$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: w4uFhOc68L0XFsexrrZnMxXbPNd6gIvc2gO/rQBaxtI= Subject key identifier: 7A:FE:57:DB:8F:94:BA:AD:14:86:48:CC:1A:7F:63:6D:C8:EF:1D:69 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 6FF3BCE67C1955D89BAAB03AEC1B35C6AF184E91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:17:05 +0000 Manifest this update: Tue 12 May 2026 06:12:05 +0000 Manifest next update: Wed 13 May 2026 09:46:05 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 2: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: hpsoZmiKwjYHv0ZLNV70z7wh5rcOHZVmmDBl56o68/w=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f3:bc:e6:7c:19:55:d8:9b:aa:b0:3a:ec:1b:35:c6:af:18:4e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: May 12 06:12:05 2026 GMT Not After : May 13 09:46:05 2026 GMT Subject: CN=7AFE57DB8F94BAAD148648CC1A7F636DC8EF1D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:d7:3b:11:fc:d7:82:0e:e0:1b:df:31:eb: 4b:ef:4b:a7:39:77:3b:54:c2:e9:da:3b:c7:5f:f1: 76:0a:52:80:d3:5b:c0:03:21:24:7e:bc:d0:ad:a4: 71:28:0d:11:35:92:f0:34:d4:85:5f:b1:96:f2:35: 93:a2:89:b5:ac:0b:1f:78:e3:90:ba:8e:84:28:6f: d9:8f:8d:42:eb:ed:c6:8a:be:01:61:1b:85:a7:b0: 1b:30:19:40:01:a8:4a:be:34:34:cb:04:89:6a:34: ed:1a:7e:fc:b0:c2:62:21:d5:7a:8b:fc:53:8a:9d: 32:53:38:7b:43:46:67:7e:e1:1a:85:f9:ab:fd:78: 35:da:58:e7:c4:8a:10:74:36:b5:73:0f:83:88:44: 1e:b7:de:45:6f:7c:c2:81:d1:0f:4a:45:7d:6e:a8: 25:57:2a:68:32:db:99:de:9e:e0:a5:4d:80:e5:98: 9e:cf:29:55:d1:d0:b7:b3:50:2d:c1:4a:8e:54:78: be:c2:8f:7c:76:6b:f1:8f:85:69:46:ef:c7:46:e5: 8c:ce:48:21:e9:91:cf:24:f1:f9:fc:1a:b6:9a:07: d4:0c:c7:ae:84:50:9c:74:5f:0e:93:9e:34:a4:ac: 53:5a:56:f7:6d:f1:f6:ae:d6:b9:65:9e:3e:c6:61: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FE:57:DB:8F:94:BA:AD:14:86:48:CC:1A:7F:63:6D:C8:EF:1D:69 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:44:df:a0:c7:8f:61:6d:fb:74:08:bc:da:d3:6a:3e:b0:b1: 6b:cd:90:90:34:06:99:df:d7:68:1b:89:23:e4:b9:5d:39:37: cd:83:6e:70:f7:c9:5c:6d:e2:7a:14:01:a8:e3:2e:88:0a:01: ac:dd:ec:8c:f2:1b:f8:12:c2:82:ed:22:7f:79:80:41:b5:05: e4:2c:37:ca:9a:ca:3b:e2:8c:e5:73:be:54:2d:84:11:7d:b9: 77:c3:6a:4f:ee:98:5b:72:a8:59:75:88:56:ae:02:25:c7:3a: 16:2d:ed:b8:b6:83:e4:fd:ba:b8:8f:78:05:41:17:25:e6:2d: 86:a9:fb:47:90:c6:ea:be:c1:c0:37:6a:bd:9d:32:fd:25:57: 9e:d5:9f:e0:7a:57:4d:3e:03:a4:0c:a5:4d:89:7f:3b:8c:3e: 1d:2b:4c:7b:a7:21:43:0d:e4:e0:ec:c0:52:77:11:cb:c9:ef: 0c:ab:aa:50:01:1f:fa:be:97:1b:f9:7d:5b:f8:b2:ac:8f:ea: a1:07:39:1a:19:a3:5b:db:e0:ae:01:c1:7b:bc:37:bd:4c:99: c3:a8:74:0d:df:65:d1:3b:20:9e:0b:3b:42:ce:0f:9f:f4:a2: e0:3a:26:ce:02:56:75:ef:c7:cf:f4:25:38:42:d9:2d:63:aa: 73:e2:8a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/O85nwZVdibqrA67Bs1xq8YTpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA1MTIwNjEyMDVaFw0yNjA1MTMwOTQ2MDVaMDMxMTAvBgNV BAMTKDdBRkU1N0RCOEY5NEJBQUQxNDg2NDhDQzFBN0Y2MzZEQzhFRjFENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReNc7EfzXgg7gG98x60vvS6c5 dztUwunaO8df8XYKUoDTW8ADISR+vNCtpHEoDRE1kvA01IVfsZbyNZOiibWsCx94 45C6joQob9mPjULr7caKvgFhG4WnsBswGUABqEq+NDTLBIlqNO0afvywwmIh1XqL /FOKnTJTOHtDRmd+4RqF+av9eDXaWOfEihB0NrVzD4OIRB633kVvfMKB0Q9KRX1u qCVXKmgy25nenuClTYDlmJ7PKVXR0LezUC3BSo5UeL7Cj3x2a/GPhWlG78dG5YzO SCHpkc8k8fn8GraaB9QMx66EUJx0Xw6TnjSkrFNaVvdt8fau1rllnj7GYYPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUev5X24+Uuq0UhkjMGn9jbcjvHWkwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtE36DHj2Ft+3QIvNrTaj6wsWvNkJA0Bpnf 12gbiSPkuV05N82DbnD3yVxt4noUAajjLogKAazd7IzyG/gSwoLtIn95gEG1BeQs N8qayjvijOVzvlQthBF9uXfDak/umFtyqFl1iFauAiXHOhYt7bi2g+T9uriPeAVB FyXmLYap+0eQxuq+wcA3ar2dMv0lV57Vn+B6V00+A6QMpU2JfzuMPh0rTHunIUMN 5ODswFJ3EcvJ7wyrqlABH/q+lxv5fVv4sqyP6qEHORoZo1vb4K4BwXu8N71MmcOo dA3fZdE7IJ4LO0LOD5/0ouA6Js4CVnXvx8/0JThC2S1jqnPiikE= -----END CERTIFICATE-----Generated at Wed May 13 02:27:18 2026 by rpki-client