$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: 3P7iO1RofC5EEIjMqmZODvy6fTaDWCqOQWhihs+tPIQ= Subject key identifier: BA:D1:3E:37:8C:B2:6E:B3:9E:3F:D0:1F:4D:75:BE:32:BC:F9:87:FA Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 297D8BB218B8A8D8A2658F46E1861078BA5FE7E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: 0D Signing time: Tue 12 May 2026 03:12:10 +0000 Manifest this update: Tue 12 May 2026 03:07:10 +0000 Manifest next update: Wed 13 May 2026 04:35:10 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: lMjTgF0Ly2zs6TW4beYgVeuqYWFVCSqmTyzT75hcB8w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7d:8b:b2:18:b8:a8:d8:a2:65:8f:46:e1:86:10:78:ba:5f:e7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: May 12 03:07:10 2026 GMT Not After : May 13 04:35:10 2026 GMT Subject: CN=BAD13E378CB26EB39E3FD01F4D75BE32BCF987FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:94:7f:2c:76:16:dd:10:91:35:b8:bb:50: a4:19:c5:3d:40:c7:87:02:d1:fd:4f:9c:3d:b0:b0: b9:28:7c:f8:70:30:13:b2:75:d0:8d:6f:55:b3:b0: fb:09:05:36:2c:32:15:9a:14:cd:48:80:2d:40:02: 53:be:e3:ad:d1:70:a2:3d:3a:ad:96:81:d3:7b:0e: bc:ef:15:2b:d6:f7:93:52:de:7e:84:cf:b6:63:a1: 40:9c:09:6a:fd:03:d7:ff:43:d9:16:d9:09:bd:2a: ee:8e:77:19:40:af:15:35:6b:77:e4:53:89:0b:4e: fe:95:13:8c:fe:46:38:4a:bb:95:a5:e7:15:a3:3e: 9d:e0:bd:53:46:9b:ed:45:9f:a1:53:66:07:09:f9: 43:e2:7a:cb:e1:9a:cc:52:60:6a:99:0e:db:98:81: b8:32:35:51:69:ff:e5:c9:17:61:85:4b:ed:45:0d: bc:02:e2:d1:88:8e:85:bf:4f:57:b0:d2:18:f3:be: 1e:81:d3:07:b8:e0:8c:ae:54:cb:22:9f:fd:c4:78: 24:6e:61:c5:31:35:7d:4b:39:8e:46:42:16:6a:79: 51:c4:ba:6a:b0:89:09:73:3d:bc:7d:5d:bc:99:9a: 1a:0f:aa:16:92:c8:95:4a:db:4e:64:5f:32:6c:51: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:3E:37:8C:B2:6E:B3:9E:3F:D0:1F:4D:75:BE:32:BC:F9:87:FA X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cd:65:d1:e5:29:67:59:33:c2:8d:a3:7d:e0:ab:c7:2d:81: a8:29:ad:33:f8:2e:3e:dd:4b:04:9b:ab:16:a1:59:47:d0:9e: 4c:92:86:17:48:7c:98:c5:ba:58:0a:94:bb:84:85:b0:e0:55: d6:1a:49:7b:80:fc:34:a3:7f:45:e0:1c:cf:49:51:bd:50:ea: de:a6:89:2c:40:14:d7:6a:a2:f2:6b:61:7c:6b:01:83:0e:0b: 86:e8:dc:f9:c1:be:98:94:95:05:95:1d:d0:07:55:a2:1c:5e: 9a:68:83:46:2b:10:40:b8:e7:d4:2d:55:75:4a:25:8d:f3:5a: f0:02:bf:31:37:8d:2e:da:7d:8a:3e:20:4e:38:9f:67:55:ee: 68:3f:48:2c:c8:36:cb:23:5c:df:32:45:a7:7e:a2:3c:95:eb: 9d:98:e8:dc:98:d5:ee:4e:a1:a7:a0:0d:13:5e:77:f7:d3:53: 17:94:d2:45:7d:9d:f3:17:86:0e:ae:c3:6d:e2:be:88:40:9b: ab:7e:e7:6f:59:38:e5:d9:b4:fa:40:44:b2:66:08:c5:f1:b5: 14:27:c1:49:ce:43:46:51:dc:2f:89:ca:41:78:bd:df:4f:e4: b4:aa:60:b6:95:21:98:f4:c4:c9:d3:a6:a8:f2:c2:94:ae:d9: bc:ae:a5:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKX2Lshi4qNiiZY9G4YYQeLpf5+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA1MTIwMzA3MTBaFw0yNjA1MTMwNDM1MTBaMDMxMTAvBgNV BAMTKEJBRDEzRTM3OENCMjZFQjM5RTNGRDAxRjRENzVCRTMyQkNGOTg3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeJR/LHYW3RCRNbi7UKQZxT1A x4cC0f1PnD2wsLkofPhwMBOyddCNb1WzsPsJBTYsMhWaFM1IgC1AAlO+463RcKI9 Oq2WgdN7DrzvFSvW95NS3n6Ez7ZjoUCcCWr9A9f/Q9kW2Qm9Ku6OdxlArxU1a3fk U4kLTv6VE4z+RjhKu5Wl5xWjPp3gvVNGm+1Fn6FTZgcJ+UPiesvhmsxSYGqZDtuY gbgyNVFp/+XJF2GFS+1FDbwC4tGIjoW/T1ew0hjzvh6B0we44IyuVMsin/3EeCRu YcUxNX1LOY5GQhZqeVHEumqwiQlzPbx9XbyZmhoPqhaSyJVK205kXzJsUQljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutE+N4yybrOeP9AfTXW+Mrz5h/owHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLNZdHlKWdZM8KNo33gq8ctgagprTP4Lj7d SwSbqxahWUfQnkyShhdIfJjFulgKlLuEhbDgVdYaSXuA/DSjf0XgHM9JUb1Q6t6m iSxAFNdqovJrYXxrAYMOC4bo3PnBvpiUlQWVHdAHVaIcXppog0YrEEC459QtVXVK JY3zWvACvzE3jS7afYo+IE44n2dV7mg/SCzINssjXN8yRad+ojyV652Y6NyY1e5O oaegDRNed/fTUxeU0kV9nfMXhg6uw23ivohAm6t+529ZOOXZtPpARLJmCMXxtRQn wUnOQ0ZR3C+JykF4vd9P5LSqYLaVIZj0xMnTpqjywpSu2byupcQ= -----END CERTIFICATE-----Generated at Tue May 12 22:20:00 2026 by rpki-client