$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: sw2Mh9BhFK/n6kkQEGJm7gDeHhie39AhZis3YAypzlI= Subject key identifier: AC:BE:39:2E:29:C0:06:CB:5E:06:08:03:9C:07:EB:6C:71:E1:C1:CD Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 5881DCB0A32623FB51730F76CA7647664C4EFEFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:07:04 +0000 Manifest this update: Tue 16 Jun 2026 23:02:04 +0000 Manifest next update: Thu 18 Jun 2026 03:02:04 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: A8zXvueEPTzpl/x/t/rOG2SHKxb3TwEuSXjzE8TUftg=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:81:dc:b0:a3:26:23:fb:51:73:0f:76:ca:76:47:66:4c:4e:fe:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Jun 16 23:02:04 2026 GMT Not After : Jun 18 03:02:04 2026 GMT Subject: CN=ACBE392E29C006CB5E0608039C07EB6C71E1C1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:e1:10:f7:d0:13:13:d7:e2:97:37:a6:f5: 4d:91:1c:5f:8d:47:81:c3:69:07:a2:9d:48:6e:30: c9:ea:0c:b7:e7:74:4e:c1:da:6b:6b:74:56:57:57: ef:05:ec:2d:04:b6:6f:0c:01:7c:b5:dc:ed:1f:91: f8:65:2a:b9:83:51:ea:12:c1:99:3e:a2:0f:30:b5: a9:99:ca:5d:4e:ef:b2:f5:eb:2a:23:20:25:64:0f: eb:03:90:4a:79:f1:32:31:ce:61:3b:7b:5c:bc:87: db:3a:3f:32:61:e8:2f:63:b0:7f:ef:53:b5:47:4a: 17:1f:fc:1a:69:4f:e8:d1:5a:12:a2:72:a7:8e:4b: f3:2a:9b:ca:0b:46:c9:fe:91:54:bd:99:8c:33:14: 27:79:a0:e1:cf:af:1a:2e:64:41:4e:84:67:56:94: 26:56:d9:21:6c:41:cb:03:a8:0f:f2:88:70:7d:01: 2d:6b:cd:39:4a:1d:a4:1f:d2:03:be:4b:a0:9a:6a: a9:97:75:d8:53:a3:a4:e4:d2:6c:8b:19:80:d9:25: 99:2a:30:51:68:92:fa:c8:a9:f8:e8:d0:12:03:7e: c4:dc:fc:9a:f8:de:2e:37:28:0e:50:dc:16:47:de: 77:ab:1e:d9:9c:3b:5b:53:a7:1a:f2:76:37:7e:58: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:39:2E:29:C0:06:CB:5E:06:08:03:9C:07:EB:6C:71:E1:C1:CD X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0a:0c:85:59:c4:a2:53:04:c0:65:9f:cb:2d:db:c7:6d:b5: 4d:fc:33:dc:b7:3d:1a:69:a9:e4:64:81:9c:09:3e:d8:10:1f: c9:e6:4a:99:33:2d:5e:26:e6:0c:cf:27:73:3a:37:95:65:97: b2:de:3b:ea:33:05:7a:a0:15:07:8f:91:5f:c7:ab:e6:e9:db: ed:3e:6f:9f:3c:04:81:f9:93:d8:48:6d:69:ae:37:2c:fa:2b: ba:da:64:eb:79:b0:bd:ec:c4:45:e8:83:02:3a:aa:f0:85:a7: 8d:a7:34:6d:22:d7:24:cb:83:49:dc:53:94:39:2c:bb:60:e0: 78:27:1f:4b:df:75:9e:f6:ad:df:38:6d:6c:65:61:5c:bc:27: 55:f0:34:89:05:ce:97:78:5c:ad:0e:21:8e:3d:ed:7e:cf:f3: 85:60:7e:3b:ba:a8:55:04:5b:80:ea:70:da:ec:bf:e7:bf:a9: 52:9a:af:fa:92:88:65:32:7f:5b:01:bc:df:8e:31:cc:e8:40: bc:b4:10:d4:fc:0e:80:98:b4:f0:6c:b8:d9:8c:39:73:75:6e: 12:02:1c:61:fe:d8:c9:36:a1:8c:66:da:d7:dc:1a:bd:d4:b8: aa:ce:66:b0:2f:bd:32:e2:a6:09:8e:01:0a:66:dc:6e:f4:b3: 00:9a:96:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIHcsKMmI/tRcw92ynZHZkxO/vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA2MTYyMzAyMDRaFw0yNjA2MTgwMzAyMDRaMDMxMTAvBgNV BAMTKEFDQkUzOTJFMjlDMDA2Q0I1RTA2MDgwMzlDMDdFQjZDNzFFMUMxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajeEQ99ATE9filzem9U2RHF+N R4HDaQeinUhuMMnqDLfndE7B2mtrdFZXV+8F7C0Etm8MAXy13O0fkfhlKrmDUeoS wZk+og8wtamZyl1O77L16yojICVkD+sDkEp58TIxzmE7e1y8h9s6PzJh6C9jsH/v U7VHShcf/BppT+jRWhKicqeOS/Mqm8oLRsn+kVS9mYwzFCd5oOHPrxouZEFOhGdW lCZW2SFsQcsDqA/yiHB9AS1rzTlKHaQf0gO+S6CaaqmXddhTo6Tk0myLGYDZJZkq MFFokvrIqfjo0BIDfsTc/Jr43i43KA5Q3BZH3nerHtmcO1tTpxrydjd+WI+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrL45LinABsteBggDnAfrbHHhwc0wHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0KDIVZxKJTBMBln8st28dttU38M9y3PRpp qeRkgZwJPtgQH8nmSpkzLV4m5gzPJ3M6N5Vll7LeO+ozBXqgFQePkV/Hq+bp2+0+ b588BIH5k9hIbWmuNyz6K7raZOt5sL3sxEXogwI6qvCFp42nNG0i1yTLg0ncU5Q5 LLtg4HgnH0vfdZ72rd84bWxlYVy8J1XwNIkFzpd4XK0OIY497X7P84Vgfju6qFUE W4DqcNrsv+e/qVKar/qSiGUyf1sBvN+OMczoQLy0ENT8DoCYtPBsuNmMOXN1bhIC HGH+2Mk2oYxm2tfcGr3UuKrOZrAvvTLipgmOAQpm3G70swCalvc= -----END CERTIFICATE-----Generated at Wed Jun 17 08:33:53 2026 by rpki-client