$ rpki-client -vvf rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft File: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft (raw, json) Hash identifier: 4StimqNSIY3FdQBoxNH2ykOpyNAZzGzMtPV/clzTq1U= Subject key identifier: E6:AE:3A:AD:B1:BA:55:1F:7F:75:32:36:2F:C0:17:B5:0B:70:99:B7 Authority key identifier: 2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 Certificate issuer: /CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Certificate serial: 01DD818390A52F9C5F12981D7DC67893EA784307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:42 +0000 Manifest this update: Tue 12 May 2026 18:59:42 +0000 Manifest next update: Wed 13 May 2026 21:53:42 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: hXr95hFUQi4QPei7lbvEDGK3/fJ8wC4HwUseAin+nsU=) 2: 2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl (hash: Dl3DaTk/fMnV+6gHE4bVF9kmT/JE1Qm86wlCFPtjhA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dd:81:83:90:a5:2f:9c:5f:12:98:1d:7d:c6:78:93:ea:78:43:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3745DB2630B1D04A3E69E49A12ED7DD565CC82 Validity Not Before: May 12 18:59:42 2026 GMT Not After : May 13 21:53:42 2026 GMT Subject: CN=E6AE3AADB1BA551F7F7532362FC017B50B7099B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:cd:4c:bc:83:70:0f:b5:be:74:10:3b:80: 0f:87:59:35:d3:b0:2c:a2:9d:2d:22:08:0a:da:56: e3:69:e9:0b:45:67:ef:9f:af:91:5b:1d:06:f5:30: 26:a5:4a:61:3c:b2:fb:fc:a8:28:23:4f:34:c0:9e: da:f8:c6:f8:f7:b4:f2:be:6b:84:f5:46:af:59:c9: 5f:28:23:b4:e2:2c:8f:a6:16:8d:3b:24:38:0e:b2: c4:39:b3:04:6a:55:ae:ba:5d:8c:f1:1a:c0:43:e0: 77:a7:20:1b:04:a1:11:f4:15:fa:73:8b:58:e8:6a: 90:95:b6:81:36:10:70:c4:3e:63:21:6e:9a:da:1a: 10:41:2e:86:83:79:d9:31:dd:6e:fa:a7:fb:99:4f: 29:6f:f1:bc:f6:59:5e:5b:24:97:bf:7b:93:4b:34: ef:82:8c:e3:0c:12:71:e1:83:38:f7:30:ac:c2:28: b5:78:9b:b4:db:12:01:f0:f7:d9:c3:63:43:da:95: c3:c0:33:71:40:32:ca:ce:59:df:83:35:1f:3b:cd: 68:8e:62:b5:d9:77:6a:63:75:9a:92:c1:ed:2b:d3: fd:b6:46:12:d1:6c:8f:4e:d2:ef:41:9e:d2:e2:0a: 6b:01:08:be:0e:20:4a:a0:64:aa:1a:c6:19:d0:f6: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AE:3A:AD:B1:BA:55:1F:7F:75:32:36:2F:C0:17:B5:0B:70:99:B7 X509v3 Authority Key Identifier: keyid:2F:37:45:DB:26:30:B1:D0:4A:3E:69:E4:9A:12:ED:7D:D5:65:CC:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/2F3745DB2630B1D04A3E69E49A12ED7DD565CC82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:32:60:da:93:20:f4:7d:d0:a6:a4:fb:e0:9e:27:52:6b: 77:2c:27:9b:f7:ae:09:df:c8:32:4d:8d:73:11:79:d5:c0:ef: 6f:dc:d3:ec:55:c1:4d:6d:0d:e7:e8:cf:dc:f0:11:4a:bd:5a: 2a:c6:e7:56:7d:04:0f:14:ae:ef:f6:b0:0c:39:22:4a:4b:67: 31:f4:fd:b3:f8:6f:29:a7:29:de:9e:01:19:eb:3f:71:2d:49: 9b:87:f7:7c:da:40:a3:6c:39:ed:f3:cf:22:bf:83:43:41:ea: cd:36:1e:e8:20:9a:92:1b:4e:04:9f:ef:34:22:09:36:cc:8e: 73:79:ca:1d:88:98:dc:2e:3c:95:9a:79:68:e1:70:23:a3:6c: a4:5c:36:60:15:0b:49:a5:da:cd:ca:18:7e:ec:eb:07:8c:f9: 4f:b6:15:ef:8f:ec:6c:41:f0:86:fb:29:a6:c2:5a:d8:2a:fe: 7c:ee:85:37:7b:33:34:fb:53:38:bb:79:e6:c1:77:b5:32:17: 26:fb:f2:4c:98:5f:f7:f2:a9:cf:1d:4e:1a:47:d6:9f:8f:52: 82:4c:15:13:33:cb:b8:1f:eb:8b:70:2f:e7:a3:49:f6:56:f1: df:5e:c8:16:c6:b4:8d:d5:31:5f:be:99:24:b5:76:d2:4d:f7: a0:78:ff:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAd2Bg5ClL5xfEpgdfcZ4k+p4QwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVEN0RE NTY1Q0M4MjAeFw0yNjA1MTIxODU5NDJaFw0yNjA1MTMyMTUzNDJaMDMxMTAvBgNV BAMTKEU2QUUzQUFEQjFCQTU1MUY3Rjc1MzIzNjJGQzAxN0I1MEI3MDk5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhM1MvINwD7W+dBA7gA+HWTXT sCyinS0iCAraVuNp6QtFZ++fr5FbHQb1MCalSmE8svv8qCgjTzTAntr4xvj3tPK+ a4T1Rq9ZyV8oI7TiLI+mFo07JDgOssQ5swRqVa66XYzxGsBD4HenIBsEoRH0Ffpz i1joapCVtoE2EHDEPmMhbpraGhBBLoaDedkx3W76p/uZTylv8bz2WV5bJJe/e5NL NO+CjOMMEnHhgzj3MKzCKLV4m7TbEgHw99nDY0PalcPAM3FAMsrOWd+DNR87zWiO YrXZd2pjdZqSwe0r0/22RhLRbI9O0u9BntLiCmsBCL4OIEqgZKoaxhnQ9j3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5q46rbG6VR9/dTI2L8AXtQtwmbcwHwYDVR0j BBgwFoAULzdF2yYwsdBKPmnkmhLtfdVlzIIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc4YThiMzktM2FlMy00ZGU3LTkzNjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIy NjMwQjFEMDRBM0U2OUU0OUExMkVEN0RENTY1Q0M4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjM3NDVEQjI2MzBCMUQwNEEzRTY5RTQ5QTEyRUQ3REQ1NjVD QzgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvMkYzNzQ1REIyNjMwQjFEMDRBM0U2OUU0OUExMkVE N0RENTY1Q0M4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED4MmDakyD0fdCmpPvgnidSa3csJ5v3rgnf yDJNjXMRedXA72/c0+xVwU1tDefoz9zwEUq9WirG51Z9BA8Uru/2sAw5IkpLZzH0 /bP4bymnKd6eARnrP3EtSZuH93zaQKNsOe3zzyK/g0NB6s02HuggmpIbTgSf7zQi CTbMjnN5yh2ImNwuPJWaeWjhcCOjbKRcNmAVC0ml2s3KGH7s6weM+U+2Fe+P7GxB 8Ib7KabCWtgq/nzuhTd7MzT7Uzi7eebBd7UyFyb78kyYX/fyqc8dThpH1p+PUoJM FRMzy7gf64twL+ejSfZW8d9eyBbGtI3VMV++mSS1dtJN96B4//g= -----END CERTIFICATE-----Generated at Wed May 13 00:13:41 2026 by rpki-client