$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: dIoFYLKEvEJC5GarxYzBkQsoPYgL+Ukl9l+WGComv/s= Subject key identifier: 73:86:96:E4:BD:1A:25:B8:B6:4B:D6:AE:13:2E:E9:3C:CA:B0:5D:2A Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 794A2A180BC8C6A6C14CADE9D7D829A7E2F5A36A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:52 +0000 Manifest this update: Tue 12 May 2026 19:35:52 +0000 Manifest next update: Wed 13 May 2026 20:57:52 +0000 Files and hashes: 1: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: 81Lh9Y24t3NSj8R6bNrYCyOfNV8MUWkX2111m9xZTVo=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4a:2a:18:0b:c8:c6:a6:c1:4c:ad:e9:d7:d8:29:a7:e2:f5:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: May 12 19:35:52 2026 GMT Not After : May 13 20:57:52 2026 GMT Subject: CN=738696E4BD1A25B8B64BD6AE132EE93CCAB05D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:bf:ff:40:cc:8f:bb:4b:a6:65:d5:8f:6a: 00:5e:f4:3a:68:49:75:08:56:e5:0a:f2:b7:c7:5b: cf:84:3d:30:32:9b:be:f6:22:d5:24:c4:45:8b:cc: 62:a7:23:61:e0:b4:c6:20:b1:ad:ad:fc:a4:2b:18: 5e:e9:27:79:6f:67:73:24:c0:56:1e:3c:5d:85:52: d3:2a:d7:db:4e:d5:ab:19:64:d4:73:d6:b7:7b:2e: 18:ec:74:77:30:36:26:08:5a:d1:f9:a6:66:98:90: 60:4e:a7:5f:ed:a1:d3:5e:0c:15:28:e8:76:9a:94: 5d:b2:8d:65:1b:60:b4:70:a1:cd:d1:0d:f7:03:dd: b5:66:5f:84:6f:f3:2b:45:0d:1e:a3:b0:04:76:30: 2f:dc:68:21:04:6a:af:dd:83:05:0d:04:e4:b0:68: 00:31:e8:7a:05:c5:62:af:ee:0c:bc:6a:7c:99:ac: 4d:51:43:67:ac:cf:25:28:d9:fe:36:88:87:5e:87: 0b:4f:39:0c:3c:fd:8b:2b:33:d3:38:ac:bf:d4:66: 09:8a:3a:ae:c2:b4:2e:c9:3b:34:ca:a7:df:1f:bf: c3:27:63:95:e9:b0:ed:bb:41:c6:56:1b:e6:e1:33: 3b:14:1d:2c:27:31:5d:6e:b4:81:79:b9:bd:9c:d2: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:86:96:E4:BD:1A:25:B8:B6:4B:D6:AE:13:2E:E9:3C:CA:B0:5D:2A X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:33:4d:04:ae:04:a5:d5:93:00:94:30:ca:dd:6a:89:5d:66: 3b:b7:86:ba:44:2c:14:c7:2b:08:42:de:9f:00:02:95:21:ea: fa:7b:5b:9b:62:f5:28:db:d4:ce:a4:86:71:c8:42:e9:10:9b: bf:90:4d:53:87:42:df:4b:41:30:c8:45:26:95:c3:f0:c3:be: bc:59:0d:69:b7:ed:56:9c:33:74:63:5e:fe:a3:ae:27:ce:af: 43:cc:bb:df:c7:a0:6e:53:b0:16:73:46:d1:aa:91:ed:93:53: bd:fd:bb:b8:24:09:67:54:fe:ae:c9:35:69:dc:3c:55:53:31: 12:00:da:39:cc:ac:9c:61:05:b0:e6:cc:91:f1:91:61:83:7a: be:d4:90:37:d0:18:39:11:65:dd:2a:28:79:34:01:c4:8d:d3: 3b:c1:c3:ba:2b:70:24:4a:ba:dd:33:7d:59:23:1a:b4:f3:4d: 4e:f5:bc:75:b7:47:3b:4f:ab:1e:15:fc:80:ad:ae:c2:86:ad: 76:4d:f2:cd:28:2a:01:9b:ad:82:b1:0a:40:a1:d5:d7:c2:53: de:ac:75:6b:87:9b:f7:c8:2b:df:6c:ee:35:78:63:fe:84:ec: a2:eb:86:8b:b5:0f:38:95:73:96:dc:43:9a:c0:27:48:92:68: 75:b3:16:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUoqGAvIxqbBTK3p19gpp+L1o2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA1MTIxOTM1NTJaFw0yNjA1MTMyMDU3NTJaMDMxMTAvBgNV BAMTKDczODY5NkU0QkQxQTI1QjhCNjRCRDZBRTEzMkVFOTNDQ0FCMDVEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3L//QMyPu0umZdWPagBe9Dpo SXUIVuUK8rfHW8+EPTAym772ItUkxEWLzGKnI2HgtMYgsa2t/KQrGF7pJ3lvZ3Mk wFYePF2FUtMq19tO1asZZNRz1rd7LhjsdHcwNiYIWtH5pmaYkGBOp1/todNeDBUo 6HaalF2yjWUbYLRwoc3RDfcD3bVmX4Rv8ytFDR6jsAR2MC/caCEEaq/dgwUNBOSw aAAx6HoFxWKv7gy8anyZrE1RQ2eszyUo2f42iIdehwtPOQw8/YsrM9M4rL/UZgmK Oq7CtC7JOzTKp98fv8MnY5XpsO27QcZWG+bhMzsUHSwnMV1utIF5ub2c0g0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4aW5L0aJbi2S9auEy7pPMqwXSowHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJszTQSuBKXVkwCUMMrdaoldZju3hrpELBTH KwhC3p8AApUh6vp7W5ti9Sjb1M6khnHIQukQm7+QTVOHQt9LQTDIRSaVw/DDvrxZ DWm37VacM3RjXv6jrifOr0PMu9/HoG5TsBZzRtGqke2TU739u7gkCWdU/q7JNWnc PFVTMRIA2jnMrJxhBbDmzJHxkWGDer7UkDfQGDkRZd0qKHk0AcSN0zvBw7orcCRK ut0zfVkjGrTzTU71vHW3RztPqx4V/ICtrsKGrXZN8s0oKgGbrYKxCkCh1dfCU96s dWuHm/fIK99s7jV4Y/6E7KLrhou1DziVc5bcQ5rAJ0iSaHWzFgQ= -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client