$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: S3C16bZsRHGWzAEqkPfnTLQBYdZu+8fRYw+RxPw6tDs= Subject key identifier: 3B:E4:E4:5D:07:ED:35:01:6B:EE:37:00:22:6B:77:A6:AA:5B:B0:8B Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 3F4247A49E77556BEA41488638DED6E92F4CD7DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 06:59:46 +0000 Manifest this update: Mon 15 Jun 2026 06:54:46 +0000 Manifest next update: Tue 16 Jun 2026 09:22:46 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) 2: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: nMWNiCTe4U8Bo9yWfaEA0AbtFJ5pgBIMugsr+iOEE8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:42:47:a4:9e:77:55:6b:ea:41:48:86:38:de:d6:e9:2f:4c:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Jun 15 06:54:46 2026 GMT Not After : Jun 16 09:22:46 2026 GMT Subject: CN=3BE4E45D07ED35016BEE3700226B77A6AA5BB08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:36:47:79:d5:5e:47:6a:83:36:b4:66:14: fe:8a:7d:7a:54:62:0e:19:20:32:37:75:07:c0:19: 53:83:c3:03:73:db:64:75:86:c6:81:49:f8:93:dc: ff:93:d3:74:9d:ec:65:af:19:ff:b1:24:ed:ca:00: 7c:97:ac:21:78:d8:1d:22:08:7a:c6:7e:75:d9:89: d4:8d:ad:6c:20:ce:2d:24:dc:dc:fa:b8:8f:48:04: 3f:5c:5e:d5:24:7a:05:92:3d:ad:58:08:d6:b6:d0: a5:6a:e3:f7:86:f6:9c:94:3f:91:6d:91:54:48:5b: b1:f1:0d:0f:8f:66:b6:44:eb:3d:40:cc:49:ff:d3: 9c:e4:aa:53:fc:98:8b:ca:52:15:b7:de:fb:c1:3f: 28:94:4d:c6:10:f1:f5:5b:10:97:d7:38:41:de:9a: 9d:af:cc:e2:dd:3d:22:db:ec:31:02:42:f4:06:af: 87:a1:be:f5:22:b7:01:fe:b3:54:fd:bc:56:ec:39: 15:2e:0c:7a:50:9a:13:b6:15:b3:f8:8f:7f:af:16: 76:3a:25:79:bc:57:bc:04:74:d8:ff:ae:48:95:a4: fc:61:93:04:18:38:51:77:da:e2:5f:55:cb:f6:58: 69:bc:b1:60:c2:2d:56:15:f4:6f:f9:f1:5e:36:82: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E4:E4:5D:07:ED:35:01:6B:EE:37:00:22:6B:77:A6:AA:5B:B0:8B X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e1:9e:dd:ce:86:f9:f6:72:d3:1f:63:9b:76:7e:12:b5:8c: 3e:5e:23:16:c2:7c:b1:d9:2b:8d:e6:82:5b:86:26:a2:46:00: 6f:5e:8e:05:bd:c3:1d:f2:e8:fb:1e:87:c4:15:87:82:02:11: 4b:b1:77:26:f3:da:a1:9f:a4:73:c8:43:1f:b3:29:cf:27:b2: 2e:ac:f5:88:1b:bf:78:2c:a3:ad:c2:99:93:9c:0a:db:a0:fa: 94:f7:32:13:de:86:b8:79:89:cd:19:05:2b:10:1f:b9:69:ab: 55:67:47:92:7b:ec:e6:40:e7:62:74:83:dd:4f:23:9c:81:f0: 8c:44:41:ec:0e:d4:62:87:ad:c0:95:a3:a0:e6:67:a8:94:8c: 39:9c:d9:c3:5f:50:30:a7:b0:3e:43:2a:a8:37:cb:64:4f:1b: c8:92:7a:ef:0f:ad:ea:72:85:a3:34:6c:71:d5:3c:94:35:af: 87:06:57:55:d6:83:89:87:a9:78:42:56:ed:03:a1:33:1b:f9: 03:20:ea:f0:93:91:56:a0:dc:66:9a:9a:7c:d9:76:a6:b3:ba: bd:0e:be:16:27:04:6e:f0:1a:76:39:b8:53:a7:9d:7a:2f:ed: 2e:89:47:2b:ef:c3:8b:5e:2c:a0:82:30:73:63:3a:e2:59:95: 22:d8:7c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0JHpJ53VWvqQUiGON7W6S9M19owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA2MTUwNjU0NDZaFw0yNjA2MTYwOTIyNDZaMDMxMTAvBgNV BAMTKDNCRTRFNDVEMDdFRDM1MDE2QkVFMzcwMDIyNkI3N0E2QUE1QkIwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvjZHedVeR2qDNrRmFP6KfXpU Yg4ZIDI3dQfAGVODwwNz22R1hsaBSfiT3P+T03Sd7GWvGf+xJO3KAHyXrCF42B0i CHrGfnXZidSNrWwgzi0k3Nz6uI9IBD9cXtUkegWSPa1YCNa20KVq4/eG9pyUP5Ft kVRIW7HxDQ+PZrZE6z1AzEn/05zkqlP8mIvKUhW33vvBPyiUTcYQ8fVbEJfXOEHe mp2vzOLdPSLb7DECQvQGr4ehvvUitwH+s1T9vFbsORUuDHpQmhO2FbP4j3+vFnY6 JXm8V7wEdNj/rkiVpPxhkwQYOFF32uJfVcv2WGm8sWDCLVYV9G/58V42gpotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+TkXQftNQFr7jcAImt3pqpbsIswHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3hnt3Ohvn2ctMfY5t2fhK1jD5eIxbCfLHZ K43mgluGJqJGAG9ejgW9wx3y6Pseh8QVh4ICEUuxdybz2qGfpHPIQx+zKc8nsi6s 9Ygbv3gso63CmZOcCtug+pT3MhPehrh5ic0ZBSsQH7lpq1VnR5J77OZA52J0g91P I5yB8IxEQewO1GKHrcCVo6DmZ6iUjDmc2cNfUDCnsD5DKqg3y2RPG8iSeu8Prepy haM0bHHVPJQ1r4cGV1XWg4mHqXhCVu0DoTMb+QMg6vCTkVag3GaamnzZdqazur0O vhYnBG7wGnY5uFOnnXov7S6JRyvvw4teLKCCMHNjOuJZlSLYfJ8= -----END CERTIFICATE-----Generated at Mon Jun 15 19:55:52 2026 by rpki-client