$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: 82WOLxs+gJvj4uv8QX6es/HFQAslgH4E21Snc1BUsBs= Subject key identifier: C7:02:18:C9:B7:BC:C7:85:AF:A4:28:EA:05:91:56:5E:0B:09:D1:4D Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 3B32592594705F4560539919696CDF182D8F7A40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:36 +0000 Manifest this update: Tue 12 May 2026 14:54:36 +0000 Manifest next update: Wed 13 May 2026 15:54:36 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) 2: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: /ppfjke2QPbCIIKISJspLlG9Ay2TfyayAPfcrB9DE1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:32:59:25:94:70:5f:45:60:53:99:19:69:6c:df:18:2d:8f:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: May 12 14:54:36 2026 GMT Not After : May 13 15:54:36 2026 GMT Subject: CN=C70218C9B7BCC785AFA428EA0591565E0B09D14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:21:8c:32:dc:68:72:69:2f:7e:12:fc:ec: 93:be:d6:e5:9e:65:63:9a:a1:a3:01:97:06:8c:e7: 9d:e9:a3:15:67:f5:ea:23:cf:99:37:44:a9:d2:54: a9:2e:e1:6e:cf:d1:32:6f:13:65:f1:6e:4c:e6:fd: 8a:a9:1a:4a:e7:9e:c7:47:97:66:42:f9:6d:9b:96: 93:4a:72:74:fa:c4:8a:5f:35:8c:cf:dd:06:ba:39: 41:42:ab:44:26:ce:9b:4f:39:a4:d8:fd:1b:89:fe: 7e:9c:46:db:5f:ba:a2:e2:7b:61:d4:7a:0b:c8:2a: ea:8a:8d:be:9b:49:7d:a8:bf:51:1e:2a:3c:54:e3: 3d:43:77:4f:0c:65:2b:8a:db:06:98:40:7f:c6:ff: e8:b3:71:52:48:16:76:50:05:34:b4:32:6f:9e:47: 07:93:37:b9:be:28:ea:ab:b4:b7:74:2e:8a:c9:d5: b8:05:e8:a5:5b:d5:f0:2f:b0:90:ce:36:41:d1:4d: 80:7e:52:eb:12:da:0a:92:09:89:96:d0:bd:e6:cf: 57:1a:ed:30:74:02:6e:95:49:32:a7:bc:b1:43:66: 9c:55:2c:ee:25:bb:01:49:6b:92:1a:70:a3:4e:f7: 74:90:4a:06:9b:79:68:d1:e1:89:3b:c0:72:3c:54: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:18:C9:B7:BC:C7:85:AF:A4:28:EA:05:91:56:5E:0B:09:D1:4D X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:87:ba:e8:48:c1:53:d0:36:ed:8d:87:4d:f1:51:8a:7f:6d: 73:97:b3:6f:0f:ba:e9:9b:42:28:01:65:af:84:ab:08:42:05: f9:50:fb:f0:68:13:97:33:8e:fc:c7:56:36:1c:39:a0:ab:59: 6d:5b:a1:48:9f:8c:6c:c7:a4:aa:05:5f:09:ca:8b:f6:52:f6: 8f:a2:87:51:a3:fc:bf:04:92:fc:5c:3f:60:a6:31:3f:74:b3: 4b:88:16:b3:3e:f0:3f:d1:0a:49:21:0e:cd:b4:f6:c3:b8:d7: 11:35:15:7d:35:86:7e:d8:74:f7:e2:26:2e:39:98:8b:c0:cf: 89:5d:f7:ee:a8:66:e2:14:fa:3e:93:01:9d:1d:4f:9c:0e:5a: 48:93:5e:a5:6f:1b:f1:93:e7:02:b7:3d:aa:c8:00:e9:81:95: 75:6f:fa:eb:8b:9e:35:1b:13:71:29:53:88:ab:f8:78:59:46: 0d:bb:f7:ff:9d:f4:c1:2d:7f:16:03:45:da:18:c5:e0:a4:09: c6:f6:ef:16:44:ec:64:18:7a:6f:62:ca:bb:38:f5:c4:47:63: 0c:9e:10:81:06:7c:b1:74:3c:72:94:bc:53:1f:d0:00:64:a0: 32:f3:a8:00:40:8e:07:bf:1f:12:05:d3:4a:ba:1a:f3:f0:08: 8b:cb:fc:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzJZJZRwX0VgU5kZaWzfGC2PekAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA1MTIxNDU0MzZaFw0yNjA1MTMxNTU0MzZaMDMxMTAvBgNV BAMTKEM3MDIxOEM5QjdCQ0M3ODVBRkE0MjhFQTA1OTE1NjVFMEIwOUQxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKSGMMtxocmkvfhL87JO+1uWe ZWOaoaMBlwaM553poxVn9eojz5k3RKnSVKku4W7P0TJvE2Xxbkzm/YqpGkrnnsdH l2ZC+W2blpNKcnT6xIpfNYzP3Qa6OUFCq0QmzptPOaTY/RuJ/n6cRttfuqLie2HU egvIKuqKjb6bSX2ov1EeKjxU4z1Dd08MZSuK2waYQH/G/+izcVJIFnZQBTS0Mm+e RweTN7m+KOqrtLd0LorJ1bgF6KVb1fAvsJDONkHRTYB+UusS2gqSCYmW0L3mz1ca 7TB0Am6VSTKnvLFDZpxVLO4luwFJa5IacKNO93SQSgabeWjR4Yk7wHI8VLRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxwIYybe8x4WvpCjqBZFWXgsJ0U0wHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWHuuhIwVPQNu2Nh03xUYp/bXOXs28Puumb QigBZa+EqwhCBflQ+/BoE5czjvzHVjYcOaCrWW1boUifjGzHpKoFXwnKi/ZS9o+i h1Gj/L8EkvxcP2CmMT90s0uIFrM+8D/RCkkhDs209sO41xE1FX01hn7YdPfiJi45 mIvAz4ld9+6oZuIU+j6TAZ0dT5wOWkiTXqVvG/GT5wK3ParIAOmBlXVv+uuLnjUb E3EpU4ir+HhZRg279/+d9MEtfxYDRdoYxeCkCcb27xZE7GQYem9iyrs49cRHYwye EIEGfLF0PHKUvFMf0ABkoDLzqABAjge/HxIF00q6GvPwCIvL/Iw= -----END CERTIFICATE-----Generated at Wed May 13 01:14:18 2026 by rpki-client