$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: g9pL9MZafskED7GeGZQis8NUqho6kQxbnQnVPEvcmEw= Subject key identifier: 72:AB:A8:DD:59:29:F5:D1:EE:0C:34:C8:8D:84:BC:C8:B2:69:A1:2E Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 2FE7D812262123F5CD28204B212679E08ABCC569 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:55:52 +0000 Manifest this update: Sat 13 Jun 2026 09:50:52 +0000 Manifest next update: Sun 14 Jun 2026 11:44:52 +0000 Files and hashes: 1: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: VWlnuzcAnEknMoSG4VBgL3oTmH/V1Rximmn4QI9pLuk=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:d8:12:26:21:23:f5:cd:28:20:4b:21:26:79:e0:8a:bc:c5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Jun 13 09:50:52 2026 GMT Not After : Jun 14 11:44:52 2026 GMT Subject: CN=72ABA8DD5929F5D1EE0C34C88D84BCC8B269A12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:bc:bc:15:1b:40:e2:be:a4:20:1f:80:8c: b1:44:91:a0:68:91:2b:8f:87:41:92:44:e0:f7:32: 85:00:73:e2:e7:bd:0a:10:41:9a:bc:10:40:1e:db: 87:22:eb:e3:bf:fc:21:c9:e8:c6:d4:e0:19:37:d2: fc:0e:8e:47:e5:2e:0e:7d:a9:b6:3b:08:4c:5f:01: 12:a7:5c:d4:d5:bd:41:cc:bf:50:37:b1:59:af:a5: 13:4f:45:65:1c:56:bf:87:fb:bb:ee:bf:1c:34:99: 2c:52:06:0b:04:d6:6d:cb:12:e5:74:d4:58:2d:1d: a3:ea:01:34:8e:a5:14:58:49:76:00:94:33:2d:86: 4a:a4:06:ee:27:7b:b7:e5:09:54:70:4e:02:68:68: eb:dc:95:3b:f7:8c:03:bb:0b:e0:23:99:4f:80:76: 7c:f0:11:d9:73:81:14:e4:d9:77:3f:46:65:ba:27: fb:41:a1:96:fd:65:0b:cd:5f:1d:71:fc:86:34:ea: 47:77:90:af:3f:00:5c:17:38:5f:f7:f1:1d:41:3c: a4:c3:c6:b5:8d:89:2e:d4:52:26:6c:1e:2d:fa:39: 28:dd:8f:4a:09:79:79:7a:34:8a:a8:65:fc:33:5e: 55:70:91:ca:57:2b:f7:3e:04:95:95:ac:b8:4c:ff: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:A8:DD:59:29:F5:D1:EE:0C:34:C8:8D:84:BC:C8:B2:69:A1:2E X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:c8:21:39:4b:22:1b:f5:7e:67:7d:6a:ec:40:a5:92:34: c3:ce:0f:9a:9b:d4:9a:1f:b4:99:b2:3d:3b:c8:fd:98:4d:6f: cf:a2:d8:98:7d:07:38:77:a2:dc:10:60:33:20:54:61:7c:f8: 00:42:ac:4c:dc:97:9e:ed:53:a1:f1:53:eb:30:fc:7e:2b:74: c8:ff:d9:6d:56:99:78:17:69:a5:ea:86:c5:b0:d8:11:0d:f0: 4b:dd:fe:8b:5f:92:75:0d:59:8e:70:a7:f0:0f:c9:e4:3e:44: cc:33:19:2b:5b:0c:a6:97:64:86:43:3f:00:f1:a9:c8:98:ac: e5:a9:0b:c8:92:43:8f:b6:52:ad:7c:c4:5e:fc:09:06:27:4e: ce:da:b8:6e:99:33:7b:99:3e:29:63:7b:86:32:d2:f5:93:ae: b8:be:bf:13:23:26:f2:bc:db:41:c3:91:f8:33:c3:17:37:fe: 44:64:b1:d1:de:b7:4b:26:3c:cc:cc:a3:a3:fa:bc:38:15:2d: e6:a0:73:c7:55:b2:2e:43:32:a7:1d:5c:ac:55:e7:db:d4:c1: 47:f3:9a:3b:d4:cd:7f:c6:6e:43:e5:74:c6:58:56:76:26:a6: 7e:be:91:86:76:66:35:40:a9:fc:bc:6f:64:66:54:40:14:96: de:6c:50:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+fYEiYhI/XNKCBLISZ54Iq8xWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA2MTMwOTUwNTJaFw0yNjA2MTQxMTQ0NTJaMDMxMTAvBgNV BAMTKDcyQUJBOERENTkyOUY1RDFFRTBDMzRDODhEODRCQ0M4QjI2OUExMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwLy8FRtA4r6kIB+AjLFEkaBo kSuPh0GSROD3MoUAc+LnvQoQQZq8EEAe24ci6+O//CHJ6MbU4Bk30vwOjkflLg59 qbY7CExfARKnXNTVvUHMv1A3sVmvpRNPRWUcVr+H+7vuvxw0mSxSBgsE1m3LEuV0 1FgtHaPqATSOpRRYSXYAlDMthkqkBu4ne7flCVRwTgJoaOvclTv3jAO7C+AjmU+A dnzwEdlzgRTk2Xc/RmW6J/tBoZb9ZQvNXx1x/IY06kd3kK8/AFwXOF/38R1BPKTD xrWNiS7UUiZsHi36OSjdj0oJeXl6NIqoZfwzXlVwkcpXK/c+BJWVrLhM/wrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcquo3Vkp9dHuDDTIjYS8yLJpoS4wHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8HyCE5SyIb9X5nfWrsQKWSNMPOD5qb1Jof tJmyPTvI/ZhNb8+i2Jh9Bzh3otwQYDMgVGF8+ABCrEzcl57tU6HxU+sw/H4rdMj/ 2W1WmXgXaaXqhsWw2BEN8Evd/otfknUNWY5wp/APyeQ+RMwzGStbDKaXZIZDPwDx qciYrOWpC8iSQ4+2Uq18xF78CQYnTs7auG6ZM3uZPilje4Yy0vWTrri+vxMjJvK8 20HDkfgzwxc3/kRksdHet0smPMzMo6P6vDgVLeagc8dVsi5DMqcdXKxV59vUwUfz mjvUzX/GbkPldMZYVnYmpn6+kYZ2ZjVAqfy8b2RmVEAUlt5sUPE= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:32 2026 by rpki-client