$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: eFF+EpH+Pc/QoR+N2PgyXaO0G5MEGGRjcMQWEV0CKZQ= Subject key identifier: AA:9C:9A:F5:12:01:E6:A2:DF:4D:AC:AF:5E:C8:A2:5D:6B:54:96:DE Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 4885620B3D9647D1C9A7FC72B042C7C359589B02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 02:46:03 +0000 Manifest this update: Wed 17 Jun 2026 02:41:03 +0000 Manifest next update: Thu 18 Jun 2026 04:12:03 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: c+lihd+w/BfIhqPQ3fBOf7/Is/ionoLUrPt1BJr53yg=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:85:62:0b:3d:96:47:d1:c9:a7:fc:72:b0:42:c7:c3:59:58:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Jun 17 02:41:03 2026 GMT Not After : Jun 18 04:12:03 2026 GMT Subject: CN=AA9C9AF51201E6A2DF4DACAF5EC8A25D6B5496DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:dc:f7:26:40:31:26:1c:9a:9f:99:df:aa: f9:0e:2b:c2:28:9d:2d:93:cc:e8:c3:87:8d:5f:41: 1e:ac:e3:82:3b:4e:98:0c:b1:b4:32:b6:a3:94:17: 65:41:a3:e5:1c:f3:ae:4a:d4:94:ba:95:17:c4:ba: 02:ba:cb:27:49:11:37:77:42:2c:0b:b7:58:9d:b6: 68:52:64:08:38:ce:a8:7d:72:af:91:ad:7e:89:c6: 98:f2:2d:38:93:26:76:6a:10:50:9f:07:63:dc:55: b4:2c:c8:14:34:e8:e1:35:60:a5:aa:fe:f4:9f:e1: 4a:d5:38:92:87:12:bd:bd:60:95:21:a1:38:2d:ec: fc:96:40:8a:d0:b4:53:40:0f:cb:78:ca:bc:bc:8d: c4:24:f1:d5:06:a9:9f:c1:f2:4d:56:cb:8e:2e:13: 37:c4:1f:8f:d7:2e:06:7c:27:f4:66:2a:c1:4b:35: ec:d8:3a:12:2b:51:1f:e9:bb:41:d0:ec:e5:db:22: c8:c5:b1:89:8d:05:b4:ee:36:7a:a4:86:1e:98:3d: d8:5d:20:fa:69:63:bb:9b:fa:dc:19:28:f9:74:0d: ed:01:5b:b3:e5:75:f8:f5:c0:43:e3:e6:94:26:a9: 03:b0:3b:5e:32:82:d1:60:95:4c:dd:99:89:cf:cb: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:9A:F5:12:01:E6:A2:DF:4D:AC:AF:5E:C8:A2:5D:6B:54:96:DE X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:08:c0:a7:87:d3:b5:1b:41:d5:f4:c1:dc:1b:b5:20:58:77: df:96:3d:3d:91:95:af:5f:51:76:8e:4b:56:75:22:71:d9:a2: 53:c9:26:73:a2:ae:a6:fa:1a:fe:66:8f:10:16:15:9c:69:61: d7:0f:9c:c5:85:f3:70:c0:d3:bf:00:4b:ac:a2:8b:af:59:25: 0c:ce:95:7f:25:03:d6:5b:34:f9:8b:79:90:42:f1:bf:3a:87: cd:69:2b:7d:e8:a1:f6:6d:f8:5e:38:c3:34:53:a6:33:fd:72: d9:25:43:06:2c:6d:c1:41:e1:6d:94:dc:bd:30:1b:07:65:a1: 8b:3e:33:5f:07:d6:85:04:1e:c2:0e:f4:60:cc:c7:97:9e:e5: a4:0d:c3:c0:75:29:f0:34:38:5a:ea:fe:3a:2e:00:77:26:f3: db:3a:c3:57:1a:24:58:c5:0d:17:b9:95:af:c1:cf:52:91:35: 8c:a6:17:f8:85:6e:b9:80:10:c9:9a:87:71:c9:f3:6f:f0:bd: d7:ef:14:d0:81:60:6a:65:d7:4b:fa:0f:93:77:5d:fd:b5:25: eb:54:24:fa:49:36:d1:a4:3f:d1:f0:28:7f:c8:aa:39:80:66: 0f:3f:79:7f:c6:98:1f:b7:91:be:d9:3e:0b:5a:c9:cc:ba:76: f3:86:86:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIViCz2WR9HJp/xysELHw1lYmwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA2MTcwMjQxMDNaFw0yNjA2MTgwNDEyMDNaMDMxMTAvBgNV BAMTKEFBOUM5QUY1MTIwMUU2QTJERjREQUNBRjVFQzhBMjVENkI1NDk2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJs9z3JkAxJhyan5nfqvkOK8Io nS2TzOjDh41fQR6s44I7TpgMsbQytqOUF2VBo+Uc865K1JS6lRfEugK6yydJETd3 QiwLt1idtmhSZAg4zqh9cq+RrX6JxpjyLTiTJnZqEFCfB2PcVbQsyBQ06OE1YKWq /vSf4UrVOJKHEr29YJUhoTgt7PyWQIrQtFNAD8t4yry8jcQk8dUGqZ/B8k1Wy44u EzfEH4/XLgZ8J/RmKsFLNezYOhIrUR/pu0HQ7OXbIsjFsYmNBbTuNnqkhh6YPdhd IPppY7ub+twZKPl0De0BW7Pldfj1wEPj5pQmqQOwO14ygtFglUzdmYnPyzEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqpya9RIB5qLfTayvXsiiXWtUlt4wHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYIwKeH07UbQdX0wdwbtSBYd9+WPT2Rla9f UXaOS1Z1InHZolPJJnOirqb6Gv5mjxAWFZxpYdcPnMWF83DA078AS6yii69ZJQzO lX8lA9ZbNPmLeZBC8b86h81pK33oofZt+F44wzRTpjP9ctklQwYsbcFB4W2U3L0w GwdloYs+M18H1oUEHsIO9GDMx5ee5aQNw8B1KfA0OFrq/jouAHcm89s6w1caJFjF DRe5la/Bz1KRNYymF/iFbrmAEMmah3HJ82/wvdfvFNCBYGpl10v6D5N3Xf21JetU JPpJNtGkP9HwKH/IqjmAZg8/eX/GmB+3kb7ZPgtaycy6dvOGhuw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:44 2026 by rpki-client