$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: owACyoRhHCkFZTn56jUa6v7IgZPZJQQHZZAkGN46g44= Subject key identifier: 62:93:8F:1F:3B:D8:47:07:61:C7:65:F5:6D:90:3A:FF:14:EB:F4:05 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 149C0FD307C9732B89362994A0F2A9738ECA5D44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 07 Signing time: Wed 06 May 2026 20:37:58 +0000 Manifest this update: Wed 06 May 2026 20:32:58 +0000 Manifest next update: Thu 07 May 2026 21:18:58 +0000 Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 3: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 5: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: L81CjnCkjil1E6sSUacbta+aP2XER1gZevt+It9SEl0=) 6: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 21:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9c:0f:d3:07:c9:73:2b:89:36:29:94:a0:f2:a9:73:8e:ca:5d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: May 6 20:32:58 2026 GMT Not After : May 7 21:18:58 2026 GMT Subject: CN=62938F1F3BD8470761C765F56D903AFF14EBF405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:73:a3:6c:03:e3:60:b6:00:0c:df:94:f4: 7a:68:21:09:06:0a:e1:2c:11:98:57:ab:6e:b3:41: 7b:e4:3c:e0:4e:0f:18:9e:9b:e9:26:d4:26:42:62: 88:cf:57:c8:1d:1d:6b:d4:ad:c6:97:6d:50:06:60: 69:2a:85:a0:80:2c:7c:02:d5:8b:02:44:3b:54:11: 3c:2d:11:32:75:30:da:86:cc:54:a5:82:88:ef:da: db:86:69:fb:b2:25:83:01:73:d8:82:e7:5b:d5:6f: bc:27:39:3f:39:0e:40:9f:0d:f6:1b:41:49:64:f8: 41:5e:c8:31:b1:3b:c9:6f:5e:80:84:3d:44:61:b8: 1f:bc:1d:dd:4d:c3:43:a2:2e:9e:e4:4d:fb:23:e0: 96:b8:ca:24:f2:d5:bf:3f:56:1b:70:5f:6e:df:53: 77:0c:45:8c:89:70:bb:80:68:b1:a8:12:93:94:5f: 7a:1f:1d:dd:8b:12:31:6d:8b:a6:44:c9:44:0b:56: 0e:80:f8:26:76:5c:e4:69:d1:8a:3e:e3:d0:8b:10: 15:32:4f:a5:f1:9e:76:32:a6:41:1d:0f:2b:08:7c: 06:24:bd:c4:1a:35:39:f1:3e:82:29:37:85:fd:af: b4:89:ff:88:a6:22:92:52:c3:d7:92:d7:91:6a:3c: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:8F:1F:3B:D8:47:07:61:C7:65:F5:6D:90:3A:FF:14:EB:F4:05 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:df:09:57:39:41:c0:c8:ef:1c:57:69:a1:99:78:5c:c9:e9: 79:af:e4:3b:c9:d8:fb:54:75:36:99:e1:ea:93:d5:1f:7f:7d: 1b:ad:8e:16:15:06:e2:c3:ef:f0:e8:de:a3:46:e2:48:fb:8d: c4:14:d0:6f:3c:85:cc:33:9e:19:97:cb:71:5b:57:5a:96:27: 52:d4:f0:35:61:4a:fd:36:4b:7e:c0:b3:65:02:4c:59:84:bb: 67:62:86:0e:a4:81:d0:0b:57:38:8f:ad:86:ad:ce:b7:e0:d1: 6e:51:bf:1c:aa:f4:eb:78:9c:49:22:1b:94:59:e6:48:c6:6a: 72:66:76:31:92:f5:1c:58:59:2c:ab:fa:41:d0:cf:21:fd:8d: f9:80:92:8f:a8:87:6e:5f:b7:ae:d4:48:2d:0e:d3:06:c3:63: 18:9b:ff:0c:70:b6:bd:a6:54:7a:4f:49:24:24:41:24:7f:bf: 07:48:82:9c:19:71:e0:72:7e:bd:cc:4f:5f:d3:b6:6b:70:49: b7:de:74:11:98:2d:94:84:e4:b3:0b:8d:b0:1d:5b:d8:6e:df: 19:29:a6:04:6d:8d:07:ec:71:86:d2:37:c9:c5:57:a9:0f:f0: 8d:1f:36:f9:a2:65:5f:28:f4:95:f7:e9:a3:91:37:8c:62:e8: 58:1c:ba:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJwP0wfJcyuJNimUoPKpc47KXUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA1MDYyMDMyNThaFw0yNjA1MDcyMTE4NThaMDMxMTAvBgNV BAMTKDYyOTM4RjFGM0JEODQ3MDc2MUM3NjVGNTZEOTAzQUZGMTRFQkY0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRR3OjbAPjYLYADN+U9HpoIQkG CuEsEZhXq26zQXvkPOBODxiem+km1CZCYojPV8gdHWvUrcaXbVAGYGkqhaCALHwC 1YsCRDtUETwtETJ1MNqGzFSlgojv2tuGafuyJYMBc9iC51vVb7wnOT85DkCfDfYb QUlk+EFeyDGxO8lvXoCEPURhuB+8Hd1Nw0OiLp7kTfsj4Ja4yiTy1b8/VhtwX27f U3cMRYyJcLuAaLGoEpOUX3ofHd2LEjFti6ZEyUQLVg6A+CZ2XORp0Yo+49CLEBUy T6XxnnYypkEdDysIfAYkvcQaNTnxPoIpN4X9r7SJ/4imIpJSw9eS15FqPBstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpOPHzvYRwdhx2X1bZA6/xTr9AUwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDfCVc5QcDI7xxXaaGZeFzJ6Xmv5DvJ2PtU dTaZ4eqT1R9/fRutjhYVBuLD7/Do3qNG4kj7jcQU0G88hcwznhmXy3FbV1qWJ1LU 8DVhSv02S37As2UCTFmEu2dihg6kgdALVziPrYatzrfg0W5Rvxyq9Ot4nEkiG5RZ 5kjGanJmdjGS9RxYWSyr+kHQzyH9jfmAko+oh25ft67USC0O0wbDYxib/wxwtr2m VHpPSSQkQSR/vwdIgpwZceByfr3MT1/TtmtwSbfedBGYLZSE5LMLjbAdW9hu3xkp pgRtjQfscYbSN8nFV6kP8I0fNvmiZV8o9JX36aORN4xi6FgcuhY= -----END CERTIFICATE-----Generated at Thu May 7 04:53:35 2026 by rpki-client