:dc:0a:59:c8:b2:54:77:f1:b3:3c:63:51:48:09: 53:58:b5:23:1d:6f:cd:f6:d0:5a:f4:63:3d:1f:92:88:65:16: 87:bd:9a:0d:45:eb:8d:25:57:c1:59:b2:1a:d7:b2:bc:a8:4e: 66:39:17:30:26:fe:84:90:0f:5c:ee:ac:fb:06:f0:7e:ff:ee: ed:b7:72:62:5d:d7:c6:52:66:fd:b9:ee:02:7f:52:02:60:4d: d6:a7:f3:96:49:4e:18:0e:8f:31:62:50:16:5e:b6:15:6d:5f: 75:73:8e:54:c1:e6:8e:ed:30:0e:14:57:a7:d4:94:1f:c7:f7: d2:fc:7e:6c:76:af:de:86:53:2b:f2:31:6b:9f:1f:02:6d:be: 15:83:dc:33:5d:6e:1e:e0:df:38:96:1b:ab:d4:79:96:68:09: e7:ed:db:68:7b:a0:8a:da:62:49:31:5e:ff:ff:bd:07:6d:df: 01:2b:75:af:0c:3f:1c:b2:c5:a8:bb:88:5b:da:76:da:1b:42: b4:15:38:c3:9f:30:d9:ea:22:cf:7d:af:d9:18:ad:ac:e1:bc: 2c:c1:ac:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJiB56KYnldMpoOPdsvLxw6qxMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkzQUI4 MTkyMjE1MTAeFw0yNjA1MTIxNDQ5MzFaFw0yNjA1MTMxODUzMzFaMDMxMTAvBgNV BAMTKENGRjFBREU1RTNGNDQxOTcyQUI0RjAxNUIxNjMzQTVDODI2QjE5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyu0OlTRFUhxlycADoVPAHe6IE guG/JvXATWFYgiw9tRSmjcNcklyFNZIMTGTBfb0yN1CHybXa7OExIJrWhvsOvj3S /DL5aWDV9cYfOJw/lYYMR+SkojHW9ojPsQRk7lC83G+d+ZLSW1XKqPOHEjeYO/i8 TFnu7eJUvEKC40skjb83WWU5kFd92Onx2l/2xhptn1M+JSMe7I+EXN02Z5mganQB 0qo5Qv1hepafgnYESSGFSBHyowATzIlgN/iiaAVIgvfskhwmKAtYw86Q90+E4cUt 8/GUyWQrKUNVszb2ub5xorWFlGauPb353ZYOSJDCwbslFWfaNt+yj/ePrno3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/Gt5eP0QZcqtPAVsWM6XIJrGWAwHwYDVR0j BBgwFoAUw83vwdQtvFJolLSTgtaTq4GSIVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVkZjUxMmYtMGQxYS00YjA5LWI5YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFE NDJEQkM1MjY4OTRCNDkzODJENjkzQUI4MTkyMjE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0NERUZDMUQ0MkRCQzUyNjg5NEI0OTM4MkQ2OTNBQjgxOTIy MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkz QUI4MTkyMjE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKJ9l3VtUT1OT4F0IV+xkx1ZQUqSIQjdRvf 98bTIB/tP4FBm0FALRvcClnIslR38bM8Y1FICVNYtSMdb8320Fr0Yz0fkohlFoe9 mg1F640lV8FZshrXsryoTmY5FzAm/oSQD1zurPsG8H7/7u23cmJd18ZSZv257gJ/ UgJgTdan85ZJThgOjzFiUBZethVtX3VzjlTB5o7tMA4UV6fUlB/H99L8fmx2r96G UyvyMWufHwJtvhWD3DNdbh7g3ziWG6vUeZZoCeft22h7oIraYkkxXv//vQdt3wEr da8MPxyyxai7iFvadtobQrQVOMOfMNnqIs99r9kYrazhvCzBrAU= -----END CERTIFICATE-----Generated at Wed May 13 03:52:33 2026 by rpki-client