$ rpki-client -vvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: GSJ8CqfKvweXEQgj6dj29z2qsUkYSfv8FiW+Kd0w7zs= Subject key identifier: 79:5B:05:D0:4D:FD:C7:83:B7:7C:93:50:5E:0E:CD:EF:4A:ED:B4:99 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 15BE977B403C321270AE47F3BA5A74EDF64E9684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:48:16 +0000 Manifest this update: Tue 12 May 2026 03:43:16 +0000 Manifest next update: Wed 13 May 2026 04:52:16 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) 2: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: thCJMB62ysTzyD+2k4pQm2SlS0z1SbPx2ltAZHE7WKY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:97:7b:40:3c:32:12:70:ae:47:f3:ba:5a:74:ed:f6:4e:96:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: May 12 03:43:16 2026 GMT Not After : May 13 04:52:16 2026 GMT Subject: CN=795B05D04DFDC783B77C93505E0ECDEF4AEDB499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:bc:6b:56:17:a5:3c:14:8f:9c:d5:0c:00: 83:fa:d9:2e:63:c4:17:8f:b9:26:c2:96:8e:09:ad: 80:cd:25:3e:f4:25:8e:0f:d1:14:9e:9a:64:35:2d: 9a:21:f1:d0:39:7f:c3:31:8b:c6:41:2d:fc:75:0d: 60:9a:ed:27:2a:90:87:92:ad:ae:3d:75:41:56:e3: 20:c3:ed:10:64:0e:d5:92:6f:81:44:a9:bc:43:f9: 93:37:8f:68:e2:f4:44:e0:2f:d2:2b:9e:7e:33:53: a8:66:70:88:d0:d9:f7:2a:a3:ff:b4:2a:72:7a:7b: 04:84:ff:e6:43:51:d2:a0:3e:35:7b:41:de:0d:3e: 26:a2:0e:1a:e6:be:65:92:5d:80:f6:27:16:cb:55: 83:11:53:87:09:b9:c1:af:74:06:8f:89:b7:36:7f: b5:79:8f:4e:cb:a3:ba:4a:ed:4c:88:d9:6a:09:74: 47:4a:41:0e:c6:82:f9:d0:f2:18:c0:73:71:26:06: f8:19:51:af:6c:27:82:f1:11:9c:2a:a6:bd:ce:88: b7:c0:e3:9a:89:db:3a:af:5d:51:c2:8a:6a:bf:5c: fa:e3:1b:b7:3f:ea:10:71:e5:6e:55:74:eb:0b:27: 2b:11:63:82:87:32:a8:68:bd:6d:55:b4:a5:a3:65: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:05:D0:4D:FD:C7:83:B7:7C:93:50:5E:0E:CD:EF:4A:ED:B4:99 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:64:e5:c4:a6:c2:bd:30:b0:de:1f:ef:88:13:d2:e1:3b: 77:84:78:b0:ae:f1:4a:6f:ec:c8:64:d6:44:79:06:78:b9:a9: 2d:bd:b3:e3:fe:9d:b4:ca:b1:27:0a:5e:43:ba:f6:72:55:04: be:68:bd:ec:36:dd:21:40:31:ec:94:14:e2:bb:0c:51:3d:5e: 82:3a:86:fa:d5:4a:08:18:e0:ba:1e:05:1c:0f:13:52:d0:6d: 17:88:b6:15:30:86:b7:dc:28:2a:0c:1d:bd:30:b6:77:3a:37: 7b:bf:74:54:79:fd:22:24:2b:e9:74:98:96:45:4d:35:d5:e4: 42:2d:53:d7:5c:07:79:99:8c:cb:74:d3:08:3c:98:6d:35:a6: 12:3a:ac:8e:93:4c:fb:93:53:c9:5c:24:1a:36:9d:32:e4:4f: 4c:0f:bc:76:11:d8:85:60:d6:31:f0:f6:cb:c8:39:77:da:09: 91:9e:2e:48:5b:56:ba:18:12:18:f3:f7:db:af:85:0d:ce:bd: cb:39:1c:f2:30:a1:61:aa:9b:59:e6:db:fd:94:1c:94:d5:b9: 9c:b1:0d:57:57:4e:69:bd:12:af:1f:9c:c3:77:62:a3:50:ee: 73:99:2e:41:bb:bc:74:0a:3f:f6:d4:c3:14:f6:ad:8d:72:10: c8:34:06:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFb6Xe0A8MhJwrkfzulp07fZOloQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA1MTIwMzQzMTZaFw0yNjA1MTMwNDUyMTZaMDMxMTAvBgNV BAMTKDc5NUIwNUQwNERGREM3ODNCNzdDOTM1MDVFMEVDREVGNEFFREI0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLrxrVhelPBSPnNUMAIP62S5j xBePuSbClo4JrYDNJT70JY4P0RSemmQ1LZoh8dA5f8Mxi8ZBLfx1DWCa7ScqkIeS ra49dUFW4yDD7RBkDtWSb4FEqbxD+ZM3j2ji9ETgL9Irnn4zU6hmcIjQ2fcqo/+0 KnJ6ewSE/+ZDUdKgPjV7Qd4NPiaiDhrmvmWSXYD2JxbLVYMRU4cJucGvdAaPibc2 f7V5j07Lo7pK7UyI2WoJdEdKQQ7GgvnQ8hjAc3EmBvgZUa9sJ4LxEZwqpr3OiLfA 45qJ2zqvXVHCimq/XPrjG7c/6hBx5W5VdOsLJysRY4KHMqhovW1VtKWjZdlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVsF0E39x4O3fJNQXg7N70rttJkwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy+ZOXEpsK9MLDeH++IE9LhO3eEeLCu8Upv 7Mhk1kR5Bni5qS29s+P+nbTKsScKXkO69nJVBL5ovew23SFAMeyUFOK7DFE9XoI6 hvrVSggY4LoeBRwPE1LQbReIthUwhrfcKCoMHb0wtnc6N3u/dFR5/SIkK+l0mJZF TTXV5EItU9dcB3mZjMt00wg8mG01phI6rI6TTPuTU8lcJBo2nTLkT0wPvHYR2IVg 1jHw9svIOXfaCZGeLkhbVroYEhjz99uvhQ3Ovcs5HPIwoWGqm1nm2/2UHJTVuZyx DVdXTmm9Eq8fnMN3YqNQ7nOZLkG7vHQKP/bUwxT2rY1yEMg0BqM= -----END CERTIFICATE-----Generated at Tue May 12 22:32:14 2026 by rpki-client