$ rpki-client -vvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: 0hGZcfDfzGmeD7WP7Z0+Dr9z2AXBy9XGU98kV/4EvhA= Subject key identifier: F5:53:66:66:32:84:9A:14:C5:52:72:E0:23:39:8C:95:F4:49:B8:27 Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 09F0DE5B503B1BE1CF145B6D53C1D428D5359249 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:08:32 +0000 Manifest this update: Tue 12 May 2026 21:03:32 +0000 Manifest next update: Wed 13 May 2026 22:30:32 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: 6hWJIlEQunlhvbeoe4X1ZXxd3gungyGSFFGN6xYMcu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f0:de:5b:50:3b:1b:e1:cf:14:5b:6d:53:c1:d4:28:d5:35:92:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: May 12 21:03:32 2026 GMT Not After : May 13 22:30:32 2026 GMT Subject: CN=F553666632849A14C55272E023398C95F449B827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:62:1a:f5:fd:d4:06:7e:b7:6b:86:b1:65: a4:87:65:f9:5e:23:be:a3:08:ec:b6:6c:ac:a5:46: 53:3f:2d:c1:48:28:a0:2a:a5:48:6e:ea:e4:07:8d: b6:f5:e4:16:52:8b:62:f0:c3:4e:dd:85:77:60:4e: 4e:92:68:8b:a3:8f:8b:1f:7a:5d:2b:bd:87:b5:8b: 53:8a:50:73:44:c1:a8:c1:1d:6a:7a:db:41:5a:5f: de:d7:a3:66:62:f7:ad:71:e4:64:ac:58:37:9e:36: fd:11:1c:0d:4c:2f:db:63:86:ca:a3:c7:9b:7d:04: 14:d9:8f:e3:96:6d:c5:b3:09:44:ef:12:3e:b4:f5: 67:d3:a8:59:4f:a3:50:61:10:a5:c2:eb:df:39:f9: 42:3d:97:1d:e8:8d:ca:b9:67:e3:27:76:3b:98:7e: be:33:8b:d6:ff:20:31:81:19:8e:58:c0:21:4c:55: bb:5d:fd:79:7c:1e:92:08:93:b0:ce:ed:3e:0f:1e: 7f:22:a8:16:bf:44:30:fb:1c:da:28:20:7e:21:e4: 4a:28:5f:a0:41:6f:22:fa:58:c7:15:4c:9b:f9:98: 1a:4e:e2:e3:d1:b1:0d:13:7c:41:f3:e2:ee:bb:ba: 6f:64:42:0b:d7:1d:b7:21:9a:79:1c:e7:11:a1:47: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:53:66:66:32:84:9A:14:C5:52:72:E0:23:39:8C:95:F4:49:B8:27 X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:12:3c:8c:6d:2e:63:53:13:d6:a6:cb:1e:a8:fa:fb:7e:6a: c4:68:53:42:66:19:65:67:74:31:3b:00:d2:40:d0:ca:63:a4: dd:6d:21:f1:7f:41:bd:8e:11:66:57:ed:2f:f2:8f:85:bd:41: 36:83:af:9f:32:9a:22:ce:58:94:2b:82:77:fe:a4:fa:24:da: e6:2b:bb:54:e5:5b:21:80:54:19:06:dd:98:02:ab:09:06:7c: 1d:86:21:45:0e:1d:59:d4:97:53:ae:50:8b:fa:af:1c:ba:38: a6:ae:62:4b:46:59:87:62:55:28:70:a2:61:32:00:a2:a8:18: 7b:19:30:ce:e5:d7:e3:0b:76:3c:0f:92:a4:27:70:bc:5d:a5: 50:ee:97:ea:7f:3a:81:c0:54:fc:cc:d3:55:69:50:98:44:40: 3d:93:63:d8:71:8d:fe:b6:a9:dc:43:b2:2a:7b:81:cb:ef:02: 8b:cb:36:8e:eb:c7:07:4d:a8:ed:2d:31:19:2b:9f:ff:a2:54: 45:74:13:5a:96:33:ea:04:39:ea:ce:71:52:30:f2:20:31:a9: 94:b4:74:4c:da:f8:3c:e6:8e:10:fc:e8:49:52:62:93:bd:ca: c0:a5:5e:6c:1f:8a:d2:28:60:fe:2d:0d:00:1a:d1:4f:51:07: 22:5a:00:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfDeW1A7G+HPFFttU8HUKNU1kkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA1MTIyMTAzMzJaFw0yNjA1MTMyMjMwMzJaMDMxMTAvBgNV BAMTKEY1NTM2NjY2MzI4NDlBMTRDNTUyNzJFMDIzMzk4Qzk1RjQ0OUI4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHWIa9f3UBn63a4axZaSHZfle I76jCOy2bKylRlM/LcFIKKAqpUhu6uQHjbb15BZSi2Lww07dhXdgTk6SaIujj4sf el0rvYe1i1OKUHNEwajBHWp620FaX97Xo2Zi961x5GSsWDeeNv0RHA1ML9tjhsqj x5t9BBTZj+OWbcWzCUTvEj609WfTqFlPo1BhEKXC6985+UI9lx3ojcq5Z+MndjuY fr4zi9b/IDGBGY5YwCFMVbtd/Xl8HpIIk7DO7T4PHn8iqBa/RDD7HNooIH4h5Eoo X6BBbyL6WMcVTJv5mBpO4uPRsQ0TfEHz4u67um9kQgvXHbchmnkc5xGhR89ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VNmZjKEmhTFUnLgIzmMlfRJuCcwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0SPIxtLmNTE9amyx6o+vt+asRoU0JmGWVn dDE7ANJA0MpjpN1tIfF/Qb2OEWZX7S/yj4W9QTaDr58ymiLOWJQrgnf+pPok2uYr u1TlWyGAVBkG3ZgCqwkGfB2GIUUOHVnUl1OuUIv6rxy6OKauYktGWYdiVShwomEy AKKoGHsZMM7l1+MLdjwPkqQncLxdpVDul+p/OoHAVPzM01VpUJhEQD2TY9hxjf62 qdxDsip7gcvvAovLNo7rxwdNqO0tMRkrn/+iVEV0E1qWM+oEOerOcVIw8iAxqZS0 dEza+DzmjhD86ElSYpO9ysClXmwfitIoYP4tDQAa0U9RByJaAGU= -----END CERTIFICATE-----Generated at Wed May 13 00:21:29 2026 by rpki-client