$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft File: 1A3FAE72210F536C22392A8609A526D7557AD82C.mft (raw, json) Hash identifier: W8try4APSH/u3vTemvYkP7T7/01bwGtoxYsOCoyNWfE= Subject key identifier: 37:DE:B3:8F:C6:FC:9B:7B:56:F2:1B:88:86:11:CD:80:6A:28:5A:31 Authority key identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C Certificate issuer: /CN=1A3FAE72210F536C22392A8609A526D7557AD82C Certificate serial: 22009EDF64919483A647C0207BCB046F53BCCBD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:45:18 +0000 Manifest this update: Tue 12 May 2026 15:40:18 +0000 Manifest next update: Wed 13 May 2026 16:09:18 +0000 Files and hashes: 1: 1A3FAE72210F536C22392A8609A526D7557AD82C.crl (hash: XAfLI9yOW/j8Fwk6X7MZKRmu/Lpr7778t2Zq/gYpBDs=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: QAd6aTZOH1XxHGA7Gr128UzSMTQ9i29lq8bejyTBhso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:00:9e:df:64:91:94:83:a6:47:c0:20:7b:cb:04:6f:53:bc:cb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3FAE72210F536C22392A8609A526D7557AD82C Validity Not Before: May 12 15:40:18 2026 GMT Not After : May 13 16:09:18 2026 GMT Subject: CN=37DEB38FC6FC9B7B56F21B888611CD806A285A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:13:d4:92:ef:fe:34:22:79:28:d3:a9:09: 33:86:9c:44:3b:49:fe:10:eb:2d:5c:e3:25:bd:65: 08:e3:4a:2b:81:0e:a5:f7:df:13:b9:99:4c:d7:67: bf:27:0e:4f:73:7a:89:df:29:d4:df:14:83:47:82: 54:58:1b:aa:c9:a0:5e:fa:8d:3f:03:41:3b:cf:45: 0c:04:02:07:1b:29:5f:c8:e7:82:8f:07:9b:76:fc: 68:7c:28:89:e6:7e:35:b8:35:ef:02:40:2b:37:30: e1:8c:b6:94:70:5b:a2:18:b5:83:19:5b:ec:5f:9a: 77:7a:9b:ad:59:2c:4a:a1:2d:84:ae:f3:2c:73:d0: ff:fa:90:cd:62:cf:b2:c8:3d:1e:a9:f2:e7:40:34: cb:4f:86:74:27:8a:13:4e:4c:3f:73:e3:62:f5:4b: b3:ed:0d:1b:f7:1a:b7:50:01:60:58:2a:6c:95:46: aa:dd:57:bf:d2:0e:f8:14:d8:0c:f5:88:5d:08:96: ea:6c:bc:d9:4d:b6:82:c5:25:b7:d0:69:74:1b:79: 5c:70:6c:f2:95:94:af:d6:1d:96:6f:56:05:c4:99: b9:5f:e0:75:98:f1:da:40:e1:ab:05:d4:f1:07:97: 31:ce:eb:c5:97:ff:7b:1e:bb:b7:8f:ff:12:e9:97: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DE:B3:8F:C6:FC:9B:7B:56:F2:1B:88:86:11:CD:80:6A:28:5A:31 X509v3 Authority Key Identifier: keyid:1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:73:20:e7:e8:28:6a:4c:d2:ce:ad:45:8d:a7:21:da:d4:65: ea:1e:09:98:44:92:be:77:6b:de:80:97:b9:91:35:e7:cf:f2: 87:f5:44:b0:0b:8f:ef:c2:5b:bd:d5:94:96:25:56:e5:db:81: 20:7e:e8:0d:30:b5:2d:a0:23:ff:d6:7c:99:59:7f:c4:95:1d: 98:9c:1f:52:76:4a:ea:d8:69:cf:16:fe:2e:fb:db:ae:89:db: c3:d8:d0:5a:2e:47:84:d0:8c:d7:b0:a2:ab:51:76:f1:9a:44: f8:d1:7a:e5:f9:6c:a7:55:70:14:af:eb:72:c1:49:4b:f3:e1: 51:4e:b8:c1:b8:87:95:7a:54:f2:68:6a:67:b0:e8:25:09:b9: 94:96:48:90:d3:02:de:b7:49:5e:b9:bc:59:1c:33:ff:76:3b: 7d:5e:a3:d8:26:40:c0:ef:2a:73:ce:af:af:d9:03:77:05:8d: ec:a9:f9:0d:cb:d9:62:d7:f0:9c:fe:67:2a:dc:3a:0f:8c:fc: 37:06:67:b0:64:b4:b9:16:e9:85:3f:00:98:08:02:d1:1e:cd: b4:ec:d9:5d:03:ab:29:af:8a:45:44:2d:49:ea:23:46:b3:57: ef:10:d0:c2:33:d5:fd:b2:7a:09:13:7e:77:dd:7b:27:5d:ca: c5:31:35:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgCe32SRlIOmR8Age8sEb1O8y9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1 NTdBRDgyQzAeFw0yNjA1MTIxNTQwMThaFw0yNjA1MTMxNjA5MThaMDMxMTAvBgNV BAMTKDM3REVCMzhGQzZGQzlCN0I1NkYyMUI4ODg2MTFDRDgwNkEyODVBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcPhPUku/+NCJ5KNOpCTOGnEQ7 Sf4Q6y1c4yW9ZQjjSiuBDqX33xO5mUzXZ78nDk9zeonfKdTfFINHglRYG6rJoF76 jT8DQTvPRQwEAgcbKV/I54KPB5t2/Gh8KInmfjW4Ne8CQCs3MOGMtpRwW6IYtYMZ W+xfmnd6m61ZLEqhLYSu8yxz0P/6kM1iz7LIPR6p8udANMtPhnQnihNOTD9z42L1 S7PtDRv3GrdQAWBYKmyVRqrdV7/SDvgU2Az1iF0IlupsvNlNtoLFJbfQaXQbeVxw bPKVlK/WHZZvVgXEmblf4HWY8dpA4asF1PEHlzHO68WX/3seu7eP/xLplywlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN96zj8b8m3tW8huIhhHNgGooWjEwHwYDVR0j BBgwFoAUGj+uciEPU2wiOSqGCaUm11V62CwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiMDg4NDUtZGY4Mi00NGMyLTk3NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIy MTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1NTdBRDgyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTNGQUU3MjIxMEY1MzZDMjIzOTJBODYwOUE1MjZENzU1N0FE ODJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2 RDc1NTdBRDgyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRzIOfoKGpM0s6tRY2nIdrUZeoeCZhEkr53 a96Al7mRNefP8of1RLALj+/CW73VlJYlVuXbgSB+6A0wtS2gI//WfJlZf8SVHZic H1J2SurYac8W/i77266J28PY0FouR4TQjNewoqtRdvGaRPjReuX5bKdVcBSv63LB SUvz4VFOuMG4h5V6VPJoamew6CUJuZSWSJDTAt63SV65vFkcM/92O31eo9gmQMDv KnPOr6/ZA3cFjeyp+Q3L2WLX8Jz+ZyrcOg+M/DcGZ7BktLkW6YU/AJgIAtEezbTs 2V0DqymvikVELUnqI0azV+8Q0MIz1f2yegkTfnfdeyddysUxNds= -----END CERTIFICATE-----Generated at Wed May 13 04:51:10 2026 by rpki-client