$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft File: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft (raw, json) Hash identifier: eMH5clIY2kZCiavNMStmGtj2Krz+UA2K12uevCY5gUc= Subject key identifier: E2:53:CB:08:78:BB:C7:A5:9D:AB:EF:BC:D0:64:4E:DE:6A:A1:79:66 Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 734B7B28B7D49A00FB33D59504FAF8C54371229D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:54:16 +0000 Manifest this update: Tue 12 May 2026 07:49:16 +0000 Manifest next update: Wed 13 May 2026 08:13:16 +0000 Files and hashes: 1: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: 4WWBK+Xqi+9dfO6ReYcexqiP6BjY/M7vdE8KEBcG6ss=) 2: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl (hash: 7PqPMRfd2HgvwAh4gPuHnajF7IkiG5Z3Zc/nxJE9mV0=) 3: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: KJK22WdEptN4Z5tJMclzFpxJ7XT8hQKbX5zWOGXbC6s=) 4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4b:7b:28:b7:d4:9a:00:fb:33:d5:95:04:fa:f8:c5:43:71:22:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: May 12 07:49:16 2026 GMT Not After : May 13 08:13:16 2026 GMT Subject: CN=E253CB0878BBC7A59DABEFBCD0644EDE6AA17966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:c5:98:39:2f:93:ef:77:64:04:77:b1:28: 23:de:49:63:fb:23:3f:f4:92:46:c0:8d:4b:78:c3: 77:f3:31:18:5d:35:8a:ec:58:96:a8:ee:38:b4:dc: 7f:a9:7e:ac:51:a2:17:b9:38:0d:cc:5d:a4:d8:a0: de:6b:48:aa:4d:55:50:ea:54:67:2a:c1:28:4a:49: c2:ac:45:05:38:fb:a6:87:e5:08:75:7e:be:66:21: 39:52:5b:c8:9e:4b:b0:2a:28:1d:09:ef:38:ff:95: cf:6b:2d:14:10:18:25:b3:04:54:a9:87:6c:d6:93: fd:50:d5:21:4e:35:31:77:16:bc:1b:69:5e:28:5c: 0f:d1:1f:f1:76:72:9c:07:a4:14:3f:a1:c7:b0:b9: 1e:76:37:09:54:e1:3a:b1:96:47:e1:67:da:84:83: fa:4c:b6:9a:71:7c:73:3d:77:70:54:b4:e8:75:2d: 25:e3:6e:f9:b7:ba:e3:80:ff:12:95:02:97:c1:96: 17:21:c6:a0:08:0d:97:d0:4f:bc:5c:52:aa:bb:b1: 06:2a:ee:0a:be:47:a6:9e:a7:78:e3:ab:b0:3f:5c: 70:e4:a1:f9:1e:e4:bc:89:6e:ed:35:81:55:83:b8: ce:f2:ec:60:04:78:f9:71:da:59:72:d6:0a:71:ef: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:CB:08:78:BB:C7:A5:9D:AB:EF:BC:D0:64:4E:DE:6A:A1:79:66 X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ed:4c:50:77:04:93:1b:af:4c:db:d5:db:ab:18:6c:f8:fe: aa:30:f3:0c:6d:ec:9e:41:b5:fc:b4:c8:65:69:23:24:29:9e: aa:bc:a8:0b:4c:ad:8c:2e:1f:f2:55:16:a6:e0:57:75:30:55: f9:e9:bf:06:6f:ad:76:e3:6c:8b:2d:05:8b:2d:f8:42:77:12: ad:8c:b9:85:7a:70:85:be:5a:78:21:80:a6:49:ae:fb:7c:83: e0:8a:01:f7:c9:13:98:ed:91:6e:62:2d:5b:d6:99:2d:4f:a9: 20:18:68:69:33:4d:4f:bf:eb:8c:0c:54:e5:3f:9e:2d:fa:94: c6:d2:b3:1f:e4:0c:aa:86:a9:c9:92:2a:d1:a8:37:5c:1f:57: 45:b5:de:c4:e2:f5:71:be:96:30:b8:e6:eb:aa:79:08:c4:8b: a8:0b:8a:cb:c0:59:2d:d2:08:59:75:ba:36:04:46:ad:ec:d9: 7c:72:dd:4e:41:08:20:1c:a0:13:9c:f3:a3:2a:bf:78:cf:07: 95:b0:41:a0:6c:86:bc:ec:c2:11:2c:ef:d6:6a:a3:91:1b:bc: 0f:b0:86:83:c7:ac:68:41:69:bb:14:a6:c5:94:29:c1:8f:84: 15:b9:8b:81:91:59:c1:2a:5a:e3:0a:cc:2e:57:f8:c1:42:d6: e4:85:c0:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0t7KLfUmgD7M9WVBPr4xUNxIp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA1MTIwNzQ5MTZaFw0yNjA1MTMwODEzMTZaMDMxMTAvBgNV BAMTKEUyNTNDQjA4NzhCQkM3QTU5REFCRUZCQ0QwNjQ0RURFNkFBMTc5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zcWYOS+T73dkBHexKCPeSWP7 Iz/0kkbAjUt4w3fzMRhdNYrsWJao7ji03H+pfqxRohe5OA3MXaTYoN5rSKpNVVDq VGcqwShKScKsRQU4+6aH5Qh1fr5mITlSW8ieS7AqKB0J7zj/lc9rLRQQGCWzBFSp h2zWk/1Q1SFONTF3FrwbaV4oXA/RH/F2cpwHpBQ/ocewuR52NwlU4TqxlkfhZ9qE g/pMtppxfHM9d3BUtOh1LSXjbvm3uuOA/xKVApfBlhchxqAIDZfQT7xcUqq7sQYq 7gq+R6aep3jjq7A/XHDkofke5LyJbu01gVWDuM7y7GAEePlx2lly1gpx7/NtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lPLCHi7x6Wdq++80GRO3mqheWYwHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhE N0VERUU4MDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALztTFB3BJMbr0zb1durGGz4/qow8wxt7J5B tfy0yGVpIyQpnqq8qAtMrYwuH/JVFqbgV3UwVfnpvwZvrXbjbIstBYst+EJ3Eq2M uYV6cIW+WnghgKZJrvt8g+CKAffJE5jtkW5iLVvWmS1PqSAYaGkzTU+/64wMVOU/ ni36lMbSsx/kDKqGqcmSKtGoN1wfV0W13sTi9XG+ljC45uuqeQjEi6gLisvAWS3S CFl1ujYERq3s2Xxy3U5BCCAcoBOc86Mqv3jPB5WwQaBshrzswhEs79Zqo5EbvA+w hoPHrGhBabsUpsWUKcGPhBW5i4GRWcEqWuMKzC5X+MFC1uSFwK0= -----END CERTIFICATE-----Generated at Wed May 13 01:11:09 2026 by rpki-client