$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: BTQE04Sf4V+0yvI8+aOJ5R1nHavGVTU45fmpwYRxR2U= Subject key identifier: 7F:9E:CE:0E:30:62:31:84:8F:F2:68:6B:FC:A2:28:B3:0C:AD:84:91 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 24BBD815683D6FA4A46F6381BD39B94C03B07392 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 08:29:07 +0000 Manifest this update: Sat 13 Jun 2026 08:24:07 +0000 Manifest next update: Sun 14 Jun 2026 11:24:07 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) 3: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: eCxmDK5o8OCS9xuTiKp7MrkmFxv5R03n23epZoJpUok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:d8:15:68:3d:6f:a4:a4:6f:63:81:bd:39:b9:4c:03:b0:73:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Jun 13 08:24:07 2026 GMT Not After : Jun 14 11:24:07 2026 GMT Subject: CN=7F9ECE0E306231848FF2686BFCA228B30CAD8491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:a7:ec:c1:4e:d7:ca:b2:96:11:8d:72:f2: 08:90:44:f4:ff:f2:c8:45:26:db:db:84:79:7b:d9: f6:e3:fe:3a:82:76:43:8d:6f:11:56:36:61:05:0a: 2e:e8:18:4a:9b:da:a7:41:10:74:58:68:55:49:0a: ee:0d:ad:04:34:19:e1:0c:01:a5:a5:f6:96:a9:19: 97:c3:a4:a8:ea:ec:d9:a8:8c:da:aa:c9:03:8d:83: 7c:e2:da:21:02:f3:9e:99:f2:af:fd:ba:65:f3:29: 7d:98:5c:a5:b5:a6:e0:ce:3e:0a:ab:c6:53:48:04: 3d:ea:28:e6:e0:59:e3:92:bd:8b:1c:e8:57:37:1a: 66:f4:00:ed:e9:42:58:59:a4:75:9e:dd:e3:51:74: 5f:09:75:cf:28:69:9d:04:5a:39:00:09:79:82:df: 3d:4b:47:36:86:1b:3d:e3:8c:51:a2:13:d4:02:f0: 34:d1:44:a8:20:cb:51:a9:26:0a:4b:52:63:1c:89: 19:c5:fd:3a:89:ae:10:55:b7:f7:8d:81:ef:a8:39: 7a:c8:06:66:99:09:6a:a6:c6:a4:92:52:c5:86:1b: 79:f3:aa:12:18:09:cc:38:ac:0d:d0:35:16:57:aa: b0:ee:f9:03:9b:cb:7c:b1:c5:40:4f:9b:37:90:01: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9E:CE:0E:30:62:31:84:8F:F2:68:6B:FC:A2:28:B3:0C:AD:84:91 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:90:e6:a1:57:7f:78:a2:ae:31:22:ba:e0:49:59:dc:19:7f: 2b:84:d2:ef:e1:28:2d:1f:e5:ea:8b:43:ea:42:a6:a2:a3:4c: 52:17:a1:5c:c6:6d:5a:13:ea:53:9b:74:fe:e9:6a:25:2d:2a: 70:34:77:34:c2:c4:90:0f:88:fd:10:c2:1c:29:66:7d:6b:35: 02:60:01:9c:3b:66:fc:66:3c:6d:32:aa:5f:ce:70:3b:76:c7: a8:ac:2b:ca:33:aa:6a:7a:c3:93:49:ab:e8:37:2a:67:db:20: 88:d4:30:e4:01:bd:da:25:93:f6:4d:68:81:ba:c3:87:43:f9: 6e:67:d9:0d:68:e1:f6:f1:81:42:4f:0d:6a:67:43:81:bd:8e: 5b:40:93:23:b4:bf:d2:93:08:c6:08:ba:96:39:b4:7a:55:97: e5:7a:f5:54:99:8c:e0:0b:85:8e:58:31:e8:bb:af:ac:7b:2a: 09:9d:4a:96:70:18:53:11:35:a9:ef:36:b0:b9:02:1b:67:55: 5f:04:8d:61:5c:60:9e:4a:34:19:13:f2:a5:73:fc:36:69:af: eb:67:f7:56:a9:6d:8a:ac:a8:d4:5e:6a:82:37:77:bb:c2:1d: f8:f2:b1:5c:3d:8f:a5:42:78:58:21:9f:06:e2:f0:6c:ec:70: 72:cf:f9:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLvYFWg9b6Skb2OBvTm5TAOwc5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA2MTMwODI0MDdaFw0yNjA2MTQxMTI0MDdaMDMxMTAvBgNV BAMTKDdGOUVDRTBFMzA2MjMxODQ4RkYyNjg2QkZDQTIyOEIzMENBRDg0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DafswU7XyrKWEY1y8giQRPT/ 8shFJtvbhHl72fbj/jqCdkONbxFWNmEFCi7oGEqb2qdBEHRYaFVJCu4NrQQ0GeEM AaWl9papGZfDpKjq7NmojNqqyQONg3zi2iEC856Z8q/9umXzKX2YXKW1puDOPgqr xlNIBD3qKObgWeOSvYsc6Fc3Gmb0AO3pQlhZpHWe3eNRdF8Jdc8oaZ0EWjkACXmC 3z1LRzaGGz3jjFGiE9QC8DTRRKggy1GpJgpLUmMciRnF/TqJrhBVt/eNge+oOXrI BmaZCWqmxqSSUsWGG3nzqhIYCcw4rA3QNRZXqrDu+QOby3yxxUBPmzeQAe9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf57ODjBiMYSP8mhr/KIoswythJEwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKQ5qFXf3iirjEiuuBJWdwZfyuE0u/hKC0f 5eqLQ+pCpqKjTFIXoVzGbVoT6lObdP7paiUtKnA0dzTCxJAPiP0QwhwpZn1rNQJg AZw7ZvxmPG0yql/OcDt2x6isK8ozqmp6w5NJq+g3KmfbIIjUMOQBvdolk/ZNaIG6 w4dD+W5n2Q1o4fbxgUJPDWpnQ4G9jltAkyO0v9KTCMYIupY5tHpVl+V69VSZjOAL hY5YMei7r6x7KgmdSpZwGFMRNanvNrC5AhtnVV8EjWFcYJ5KNBkT8qVz/DZpr+tn 91apbYqsqNReaoI3d7vCHfjysVw9j6VCeFghnwbi8GzscHLP+Xk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:48 2026 by rpki-client