$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: plE0+9Xuqazh+3eB7JrtWFJkmZuH6Mo8+WrgzayMRVI= Subject key identifier: D6:34:60:B3:AC:47:BE:4E:2A:B9:32:78:FB:F6:5F:2D:C3:CB:6A:06 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 6B3DEAD0AEFB0AEBA2BD0B21535DE68C70CB5414 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:47:27 +0000 Manifest this update: Sat 13 Jun 2026 14:42:27 +0000 Manifest next update: Sun 14 Jun 2026 17:55:27 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) 2: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: XfWlV/aoWxiWTarO10yhI+FvHfIBRMgh8I8liQ1yI74=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3d:ea:d0:ae:fb:0a:eb:a2:bd:0b:21:53:5d:e6:8c:70:cb:54:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Jun 13 14:42:27 2026 GMT Not After : Jun 14 17:55:27 2026 GMT Subject: CN=D63460B3AC47BE4E2AB93278FBF65F2DC3CB6A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:24:c0:16:e9:8a:ca:d6:0b:1d:2a:cc:f7: b1:47:d8:6b:12:08:81:84:24:49:d7:d5:3c:ff:98: e5:01:c5:9a:d6:a4:b4:0c:95:68:56:f9:42:32:b5: 3c:c1:cf:aa:67:31:d6:f9:42:89:15:f3:d8:d3:7a: 3b:a4:11:ce:59:0a:fe:39:42:b1:c2:24:25:a8:20: 97:ae:95:e9:7e:85:f4:75:21:28:94:00:d8:e9:4c: 83:bc:c4:93:85:44:d1:f8:ed:46:74:fa:71:99:64: 2a:6f:45:22:f3:3f:d3:48:57:ac:dc:96:58:4d:e9: 90:3a:ab:dd:7f:24:ff:08:ae:fe:4f:af:95:c5:56: 73:d1:4d:f7:36:97:3c:a7:cd:eb:fa:74:c6:ae:b5: 55:2c:fc:34:3b:eb:cf:1b:56:45:c6:a7:8f:43:3b: 97:99:43:f7:20:71:fa:be:81:ce:95:28:53:ee:35: 41:39:01:fa:c4:ad:03:c1:18:a9:74:15:d8:31:24: 00:96:1c:6f:ea:4f:31:4f:1f:94:5d:36:ee:39:72: 6a:77:16:94:d2:e5:80:f1:b3:fb:a9:d3:31:1a:1d: 2f:b6:9a:ca:4b:a8:09:98:18:2a:c4:2c:e1:19:67: ca:3d:f1:f1:4d:f5:a8:9f:89:04:7d:2a:73:f6:cc: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:34:60:B3:AC:47:BE:4E:2A:B9:32:78:FB:F6:5F:2D:C3:CB:6A:06 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:11:98:c2:f5:cb:24:c3:6b:7f:cb:80:93:69:3f:24:6b: 3c:f0:0b:4f:8d:82:aa:62:99:7b:fa:60:b3:62:dd:82:ab:52: 01:a2:e9:68:de:bd:62:b6:c0:8d:b5:e1:08:4f:4b:a4:84:95: 99:1a:9a:7c:da:3e:6b:25:14:28:4a:65:e4:6f:02:8e:02:14: b5:4c:df:27:09:95:41:92:da:c6:8b:48:29:4e:03:91:09:1d: d2:01:04:7f:62:ea:4e:ba:cc:3c:70:07:67:9f:1e:c0:f7:e3: 61:d3:f4:95:7d:65:7a:24:5e:01:0b:b9:ad:eb:59:c8:97:59: 8b:a5:c0:9f:f2:66:da:fb:33:0a:43:48:fd:bd:63:7f:be:43: 82:24:ea:ca:fd:07:bd:33:e6:d1:29:ab:ba:8a:70:ee:5a:30: a7:08:94:d7:32:4d:e3:00:2a:11:ce:82:b0:eb:63:33:c4:87: 84:23:62:b0:ad:8e:f3:fa:01:e6:4d:ad:22:a2:a1:39:8c:aa: 02:0a:4e:7f:09:5e:51:9a:67:b7:b5:70:16:2a:ed:01:d5:69: a0:00:eb:33:8e:20:a1:ec:01:4e:ca:19:f5:53:4d:36:bf:55: 8d:0f:18:b0:76:4e:8b:f5:25:fb:1d:6d:67:52:a0:4c:fa:89: db:96:9a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz3q0K77CuuivQshU13mjHDLVBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA2MTMxNDQyMjdaFw0yNjA2MTQxNzU1MjdaMDMxMTAvBgNV BAMTKEQ2MzQ2MEIzQUM0N0JFNEUyQUI5MzI3OEZCRjY1RjJEQzNDQjZBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnyTAFumKytYLHSrM97FH2GsS CIGEJEnX1Tz/mOUBxZrWpLQMlWhW+UIytTzBz6pnMdb5QokV89jTejukEc5ZCv45 QrHCJCWoIJeulel+hfR1ISiUANjpTIO8xJOFRNH47UZ0+nGZZCpvRSLzP9NIV6zc llhN6ZA6q91/JP8Irv5Pr5XFVnPRTfc2lzynzev6dMautVUs/DQ7688bVkXGp49D O5eZQ/cgcfq+gc6VKFPuNUE5AfrErQPBGKl0FdgxJACWHG/qTzFPH5RdNu45cmp3 FpTS5YDxs/up0zEaHS+2mspLqAmYGCrELOEZZ8o98fFN9aifiQR9KnP2zJcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jRgs6xHvk4quTJ4+/ZfLcPLagYwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG38EZjC9cskw2t/y4CTaT8kazzwC0+Ngqpi mXv6YLNi3YKrUgGi6WjevWK2wI214QhPS6SElZkamnzaPmslFChKZeRvAo4CFLVM 3ycJlUGS2saLSClOA5EJHdIBBH9i6k66zDxwB2efHsD342HT9JV9ZXokXgELua3r WciXWYulwJ/yZtr7MwpDSP29Y3++Q4Ik6sr9B70z5tEpq7qKcO5aMKcIlNcyTeMA KhHOgrDrYzPEh4QjYrCtjvP6AeZNrSKioTmMqgIKTn8JXlGaZ7e1cBYq7QHVaaAA 6zOOIKHsAU7KGfVTTTa/VY0PGLB2Tov1JfsdbWdSoEz6iduWmgU= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:52 2026 by rpki-client