$ rpki-client -vvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: jYLjkf+S/r5uNC+lol72EZMKyOLho11NhaKJ5KMp19s= Subject key identifier: 79:EF:22:EB:85:7A:E7:37:BD:FA:49:97:64:93:8F:94:D7:99:58:43 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 4ACFDFDEE8AAE42D860AE010095DED94B00DE83B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:38:26 +0000 Manifest this update: Wed 17 Jun 2026 04:33:26 +0000 Manifest next update: Thu 18 Jun 2026 07:25:26 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 2: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: H8F6PdrVoYO9UKIkbxj4B2mLPDELdthpWpN2R3HFBuM=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cf:df:de:e8:aa:e4:2d:86:0a:e0:10:09:5d:ed:94:b0:0d:e8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Jun 17 04:33:26 2026 GMT Not After : Jun 18 07:25:26 2026 GMT Subject: CN=79EF22EB857AE737BDFA499764938F94D7995843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:05:d5:05:57:ae:fd:92:45:64:1c:66:7e: d1:eb:7f:1c:5a:b7:c5:7d:d7:88:ea:3a:f9:2a:7e: 99:59:df:83:c2:88:e2:d6:3c:f4:ed:57:c0:09:d6: 4a:f9:56:3b:63:29:7c:6b:6f:73:db:8f:f9:ff:0e: 26:36:fa:0d:97:b7:dd:b2:42:dc:c2:db:fb:69:1a: a5:b8:ef:5d:18:12:2a:93:3c:cf:75:d2:9e:80:51: f3:c1:5e:21:85:f4:3f:1f:9f:f4:9f:dc:4b:56:88: a5:18:2d:de:84:32:23:ee:16:78:fc:83:83:5b:ce: 28:20:28:f7:b5:f9:16:66:c2:1d:6a:c3:c2:34:a4: 71:0c:cd:e2:91:04:09:03:32:43:f4:1f:f0:64:a6: 66:58:ba:65:1a:b0:1f:d6:78:38:7d:36:b0:a7:13: 14:8d:49:a9:82:21:bf:c1:15:e0:fc:6f:b7:93:df: 3a:cb:1a:11:ce:a1:87:45:a4:93:35:67:3e:a5:fa: 76:7a:a5:8e:ee:ab:5d:b8:c9:c0:0e:8a:fd:40:eb: 56:06:53:79:f3:8f:b9:c7:f2:9e:22:55:9d:a2:cd: 32:ab:80:e7:95:4a:34:e5:70:0b:24:f6:d8:a4:a5: 0a:b6:a4:30:90:92:6b:c2:14:af:48:e9:ad:68:e4: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:22:EB:85:7A:E7:37:BD:FA:49:97:64:93:8F:94:D7:99:58:43 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5b:94:86:32:3e:d4:f5:a2:2c:20:af:03:00:ca:d9:80:84: 71:ae:16:2b:2f:50:f6:fe:05:f1:f2:d5:69:fa:1d:80:4a:1e: a9:a8:8e:24:13:da:3f:7c:c3:d2:a1:a8:fe:c4:44:a9:9f:fd: 7c:33:89:f8:e0:9c:28:de:17:a5:67:76:b3:1d:dc:66:bc:55: 6b:7e:2b:11:3e:d8:98:88:b8:3c:16:40:b2:00:91:c7:42:1c: 67:e2:0d:d0:93:66:62:5d:91:ae:fd:f5:d5:e4:b6:b0:22:dc: 28:18:ca:7a:d9:94:77:a6:38:77:3d:0f:f1:ff:df:e0:26:11: b4:a9:3b:2e:22:27:9c:24:4f:7b:72:2f:a0:0e:21:64:4c:10: cd:04:4f:60:59:67:e1:0d:fd:3a:c0:02:e6:90:e6:c0:97:88: 96:51:cb:ab:ca:e0:07:60:b6:3f:88:b2:a1:8d:18:3a:63:e7: 04:14:26:e7:86:92:37:09:af:2e:85:f7:a9:b3:a4:05:28:94: e6:e7:f7:c1:e7:11:d9:f4:77:60:ef:e6:b7:a7:8b:e2:20:67: ad:b0:91:18:1c:44:16:b4:32:b5:be:5f:3b:b3:ef:de:50:30: de:0b:eb:00:46:e4:2f:d5:a5:c8:94:2d:2e:c7:51:bd:96:09: a2:31:75:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSs/f3uiq5C2GCuAQCV3tlLAN6DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA2MTcwNDMzMjZaFw0yNjA2MTgwNzI1MjZaMDMxMTAvBgNV BAMTKDc5RUYyMkVCODU3QUU3MzdCREZBNDk5NzY0OTM4Rjk0RDc5OTU4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkQXVBVeu/ZJFZBxmftHrfxxa t8V914jqOvkqfplZ34PCiOLWPPTtV8AJ1kr5VjtjKXxrb3Pbj/n/DiY2+g2Xt92y QtzC2/tpGqW4710YEiqTPM910p6AUfPBXiGF9D8fn/Sf3EtWiKUYLd6EMiPuFnj8 g4NbziggKPe1+RZmwh1qw8I0pHEMzeKRBAkDMkP0H/BkpmZYumUasB/WeDh9NrCn ExSNSamCIb/BFeD8b7eT3zrLGhHOoYdFpJM1Zz6l+nZ6pY7uq124ycAOiv1A61YG U3nzj7nH8p4iVZ2izTKrgOeVSjTlcAsk9tikpQq2pDCQkmvCFK9I6a1o5OqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUee8i64V65ze9+kmXZJOPlNeZWEMwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpblIYyPtT1oiwgrwMAytmAhHGuFisvUPb+ BfHy1Wn6HYBKHqmojiQT2j98w9KhqP7ERKmf/XwzifjgnCjeF6VndrMd3Ga8VWt+ KxE+2JiIuDwWQLIAkcdCHGfiDdCTZmJdka799dXktrAi3CgYynrZlHemOHc9D/H/ 3+AmEbSpOy4iJ5wkT3tyL6AOIWRMEM0ET2BZZ+EN/TrAAuaQ5sCXiJZRy6vK4Adg tj+IsqGNGDpj5wQUJueGkjcJry6F96mzpAUolObn98HnEdn0d2Dv5reni+IgZ62w kRgcRBa0MrW+Xzuz795QMN4L6wBG5C/VpciULS7HUb2WCaIxdUY= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:13 2026 by rpki-client