$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: eoYx5cmaIcqqRin+wDtOVDemn+demuFfSjduiFL8GVQ= Subject key identifier: CE:18:DC:E9:29:3A:73:2A:8D:FA:91:39:44:D6:33:4A:AE:06:35:FC Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 369DF137A9F7DDAB9957440F4037BA6F60ADCB73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 14 Signing time: Sat 16 May 2026 18:18:16 +0000 Manifest this update: Sat 16 May 2026 18:13:16 +0000 Manifest next update: Sun 17 May 2026 22:03:16 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 3: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: nIaEfxED1J5jsZDGJRI2Ju8pEyZ7HCwXZ1TrNb6rbPA=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9d:f1:37:a9:f7:dd:ab:99:57:44:0f:40:37:ba:6f:60:ad:cb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: May 16 18:13:16 2026 GMT Not After : May 17 22:03:16 2026 GMT Subject: CN=CE18DCE9293A732A8DFA913944D6334AAE0635FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:63:a5:35:eb:7e:ef:87:d2:fb:0b:ba:e0: 54:e2:5f:3d:81:96:48:71:14:4e:9b:f5:14:29:60: 94:a6:bf:93:1e:3f:85:4a:24:10:a1:68:84:29:f5: 06:9f:da:c7:32:f9:30:b3:5d:21:35:36:d9:3c:32: f1:52:8f:ee:5c:6a:b1:01:d6:34:f1:89:8a:0d:60: 81:3d:a4:a9:2d:7e:59:db:50:bc:9c:61:2c:e3:a2: fb:d5:2f:c2:98:d4:a1:27:16:9e:dc:d9:d8:d0:c8: 02:32:5c:bb:ea:b0:7d:4c:99:8a:b3:2d:76:b8:ff: f8:41:dd:58:1b:f4:54:fa:46:62:ff:26:98:1d:ec: b0:69:bd:6b:70:df:0c:4f:44:66:38:bc:c5:3e:e8: b5:bb:09:52:85:e8:24:00:65:91:21:e7:fb:5f:e6: f3:59:40:0a:1a:16:88:89:7b:e7:a5:aa:fa:bb:38: 0c:7c:48:ea:4a:b4:00:e1:29:35:1d:45:9a:aa:c8: bf:7f:2e:fe:6a:40:84:f3:79:c9:ac:20:e2:03:bc: 6d:ad:27:02:1f:5f:ab:ae:b5:9f:e9:8c:b0:b5:93: a8:2e:6c:9c:ed:d6:6e:31:e5:ae:3c:54:57:04:aa: d7:06:43:56:eb:57:57:0b:12:b6:f4:b0:82:08:c7: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:DC:E9:29:3A:73:2A:8D:FA:91:39:44:D6:33:4A:AE:06:35:FC X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:65:e1:a8:38:47:63:09:24:0d:72:59:7b:d1:19:20:12: 95:fa:68:74:00:15:c4:b7:77:4d:e1:27:d7:77:84:23:ab:f6: ea:55:d3:ee:c6:21:7b:66:a6:5f:41:fd:92:0d:7b:a8:4b:7b: 89:11:fe:eb:92:6a:17:a2:f6:cf:33:6c:a2:ff:ab:af:36:e9: 31:b6:79:f2:36:21:58:62:b2:8c:fa:8c:57:75:13:bd:dd:35: 4e:1e:a8:01:a2:5b:b9:73:2e:65:59:8a:ce:d9:25:17:6a:f1: b8:5d:7f:1a:5b:b3:ea:33:eb:4a:9c:4d:8a:d2:db:71:5f:0d: 12:1b:90:33:ba:b5:70:94:eb:67:d4:7e:54:ef:47:08:c5:87: 88:57:fd:43:9c:e2:56:96:63:6a:7b:fc:9d:fd:13:f9:8a:06: 23:c8:11:6e:af:ca:8d:39:d8:31:2e:94:e7:a6:27:88:6d:71: 1b:2a:ad:56:be:7f:95:49:80:37:77:a0:68:1f:62:90:1a:30: 4c:c9:d6:ec:5e:97:9f:56:f5:7c:ad:38:9f:00:a3:2b:a9:0c: 35:e6:97:e0:69:49:b4:2a:71:86:45:9c:d3:16:46:c2:2b:1f: 4b:50:22:84:76:cf:29:25:ef:de:8f:7c:f2:76:5b:7a:0b:62: 3a:7a:3b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNp3xN6n33auZV0QPQDe6b2Cty3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA1MTYxODEzMTZaFw0yNjA1MTcyMjAzMTZaMDMxMTAvBgNV BAMTKENFMThEQ0U5MjkzQTczMkE4REZBOTEzOTQ0RDYzMzRBQUUwNjM1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG2mOlNet+74fS+wu64FTiXz2B lkhxFE6b9RQpYJSmv5MeP4VKJBChaIQp9Qaf2scy+TCzXSE1Ntk8MvFSj+5carEB 1jTxiYoNYIE9pKktflnbULycYSzjovvVL8KY1KEnFp7c2djQyAIyXLvqsH1MmYqz LXa4//hB3Vgb9FT6RmL/Jpgd7LBpvWtw3wxPRGY4vMU+6LW7CVKF6CQAZZEh5/tf 5vNZQAoaFoiJe+elqvq7OAx8SOpKtADhKTUdRZqqyL9/Lv5qQITzecmsIOIDvG2t JwIfX6uutZ/pjLC1k6gubJzt1m4x5a48VFcEqtcGQ1brV1cLErb0sIIIx3srAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhjc6Sk6cyqN+pE5RNYzSq4GNfwwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsgZeGoOEdjCSQNcll70RkgEpX6aHQAFcS3 d03hJ9d3hCOr9upV0+7GIXtmpl9B/ZINe6hLe4kR/uuSahei9s8zbKL/q6826TG2 efI2IVhisoz6jFd1E73dNU4eqAGiW7lzLmVZis7ZJRdq8bhdfxpbs+oz60qcTYrS 23FfDRIbkDO6tXCU62fUflTvRwjFh4hX/UOc4laWY2p7/J39E/mKBiPIEW6vyo05 2DEulOemJ4htcRsqrVa+f5VJgDd3oGgfYpAaMEzJ1uxel59W9XytOJ8AoyupDDXm l+BpSbQqcYZFnNMWRsIrH0tQIoR2zykl796PfPJ2W3oLYjp6O7g= -----END CERTIFICATE-----Generated at Sun May 17 00:04:13 2026 by rpki-client