$ rpki-client -vvf rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft (raw, json) Hash identifier: W+ec9ObO245+vGVmBypF15TvsR6YuIe89AwgF0YA/4k= Subject key identifier: 08:06:B9:42:4E:5F:0A:EF:E4:08:D5:8A:5C:DA:72:DB:42:0C:76:54 Authority key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Certificate issuer: /CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Certificate serial: 64AF9D064C0D30A04643BBB9D4EFC7E165DD10BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:11:10 +0000 Manifest this update: Tue 16 Jun 2026 22:06:10 +0000 Manifest next update: Wed 17 Jun 2026 22:35:10 +0000 Files and hashes: 1: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl (hash: eQ1eUgUe2/FQAwhK4fGwT0dpAVoEZZ0Lk5kpM14KJuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:af:9d:06:4c:0d:30:a0:46:43:bb:b9:d4:ef:c7:e1:65:dd:10:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Validity Not Before: Jun 16 22:06:10 2026 GMT Not After : Jun 17 22:35:10 2026 GMT Subject: CN=0806B9424E5F0AEFE408D58A5CDA72DB420C7654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:64:16:c9:bc:a3:59:54:fe:e2:d8:ea:d0: 7c:72:2c:d1:af:dc:60:6e:6c:07:d0:2e:fb:26:ee: 13:76:a7:dc:74:ba:60:06:79:b6:93:8b:74:48:f3: 6c:09:11:dd:cd:b3:52:6c:cb:7a:20:c3:6e:47:05: 80:15:c5:db:a1:2d:1e:fc:29:a7:63:73:0c:49:49: 3d:d6:a8:88:8e:29:0d:a1:f6:23:1b:b5:af:e8:f7: 37:06:56:1d:31:37:07:08:d6:c8:9c:52:6d:04:9c: 7c:d5:f2:f3:65:9d:9e:e9:1f:fb:15:e5:f1:aa:44: 20:54:93:40:2c:aa:56:52:4b:cc:9c:ca:95:bf:9c: 6e:d2:08:44:11:ae:f8:21:fe:2b:22:cb:2f:8e:c2: fb:4b:94:dd:a3:70:e8:b7:8c:4b:64:65:ba:e3:94: 08:a5:6c:ee:11:d3:5b:38:67:0e:84:02:7a:02:29: 20:aa:ee:a0:46:38:6a:23:40:11:78:0c:d8:9b:03: c7:20:97:76:d7:46:57:0a:ee:51:00:06:25:ad:c6: 61:fe:cd:6b:18:f2:97:c7:2d:9f:04:6a:e5:83:50: 1d:73:91:8a:1b:dd:02:8a:83:87:ca:b5:d6:36:1c: 76:36:8b:70:c9:1a:6f:32:3c:01:92:2e:5d:31:c7: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:06:B9:42:4E:5F:0A:EF:E4:08:D5:8A:5C:DA:72:DB:42:0C:76:54 X509v3 Authority Key Identifier: keyid:3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a0:6f:aa:f9:9b:89:12:b7:17:6a:b8:42:37:5b:5b:75:a4: d4:ad:c4:1e:1b:20:69:c8:ed:bf:51:c9:9d:33:b3:64:91:f9: f6:5e:e5:ee:83:1b:49:3c:15:f6:f5:57:05:cd:49:aa:92:e2: e4:e8:dd:05:6a:7d:b7:42:95:90:16:f2:de:e4:5c:4d:07:ec: c4:5b:61:aa:cd:0f:11:1b:62:db:b5:b0:b8:61:b1:a2:79:be: 46:d1:fe:f6:36:53:8c:14:ad:69:24:95:9b:6f:df:02:22:49: 71:35:e6:aa:25:5c:eb:76:dd:cd:8d:4d:bc:c7:0a:93:15:0e: a4:14:a1:f2:64:d7:b0:54:33:1f:f8:8b:81:67:80:fe:25:4d: 2a:4c:4f:81:9c:fe:5f:58:77:91:1e:0c:d5:d0:97:10:9c:75: bc:ac:86:dd:5b:65:7a:d0:fa:b2:0d:56:d9:61:cf:67:46:ac: 5f:ac:5e:91:be:5e:10:ce:c0:d2:c8:b1:f1:8d:c4:f4:ff:9c: 12:71:d9:c1:54:97:c3:8b:ae:78:3f:44:2b:93:cf:a5:b0:63: 59:42:f3:62:bd:2a:82:7c:f3:e8:ab:a9:30:11:0a:be:2c:58: e8:0c:09:25:0c:8e:a3:28:f1:0a:6e:af:bd:a8:e5:81:b7:0f: a1:6b:9f:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZK+dBkwNMKBGQ7u51O/H4WXdEL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNC QzA4MUM5OTAeFw0yNjA2MTYyMjA2MTBaFw0yNjA2MTcyMjM1MTBaMDMxMTAvBgNV BAMTKDA4MDZCOTQyNEU1RjBBRUZFNDA4RDU4QTVDREE3MkRCNDIwQzc2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKy2QWybyjWVT+4tjq0HxyLNGv 3GBubAfQLvsm7hN2p9x0umAGebaTi3RI82wJEd3Ns1Jsy3ogw25HBYAVxduhLR78 KadjcwxJST3WqIiOKQ2h9iMbta/o9zcGVh0xNwcI1sicUm0EnHzV8vNlnZ7pH/sV 5fGqRCBUk0AsqlZSS8ycypW/nG7SCEQRrvgh/isiyy+OwvtLlN2jcOi3jEtkZbrj lAilbO4R01s4Zw6EAnoCKSCq7qBGOGojQBF4DNibA8cgl3bXRlcK7lEABiWtxmH+ zWsY8pfHLZ8EauWDUB1zkYob3QKKg4fKtdY2HHY2i3DJGm8yPAGSLl0xx1VDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAa5Qk5fCu/kCNWKXNpy20IMdlQwHwYDVR0j BBgwFoAUPwV8m+sWzndP8UgxGPz907wIHJkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJmMzljMTctNjcyNS00MmJlLWJlZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJF QjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNCQzA4MUM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjA1N0M5QkVCMTZDRTc3NEZGMTQ4MzExOEZDRkREM0JDMDgx Qzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZE RDNCQzA4MUM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmgb6r5m4kStxdquEI3W1t1pNStxB4bIGnI 7b9RyZ0zs2SR+fZe5e6DG0k8Ffb1VwXNSaqS4uTo3QVqfbdClZAW8t7kXE0H7MRb YarNDxEbYtu1sLhhsaJ5vkbR/vY2U4wUrWkklZtv3wIiSXE15qolXOt23c2NTbzH CpMVDqQUofJk17BUMx/4i4FngP4lTSpMT4Gc/l9Yd5EeDNXQlxCcdbysht1bZXrQ +rINVtlhz2dGrF+sXpG+XhDOwNLIsfGNxPT/nBJx2cFUl8OLrng/RCuTz6WwY1lC 82K9KoJ88+irqTARCr4sWOgMCSUMjqMo8Qpur72o5YG3D6Frn/A= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:33 2026 by rpki-client