$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: 5o84LJ0Pw+a6qWNRazFZxeDgiRZ3CS1i43LJ3c36KdA= Subject key identifier: D8:3D:84:A8:2D:0B:EB:03:70:40:81:9C:65:C6:5B:E8:F8:3A:20:D2 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 5CBC97F8AE2D5E8B90473CCE9B2CB312D2DCC859 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:29:16 +0000 Manifest this update: Tue 12 May 2026 14:24:16 +0000 Manifest next update: Wed 13 May 2026 15:26:16 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: L0vXoiG1qvZL4QpkPSZgn9b5WIxpf/RF7gklJ9AwwsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bc:97:f8:ae:2d:5e:8b:90:47:3c:ce:9b:2c:b3:12:d2:dc:c8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: May 12 14:24:16 2026 GMT Not After : May 13 15:26:16 2026 GMT Subject: CN=D83D84A82D0BEB037040819C65C65BE8F83A20D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:2f:fb:af:ec:a9:a8:29:c2:08:23:9c:c3: dd:fb:a6:f7:bf:24:c3:41:de:ba:02:48:2f:55:7f: 56:d2:74:ee:ed:05:6a:45:a5:41:65:f2:9f:93:8e: 65:a9:e0:65:8f:1a:18:9a:1e:36:51:33:39:6f:34: b6:d6:02:0d:25:2f:fb:0b:c0:9b:2a:a6:d5:c3:ad: 37:f3:9e:46:21:44:74:4d:a4:93:40:86:77:3c:12: 3f:60:00:7b:cf:e1:69:cb:bd:e5:79:6b:37:12:2d: 56:ca:73:48:7b:13:14:44:78:cf:b9:ed:f1:44:8a: 2e:e3:d0:5c:11:77:13:af:df:79:2d:6d:39:38:d9: 73:62:5b:95:05:84:f7:96:33:f3:03:a5:02:c9:4a: 47:50:27:c4:cc:74:63:25:d3:5c:8e:9b:61:eb:a3: 55:84:4d:12:59:8c:4d:24:93:72:c8:5c:77:8e:16: 88:fb:81:0f:5c:e6:55:96:45:a3:ad:c7:58:8d:4b: c8:21:44:0c:49:d8:5a:8a:24:9d:6e:19:b6:22:74: b7:e7:20:f9:ad:22:63:73:f6:96:ab:e6:ab:3a:36: 62:1f:6f:55:30:22:51:10:12:e4:3f:b4:77:3c:6d: 70:a2:a3:a2:61:74:03:46:fc:e5:00:20:f4:1c:33: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3D:84:A8:2D:0B:EB:03:70:40:81:9C:65:C6:5B:E8:F8:3A:20:D2 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e5:55:e3:a8:bc:b2:0a:8a:00:d0:85:7e:7c:55:67:aa:cb: 7c:79:f6:a3:c7:ab:42:06:54:af:85:9e:dc:f8:2f:c5:ac:ae: 3e:7b:c8:79:85:78:c1:6e:dd:f2:25:10:e9:ab:8f:d7:33:c1: 98:de:82:05:2f:01:f2:1f:59:81:41:a6:ae:9b:63:ae:fd:8b: 0c:a7:09:1f:a9:7d:45:3b:ad:98:fd:44:10:33:db:de:13:ec: fa:c5:52:aa:85:7a:6f:c6:bd:dc:9b:9d:1c:38:69:0b:4b:dd: 47:ba:71:8a:9e:0b:0c:7e:19:af:c9:a7:27:4d:5d:c1:9d:86: 1b:d0:72:2c:e2:75:9e:71:59:0a:22:65:18:c1:ef:db:05:35: 6a:9c:27:16:1a:c4:b4:38:3b:ba:43:70:1d:de:5d:4c:e2:72: be:a5:90:03:2a:c2:b9:df:08:1e:bd:33:c4:cd:af:66:24:73: 08:75:51:28:99:29:61:23:18:ff:9d:69:90:69:13:09:a2:c6: d3:39:fe:66:7c:85:9c:33:65:d9:5d:32:34:e8:4d:91:7b:81: 98:c3:97:f9:3b:f9:42:f1:e4:37:19:c3:b2:25:cf:4d:92:ba: c4:0a:00:6a:b8:67:d8:0c:db:77:d3:a8:1e:4a:7b:b6:1e:5a: 5c:04:7d:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLyX+K4tXouQRzzOmyyzEtLcyFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA1MTIxNDI0MTZaFw0yNjA1MTMxNTI2MTZaMDMxMTAvBgNV BAMTKEQ4M0Q4NEE4MkQwQkVCMDM3MDQwODE5QzY1QzY1QkU4RjgzQTIwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOC/7r+ypqCnCCCOcw937pve/ JMNB3roCSC9Vf1bSdO7tBWpFpUFl8p+TjmWp4GWPGhiaHjZRMzlvNLbWAg0lL/sL wJsqptXDrTfznkYhRHRNpJNAhnc8Ej9gAHvP4WnLveV5azcSLVbKc0h7ExREeM+5 7fFEii7j0FwRdxOv33ktbTk42XNiW5UFhPeWM/MDpQLJSkdQJ8TMdGMl01yOm2Hr o1WETRJZjE0kk3LIXHeOFoj7gQ9c5lWWRaOtx1iNS8ghRAxJ2FqKJJ1uGbYidLfn IPmtImNz9par5qs6NmIfb1UwIlEQEuQ/tHc8bXCio6JhdANG/OUAIPQcM8sDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2D2EqC0L6wNwQIGcZcZb6Pg6INIwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjlVeOovLIKigDQhX58VWeqy3x59qPHq0IG VK+Fntz4L8Wsrj57yHmFeMFu3fIlEOmrj9czwZjeggUvAfIfWYFBpq6bY679iwyn CR+pfUU7rZj9RBAz294T7PrFUqqFem/GvdybnRw4aQtL3Ue6cYqeCwx+Ga/JpydN XcGdhhvQcizidZ5xWQoiZRjB79sFNWqcJxYaxLQ4O7pDcB3eXUzicr6lkAMqwrnf CB69M8TNr2Ykcwh1USiZKWEjGP+daZBpEwmixtM5/mZ8hZwzZdldMjToTZF7gZjD l/k7+ULx5DcZw7Ilz02SusQKAGq4Z9gM23fTqB5Ke7YeWlwEfbs= -----END CERTIFICATE-----Generated at Tue May 12 22:46:53 2026 by rpki-client