$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: 5fn/ekbFSstVwfANHOPufTnqMq6ypnTpCXQmI4lGPvY= Subject key identifier: 2F:DE:6C:D2:87:BD:44:32:08:12:AC:0B:BE:A9:29:9F:AF:85:03:FB Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 140374969D65F215C2E4C387E1CEEC2D80520422 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:53:00 +0000 Manifest this update: Tue 12 May 2026 06:48:00 +0000 Manifest next update: Wed 13 May 2026 06:53:00 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 3: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: l6n7/GxgLnibp0pBswEuaUtF5aG3K+0xEgxIa6V5lBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:74:96:9d:65:f2:15:c2:e4:c3:87:e1:ce:ec:2d:80:52:04:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: May 12 06:48:00 2026 GMT Not After : May 13 06:53:00 2026 GMT Subject: CN=2FDE6CD287BD44320812AC0BBEA9299FAF8503FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:fc:19:cc:f7:d2:f2:1d:05:67:71:4d:1b: 59:73:23:10:92:2d:2b:2a:8b:9a:0b:33:7d:05:bb: 8b:89:c3:02:5d:45:02:7f:39:4d:59:5f:90:c1:58: 2e:e2:10:b7:98:9f:b7:0a:89:72:08:09:5d:e0:d8: 52:69:a0:3f:02:3c:56:40:3b:e0:4a:57:02:bd:28: 69:ca:83:8c:8d:69:49:dd:be:33:19:e5:1f:08:2b: 26:e7:67:06:0b:11:32:c6:36:dc:28:4e:a4:a4:16: 86:22:f8:6a:30:7c:9f:dc:ef:05:95:fd:c1:50:86: 6f:18:58:0a:59:9b:4f:0f:0e:6e:fe:9b:99:f8:b4: 05:8a:3d:df:e8:0b:2f:c9:61:c5:1d:6c:ec:d9:38: ba:84:5f:e3:dc:12:ed:f5:d3:dd:2c:94:63:45:9e: 3b:09:5a:9c:78:5b:3e:31:1e:47:6a:96:07:4f:6e: 72:38:32:f6:12:19:73:43:72:84:a1:71:8c:62:28: 46:59:ad:20:46:41:eb:4a:b3:5a:91:6c:8e:f0:32: 4f:fa:8b:20:23:4b:57:4e:96:8c:04:12:1b:d2:47: b6:8f:cf:bf:5c:18:cc:38:15:9a:43:ed:c9:09:9d: fa:c1:02:7e:d5:8d:51:d9:ee:d5:53:28:48:41:1a: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:6C:D2:87:BD:44:32:08:12:AC:0B:BE:A9:29:9F:AF:85:03:FB X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:ee:dd:5c:aa:51:4b:0d:6f:30:da:a4:76:12:2f:55:42: 74:62:88:71:d7:fd:79:36:ca:16:98:cf:64:e4:f0:ff:34:78: ed:53:c0:c2:9e:c3:5e:6a:e5:91:41:36:d0:8a:c6:c6:43:6a: ca:bc:ca:f2:57:c7:4d:1e:8c:90:8e:ae:0a:c2:ea:4b:38:c7: e1:b9:92:b9:aa:0a:3d:99:d8:16:20:4b:3b:10:16:2f:43:89: 8f:55:76:7d:8d:1b:e4:14:25:88:da:f6:48:7e:cf:3c:19:73: 04:5a:b5:cb:ce:ba:c8:30:4c:2a:1b:ee:30:63:fd:bf:c1:c4: 06:c7:03:52:c0:6c:56:24:59:27:0b:74:e3:d8:1f:0f:51:34: 06:03:44:03:b4:c6:79:54:f0:06:64:ec:05:ba:0d:5f:35:75: 08:5a:04:2d:8f:80:d7:bb:65:5d:e4:6d:f7:b8:a0:b2:f9:aa: d1:4f:2a:06:15:47:f4:77:4a:16:fb:e4:25:17:6a:60:73:9a: c1:5e:b2:be:f1:aa:ad:18:c2:ad:57:7a:3d:b6:bb:e4:3c:f6: ac:38:da:59:54:82:11:51:a6:50:c9:36:23:ba:2d:76:e1:a3: c0:c1:0f:3e:ae:4c:cc:53:f5:e7:1c:fd:aa:78:6c:cd:3d:ad: 55:96:c8:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAN0lp1l8hXC5MOH4c7sLYBSBCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA1MTIwNjQ4MDBaFw0yNjA1MTMwNjUzMDBaMDMxMTAvBgNV BAMTKDJGREU2Q0QyODdCRDQ0MzIwODEyQUMwQkJFQTkyOTlGQUY4NTAzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltvwZzPfS8h0FZ3FNG1lzIxCS LSsqi5oLM30Fu4uJwwJdRQJ/OU1ZX5DBWC7iELeYn7cKiXIICV3g2FJpoD8CPFZA O+BKVwK9KGnKg4yNaUndvjMZ5R8IKybnZwYLETLGNtwoTqSkFoYi+GowfJ/c7wWV /cFQhm8YWApZm08PDm7+m5n4tAWKPd/oCy/JYcUdbOzZOLqEX+PcEu31090slGNF njsJWpx4Wz4xHkdqlgdPbnI4MvYSGXNDcoShcYxiKEZZrSBGQetKs1qRbI7wMk/6 iyAjS1dOlowEEhvSR7aPz79cGMw4FZpD7ckJnfrBAn7VjVHZ7tVTKEhBGtXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL95s0oe9RDIIEqwLvqkpn6+FA/swHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXg7t1cqlFLDW8w2qR2Ei9VQnRiiHHX/Xk2 yhaYz2Tk8P80eO1TwMKew15q5ZFBNtCKxsZDasq8yvJXx00ejJCOrgrC6ks4x+G5 krmqCj2Z2BYgSzsQFi9DiY9Vdn2NG+QUJYja9kh+zzwZcwRatcvOusgwTCob7jBj /b/BxAbHA1LAbFYkWScLdOPYHw9RNAYDRAO0xnlU8AZk7AW6DV81dQhaBC2PgNe7 ZV3kbfe4oLL5qtFPKgYVR/R3Shb75CUXamBzmsFesr7xqq0Ywq1Xej22u+Q89qw4 2llUghFRplDJNiO6LXbho8DBDz6uTMxT9ecc/ap4bM09rVWWyIg= -----END CERTIFICATE-----Generated at Tue May 12 22:19:37 2026 by rpki-client