$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: PwDyaOjUfucYsAq6EfSA7FuwIJmK9nCk3tEWGGaj8tc= Subject key identifier: BC:BF:3F:78:CE:A8:D3:CB:3A:AB:3F:3D:9F:8F:A5:7D:68:C8:3A:DE Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 61B972AE7CFC233B1A75130211CE00EFB52663B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:06 +0000 Manifest this update: Tue 12 May 2026 20:17:06 +0000 Manifest next update: Thu 14 May 2026 00:17:06 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) 2: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: OyqmHTGr958Cx4U8/1AQLp/e6SDzm3gfWDlgsWm9iuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b9:72:ae:7c:fc:23:3b:1a:75:13:02:11:ce:00:ef:b5:26:63:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: May 12 20:17:06 2026 GMT Not After : May 14 00:17:06 2026 GMT Subject: CN=BCBF3F78CEA8D3CB3AAB3F3D9F8FA57D68C83ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:ef:c3:dd:0b:4b:f9:3b:f6:8c:5a:65:65: b8:12:b9:33:a1:e0:db:40:c6:86:84:05:00:cc:15: d8:4f:c6:3d:d4:40:8f:75:cc:5b:66:6d:3f:bc:70: 8f:2b:cc:82:e7:c5:72:e5:5a:2d:6a:89:27:aa:e1: e5:2c:bd:a0:57:e3:f7:7d:b1:1b:b0:06:db:e7:2e: ae:8b:ae:ea:ce:d9:81:aa:63:59:b7:87:aa:4d:69: 60:50:12:4c:72:4b:f7:91:cd:d7:09:fb:fe:1b:58: 07:2e:81:2e:cc:6c:c3:c9:89:cc:bf:7e:27:08:da: 23:35:d9:6a:9f:31:e9:63:50:50:48:0c:2f:59:63: 70:ca:38:e3:57:d0:45:82:19:e2:1d:df:17:ac:ee: 80:64:18:a7:18:79:04:d5:be:af:37:fd:d7:57:f7: 4a:75:59:c8:b8:a3:a8:a2:5c:eb:37:46:b4:d4:79: 6a:c3:fa:9f:44:c6:68:ab:a6:d6:75:95:42:2e:58: d3:5a:f7:c1:61:91:f7:14:39:de:9f:ec:ea:38:bf: 31:a6:27:53:76:bd:f4:57:21:9d:59:eb:ff:cf:31: 46:54:c3:4a:2c:84:7c:45:07:78:e9:c1:d9:19:c7: 73:10:59:1a:62:3a:e8:5f:3b:3c:cb:71:0b:0e:dd: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BF:3F:78:CE:A8:D3:CB:3A:AB:3F:3D:9F:8F:A5:7D:68:C8:3A:DE X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:fd:9a:82:e2:cd:1c:19:6b:8f:7d:f1:a4:06:2f:55:52: d0:e2:4e:df:ee:c1:b7:26:54:b8:ea:2a:d0:26:f8:bd:15:3b: eb:11:1c:3d:0d:95:00:29:02:f5:f6:7c:a9:a3:9d:db:8f:33: 8e:9a:c0:77:5c:0b:25:c5:37:19:0a:2e:3a:c4:c8:a8:ee:f2: 56:e2:1c:a7:20:e4:37:8e:15:a8:44:9f:e8:c3:75:43:2e:67: fe:13:d3:f6:91:f6:99:f0:c2:94:7c:ac:7b:ff:f1:bd:b5:8a: a0:fe:2b:33:fd:8e:1a:2b:4c:b9:3f:b0:87:8c:70:e7:56:e2: 91:a0:ce:7f:03:5b:f9:52:8d:96:61:85:15:cd:68:b7:e3:8e: 88:b5:5e:c9:55:aa:0c:c2:d7:1e:55:08:1c:1b:19:a2:26:84: 0e:e4:77:8d:49:92:fb:35:07:69:b6:27:f8:a7:4c:02:23:9f: f1:71:5b:57:e1:5c:76:57:30:84:39:76:ba:ca:67:23:d7:db: d1:02:d1:c8:65:96:d7:d3:d2:be:31:30:75:26:8d:2a:a4:43: cf:17:e4:9a:ce:30:33:88:f4:b4:03:71:ca:37:8d:5f:c3:64: a8:44:d9:d3:00:92:3a:fe:c3:65:86:bd:3f:02:f7:61:f3:48: 16:c0:8c:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYblyrnz8IzsadRMCEc4A77UmY7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA1MTIyMDE3MDZaFw0yNjA1MTQwMDE3MDZaMDMxMTAvBgNV BAMTKEJDQkYzRjc4Q0VBOEQzQ0IzQUFCM0YzRDlGOEZBNTdENjhDODNBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/e/D3QtL+Tv2jFplZbgSuTOh 4NtAxoaEBQDMFdhPxj3UQI91zFtmbT+8cI8rzILnxXLlWi1qiSeq4eUsvaBX4/d9 sRuwBtvnLq6LrurO2YGqY1m3h6pNaWBQEkxyS/eRzdcJ+/4bWAcugS7MbMPJicy/ ficI2iM12WqfMeljUFBIDC9ZY3DKOONX0EWCGeId3xes7oBkGKcYeQTVvq83/ddX 90p1Wci4o6iiXOs3RrTUeWrD+p9ExmirptZ1lUIuWNNa98FhkfcUOd6f7Oo4vzGm J1N2vfRXIZ1Z6//PMUZUw0oshHxFB3jpwdkZx3MQWRpiOuhfOzzLcQsO3STXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvL8/eM6o08s6qz89n4+lfWjIOt4wHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl9/ZqC4s0cGWuPffGkBi9VUtDiTt/uwbcm VLjqKtAm+L0VO+sRHD0NlQApAvX2fKmjnduPM46awHdcCyXFNxkKLjrEyKju8lbi HKcg5DeOFahEn+jDdUMuZ/4T0/aR9pnwwpR8rHv/8b21iqD+KzP9jhorTLk/sIeM cOdW4pGgzn8DW/lSjZZhhRXNaLfjjoi1XslVqgzC1x5VCBwbGaImhA7kd41Jkvs1 B2m2J/inTAIjn/FxW1fhXHZXMIQ5drrKZyPX29EC0chlltfT0r4xMHUmjSqkQ88X 5JrOMDOI9LQDcco3jV/DZKhE2dMAkjr+w2WGvT8C92HzSBbAjEU= -----END CERTIFICATE-----Generated at Wed May 13 01:14:44 2026 by rpki-client