$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: Tdv7ns/b0WEXQlwmpTNtIZwv8L8/jvrC1Hkmex0cdK4= Subject key identifier: 75:10:5A:06:03:1F:FF:FA:9E:3F:34:45:7F:C3:68:84:F4:A9:F1:53 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 6BF584C714281869CA0853BBC3AEDFABC08EBE21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:58:00 +0000 Manifest this update: Tue 12 May 2026 17:53:00 +0000 Manifest next update: Wed 13 May 2026 19:15:00 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: SzHkFh4nngn/XdlLx5UhkeeXm9YvkpfW4Y06TWqY5AU=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f5:84:c7:14:28:18:69:ca:08:53:bb:c3:ae:df:ab:c0:8e:be:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: May 12 17:53:00 2026 GMT Not After : May 13 19:15:00 2026 GMT Subject: CN=75105A06031FFFFA9E3F34457FC36884F4A9F153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:0b:e0:b1:8a:91:41:d6:d3:2a:83:62:92: 84:1f:65:ce:04:ff:f5:83:a1:a6:0d:ba:3f:03:98: 3e:88:64:36:e7:a9:8b:65:0a:53:f3:49:1a:0a:d0: 3f:07:aa:78:46:b3:99:80:0a:1c:74:5e:05:de:f4: f8:88:8a:9c:85:78:10:85:7f:b7:4a:be:df:38:ef: e3:6d:35:1b:13:81:3c:b5:58:1d:1b:31:3a:24:21: 13:bf:bb:08:44:b8:2f:d7:02:b1:5a:14:54:e0:26: 5d:8f:d9:c4:98:c5:1a:5a:fa:28:48:53:c3:af:bb: d3:93:1d:23:ee:89:18:59:12:9e:ab:7b:c6:21:a1: a3:5a:6a:f8:18:e9:ac:54:e3:0f:bd:7b:86:74:59: 76:9e:ed:19:f3:18:17:1a:38:47:8c:d3:d1:49:aa: 8e:3f:08:78:44:da:ab:e8:b1:a0:e3:fe:f5:16:17: 8f:4c:dd:48:15:72:bc:fb:d8:25:1c:ff:44:45:5d: b7:fb:52:d6:d6:a1:4c:01:49:79:f6:1a:62:1e:be: 60:84:8e:af:72:fa:d1:14:e4:65:10:b4:02:32:04: 9d:8b:2d:d1:74:61:bd:06:a2:0b:f2:a9:1c:85:25: 8c:9c:89:aa:fa:b3:98:0d:2f:ef:86:9e:6a:d8:58: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:5A:06:03:1F:FF:FA:9E:3F:34:45:7F:C3:68:84:F4:A9:F1:53 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:eb:c5:8f:53:e7:ff:e8:2d:c2:c5:fd:67:d5:91:a0:7a:a1: a2:5d:0f:50:79:51:26:80:21:40:9a:98:b0:6f:9d:3a:f1:59: fb:78:a9:0c:27:47:87:76:82:bd:a1:f9:e0:ba:6c:f5:12:33: 5c:cc:ca:98:5f:d7:68:d7:94:b6:19:c6:9c:08:55:33:cf:e4: fc:d8:ff:75:0e:b6:9e:47:5f:06:c7:72:a1:3e:a8:0d:5a:9a: cb:a0:7f:d7:0c:1d:7d:3e:f2:6d:01:86:f2:70:5c:d9:f9:39: 87:3a:43:a7:6c:90:81:d9:e6:84:b1:97:31:56:9d:6e:98:80: 28:78:37:a7:48:f0:90:2b:cf:a2:0e:dc:b8:46:db:ab:3e:0f: 23:3c:12:31:90:14:a0:15:af:2e:27:9d:d3:4b:9d:4e:bb:e7: c8:db:cb:e0:aa:d6:d6:48:89:11:bd:69:e9:00:33:3d:a5:b8: 0d:17:58:a5:1e:e4:8f:73:c8:34:31:4a:2f:08:78:bb:8a:e6: 22:c0:f5:c7:25:e5:56:d2:8b:17:bd:83:9f:9f:3d:9b:af:17: c2:c9:5b:e8:c5:90:45:62:b6:76:e1:41:d4:a0:62:30:78:49: 0f:e4:33:70:07:e6:b3:25:66:7f:9b:36:d5:a6:aa:ad:87:cf: 33:67:1c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/WExxQoGGnKCFO7w67fq8COviEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA1MTIxNzUzMDBaFw0yNjA1MTMxOTE1MDBaMDMxMTAvBgNV BAMTKDc1MTA1QTA2MDMxRkZGRkE5RTNGMzQ0NTdGQzM2ODg0RjRBOUYxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdngvgsYqRQdbTKoNikoQfZc4E //WDoaYNuj8DmD6IZDbnqYtlClPzSRoK0D8HqnhGs5mAChx0XgXe9PiIipyFeBCF f7dKvt847+NtNRsTgTy1WB0bMTokIRO/uwhEuC/XArFaFFTgJl2P2cSYxRpa+ihI U8Ovu9OTHSPuiRhZEp6re8YhoaNaavgY6axU4w+9e4Z0WXae7RnzGBcaOEeM09FJ qo4/CHhE2qvosaDj/vUWF49M3UgVcrz72CUc/0RFXbf7UtbWoUwBSXn2GmIevmCE jq9y+tEU5GUQtAIyBJ2LLdF0Yb0GogvyqRyFJYyciar6s5gNL++GnmrYWCXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdRBaBgMf//qePzRFf8NohPSp8VMwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3rxY9T5//oLcLF/WfVkaB6oaJdD1B5USaA IUCamLBvnTrxWft4qQwnR4d2gr2h+eC6bPUSM1zMyphf12jXlLYZxpwIVTPP5PzY /3UOtp5HXwbHcqE+qA1amsugf9cMHX0+8m0BhvJwXNn5OYc6Q6dskIHZ5oSxlzFW nW6YgCh4N6dI8JArz6IO3LhG26s+DyM8EjGQFKAVry4nndNLnU6758jby+Cq1tZI iRG9aekAMz2luA0XWKUe5I9zyDQxSi8IeLuK5iLA9ccl5VbSixe9g5+fPZuvF8LJ W+jFkEVitnbhQdSgYjB4SQ/kM3AH5rMlZn+bNtWmqq2HzzNnHOM= -----END CERTIFICATE-----Generated at Tue May 12 23:07:03 2026 by rpki-client