$ rpki-client -vvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: tvN6u+FS1SV0k5oEkFbZuQ4xWEI9wjiy5aZNVlThPoQ= Subject key identifier: 6D:37:5F:B3:C3:5C:F1:E9:43:DF:CD:BD:0B:4E:F3:C2:B7:46:4B:75 Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 116789F98186DD8499ADD0716F8C2A6DBD7F2CD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:48:48 +0000 Manifest this update: Tue 12 May 2026 13:43:48 +0000 Manifest next update: Wed 13 May 2026 16:44:48 +0000 Files and hashes: 1: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: II1xTf+1d3ywUgp7R9y8DHQFPmkGwBKVRK1VW8pizaw=) 2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:67:89:f9:81:86:dd:84:99:ad:d0:71:6f:8c:2a:6d:bd:7f:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: May 12 13:43:48 2026 GMT Not After : May 13 16:44:48 2026 GMT Subject: CN=6D375FB3C35CF1E943DFCDBD0B4EF3C2B7464B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:c2:c9:28:b7:0e:52:21:a7:39:d8:71:ef: ca:18:dd:fe:c6:ca:96:d1:1c:4c:17:70:2a:52:e9: bd:06:12:9a:49:21:9e:05:41:f2:53:90:bb:99:40: c2:48:a1:3f:92:70:36:48:b8:2b:38:47:53:8f:51: 94:8b:81:3e:21:fe:4e:19:c3:7f:1b:98:28:65:4c: d8:6c:fb:f5:0d:80:25:5f:a2:fe:af:19:2d:6f:30: 96:d6:8e:11:d8:a6:0b:ac:18:99:4a:02:86:d9:56: 65:7a:8a:9f:53:ac:25:39:de:5b:9c:73:1c:31:7b: 4c:c1:68:bc:56:fc:5c:eb:0e:ee:96:7e:06:75:0c: 98:12:0f:d7:3e:48:6e:db:4d:97:56:b2:12:e0:f0: ce:86:aa:9b:0a:f0:cf:2a:b8:d2:ab:01:9e:b7:13: b3:57:3b:a5:66:9b:48:c3:18:71:79:e1:09:7b:2f: 08:e8:98:cf:a4:06:0a:77:d1:da:29:26:d9:ba:a8: 13:d6:82:c8:d8:65:c6:d1:6a:c5:c8:a9:b0:e3:6b: 51:bf:ce:03:bb:2d:99:6a:6d:bd:f9:bd:cd:89:f9: db:bc:7c:ec:35:d4:e7:dd:9e:ef:c8:a0:25:72:51: 1b:30:47:79:f1:26:60:59:a5:5d:98:ce:cb:ce:e3: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:37:5F:B3:C3:5C:F1:E9:43:DF:CD:BD:0B:4E:F3:C2:B7:46:4B:75 X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:f5:85:17:ae:41:ac:59:65:06:96:f5:ca:cc:b7:8f:94:db: 77:ef:08:c9:87:75:02:46:41:e6:e7:92:2a:f2:c9:5e:3f:14: 68:81:23:1d:56:33:db:67:22:6b:e9:a8:ee:6f:32:d7:3c:2f: fa:bd:f4:3b:f0:f0:94:5b:e8:63:71:95:3d:23:06:1b:24:38: a1:a1:32:d6:2f:83:21:24:04:f8:f4:7d:ea:c1:47:0a:10:1f: 96:7e:5b:58:af:ae:22:0f:37:d5:ac:77:6a:fc:0e:58:8c:cc: fb:c6:3e:1e:f6:36:7a:d8:9b:0c:b8:02:f8:85:3d:2c:81:98: 54:43:ca:75:ad:63:f2:c3:86:1f:bc:1b:56:6e:3e:6d:97:34: 62:2a:8b:40:a6:30:cb:b1:60:92:cd:dc:2d:6a:cb:7b:17:19: 11:35:92:99:ad:7b:90:7a:fa:59:1b:8a:d8:28:b9:e6:a0:19: c3:57:05:e0:e6:f7:f2:27:ea:af:dc:37:a2:c2:30:86:07:2e: c5:b7:f0:9e:97:f0:20:f2:0e:2e:6a:cf:99:9e:0e:1e:85:72: 1d:fe:2d:03:5d:48:e5:bd:0d:f9:17:f7:c5:a8:bf:8e:8f:01: 8e:53:8e:c8:e3:47:08:6a:df:63:54:da:e7:57:6a:5c:da:98: a8:d4:ac:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWeJ+YGG3YSZrdBxb4wqbb1/LNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA1MTIxMzQzNDhaFw0yNjA1MTMxNjQ0NDhaMDMxMTAvBgNV BAMTKDZEMzc1RkIzQzM1Q0YxRTk0M0RGQ0RCRDBCNEVGM0MyQjc0NjRCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCticLJKLcOUiGnOdhx78oY3f7G ypbRHEwXcCpS6b0GEppJIZ4FQfJTkLuZQMJIoT+ScDZIuCs4R1OPUZSLgT4h/k4Z w38bmChlTNhs+/UNgCVfov6vGS1vMJbWjhHYpgusGJlKAobZVmV6ip9TrCU53luc cxwxe0zBaLxW/FzrDu6WfgZ1DJgSD9c+SG7bTZdWshLg8M6GqpsK8M8quNKrAZ63 E7NXO6Vmm0jDGHF54Ql7LwjomM+kBgp30dopJtm6qBPWgsjYZcbRasXIqbDja1G/ zgO7LZlqbb35vc2J+du8fOw11Ofdnu/IoCVyURswR3nxJmBZpV2YzsvO49lrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbTdfs8Nc8elD3829C07zwrdGS3UwHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALX1hReuQaxZZQaW9crMt4+U23fvCMmHdQJG QebnkiryyV4/FGiBIx1WM9tnImvpqO5vMtc8L/q99Dvw8JRb6GNxlT0jBhskOKGh MtYvgyEkBPj0ferBRwoQH5Z+W1ivriIPN9Wsd2r8DliMzPvGPh72NnrYmwy4AviF PSyBmFRDynWtY/LDhh+8G1ZuPm2XNGIqi0CmMMuxYJLN3C1qy3sXGRE1kpmte5B6 +lkbitgoueagGcNXBeDm9/In6q/cN6LCMIYHLsW38J6X8CDyDi5qz5meDh6Fch3+ LQNdSOW9DfkX98Wov46PAY5TjsjjRwhq32NU2udXalzamKjUrCA= -----END CERTIFICATE-----Generated at Tue May 12 23:20:53 2026 by rpki-client