$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: nHgP85BgJhUSKrA9o1xkn38w9cklcCjcybV/C0rvEZw= Subject key identifier: DE:CF:25:96:EC:F3:87:BF:E7:9E:83:EA:F3:FA:F5:11:65:6A:86:AA Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 3264B0426C70E2A4AAE0F005188E5A141B0F0C66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:45:52 +0000 Manifest this update: Tue 05 May 2026 08:40:52 +0000 Manifest next update: Wed 06 May 2026 10:54:52 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 2: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: 5WFQbJPhEWwfD/WtzhGD64Fd4HEnE7Yz5VYnXJPMoXs=) 3: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:64:b0:42:6c:70:e2:a4:aa:e0:f0:05:18:8e:5a:14:1b:0f:0c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: May 5 08:40:52 2026 GMT Not After : May 6 10:54:52 2026 GMT Subject: CN=DECF2596ECF387BFE79E83EAF3FAF511656A86AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:59:d0:89:4e:71:3a:7f:e9:c4:1f:f0:0a: e8:ec:49:5d:3d:30:b8:cc:48:3e:ec:6b:87:c1:6e: 11:55:a4:69:6c:63:84:e8:95:8a:22:77:ff:de:f4: 42:fa:d9:80:68:06:eb:32:f4:44:e2:82:26:4b:7c: a1:c8:ae:d2:b4:18:1c:54:2e:ef:49:78:c2:87:c0: db:89:be:e9:f8:98:90:0c:0c:39:0e:aa:1a:61:13: b4:8b:af:e9:21:2d:71:fe:b9:75:0c:fb:e7:06:6b: 5e:fe:f5:08:bd:35:16:28:4d:e1:fc:d1:86:bf:57: 88:a7:6f:c2:c9:df:47:ad:15:61:6c:0b:b6:0a:a9: 85:0f:02:93:c4:fd:2d:84:c8:d8:89:be:be:68:3f: c9:f3:54:0e:65:47:cf:47:7f:89:98:8f:4b:de:94: 03:80:8e:30:25:f2:13:a6:e2:86:2e:e2:3e:05:a7: cd:98:b0:94:a7:a0:c7:5e:97:1e:f9:3e:dc:15:32: 77:e3:83:ae:b5:67:81:f6:45:45:13:8a:e4:e4:04: 3c:f8:38:29:d4:7f:b3:5a:3f:7f:60:3c:d4:e7:6b: 0e:1d:2b:c0:9a:e0:9e:11:31:ed:26:2a:33:39:b5: f8:ce:73:ef:2b:0c:a8:3c:83:d7:c3:06:e3:22:70: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:25:96:EC:F3:87:BF:E7:9E:83:EA:F3:FA:F5:11:65:6A:86:AA X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:24:6a:03:c1:67:fe:0b:ad:b1:df:1b:fb:d3:7a:69:95:a6: 74:72:b8:ea:3b:a9:2e:08:9d:e7:83:49:74:cc:bd:2f:4e:a1: 35:87:b0:88:c4:74:14:1b:f3:84:96:ae:c4:09:eb:ec:a1:91: 5e:55:de:60:e3:5b:65:3c:d3:96:00:7f:13:9c:54:c3:0e:4e: 18:b7:0d:eb:42:a6:1c:5b:a3:b6:5b:ea:9f:a1:ea:20:e0:72: 80:84:f9:31:c1:a3:1c:23:78:06:51:2b:34:f3:4f:e3:64:ef: 90:84:b2:65:a2:23:e8:20:18:f8:07:71:d3:ad:ed:1a:9d:e1: fe:1f:04:9a:53:1c:e4:af:bd:a3:de:f8:ca:3c:e2:18:e9:ec: d0:c0:12:ef:33:f0:f1:33:59:b3:ca:99:12:6d:93:9e:e1:88: ce:78:79:8c:63:36:0c:0c:c2:87:eb:9b:82:96:c2:2c:73:32: f8:4d:85:d0:10:58:c5:f4:63:8a:57:25:6f:6a:9a:e6:4b:d0: f7:28:15:48:a0:f3:3a:a7:ff:f2:71:b7:2b:80:64:ab:fa:e8: 5d:9b:3e:e2:92:95:a2:00:67:5b:77:0d:80:5c:d1:c0:c5:f2: dc:18:6b:72:ba:ad:cb:d4:f3:6e:db:8e:33:57:a4:13:94:d3: 21:7a:49:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmSwQmxw4qSq4PAFGI5aFBsPDGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA1MDUwODQwNTJaFw0yNjA1MDYxMDU0NTJaMDMxMTAvBgNV BAMTKERFQ0YyNTk2RUNGMzg3QkZFNzlFODNFQUYzRkFGNTExNjU2QTg2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2VnQiU5xOn/pxB/wCujsSV09 MLjMSD7sa4fBbhFVpGlsY4TolYoid//e9EL62YBoBusy9ETigiZLfKHIrtK0GBxU Lu9JeMKHwNuJvun4mJAMDDkOqhphE7SLr+khLXH+uXUM++cGa17+9Qi9NRYoTeH8 0Ya/V4inb8LJ30etFWFsC7YKqYUPApPE/S2EyNiJvr5oP8nzVA5lR89Hf4mYj0ve lAOAjjAl8hOm4oYu4j4Fp82YsJSnoMdelx75PtwVMnfjg661Z4H2RUUTiuTkBDz4 OCnUf7NaP39gPNTnaw4dK8Ca4J4RMe0mKjM5tfjOc+8rDKg8g9fDBuMicFm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3s8lluzzh7/nnoPq8/r1EWVqhqowHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQkagPBZ/4LrbHfG/vTemmVpnRyuOo7qS4I neeDSXTMvS9OoTWHsIjEdBQb84SWrsQJ6+yhkV5V3mDjW2U805YAfxOcVMMOThi3 DetCphxbo7Zb6p+h6iDgcoCE+THBoxwjeAZRKzTzT+Nk75CEsmWiI+ggGPgHcdOt 7Rqd4f4fBJpTHOSvvaPe+Mo84hjp7NDAEu8z8PEzWbPKmRJtk57hiM54eYxjNgwM wofrm4KWwixzMvhNhdAQWMX0Y4pXJW9qmuZL0PcoFUig8zqn//JxtyuAZKv66F2b PuKSlaIAZ1t3DYBc0cDF8twYa3K6rcvU827bjjNXpBOU0yF6STk= -----END CERTIFICATE-----Generated at Tue May 5 14:17:18 2026 by rpki-client