$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: 9Q4s004AECh9q6ZQNjVdYDhjKdv90Ht7rAjIoEAshtA= Subject key identifier: 23:D2:3C:39:12:26:62:CC:5D:BE:DC:08:3E:28:CD:46:BD:13:4B:F7 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 61895EE27DCC0AB133EBBFC3DE94103965859763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:46:17 +0000 Manifest this update: Tue 12 May 2026 05:41:17 +0000 Manifest next update: Wed 13 May 2026 06:58:17 +0000 Files and hashes: 1: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 2: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 3: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 4: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: AmXEREwhSQ647T1+xejKp1etJ6nnZ0CdTchF8YsOx3c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:89:5e:e2:7d:cc:0a:b1:33:eb:bf:c3:de:94:10:39:65:85:97:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: May 12 05:41:17 2026 GMT Not After : May 13 06:58:17 2026 GMT Subject: CN=23D23C39122662CC5DBEDC083E28CD46BD134BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:35:8e:54:d8:4f:65:da:87:47:27:f6:ef: 26:eb:e0:e6:fc:f9:1e:45:93:fa:7e:a9:13:24:a8: e0:f1:59:a7:97:fd:4c:34:20:19:e9:bc:7d:3b:ab: 9f:94:e3:29:86:61:03:e4:5f:4a:c9:51:ab:70:ce: 4d:10:bb:be:fb:67:bb:b6:23:47:04:2f:37:15:39: 98:57:f2:b2:6d:aa:24:56:eb:db:79:93:ee:f9:f1: 2e:74:56:53:f3:f7:68:5f:76:93:9d:bb:0d:dc:44: 55:48:ed:5f:cc:fd:e3:68:e3:26:a5:99:88:eb:e7: d4:88:2d:a9:cf:6b:b9:a9:5c:61:92:ed:28:d0:17: 31:d3:c6:c8:c0:94:d7:b8:75:e0:fd:f2:9d:a0:cb: 69:93:7a:1f:70:71:c9:60:4f:20:0c:3f:fd:a9:74: 7c:71:9f:93:b8:01:57:c1:d0:63:36:4a:cc:62:60: 40:13:37:57:9a:e7:04:fc:4e:40:2a:0d:12:9e:6b: 8d:ad:db:cd:eb:0a:50:8e:2f:1f:5a:c1:b9:d8:f5: b3:9f:f4:bb:27:85:cf:04:88:7f:c4:39:2f:6a:95: f0:85:cf:45:c1:bc:a0:22:af:f3:5f:12:80:bd:d3: db:16:0b:3d:5d:46:75:2e:45:91:f0:4c:6e:5a:58: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:3C:39:12:26:62:CC:5D:BE:DC:08:3E:28:CD:46:BD:13:4B:F7 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:33:45:a2:95:b9:fe:e0:bd:48:99:0e:c2:ab:f9:b8:45: 8d:2a:fa:b5:27:d1:b3:97:c1:47:96:d1:1f:68:e5:09:91:6d: 31:28:46:3c:5c:dd:67:9d:11:c6:d8:10:00:1e:9f:6c:8f:7a: 0b:28:d4:24:cf:9f:73:23:02:95:e2:06:0a:45:1d:d8:35:25: dc:2b:da:0d:1a:97:05:3f:3b:9d:3d:90:19:2c:35:93:4b:10: 74:e0:87:9e:7f:18:52:5f:42:ad:33:bf:57:39:90:06:66:6c: 2a:03:80:50:83:b8:ef:ca:dc:1d:41:83:2e:93:d2:d8:c4:ae: 46:08:3c:f1:2d:ef:22:f4:04:1d:f8:de:1a:04:da:2a:3c:df: ca:ee:6f:5d:87:d0:3b:4d:35:69:74:b6:69:8f:53:59:9f:25: 77:fc:cd:b0:c8:c8:4b:9b:20:a8:19:c0:2b:c7:1e:1d:dd:c0: 99:1e:48:ef:ba:5e:74:3b:6a:ec:21:95:9c:e1:78:94:6c:1f: 81:39:08:fb:ae:de:5d:3c:ee:aa:ef:2b:a1:54:15:ca:57:6d: 54:f7:fe:da:84:94:3a:87:29:ba:3c:b9:57:85:9f:a1:85:57: 88:62:3b:0b:21:27:8f:11:47:ff:16:3a:51:46:df:23:16:9b: 38:de:65:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYle4n3MCrEz67/D3pQQOWWFl2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA1MTIwNTQxMTdaFw0yNjA1MTMwNjU4MTdaMDMxMTAvBgNV BAMTKDIzRDIzQzM5MTIyNjYyQ0M1REJFREMwODNFMjhDRDQ2QkQxMzRCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/zWOVNhPZdqHRyf27ybr4Ob8 +R5Fk/p+qRMkqODxWaeX/Uw0IBnpvH07q5+U4ymGYQPkX0rJUatwzk0Qu777Z7u2 I0cELzcVOZhX8rJtqiRW69t5k+758S50VlPz92hfdpOduw3cRFVI7V/M/eNo4yal mYjr59SILanPa7mpXGGS7SjQFzHTxsjAlNe4deD98p2gy2mTeh9wcclgTyAMP/2p dHxxn5O4AVfB0GM2SsxiYEATN1ea5wT8TkAqDRKea42t283rClCOLx9awbnY9bOf 9Lsnhc8EiH/EOS9qlfCFz0XBvKAir/NfEoC909sWCz1dRnUuRZHwTG5aWF2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9I8ORImYsxdvtwIPijNRr0TS/cwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfOM0Wilbn+4L1ImQ7Cq/m4RY0q+rUn0bOX wUeW0R9o5QmRbTEoRjxc3WedEcbYEAAen2yPegso1CTPn3MjApXiBgpFHdg1Jdwr 2g0alwU/O509kBksNZNLEHTgh55/GFJfQq0zv1c5kAZmbCoDgFCDuO/K3B1Bgy6T 0tjErkYIPPEt7yL0BB343hoE2io838rub12H0DtNNWl0tmmPU1mfJXf8zbDIyEub IKgZwCvHHh3dwJkeSO+6XnQ7auwhlZzheJRsH4E5CPuu3l087qrvK6FUFcpXbVT3 /tqElDqHKbo8uVeFn6GFV4hiOwshJ48RR/8WOlFG3yMWmzjeZSI= -----END CERTIFICATE-----Generated at Tue May 12 22:13:22 2026 by rpki-client