$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: cjZujM8D2XLO8TLPlRUle45HFb6jOfsyit4N81S58NE= Subject key identifier: BD:A2:A7:6B:EE:1D:72:B2:97:83:A3:F4:33:DC:83:1B:4E:7A:B7:6A Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 230D1E4E53001A781FF0A386696A51A250DDE51F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:43:02 +0000 Manifest this update: Tue 16 Jun 2026 19:38:02 +0000 Manifest next update: Wed 17 Jun 2026 23:15:02 +0000 Files and hashes: 1: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: rN9zZTt5by0/JF8DF4YndDI0eZTDyVLEyewbVZ2fv8E=) 2: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 3: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0d:1e:4e:53:00:1a:78:1f:f0:a3:86:69:6a:51:a2:50:dd:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Jun 16 19:38:02 2026 GMT Not After : Jun 17 23:15:02 2026 GMT Subject: CN=BDA2A76BEE1D72B29783A3F433DC831B4E7AB76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:4b:86:30:66:88:94:bf:b2:55:5f:be:c6: d0:7a:85:de:86:ad:e2:74:b6:ec:bb:1f:d3:6f:97: b8:3a:6a:95:3a:d5:34:e0:7b:31:b8:cb:ad:37:51: fc:a0:b4:e6:0b:e3:f7:34:eb:10:30:2a:72:dc:0e: 84:a7:d2:3a:d0:89:77:1c:92:21:6f:ca:44:c0:3b: c7:e9:13:f5:f0:42:f0:4e:29:ba:17:d3:40:1e:aa: 19:e5:3f:5c:1c:cc:df:82:ef:db:d3:a5:7d:f9:33: 26:b9:0b:0f:31:2e:4c:44:cc:43:89:d6:14:1b:0c: 52:d0:6a:97:c6:81:ed:86:3d:20:21:6f:7e:f8:57: da:12:df:2d:89:51:48:1b:6d:3e:76:ae:9e:6b:37: c0:f4:2d:67:dd:53:a0:3f:ea:f3:aa:ee:2c:64:81: 94:27:78:40:b4:f4:5d:dc:9f:3f:e7:37:67:0d:42: ab:1b:e1:ae:49:83:72:da:76:2f:39:f8:e3:eb:7a: cd:a6:55:ad:39:d8:15:42:78:fa:09:2d:eb:85:a8: 3e:21:36:1e:d4:bb:5d:e5:84:73:d3:e2:34:76:91: 78:91:29:b0:90:d8:70:f5:d6:de:96:67:25:90:e0: 99:2c:44:f4:98:41:d0:10:db:d0:ec:63:75:1c:4e: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:A7:6B:EE:1D:72:B2:97:83:A3:F4:33:DC:83:1B:4E:7A:B7:6A X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7e:dd:9d:da:8f:bb:70:22:d0:79:03:38:9c:95:f0:4f:1b: 66:20:58:f8:58:82:52:1b:33:80:20:b3:be:6f:aa:60:6c:13: 00:a7:0b:04:62:5a:cb:5a:f1:0d:d6:97:fe:ca:13:1d:66:7d: fb:95:bd:7c:f4:fd:a6:29:71:b1:5c:33:94:ef:57:44:9a:e2: 4e:b7:4d:3d:67:7d:22:60:f4:f2:be:ae:c9:d4:5b:fe:0b:ff: a3:f9:40:e3:f2:d3:1a:4f:06:94:83:18:0c:b3:f8:1b:8e:90: 67:99:ae:83:86:dc:26:37:d5:58:57:ab:62:d0:ab:c7:0f:d5: c7:9d:e1:d0:60:41:d2:80:da:04:58:f0:cd:6d:a4:e5:4d:25: 53:a1:51:93:fe:3c:35:f4:cb:5b:03:98:bd:31:52:99:01:af: 5f:d7:00:ed:dd:52:cf:cb:ed:9d:0f:b8:41:9c:e3:8d:64:1f: f4:59:22:3c:0d:ec:a7:3f:f3:ed:fd:2f:ea:ba:a0:07:05:ef: c4:66:eb:ba:7c:6f:d5:3f:e0:8e:74:ab:b2:30:ad:aa:93:7f: 02:bb:e5:35:57:58:57:d0:29:f3:46:cc:0d:d7:9a:a1:4a:31: 15:bd:9b:df:a7:db:44:e1:3e:42:b9:b2:7c:b9:2b:75:4a:26: d6:c6:bf:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIw0eTlMAGngf8KOGaWpRolDd5R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA2MTYxOTM4MDJaFw0yNjA2MTcyMzE1MDJaMDMxMTAvBgNV BAMTKEJEQTJBNzZCRUUxRDcyQjI5NzgzQTNGNDMzREM4MzFCNEU3QUI3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kUuGMGaIlL+yVV++xtB6hd6G reJ0tuy7H9Nvl7g6apU61TTgezG4y603UfygtOYL4/c06xAwKnLcDoSn0jrQiXcc kiFvykTAO8fpE/XwQvBOKboX00AeqhnlP1wczN+C79vTpX35Mya5Cw8xLkxEzEOJ 1hQbDFLQapfGge2GPSAhb374V9oS3y2JUUgbbT52rp5rN8D0LWfdU6A/6vOq7ixk gZQneEC09F3cnz/nN2cNQqsb4a5Jg3Ladi85+OPres2mVa052BVCePoJLeuFqD4h Nh7Uu13lhHPT4jR2kXiRKbCQ2HD11t6WZyWQ4JksRPSYQdAQ29DsY3UcTkBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvaKna+4dcrKXg6P0M9yDG056t2owHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALl+3Z3aj7twItB5AziclfBPG2YgWPhYglIb M4Ags75vqmBsEwCnCwRiWsta8Q3Wl/7KEx1mffuVvXz0/aYpcbFcM5TvV0Sa4k63 TT1nfSJg9PK+rsnUW/4L/6P5QOPy0xpPBpSDGAyz+BuOkGeZroOG3CY31VhXq2LQ q8cP1ced4dBgQdKA2gRY8M1tpOVNJVOhUZP+PDX0y1sDmL0xUpkBr1/XAO3dUs/L 7Z0PuEGc441kH/RZIjwN7Kc/8+39L+q6oAcF78Rm67p8b9U/4I50q7IwraqTfwK7 5TVXWFfQKfNGzA3XmqFKMRW9m9+n20ThPkK5sny5K3VKJtbGv4Y= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:40 2026 by rpki-client