$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: ycPWuBpqZtMXcpEi7Rt1c4iJtDtquBLvjpK91J2+kGM= Subject key identifier: F2:0E:5D:CE:C7:B6:5A:D2:2B:07:C2:77:A6:C8:C4:0B:FD:03:E1:9A Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 55763E3E7F7715F4681B95512A447F5BEEE51F3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:33:37 +0000 Manifest this update: Wed 17 Jun 2026 00:28:37 +0000 Manifest next update: Thu 18 Jun 2026 04:29:37 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 4: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: PWEVxwtdK3dvjth2hzy8kNTVrIsgBCg9xbHjeAqXq6k=) 5: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 6: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:76:3e:3e:7f:77:15:f4:68:1b:95:51:2a:44:7f:5b:ee:e5:1f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Jun 17 00:28:37 2026 GMT Not After : Jun 18 04:29:37 2026 GMT Subject: CN=F20E5DCEC7B65AD22B07C277A6C8C40BFD03E19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:43:71:33:ea:66:ec:43:82:77:98:2b:59: 14:16:1a:2a:6a:d8:73:04:9e:52:e5:7a:5e:62:12: 29:b4:a3:09:b8:3d:55:7c:14:f9:56:95:60:f9:50: 05:74:40:80:72:75:22:c6:c3:c0:6e:55:6a:12:82: 30:da:6b:dd:d3:45:bd:7c:d7:48:43:52:7d:df:c5: d7:3d:aa:cd:16:3d:64:3d:19:19:64:81:3d:c4:0d: 32:ab:37:eb:b1:ce:53:2c:cd:e2:81:3c:09:8e:6f: e3:db:1a:58:3c:b3:58:be:dd:f8:20:1f:1a:33:d1: 51:1b:3c:a7:9e:00:e6:82:3b:a2:c9:95:77:9e:52: ce:6a:48:02:80:31:a4:e6:7d:33:6a:90:35:84:a5: 2b:cd:7f:c5:3c:ae:00:07:2d:bb:06:7a:c8:09:82: a6:b5:5e:52:3d:47:aa:df:7b:c5:93:3f:4a:69:75: 3f:ba:4d:f2:d4:ae:1a:8d:6a:60:1c:b0:51:e2:ef: 27:cb:f0:7c:3a:1f:a1:df:90:36:e2:8d:62:93:fe: b9:61:3d:d9:35:70:50:86:33:b3:a9:7e:fb:40:52: 4a:4b:35:f7:e8:5f:58:09:d7:c7:8a:49:6d:0f:f3: d0:89:f8:d3:6c:ce:11:19:d1:b2:d8:e2:98:b4:f6: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:5D:CE:C7:B6:5A:D2:2B:07:C2:77:A6:C8:C4:0B:FD:03:E1:9A X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:00:f6:7d:45:4b:bb:d0:47:41:84:ed:dd:50:18:42:9b: 59:81:91:54:d3:51:ac:a9:7f:e5:61:0b:e2:59:e6:3e:47:55: b1:72:f6:cb:b9:05:ed:96:6e:6c:5a:e1:13:45:02:66:36:5e: 7c:bb:fc:21:76:33:5d:37:98:21:bd:50:f6:d0:fe:24:3c:4b: 9c:bf:55:05:c3:8d:a8:35:71:13:14:b4:3f:8c:6e:04:c9:27: d9:44:e8:8b:bb:61:a7:f5:37:c6:03:9b:0d:f8:ea:e5:f0:ad: ec:3e:c8:a8:76:04:53:a5:16:46:21:7d:1b:e2:36:a4:a9:be: 66:b5:e7:cf:53:a5:80:12:f9:10:3d:41:f7:59:9c:2f:86:bd: ce:e8:bf:8d:dd:3f:50:cf:84:d6:f4:9f:d8:68:2f:24:ea:84: b9:2a:42:a2:5a:70:19:7f:58:a7:56:59:ad:7d:f3:43:0d:1b: 0f:66:ea:7e:92:cf:80:f2:22:af:67:65:bb:a4:6c:26:af:b2: b9:28:66:bb:1c:76:66:69:04:9c:91:31:ac:b0:5d:36:76:13: f9:66:10:09:a1:3e:fc:ef:91:2f:73:83:56:80:20:bb:2c:f2: df:43:97:ba:5a:dd:90:39:95:3d:27:17:c2:a9:5f:da:2e:d7: 16:0e:68:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXY+Pn93FfRoG5VRKkR/W+7lHzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA2MTcwMDI4MzdaFw0yNjA2MTgwNDI5MzdaMDMxMTAvBgNV BAMTKEYyMEU1RENFQzdCNjVBRDIyQjA3QzI3N0E2QzhDNDBCRkQwM0UxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrENxM+pm7EOCd5grWRQWGipq 2HMEnlLlel5iEim0owm4PVV8FPlWlWD5UAV0QIBydSLGw8BuVWoSgjDaa93TRb18 10hDUn3fxdc9qs0WPWQ9GRlkgT3EDTKrN+uxzlMszeKBPAmOb+PbGlg8s1i+3fgg Hxoz0VEbPKeeAOaCO6LJlXeeUs5qSAKAMaTmfTNqkDWEpSvNf8U8rgAHLbsGesgJ gqa1XlI9R6rfe8WTP0ppdT+6TfLUrhqNamAcsFHi7yfL8Hw6H6HfkDbijWKT/rlh Pdk1cFCGM7OpfvtAUkpLNffoX1gJ18eKSW0P89CJ+NNszhEZ0bLY4pi09hf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8g5dzse2WtIrB8J3psjEC/0D4ZowHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFWAPZ9RUu70EdBhO3dUBhCm1mBkVTTUayp f+VhC+JZ5j5HVbFy9su5Be2Wbmxa4RNFAmY2Xny7/CF2M103mCG9UPbQ/iQ8S5y/ VQXDjag1cRMUtD+MbgTJJ9lE6Iu7Yaf1N8YDmw346uXwrew+yKh2BFOlFkYhfRvi NqSpvma1589TpYAS+RA9QfdZnC+Gvc7ov43dP1DPhNb0n9hoLyTqhLkqQqJacBl/ WKdWWa1980MNGw9m6n6Sz4DyIq9nZbukbCavsrkoZrscdmZpBJyRMaywXTZ2E/lm EAmhPvzvkS9zg1aAILss8t9Dl7pa3ZA5lT0nF8KpX9ou1xYOaEI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:01 2026 by rpki-client