$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: OTk4NUmAEslVAB8MHrFi8yEvUnOIsh/InoX5TUrrx4E= Subject key identifier: 35:EF:F6:A6:38:EF:6F:FA:49:4C:24:A8:6F:F4:45:37:2E:81:11:90 Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 685C633CD0EB2889AD54CF128737ACD330F84713 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:29:14 +0000 Manifest this update: Tue 12 May 2026 14:24:14 +0000 Manifest next update: Wed 13 May 2026 17:42:14 +0000 Files and hashes: 1: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: JlTOSuJx6YwoOPU9vHJJxhUcjGc2aOznLsgMkJsT1Kc=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5c:63:3c:d0:eb:28:89:ad:54:cf:12:87:37:ac:d3:30:f8:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: May 12 14:24:14 2026 GMT Not After : May 13 17:42:14 2026 GMT Subject: CN=35EFF6A638EF6FFA494C24A86FF445372E811190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:47:7a:f6:0c:67:2a:cb:d7:32:70:a6:46: d3:0a:37:75:c2:bc:db:d0:9f:47:2b:14:46:81:4c: ce:39:e3:56:aa:dc:15:74:cf:c5:6c:2e:02:6f:a8: 08:8b:30:20:00:5c:6a:87:80:68:c6:68:42:33:ae: 2f:f3:b0:5b:17:87:64:4b:45:93:33:7a:c0:7d:dc: 0b:a0:d6:0c:fb:1c:ae:e2:89:b1:b9:61:62:29:cb: a1:cf:98:38:f2:22:16:78:8b:cc:b6:8c:ac:ac:c6: d9:34:57:38:db:77:71:3f:c2:af:ae:c1:a0:d1:d7: 10:ef:72:c9:d3:8b:ee:cd:ad:f7:26:66:fa:ef:d5: 32:db:be:d5:fe:b5:32:5b:43:5b:dd:2b:f6:72:44: 85:f0:e0:b0:45:85:3e:3b:38:6e:28:c7:18:c2:b0: df:cd:c1:da:7e:d1:0b:44:51:5a:4e:51:f9:4d:8f: ef:ec:de:85:61:54:49:1d:4d:97:e7:df:d5:f2:3e: f1:85:54:3b:2f:7b:3e:02:96:2e:6d:ba:1a:cb:82: 2f:b6:fb:18:c7:08:c3:16:bc:9b:09:99:98:02:b8: cc:0b:e1:b0:8e:c9:d0:77:65:b6:1f:b7:c4:c2:4c: f2:bf:1f:2d:e6:9f:fd:8f:e7:7f:96:2b:45:b2:41: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:F6:A6:38:EF:6F:FA:49:4C:24:A8:6F:F4:45:37:2E:81:11:90 X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bb:03:16:e7:6e:f7:7a:5c:04:aa:04:39:95:18:e2:c2:b2: a4:9e:f8:a2:34:d4:d0:0d:5c:0d:b7:ad:b4:8a:e4:f9:88:bb: 20:9a:03:43:0c:04:4b:b7:01:40:e8:5f:62:97:51:fc:38:d7: 28:38:10:6d:9d:21:55:77:76:80:f6:26:ba:b8:21:b6:99:2d: 31:29:6d:9c:e6:c2:9c:f1:61:6e:84:2a:c8:56:bd:f9:93:2e: 8a:08:ac:4b:0a:d9:c8:78:44:71:92:8d:c8:fb:1b:17:c3:2d: b9:63:00:6a:fd:38:67:29:dd:77:03:f6:b7:49:04:db:c6:0a: a9:ad:38:5b:48:05:98:8a:fa:fa:7b:ca:3e:87:2d:aa:30:98: 1c:af:02:64:f2:4b:d0:6d:2d:82:b5:99:54:48:eb:8a:89:d7: e5:2f:f8:09:b6:2c:56:e6:37:9d:60:e6:6e:80:39:52:25:99: af:64:d8:80:f9:a9:ee:f7:93:ee:96:a0:1d:5c:4c:a8:81:e0: 5d:7a:e9:de:c3:ad:41:78:18:85:82:26:e1:f3:b5:58:68:c2: fe:d0:51:ca:58:0f:4b:cc:90:a6:40:bb:a4:6b:19:be:98:92: 35:a7:22:2c:34:cc:7a:50:6b:5c:3f:9a:36:51:a1:c8:bc:72: 74:3b:f5:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFxjPNDrKImtVM8Shzes0zD4RxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjA1MTIxNDI0MTRaFw0yNjA1MTMxNzQyMTRaMDMxMTAvBgNV BAMTKDM1RUZGNkE2MzhFRjZGRkE0OTRDMjRBODZGRjQ0NTM3MkU4MTExOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcw0d69gxnKsvXMnCmRtMKN3XC vNvQn0crFEaBTM4541aq3BV0z8VsLgJvqAiLMCAAXGqHgGjGaEIzri/zsFsXh2RL RZMzesB93Aug1gz7HK7iibG5YWIpy6HPmDjyIhZ4i8y2jKysxtk0Vzjbd3E/wq+u waDR1xDvcsnTi+7NrfcmZvrv1TLbvtX+tTJbQ1vdK/ZyRIXw4LBFhT47OG4oxxjC sN/Nwdp+0QtEUVpOUflNj+/s3oVhVEkdTZfn39XyPvGFVDsvez4Cli5tuhrLgi+2 +xjHCMMWvJsJmZgCuMwL4bCOydB3ZbYft8TCTPK/Hy3mn/2P53+WK0WyQSQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNe/2pjjvb/pJTCSob/RFNy6BEZAwHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm7Axbnbvd6XASqBDmVGOLCsqSe+KI01NAN XA23rbSK5PmIuyCaA0MMBEu3AUDoX2KXUfw41yg4EG2dIVV3doD2Jrq4IbaZLTEp bZzmwpzxYW6EKshWvfmTLooIrEsK2ch4RHGSjcj7GxfDLbljAGr9OGcp3XcD9rdJ BNvGCqmtOFtIBZiK+vp7yj6HLaowmByvAmTyS9BtLYK1mVRI64qJ1+Uv+Am2LFbm N51g5m6AOVIlma9k2ID5qe73k+6WoB1cTKiB4F166d7DrUF4GIWCJuHztVhowv7Q UcpYD0vMkKZAu6RrGb6YkjWnIiw0zHpQa1w/mjZRoci8cnQ79fs= -----END CERTIFICATE-----Generated at Tue May 12 22:13:07 2026 by rpki-client