$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: jtMXMmUsw+wjnI4pu7WWMqX6P5m9dP8FjCmVp4hMV2Y= Subject key identifier: 7D:74:41:77:09:65:E2:9F:FD:22:03:53:54:53:F9:FF:92:8D:2A:09 Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 613EBC2B35BE6F8E92D1E120439D2D5DB783F62D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: 0D Signing time: Tue 12 May 2026 08:14:40 +0000 Manifest this update: Tue 12 May 2026 08:09:40 +0000 Manifest next update: Wed 13 May 2026 11:12:40 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: KbxDPoTJ+46d9sc2K1weOkiZDoRWQbAMRlKOj/LE/wQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3e:bc:2b:35:be:6f:8e:92:d1:e1:20:43:9d:2d:5d:b7:83:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: May 12 08:09:40 2026 GMT Not After : May 13 11:12:40 2026 GMT Subject: CN=7D7441770965E29FFD2203535453F9FF928D2A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:01:b6:cc:71:6e:ed:d2:1a:fa:0b:67:e6: 43:10:09:62:58:e3:3f:05:c7:52:20:da:d9:90:00: 2e:f1:67:95:b1:90:e9:44:02:21:c6:18:bc:da:2d: 34:6d:3e:e7:f2:51:d1:4c:af:2e:90:d4:1b:5f:7b: f6:8e:27:bd:e8:f3:1d:d3:46:5a:fc:77:fb:9b:b2: 92:27:e1:5c:b1:7c:cc:15:56:29:18:26:af:aa:50: a3:84:ec:70:71:8e:96:99:66:75:e3:ae:a5:75:ee: 88:43:4e:80:b3:2f:95:ef:df:d3:33:fd:aa:c5:6b: 8b:64:8e:65:f3:5d:d3:0d:6f:e7:24:40:42:ca:d3: 90:6a:11:2f:f2:98:75:1a:23:72:5a:71:c2:03:63: ea:83:99:65:bf:e0:ee:64:ea:91:41:eb:02:a9:04: 6a:c8:6e:6e:20:83:1d:59:3d:8d:09:09:32:c6:f0: 83:74:3f:a7:2e:65:8f:c3:b9:c6:22:3c:6f:c7:c0: a6:f1:58:4b:49:21:00:0c:c8:a3:2b:e3:2e:38:e3: dd:be:4d:c1:20:94:aa:09:39:25:c7:ef:9f:60:11: 18:fd:15:26:4d:36:60:b4:ce:ec:37:9b:15:7f:62: 51:89:72:8b:06:a1:4e:7b:6d:3d:02:ff:91:4e:97: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:74:41:77:09:65:E2:9F:FD:22:03:53:54:53:F9:FF:92:8D:2A:09 X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:3f:45:7c:d7:ef:fc:6e:b6:d8:67:fb:e9:e4:39:60:3c: 2b:38:e1:6e:2f:ef:4a:1c:82:de:cc:fb:15:2b:f0:8a:24:66: 75:3c:9e:6f:88:03:e7:da:66:dd:14:c6:2d:83:d5:47:2b:1b: 4e:37:49:1f:66:a0:14:aa:6b:a1:25:ac:0b:05:a2:b0:c2:83: 2c:95:bd:d5:3e:7b:b5:f8:13:fb:51:f1:89:ee:c1:a4:1e:82: ac:8c:06:e9:51:39:f5:7d:16:a2:20:39:3a:65:92:8c:7d:50: c3:9b:94:94:ab:20:d1:80:a9:f8:57:15:9b:a4:6b:41:78:d8: 36:52:1e:4f:a3:5d:58:d5:2e:20:4c:24:58:06:05:10:49:15: 96:c9:33:37:4f:af:77:c3:51:90:5c:1e:b4:23:52:8e:fe:88: cb:5c:cc:7e:b6:50:d5:0c:38:8d:2b:80:ee:4d:db:89:66:1d: 80:8c:06:9d:4c:60:6e:bb:65:96:c3:01:47:1b:98:9c:33:55: c0:93:63:2e:ba:dd:fe:76:3d:02:89:c0:d2:27:e6:8e:23:5a: 78:33:ee:b7:bb:d8:c5:86:40:ef:df:34:80:fc:15:ce:52:26: 4f:e9:0c:d9:75:b1:d1:05:7e:b4:b1:26:87:b9:d7:1a:e5:05: dc:29:7c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYT68KzW+b46S0eEgQ50tXbeD9i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA1MTIwODA5NDBaFw0yNjA1MTMxMTEyNDBaMDMxMTAvBgNV BAMTKDdENzQ0MTc3MDk2NUUyOUZGRDIyMDM1MzU0NTNGOUZGOTI4RDJBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8AG2zHFu7dIa+gtn5kMQCWJY 4z8Fx1Ig2tmQAC7xZ5WxkOlEAiHGGLzaLTRtPufyUdFMry6Q1Btfe/aOJ73o8x3T Rlr8d/ubspIn4VyxfMwVVikYJq+qUKOE7HBxjpaZZnXjrqV17ohDToCzL5Xv39Mz /arFa4tkjmXzXdMNb+ckQELK05BqES/ymHUaI3JaccIDY+qDmWW/4O5k6pFB6wKp BGrIbm4ggx1ZPY0JCTLG8IN0P6cuZY/DucYiPG/HwKbxWEtJIQAMyKMr4y44492+ TcEglKoJOSXH759gERj9FSZNNmC0zuw3mxV/YlGJcosGoU57bT0C/5FOl7rJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfXRBdwll4p/9IgNTVFP5/5KNKgkwHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWKP0V81+/8brbYZ/vp5DlgPCs44W4v70oc gt7M+xUr8IokZnU8nm+IA+faZt0Uxi2D1UcrG043SR9moBSqa6ElrAsForDCgyyV vdU+e7X4E/tR8YnuwaQegqyMBulROfV9FqIgOTplkox9UMOblJSrINGAqfhXFZuk a0F42DZSHk+jXVjVLiBMJFgGBRBJFZbJMzdPr3fDUZBcHrQjUo7+iMtczH62UNUM OI0rgO5N24lmHYCMBp1MYG67ZZbDAUcbmJwzVcCTYy663f52PQKJwNIn5o4jWngz 7re72MWGQO/fNID8Fc5SJk/pDNl1sdEFfrSxJoe51xrlBdwpfHE= -----END CERTIFICATE-----Generated at Wed May 13 02:26:12 2026 by rpki-client