$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: HsPAv3PKUnCJHifhQfIRVxFvy66VB5PpiFAzVNuCglM= Subject key identifier: 66:2F:C7:7E:20:86:D1:DC:F8:7B:A0:A7:B7:CC:62:C0:EC:00:05:45 Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 22D244760ACD0933F52EA2B2657C9739C8A3B5E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:43 +0000 Manifest this update: Tue 12 May 2026 18:18:43 +0000 Manifest next update: Wed 13 May 2026 18:25:43 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) 2: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: nygyelc9/yXUNmgg/jMXPg0AuqHdv+YZupEvlLklxEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d2:44:76:0a:cd:09:33:f5:2e:a2:b2:65:7c:97:39:c8:a3:b5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: May 12 18:18:43 2026 GMT Not After : May 13 18:25:43 2026 GMT Subject: CN=662FC77E2086D1DCF87BA0A7B7CC62C0EC000545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:a8:41:a7:af:af:e7:fa:13:e5:db:6c:d9: 5a:49:e6:0d:0b:6e:05:85:e8:f0:03:e9:23:eb:e1: a4:bb:e5:65:1d:70:be:c1:de:ee:90:9f:19:d7:f9: 58:56:28:43:2f:ba:a0:16:0d:46:0a:83:c6:b3:53: 13:4e:1c:b4:ff:ae:15:7f:32:49:98:ef:e2:e8:df: 86:ca:32:0c:4c:cd:ef:08:1e:8f:57:09:da:64:2d: 7e:a2:10:fd:3e:01:f5:51:3a:50:d0:04:1a:2f:fd: 3a:7f:d0:19:68:4b:a5:e4:4f:80:e8:a3:9e:78:a1: b7:03:0d:73:38:ba:16:12:d7:46:81:8e:1b:6d:16: 01:de:e0:34:3e:f0:af:a8:00:79:81:f4:7f:f4:47: 4e:34:c9:0e:2c:a4:cf:ec:b8:5c:cf:c4:b4:e0:4c: c2:52:58:79:d1:9f:81:70:a0:74:ad:95:99:0e:8a: b2:f3:b1:46:2f:12:9d:01:1f:66:84:a8:9b:cc:52: a3:15:ea:d0:d2:18:13:2e:f2:64:12:10:fb:76:0e: 46:e3:25:28:e3:50:9d:d7:e8:91:3e:8c:ff:fb:d4: d8:c3:ed:b1:26:57:0f:36:89:42:a7:ba:aa:ac:7a: 78:1d:67:45:b7:d8:ad:49:61:1c:d2:05:40:1d:b6: a9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:C7:7E:20:86:D1:DC:F8:7B:A0:A7:B7:CC:62:C0:EC:00:05:45 X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c8:b3:e6:73:50:b8:e2:63:d1:ae:ab:80:a2:85:bf:bc:ef: c3:cb:af:95:61:5d:d9:17:20:00:36:39:ff:46:32:ce:92:69: b1:48:96:72:da:0a:eb:80:1d:b2:64:12:20:f2:ee:48:ac:16: 81:3f:bc:89:e9:33:09:35:ed:52:2e:00:77:ae:b1:8d:58:b5: 2a:0f:45:52:93:44:d5:c0:c7:d2:90:3f:ec:76:be:55:b9:9a: 95:08:77:50:e8:fb:fe:a9:69:6f:5b:7d:bc:d7:4a:23:db:6a: 8b:c7:fb:dd:83:0a:2d:e0:35:66:4a:9a:b5:10:23:ad:5c:c8: cd:60:a7:ca:35:07:8a:9d:ec:73:25:e1:b3:d9:29:85:28:fa: 62:2d:2f:12:32:76:ce:d1:43:dc:24:66:27:fa:49:09:4c:b0: a9:db:c0:0d:dc:1f:0b:d5:d6:02:c4:9f:e9:f0:b6:7f:2f:12: 97:16:03:b7:71:30:4f:48:ea:49:79:b3:64:16:0b:6e:34:f9: f6:8f:c7:06:c9:98:e8:30:d9:d0:96:05:b0:f2:81:6b:4b:2a: 01:26:87:16:76:b9:bf:09:5d:ee:96:0e:87:69:bf:2a:f2:54: b0:18:f2:3e:ed:2d:f2:1b:b3:73:f9:cd:b9:cd:f2:2a:11:04: 9e:dd:df:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItJEdgrNCTP1LqKyZXyXOcijteYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjA1MTIxODE4NDNaFw0yNjA1MTMxODI1NDNaMDMxMTAvBgNV BAMTKDY2MkZDNzdFMjA4NkQxRENGODdCQTBBN0I3Q0M2MkMwRUMwMDA1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOahBp6+v5/oT5dts2VpJ5g0L bgWF6PAD6SPr4aS75WUdcL7B3u6QnxnX+VhWKEMvuqAWDUYKg8azUxNOHLT/rhV/ MkmY7+Lo34bKMgxMze8IHo9XCdpkLX6iEP0+AfVROlDQBBov/Tp/0BloS6XkT4Do o554obcDDXM4uhYS10aBjhttFgHe4DQ+8K+oAHmB9H/0R040yQ4spM/suFzPxLTg TMJSWHnRn4FwoHStlZkOirLzsUYvEp0BH2aEqJvMUqMV6tDSGBMu8mQSEPt2Dkbj JSjjUJ3X6JE+jP/71NjD7bEmVw82iUKnuqqsengdZ0W32K1JYRzSBUAdtqkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZi/HfiCG0dz4e6Cnt8xiwOwABUUwHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPIs+ZzULjiY9Guq4Cihb+878PLr5VhXdkX IAA2Of9GMs6SabFIlnLaCuuAHbJkEiDy7kisFoE/vInpMwk17VIuAHeusY1YtSoP RVKTRNXAx9KQP+x2vlW5mpUId1Do+/6paW9bfbzXSiPbaovH+92DCi3gNWZKmrUQ I61cyM1gp8o1B4qd7HMl4bPZKYUo+mItLxIyds7RQ9wkZif6SQlMsKnbwA3cHwvV 1gLEn+nwtn8vEpcWA7dxME9I6kl5s2QWC240+faPxwbJmOgw2dCWBbDygWtLKgEm hxZ2ub8JXe6WDodpvyryVLAY8j7tLfIbs3P5zbnN8ioRBJ7d3yg= -----END CERTIFICATE-----Generated at Wed May 13 02:59:48 2026 by rpki-client