$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: t+ibDAjRcCZ2rDYfO4QrA8WAnIfvfBfFsHwlnTvgB5o= Subject key identifier: 3B:53:F0:65:7A:1E:DF:4E:B2:BE:25:5C:9C:A3:CB:FF:42:1D:A7:C0 Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 32D6F92861CC463AB9FD709BCF4F9FBC79357E1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:33 +0000 Manifest this update: Tue 12 May 2026 18:13:33 +0000 Manifest next update: Wed 13 May 2026 21:33:33 +0000 Files and hashes: 1: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: JhH4qwefM6BUedp48dimmDkahtBiUCun02/l2gVUVaE=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:f9:28:61:cc:46:3a:b9:fd:70:9b:cf:4f:9f:bc:79:35:7e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: May 12 18:13:33 2026 GMT Not After : May 13 21:33:33 2026 GMT Subject: CN=3B53F0657A1EDF4EB2BE255C9CA3CBFF421DA7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cb:a2:21:cb:3a:0d:9d:84:c1:a9:e8:91:d3: de:f4:db:dc:eb:cc:e1:f1:47:8b:18:a9:85:4c:16: 52:5a:37:e8:9f:2d:43:f2:b5:2d:c3:b7:0a:f6:50: 20:bd:0a:21:81:46:d1:bd:e7:7b:7b:14:22:62:d4: 62:ea:65:84:dc:e0:e8:20:b7:f5:c9:25:93:1b:30: 6c:e8:20:64:25:e7:ed:43:06:58:38:36:f5:f4:14: 41:1a:d9:b3:fd:5f:a5:10:d6:17:18:3d:ae:4e:a9: 8b:69:13:09:67:7e:d2:fb:8c:56:6f:01:38:50:db: 01:86:c5:50:27:12:2d:79:ba:16:d7:a1:06:06:24: 04:d4:13:ad:af:28:f6:f3:2c:6f:77:71:6f:84:ad: ae:4e:6d:3b:bb:ee:ee:73:ad:d7:31:3f:ce:a6:a2: 03:3c:53:97:bf:5f:85:b6:77:a0:96:36:78:5b:b0: 1b:15:80:ec:07:6f:82:c5:8d:df:a9:0e:d1:62:52: 33:41:93:f9:79:c5:6e:49:ab:dc:f9:a3:81:d9:68: 27:94:3e:18:48:c4:47:b6:44:74:00:92:b7:02:8d: de:87:17:75:13:79:14:4a:73:53:8c:9e:6c:bb:08: 35:b7:5b:23:d5:78:a9:d8:e5:96:f3:70:79:a7:23: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:53:F0:65:7A:1E:DF:4E:B2:BE:25:5C:9C:A3:CB:FF:42:1D:A7:C0 X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ad:c7:1e:4f:a9:14:73:c8:0a:8c:2a:bc:6d:91:da:cd:12: 6a:64:42:fb:ea:ba:09:f0:e1:85:d9:3d:d7:a3:eb:dc:cd:fb: 9f:05:79:e7:ea:e9:80:06:af:a8:eb:8a:e5:eb:27:40:8f:65: 83:99:54:f6:12:86:56:80:59:0c:4f:33:2c:d9:04:c5:4c:a0: 4e:9a:5a:9b:b9:71:30:c7:94:29:37:34:e4:ae:cd:b4:94:94: 3d:11:86:c2:ce:a0:4b:c1:f5:72:52:2a:fb:a3:22:e2:47:55: 16:66:7d:0a:9d:9e:c8:be:21:f4:7b:ff:06:1b:bc:d9:9a:5a: db:16:7d:2a:ee:e8:fd:08:88:84:ac:9b:4b:b9:94:77:7c:ec: 60:17:87:9c:81:a5:79:a2:8b:5c:80:10:37:fe:5a:ab:16:40: ab:39:2d:3f:ce:16:74:2a:f6:de:19:6a:68:c7:02:9b:b3:a7: a0:31:7c:b8:eb:cc:ac:81:60:0b:d6:3d:02:3a:82:59:b2:66: 66:29:bd:60:eb:44:50:c4:95:27:8a:63:8f:ba:90:fb:f7:50: d4:a8:b3:d1:90:5b:4c:2b:64:8d:70:b7:6c:38:8f:ff:e2:3c: 62:5c:be:3a:28:60:91:6a:40:a8:17:86:45:10:ff:88:0b:83: 6a:6e:d9:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtb5KGHMRjq5/XCbz0+fvHk1fh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjA1MTIxODEzMzNaFw0yNjA1MTMyMTMzMzNaMDMxMTAvBgNV BAMTKDNCNTNGMDY1N0ExRURGNEVCMkJFMjU1QzlDQTNDQkZGNDIxREE3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiy6IhyzoNnYTBqeiR097029zr zOHxR4sYqYVMFlJaN+ifLUPytS3Dtwr2UCC9CiGBRtG953t7FCJi1GLqZYTc4Ogg t/XJJZMbMGzoIGQl5+1DBlg4NvX0FEEa2bP9X6UQ1hcYPa5OqYtpEwlnftL7jFZv AThQ2wGGxVAnEi15uhbXoQYGJATUE62vKPbzLG93cW+Era5ObTu77u5zrdcxP86m ogM8U5e/X4W2d6CWNnhbsBsVgOwHb4LFjd+pDtFiUjNBk/l5xW5Jq9z5o4HZaCeU PhhIxEe2RHQAkrcCjd6HF3UTeRRKc1OMnmy7CDW3WyPVeKnY5ZbzcHmnI/VDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1PwZXoe306yviVcnKPL/0Idp8AwHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABatxx5PqRRzyAqMKrxtkdrNEmpkQvvqugnw 4YXZPdej69zN+58Feefq6YAGr6jriuXrJ0CPZYOZVPYShlaAWQxPMyzZBMVMoE6a Wpu5cTDHlCk3NOSuzbSUlD0RhsLOoEvB9XJSKvujIuJHVRZmfQqdnsi+IfR7/wYb vNmaWtsWfSru6P0IiISsm0u5lHd87GAXh5yBpXmii1yAEDf+WqsWQKs5LT/OFnQq 9t4ZamjHApuzp6AxfLjrzKyBYAvWPQI6glmyZmYpvWDrRFDElSeKY4+6kPv3UNSo s9GQW0wrZI1wt2w4j//iPGJcvjooYJFqQKgXhkUQ/4gLg2pu2fc= -----END CERTIFICATE-----Generated at Wed May 13 01:07:20 2026 by rpki-client