$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: Rov8/KWPKsUVkCQ7XAkH0uBkkKfCP0AnpjG0T+7gb1g= Subject key identifier: C6:B6:16:09:8A:8A:3C:E4:69:BF:18:82:72:6B:94:A5:AF:EE:87:11 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 0E6466E713DE5C388ACAAFEE3BAC37D722772DD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:17:01 +0000 Manifest this update: Tue 12 May 2026 17:12:01 +0000 Manifest next update: Wed 13 May 2026 17:41:01 +0000 Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 2: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 3: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: QyTIGl4CetklQVm/V2XkMWYqmwpVrNmUnouKpW15YrQ=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:64:66:e7:13:de:5c:38:8a:ca:af:ee:3b:ac:37:d7:22:77:2d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: May 12 17:12:01 2026 GMT Not After : May 13 17:41:01 2026 GMT Subject: CN=C6B616098A8A3CE469BF1882726B94A5AFEE8711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:fc:e1:ea:f3:b2:39:c3:46:47:95:48:f6: 1f:4e:26:30:03:b1:dd:d7:1e:31:90:0f:ec:34:00: a2:dc:7f:4b:f5:2b:22:b4:fc:c6:ad:ae:a0:1d:72: d3:8e:6c:3d:6a:41:d1:4d:e3:c8:d6:27:90:74:0f: 17:1a:76:6f:f0:47:fd:db:ed:04:97:89:fc:8f:7b: 37:f4:0f:a9:4b:7a:f2:81:72:42:71:d8:12:14:50: ff:cf:8d:5f:3a:45:9a:ba:64:5a:27:59:06:d8:33: 86:2c:84:2f:a5:48:83:02:a9:0a:0c:40:3c:19:08: 6a:52:50:80:ab:7a:aa:cf:64:50:b3:2e:f4:54:67: 6c:3f:35:42:96:dd:88:8e:a3:79:35:76:31:e3:a1: dd:7c:b6:eb:4c:33:08:0d:0c:3c:cb:00:8d:51:cc: b2:31:92:95:3a:de:c1:f6:7f:33:a2:01:f3:2b:da: 99:3f:01:bf:9a:f0:a5:74:0a:23:2b:9f:b2:6e:97: 8c:47:ed:b2:b6:4a:5e:bd:85:6c:cd:7f:42:0a:70: 86:02:54:6d:7a:a4:fa:f0:c8:04:3d:96:37:37:e5: 66:3f:23:aa:2d:c5:bd:e4:a9:be:bf:b1:e2:bd:61: 55:0d:34:9c:85:41:6c:fc:ae:d4:fa:ec:2c:4b:b7: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B6:16:09:8A:8A:3C:E4:69:BF:18:82:72:6B:94:A5:AF:EE:87:11 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e9:e5:b1:02:cf:a1:5e:cb:d1:5e:48:15:58:1a:7c:f7:fb: c7:07:7a:fb:c1:be:18:bb:7c:87:7c:b2:9f:7f:5c:fe:3c:13: c1:d9:d0:e3:06:e2:34:c1:0a:10:d8:97:c8:67:a6:ad:68:04: ad:12:43:eb:16:42:ee:31:10:19:72:69:22:2e:ca:1e:34:45: 5d:8a:cc:e3:d2:19:3a:ec:82:d6:60:f2:b1:49:da:15:90:35: ec:1a:18:50:8c:21:6f:56:37:4b:d9:06:29:35:e6:35:82:7a: cf:ef:10:0e:4f:c7:42:60:a9:41:04:38:9f:43:ad:67:5e:02: ed:e4:92:b1:6d:55:9f:fb:f2:f2:fe:88:e6:4e:74:0f:1a:45: 05:8a:ea:07:05:9d:91:9d:d7:9f:80:71:d9:5b:40:09:2d:6c: b3:42:ef:af:59:ff:18:8e:3c:19:3a:db:ad:84:12:2b:cb:59: 1a:a1:2a:8f:55:51:98:62:02:1d:e1:03:ad:67:7e:35:9f:0d: 4c:a9:6f:73:97:08:36:46:0f:29:d6:55:31:e6:bd:0b:db:d8: b5:3a:8d:51:9d:2f:66:b6:04:9d:ea:d0:98:ea:80:a8:42:37: f4:6b:b3:ae:68:ac:e5:91:3d:e9:ab:89:53:4d:76:0c:1e:e2: 84:61:b7:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmRm5xPeXDiKyq/uO6w31yJ3LdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA1MTIxNzEyMDFaFw0yNjA1MTMxNzQxMDFaMDMxMTAvBgNV BAMTKEM2QjYxNjA5OEE4QTNDRTQ2OUJGMTg4MjcyNkI5NEE1QUZFRTg3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJ/zh6vOyOcNGR5VI9h9OJjAD sd3XHjGQD+w0AKLcf0v1KyK0/MatrqAdctOObD1qQdFN48jWJ5B0Dxcadm/wR/3b 7QSXifyPezf0D6lLevKBckJx2BIUUP/PjV86RZq6ZFonWQbYM4YshC+lSIMCqQoM QDwZCGpSUICreqrPZFCzLvRUZ2w/NUKW3YiOo3k1djHjod18tutMMwgNDDzLAI1R zLIxkpU63sH2fzOiAfMr2pk/Ab+a8KV0CiMrn7Jul4xH7bK2Sl69hWzNf0IKcIYC VG16pPrwyAQ9ljc35WY/I6otxb3kqb6/seK9YVUNNJyFQWz8rtT67CxLt/alAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrYWCYqKPORpvxiCcmuUpa/uhxEwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDp5bECz6Fey9FeSBVYGnz3+8cHevvBvhi7 fId8sp9/XP48E8HZ0OMG4jTBChDYl8hnpq1oBK0SQ+sWQu4xEBlyaSIuyh40RV2K zOPSGTrsgtZg8rFJ2hWQNewaGFCMIW9WN0vZBik15jWCes/vEA5Px0JgqUEEOJ9D rWdeAu3kkrFtVZ/78vL+iOZOdA8aRQWK6gcFnZGd15+AcdlbQAktbLNC769Z/xiO PBk6262EEivLWRqhKo9VUZhiAh3hA61nfjWfDUypb3OXCDZGDynWVTHmvQvb2LU6 jVGdL2a2BJ3q0JjqgKhCN/Rrs65orOWRPemriVNNdgwe4oRht6o= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client