$ rpki-client -vvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: MAJ3M/SRv9VPvIH/JeMTKhSh0QEs7d/uqVqOmvAp+ts= Subject key identifier: D3:78:66:21:1C:7D:DF:E2:00:21:DD:7F:B8:5D:DB:F3:60:48:30:AC Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 04B12D7F3CE59F493DE581D0CFD618E3AB92BA1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 08:17:59 +0000 Manifest this update: Wed 17 Jun 2026 08:12:59 +0000 Manifest next update: Thu 18 Jun 2026 10:51:59 +0000 Files and hashes: 1: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 2: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) 3: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: ceqNz0VqamK2tHh7AlhtnjEydZ8XJiit+auec3w1/vw=) 4: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:2d:7f:3c:e5:9f:49:3d:e5:81:d0:cf:d6:18:e3:ab:92:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: Jun 17 08:12:59 2026 GMT Not After : Jun 18 10:51:59 2026 GMT Subject: CN=D37866211C7DDFE20021DD7FB85DDBF3604830AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:36:2a:94:1c:fa:9f:7b:a5:64:aa:7c:fa: 5d:6a:6d:ac:b1:da:50:ac:90:49:c1:52:52:08:87: 56:c3:52:ce:42:a1:dd:54:8a:7d:ad:7e:2f:5e:cd: a2:0f:b4:82:96:18:16:c0:97:04:d4:e4:04:af:a4: e5:dc:a3:b1:25:1b:d1:e9:ee:33:f4:86:f3:b8:14: d5:cd:61:d8:08:6f:f3:8e:6a:95:4e:c3:76:11:66: 19:85:ce:a4:d9:41:d7:e7:f2:85:38:a7:b2:f9:ae: 3e:fd:0a:bb:e0:86:6c:d6:21:78:95:c1:db:3c:33: c8:17:ad:46:82:93:84:23:8c:37:0b:0c:f9:10:e4: 0e:19:89:6f:5f:52:cc:9c:6a:79:d4:83:cf:2e:ee: aa:fd:13:8c:08:5c:10:1e:27:3d:f9:dd:f8:e6:9b: e9:6a:9c:b5:b1:83:64:26:a4:f2:bb:9f:70:81:eb: 6e:dd:7e:b9:00:ea:6d:cb:c4:8b:2a:27:21:b5:d1: ae:d0:ab:aa:8b:ee:1d:84:28:2e:07:09:9c:0a:d7: 95:33:61:55:fa:23:79:24:d4:5a:e0:a5:8e:4c:52: 5b:e0:13:d1:14:ef:55:d6:fd:bc:5a:a6:54:91:a6: 88:37:2e:0c:a1:4a:b6:c9:99:09:dd:67:03:2e:99: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:78:66:21:1C:7D:DF:E2:00:21:DD:7F:B8:5D:DB:F3:60:48:30:AC X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:de:2a:8d:0d:b5:69:39:62:7c:fc:6a:86:fd:ee:64:95:e5: 87:4a:1c:24:db:b5:2a:c7:1e:8f:63:60:5c:38:59:42:ec:f2: 26:98:02:ff:13:86:5b:f7:62:9d:fc:b0:c8:a1:f0:23:5b:f6: 69:5e:42:bd:c4:2d:66:a2:88:45:12:e3:f5:bc:3c:bd:38:cc: 9e:19:ad:4f:cc:d4:c7:9c:ec:ef:be:55:86:c3:57:52:b3:07: 5d:a7:ff:2c:ca:51:2a:b7:8b:6d:ce:42:49:d7:7e:81:4b:20: b0:10:ef:5e:38:7a:e8:35:b3:51:e8:04:96:3a:e3:e6:0b:0d: 98:8b:a5:d8:d3:7d:3a:7a:cd:96:4b:64:25:0a:b8:8c:60:2f: 9c:53:05:5c:b2:0e:a7:b0:a8:df:b3:4a:98:95:b2:3b:40:c0: 2a:b9:55:71:03:d3:05:94:a7:2e:59:14:84:d9:80:e0:54:2a: 3f:14:78:79:6b:7a:b5:5d:71:04:da:0d:5a:de:1b:44:2b:de: 80:aa:e5:8b:1c:cb:64:5c:17:e9:a1:1f:83:54:ac:97:11:be: bd:ea:4d:69:fd:ce:cb:79:14:2c:7d:e8:9f:f4:32:06:2a:c3: 02:65:28:9e:90:08:25:b2:5e:9d:23:4e:28:7e:64:d1:ae:64: 23:c1:2f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLEtfzzln0k95YHQz9YY46uSuhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA2MTcwODEyNTlaFw0yNjA2MTgxMDUxNTlaMDMxMTAvBgNV BAMTKEQzNzg2NjIxMUM3RERGRTIwMDIxREQ3RkI4NUREQkYzNjA0ODMwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6zYqlBz6n3ulZKp8+l1qbayx 2lCskEnBUlIIh1bDUs5Cod1Uin2tfi9ezaIPtIKWGBbAlwTU5ASvpOXco7ElG9Hp 7jP0hvO4FNXNYdgIb/OOapVOw3YRZhmFzqTZQdfn8oU4p7L5rj79CrvghmzWIXiV wds8M8gXrUaCk4QjjDcLDPkQ5A4ZiW9fUsycannUg88u7qr9E4wIXBAeJz353fjm m+lqnLWxg2QmpPK7n3CB627dfrkA6m3LxIsqJyG10a7Qq6qL7h2EKC4HCZwK15Uz YVX6I3kk1FrgpY5MUlvgE9EU71XW/bxaplSRpog3LgyhSrbJmQndZwMumXxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03hmIRx93+IAId1/uF3b82BIMKwwHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfeKo0NtWk5Ynz8aob97mSV5YdKHCTbtSrH Ho9jYFw4WULs8iaYAv8Thlv3Yp38sMih8CNb9mleQr3ELWaiiEUS4/W8PL04zJ4Z rU/M1Mec7O++VYbDV1KzB12n/yzKUSq3i23OQknXfoFLILAQ7144eug1s1HoBJY6 4+YLDZiLpdjTfTp6zZZLZCUKuIxgL5xTBVyyDqewqN+zSpiVsjtAwCq5VXED0wWU py5ZFITZgOBUKj8UeHlrerVdcQTaDVreG0Qr3oCq5Yscy2RcF+mhH4NUrJcRvr3q TWn9zst5FCx96J/0MgYqwwJlKJ6QCCWyXp0jTih+ZNGuZCPBLzE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:02 2026 by rpki-client