$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: P3hVnsBZXRjthhUoQLaDsrlkBBty6LS7wLpIqMm5c3k= Subject key identifier: B9:40:15:50:79:24:CD:36:31:A6:E4:83:81:EB:67:A5:62:69:04:19 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 4B7C0B76E9CDC907CEDA6084F8FDADA2A5C9B0F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:27:29 +0000 Manifest this update: Tue 16 Jun 2026 23:22:29 +0000 Manifest next update: Thu 18 Jun 2026 00:50:29 +0000 Files and hashes: 1: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: g4JyD4jQUyvfLOYcR9TsRdK15po8uEmuJrlL4ZC0034=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7c:0b:76:e9:cd:c9:07:ce:da:60:84:f8:fd:ad:a2:a5:c9:b0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Jun 16 23:22:29 2026 GMT Not After : Jun 18 00:50:29 2026 GMT Subject: CN=B94015507924CD3631A6E48381EB67A562690419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9e:31:15:57:7c:e1:2e:40:8d:e5:2d:56:16: b7:a4:7d:f8:fb:6a:ce:e8:79:6d:cd:bc:e4:dd:ab: 68:92:d2:f1:5e:cb:8d:e9:56:89:b0:08:a6:27:7c: 90:63:47:be:10:64:10:aa:02:e4:49:c2:07:b7:9f: f2:29:7a:c0:95:01:61:c6:45:08:ea:f7:08:b5:43: ce:58:77:40:b5:ff:08:de:da:1b:b2:80:2d:c9:78: 16:48:de:54:67:ab:32:4f:42:4f:81:13:fc:e3:59: f7:17:65:58:b2:91:9f:3a:cf:9e:db:79:b1:d4:92: 7f:d4:cb:ef:f2:e1:2f:fa:74:80:b5:7e:61:53:df: fd:95:c0:78:91:cb:43:05:1d:5c:ce:cb:bd:ca:f9: 1f:55:b8:88:5d:57:98:da:52:24:46:5b:2a:4d:e9: c4:3e:b6:46:fb:f3:f0:e5:fa:5a:03:98:1e:dc:02: 83:21:33:0b:0b:73:c8:ad:15:93:61:1c:49:8b:32: 27:e8:7b:d3:4b:da:b6:82:69:0c:b5:6a:cf:8f:4a: 41:0b:3c:d0:3e:a2:67:05:bc:d9:93:28:6b:6f:d3: 4f:cd:5c:4d:3b:e3:d1:e4:da:4b:d1:b5:b4:73:b0: 08:6c:82:72:98:e3:80:13:d3:2b:2b:4e:b1:12:6e: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:15:50:79:24:CD:36:31:A6:E4:83:81:EB:67:A5:62:69:04:19 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:43:26:a1:ca:aa:b4:fa:30:0e:38:5d:d7:e6:2c:16:01:9c: a7:90:0b:77:4c:f4:15:78:fb:ac:73:79:f3:b4:72:e5:65:e6: b4:9a:60:f9:c9:19:aa:41:40:46:4b:01:17:8e:35:06:f4:89: 9b:2d:ed:02:7c:91:51:20:ec:a8:47:53:58:f0:e8:a9:d5:e1: c9:f2:ea:a5:dc:b7:dd:15:9e:ce:8c:c0:34:51:d9:46:5b:ae: 7e:09:de:ad:5d:ca:be:fe:5e:5d:33:9c:24:6a:a8:1c:e5:e1: f0:76:c4:68:0f:fa:f4:0b:1e:43:7d:44:26:a7:26:68:38:7c: 8e:6b:aa:cd:cd:b9:01:4f:98:fd:2b:8d:56:12:87:60:40:19: 46:5c:4d:66:50:15:39:89:5e:6a:2f:83:e8:75:e5:9b:af:24: 05:fd:05:56:32:e2:82:c0:f1:5f:44:d5:c9:1c:34:5d:42:2a: 2d:bf:5f:05:61:6b:ea:ba:38:9b:98:08:80:26:54:ea:66:6d: af:31:26:20:eb:87:82:f0:c2:a6:f0:05:98:e2:81:9c:5c:df: 37:50:51:dd:d7:45:b9:08:19:92:18:4e:8d:8d:8a:46:09:54: f7:43:49:e6:b7:23:e2:51:19:58:ef:c4:6b:e0:38:7e:64:f6: ec:f6:4c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3wLdunNyQfO2mCE+P2toqXJsPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA2MTYyMzIyMjlaFw0yNjA2MTgwMDUwMjlaMDMxMTAvBgNV BAMTKEI5NDAxNTUwNzkyNENEMzYzMUE2RTQ4MzgxRUI2N0E1NjI2OTA0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnjEVV3zhLkCN5S1WFrekffj7 as7oeW3NvOTdq2iS0vFey43pVomwCKYnfJBjR74QZBCqAuRJwge3n/IpesCVAWHG RQjq9wi1Q85Yd0C1/wje2huygC3JeBZI3lRnqzJPQk+BE/zjWfcXZViykZ86z57b ebHUkn/Uy+/y4S/6dIC1fmFT3/2VwHiRy0MFHVzOy73K+R9VuIhdV5jaUiRGWypN 6cQ+tkb78/Dl+loDmB7cAoMhMwsLc8itFZNhHEmLMifoe9NL2raCaQy1as+PSkEL PNA+omcFvNmTKGtv00/NXE0749Hk2kvRtbRzsAhsgnKY44AT0ysrTrESbqhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUAVUHkkzTYxpuSDgetnpWJpBBkwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtDJqHKqrT6MA44XdfmLBYBnKeQC3dM9BV4 +6xzefO0cuVl5rSaYPnJGapBQEZLAReONQb0iZst7QJ8kVEg7KhHU1jw6KnV4cny 6qXct90Vns6MwDRR2UZbrn4J3q1dyr7+Xl0znCRqqBzl4fB2xGgP+vQLHkN9RCan Jmg4fI5rqs3NuQFPmP0rjVYSh2BAGUZcTWZQFTmJXmovg+h15ZuvJAX9BVYy4oLA 8V9E1ckcNF1CKi2/XwVha+q6OJuYCIAmVOpmba8xJiDrh4LwwqbwBZjigZxc3zdQ Ud3XRbkIGZIYTo2NikYJVPdDSea3I+JRGVjvxGvgOH5k9uz2TLI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:32 2026 by rpki-client