$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: zzE9c+gsp6xQ+tH5fAPFqt39Wo+uPCA4LAQ4U94YlDM= Subject key identifier: D0:91:DB:F1:0C:1D:8E:EB:0A:FD:6B:1C:B0:C2:86:18:5E:88:C9:E3 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 11B6E235F7443907DE55C67036B764F92F9972C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 22:21:17 +0000 Manifest this update: Sat 13 Jun 2026 22:16:17 +0000 Manifest next update: Mon 15 Jun 2026 01:16:17 +0000 Files and hashes: 1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) 2: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: F/SI8SsjC0R0+bSOtcJ6DPoo5sHWIMGjf+zlB6a6P34=) 3: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 4: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:e2:35:f7:44:39:07:de:55:c6:70:36:b7:64:f9:2f:99:72:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Jun 13 22:16:17 2026 GMT Not After : Jun 15 01:16:17 2026 GMT Subject: CN=D091DBF10C1D8EEB0AFD6B1CB0C286185E88C9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:de:9f:86:30:fa:0f:fa:6e:cb:75:82:0f: 7a:30:61:8c:29:b5:b3:94:e8:13:50:2f:ab:c7:e4: 59:da:cc:5a:41:9c:70:20:94:ab:45:ad:30:f3:b0: c1:4c:11:66:7e:68:dc:c0:a7:f8:06:a3:e7:10:82: ae:dc:d3:b2:a9:60:c0:2a:d4:d3:3f:4f:61:45:aa: 15:e1:89:45:6f:2e:75:d0:d0:d5:92:07:53:ad:15: 75:f2:52:16:57:3a:10:99:71:87:6e:d9:8b:a2:fc: e0:2c:09:46:3b:fe:68:28:3b:ff:24:32:02:24:eb: a9:fb:c2:fd:37:7c:88:9f:20:bc:6c:f6:06:23:d7: 1d:e3:aa:2a:b6:94:b3:24:b4:41:51:dd:d9:1b:b5: 5f:ba:19:07:e9:51:56:93:24:c3:7f:cc:8c:90:34: a6:db:2a:8c:2a:11:2b:f5:b6:0e:34:97:41:69:be: 98:e4:4b:4b:6c:99:dd:c8:a3:7c:c3:e8:33:14:63: 3c:24:f8:1b:28:68:2f:0b:01:94:17:07:47:d4:f3: da:56:a8:92:0c:38:ca:03:f3:04:d1:bf:40:46:63: 7f:0d:a6:80:37:b8:59:a6:77:52:ec:15:f9:9e:4b: 4c:24:f5:7d:d1:62:16:2e:d4:ce:9b:83:ba:12:6f: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:DB:F1:0C:1D:8E:EB:0A:FD:6B:1C:B0:C2:86:18:5E:88:C9:E3 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:db:dc:f5:c5:7d:b9:df:a4:55:fe:cb:76:91:7d:7b:62: 40:3a:a5:08:81:c3:ca:5a:80:b6:47:02:d3:c4:21:b3:18:ce: 0d:7d:3f:df:e6:c0:fa:56:f3:16:2b:6b:5a:26:52:a3:c5:e2: f8:c4:88:d3:e8:f3:5b:c4:9b:1a:ef:13:28:ce:23:31:00:b2: 01:d5:8f:20:30:2a:b7:e6:f8:32:99:85:94:d1:c0:24:9e:a9: 67:4e:22:f3:35:c7:57:d2:a8:f8:1d:ff:4d:11:17:0b:bb:ff: ce:52:18:fd:14:ae:83:3c:79:2e:d6:4b:24:60:9f:c3:dd:37: dc:97:dd:f2:ca:ea:b9:bd:b8:d2:b7:5f:62:22:0c:4b:98:5c: a2:45:1d:52:30:d2:57:ce:89:4e:41:54:e0:cc:1d:7d:b1:bb: af:e0:eb:09:72:db:71:34:2c:3d:ea:d5:5a:e9:94:c2:fb:4e: 36:78:bf:07:18:8c:b1:38:0d:05:fc:92:3d:b8:1e:a0:5a:2d: 4f:d0:3a:60:47:7a:36:b6:15:b8:43:49:80:d1:c5:fe:a7:2e: 88:30:01:ff:d7:17:5b:27:00:eb:5a:04:53:b1:28:41:43:8b: 22:e9:69:19:c9:f8:2c:f7:4c:22:0f:e5:f3:a4:fc:a0:83:68: a2:34:3b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbbiNfdEOQfeVcZwNrdk+S+ZcsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA2MTMyMjE2MTdaFw0yNjA2MTUwMTE2MTdaMDMxMTAvBgNV BAMTKEQwOTFEQkYxMEMxRDhFRUIwQUZENkIxQ0IwQzI4NjE4NUU4OEM5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sN6fhjD6D/puy3WCD3owYYwp tbOU6BNQL6vH5FnazFpBnHAglKtFrTDzsMFMEWZ+aNzAp/gGo+cQgq7c07KpYMAq 1NM/T2FFqhXhiUVvLnXQ0NWSB1OtFXXyUhZXOhCZcYdu2Yui/OAsCUY7/mgoO/8k MgIk66n7wv03fIifILxs9gYj1x3jqiq2lLMktEFR3dkbtV+6GQfpUVaTJMN/zIyQ NKbbKowqESv1tg40l0FpvpjkS0tsmd3Io3zD6DMUYzwk+BsoaC8LAZQXB0fU89pW qJIMOMoD8wTRv0BGY38NpoA3uFmmd1LsFfmeS0wk9X3RYhYu1M6bg7oSb9B3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JHb8QwdjusK/WscsMKGGF6IyeMwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzW29z1xX2536RV/st2kX17YkA6pQiBw8pa gLZHAtPEIbMYzg19P9/mwPpW8xYra1omUqPF4vjEiNPo81vEmxrvEyjOIzEAsgHV jyAwKrfm+DKZhZTRwCSeqWdOIvM1x1fSqPgd/00RFwu7/85SGP0UroM8eS7WSyRg n8PdN9yX3fLK6rm9uNK3X2IiDEuYXKJFHVIw0lfOiU5BVODMHX2xu6/g6wly23E0 LD3q1VrplML7TjZ4vwcYjLE4DQX8kj24HqBaLU/QOmBHeja2FbhDSYDRxf6nLogw Af/XF1snAOtaBFOxKEFDiyLpaRnJ+Cz3TCIP5fOk/KCDaKI0O+0= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:36 2026 by rpki-client