$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: wLhFv7sqjbpDAUchPLV8BhTb0QAPAfOqzrsBG/LZEqE= Subject key identifier: 9D:0D:31:58:C4:9A:4D:F1:A3:07:FA:1E:0D:F3:7D:01:40:BA:D1:E3 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 5C3FC27216E1195FB5098F7FAA42E0FC040C5985 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:35:59 +0000 Manifest this update: Tue 12 May 2026 22:30:59 +0000 Manifest next update: Thu 14 May 2026 01:53:59 +0000 Files and hashes: 1: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 2: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: pzR7Imf4FbQjajNrgvRdJRImNttVF85rUlu7J/PG+Hw=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) 4: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3f:c2:72:16:e1:19:5f:b5:09:8f:7f:aa:42:e0:fc:04:0c:59:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: May 12 22:30:59 2026 GMT Not After : May 14 01:53:59 2026 GMT Subject: CN=9D0D3158C49A4DF1A307FA1E0DF37D0140BAD1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:90:b5:3a:d8:12:0b:34:ac:f0:39:76:ac: f0:0a:db:4f:50:c1:a9:34:bd:e2:0f:82:34:b3:e6: 51:94:90:d5:d2:ee:7d:57:28:9e:c5:68:9f:1a:aa: 7d:bc:75:28:f2:73:7e:4a:e9:1b:1e:28:bc:29:dc: 37:61:1b:57:16:d5:7b:ab:98:c8:33:02:62:fc:09: eb:46:0f:bc:67:82:26:0f:0f:14:91:4b:0e:f6:e8: de:1e:32:08:62:da:7d:21:a1:b3:77:f7:7f:c8:1d: c2:23:b3:0e:32:a8:b9:0d:60:70:90:5e:ab:7c:45: 73:1b:67:47:4f:10:06:47:03:a1:5b:6f:eb:c6:ff: e0:72:8a:2c:d9:bd:cf:9b:0f:9b:56:c9:b8:ae:e9: 96:0f:c7:25:fe:7e:76:b4:68:3f:44:5e:bb:7f:5b: e6:8f:e3:37:ed:49:3a:27:a4:6d:87:c1:c2:a6:fa: 9f:a4:10:59:a5:4a:c4:c7:6b:a6:9d:8a:1a:c7:43: af:ef:fc:50:b3:69:fc:0b:6c:ad:cd:c2:0b:e3:93: 87:fc:9c:36:40:5d:b4:16:ac:23:06:99:ff:35:69: 05:d6:dd:cf:82:1e:2c:f0:8c:a1:e7:e2:4e:55:4d: b2:01:57:d0:63:7b:8b:80:05:3e:4a:90:a6:10:46: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:31:58:C4:9A:4D:F1:A3:07:FA:1E:0D:F3:7D:01:40:BA:D1:E3 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5d:31:14:72:74:48:f7:a2:c9:05:58:cf:b3:fd:cf:3e:11: 3f:8e:2d:d5:c0:6d:ad:11:5f:75:33:82:63:b6:ee:ef:a9:f7: bf:f3:84:61:8b:5c:27:f8:3a:d4:13:f2:8c:ad:bd:d5:59:f5: d0:52:85:9b:48:93:06:65:3c:29:e8:7a:98:12:7d:46:ef:0d: d4:67:9e:15:9b:6f:7d:eb:7a:b9:c3:f7:f0:fd:fc:7d:82:fd: be:cf:93:28:b5:c5:dc:67:41:83:54:2a:68:de:2b:9a:2a:57: 87:1f:b1:b2:54:ea:2e:9d:2b:89:dc:ad:f8:e9:d2:f3:cb:80: 66:1f:05:8c:83:03:b2:69:0a:11:fc:eb:6f:e3:14:0f:98:aa: 74:5a:69:c9:fe:dc:6c:05:a5:91:bf:9a:73:71:1d:09:9e:36: c7:e8:3f:ac:b5:1b:65:73:e9:e0:22:e4:cb:5c:f5:81:17:2e: f8:49:c0:3a:0e:3c:50:b7:5d:9c:75:f2:8d:a2:24:49:6b:75: a8:4e:71:f5:04:75:f2:29:75:a8:ed:ff:e8:c9:83:5d:04:c3: f0:8d:da:79:51:08:32:48:40:80:0d:4d:b6:0c:c7:c9:73:ab: 07:76:08:02:31:9a:8d:76:6c:0a:98:7b:11:bb:37:3e:73:95: 9c:8c:92:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXD/CchbhGV+1CY9/qkLg/AQMWYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA1MTIyMjMwNTlaFw0yNjA1MTQwMTUzNTlaMDMxMTAvBgNV BAMTKDlEMEQzMTU4QzQ5QTRERjFBMzA3RkExRTBERjM3RDAxNDBCQUQxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiI5C1OtgSCzSs8Dl2rPAK209Q wak0veIPgjSz5lGUkNXS7n1XKJ7FaJ8aqn28dSjyc35K6RseKLwp3DdhG1cW1Xur mMgzAmL8CetGD7xngiYPDxSRSw726N4eMghi2n0hobN393/IHcIjsw4yqLkNYHCQ Xqt8RXMbZ0dPEAZHA6Fbb+vG/+ByiizZvc+bD5tWybiu6ZYPxyX+fna0aD9EXrt/ W+aP4zftSTonpG2HwcKm+p+kEFmlSsTHa6adihrHQ6/v/FCzafwLbK3Nwgvjk4f8 nDZAXbQWrCMGmf81aQXW3c+CHizwjKHn4k5VTbIBV9Bje4uABT5KkKYQRtLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQ0xWMSaTfGjB/oeDfN9AUC60eMwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKldMRRydEj3oskFWM+z/c8+ET+OLdXAba0R X3UzgmO27u+p97/zhGGLXCf4OtQT8oytvdVZ9dBShZtIkwZlPCnoepgSfUbvDdRn nhWbb33rernD9/D9/H2C/b7Pkyi1xdxnQYNUKmjeK5oqV4cfsbJU6i6dK4ncrfjp 0vPLgGYfBYyDA7JpChH862/jFA+YqnRaacn+3GwFpZG/mnNxHQmeNsfoP6y1G2Vz 6eAi5Mtc9YEXLvhJwDoOPFC3XZx18o2iJElrdahOcfUEdfIpdajt/+jJg10Ew/CN 2nlRCDJIQIANTbYMx8lzqwd2CAIxmo12bAqYexG7Nz5zlZyMkvk= -----END CERTIFICATE-----Generated at Wed May 13 03:51:33 2026 by rpki-client