$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft File: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft (raw, json) Hash identifier: mVywzjzM3yYFZgWTlSHnpNjSzpIcgiShURj5OviNXaA= Subject key identifier: 8C:68:B3:E8:23:3B:75:EA:4A:62:C7:EF:BE:D0:55:C7:BB:04:C1:57 Authority key identifier: D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 Certificate issuer: /CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Certificate serial: 3F560AF7643B5CC1E86473F99C1118FD7654D839 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:17:55 +0000 Manifest this update: Wed 17 Jun 2026 04:12:55 +0000 Manifest next update: Thu 18 Jun 2026 08:02:55 +0000 Files and hashes: 1: D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl (hash: RhYasCYPLAMdf9yuGRgNePHTA2jszEc2/Nyai3rBHzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:56:0a:f7:64:3b:5c:c1:e8:64:73:f9:9c:11:18:fd:76:54:d8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E1B6C73E027C4D042CB74348A63B4A28C43E28 Validity Not Before: Jun 17 04:12:55 2026 GMT Not After : Jun 18 08:02:55 2026 GMT Subject: CN=8C68B3E8233B75EA4A62C7EFBED055C7BB04C157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:60:b4:3b:df:bd:56:a9:b0:c2:c7:8f:23: ef:a6:5c:6e:81:d3:c8:e3:4c:bb:5c:eb:ff:41:be: 03:fb:bf:71:35:16:8e:69:40:2b:d2:b2:63:36:e4: 2c:6c:e4:45:bf:a3:1d:11:6e:fd:86:23:0b:2f:34: 2d:b9:d2:1c:a6:5e:6d:50:7e:b5:4c:ad:59:b8:37: fa:ef:94:e3:0f:97:f4:34:a0:c9:84:7c:a7:fe:e5: f0:44:e3:61:0f:8f:81:43:c5:c2:20:1b:51:c4:24: 05:1d:73:75:8d:50:94:ba:be:32:75:f5:e5:c9:9a: cc:55:72:0c:87:70:dc:d0:18:f1:98:db:e9:71:27: 65:93:3f:1b:d2:98:7b:e0:9a:4c:91:57:f9:62:7b: 64:40:0d:9b:96:c3:80:cc:60:60:e3:31:9a:bd:e8: 08:93:2d:6c:d5:6e:66:f0:8a:f9:71:5a:52:fb:6b: 3f:79:d9:72:31:47:b5:6b:6b:a4:03:96:1e:95:5f: 84:9c:8c:0c:fb:87:ca:cc:5c:72:4c:b1:9b:1b:de: 5e:b6:7c:57:94:29:a4:db:ea:ed:80:6c:b2:d2:96: e3:76:9b:e5:b3:7d:6a:b7:e8:9c:39:62:44:19:79: c7:fb:b7:3e:b7:da:5c:cf:a4:73:2b:fe:fd:e2:fd: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:B3:E8:23:3B:75:EA:4A:62:C7:EF:BE:D0:55:C7:BB:04:C1:57 X509v3 Authority Key Identifier: keyid:D3:E1:B6:C7:3E:02:7C:4D:04:2C:B7:43:48:A6:3B:4A:28:C4:3E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/0/D3E1B6C73E027C4D042CB74348A63B4A28C43E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:35:3b:d0:fc:fe:95:35:c1:74:0f:28:8a:7b:63:f1:d3:b9: 32:86:b6:3b:ec:2b:73:78:a0:e5:33:8e:05:da:ef:d6:f6:5e: 08:4a:dd:f5:5f:62:19:b4:ec:6c:28:7e:e8:9a:2a:31:7d:04: 52:9d:0c:76:e4:93:41:98:ab:ea:1f:2e:bd:ac:6f:eb:f1:7a: 72:98:4c:99:35:06:27:89:1f:7c:97:26:52:96:05:0b:59:a1: 74:74:88:7f:4e:c6:8d:f9:de:e2:f3:c1:c2:e1:b0:04:21:3b: 24:a0:d6:ae:4f:c2:07:c9:8e:f4:bf:65:a2:58:53:65:31:4f: 31:38:c6:f7:32:16:7a:21:3e:ce:b5:b3:ae:70:99:6b:29:5d: 5b:57:18:e6:46:04:f2:93:6d:8d:74:e9:ba:69:7e:9e:e9:60: 21:ed:8a:02:19:be:55:6d:d2:f1:40:54:c6:fb:9d:a5:1f:cb: 01:09:4e:57:a3:2d:00:7d:d7:52:81:63:0d:86:da:a9:98:a1: 5f:36:97:22:f6:3d:d8:24:64:09:a4:0f:ab:37:09:8e:ff:8f: 14:0e:4c:49:9e:e8:0d:a0:08:04:92:28:23:bb:5f:5a:98:96: 5d:96:0c:ef:71:0a:3f:67:2a:f6:d8:83:27:bc:97:32:50:50: 06:4e:c7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1YK92Q7XMHoZHP5nBEY/XZU2DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEy OEM0M0UyODAeFw0yNjA2MTcwNDEyNTVaFw0yNjA2MTgwODAyNTVaMDMxMTAvBgNV BAMTKDhDNjhCM0U4MjMzQjc1RUE0QTYyQzdFRkJFRDA1NUM3QkIwNEMxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrGC0O9+9VqmwwsePI++mXG6B 08jjTLtc6/9BvgP7v3E1Fo5pQCvSsmM25Cxs5EW/ox0Rbv2GIwsvNC250hymXm1Q frVMrVm4N/rvlOMPl/Q0oMmEfKf+5fBE42EPj4FDxcIgG1HEJAUdc3WNUJS6vjJ1 9eXJmsxVcgyHcNzQGPGY2+lxJ2WTPxvSmHvgmkyRV/lie2RADZuWw4DMYGDjMZq9 6AiTLWzVbmbwivlxWlL7az952XIxR7Vra6QDlh6VX4ScjAz7h8rMXHJMsZsb3l62 fFeUKaTb6u2AbLLSluN2m+WzfWq36Jw5YkQZecf7tz632lzPpHMr/v3i/Yb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGiz6CM7depKYsfvvtBVx7sEwVcwHwYDVR0j BBgwFoAU0+G2xz4CfE0ELLdDSKY7SijEPigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ1YTAzZWItYTNlMS00ODc5LTg1YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2Qzcz RTAyN0M0RDA0MkNCNzQzNDhBNjNCNEEyOEM0M0UyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0UxQjZDNzNFMDI3QzREMDQyQ0I3NDM0OEE2M0I0QTI4QzQz RTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ1YTAzZWItYTNlMS00ODc5LTg1 YmYtMmJlYTAzNTU1OGRkLzAvRDNFMUI2QzczRTAyN0M0RDA0MkNCNzQzNDhBNjNC NEEyOEM0M0UyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM1O9D8/pU1wXQPKIp7Y/HTuTKGtjvsK3N4 oOUzjgXa79b2XghK3fVfYhm07GwofuiaKjF9BFKdDHbkk0GYq+ofLr2sb+vxenKY TJk1BieJH3yXJlKWBQtZoXR0iH9Oxo353uLzwcLhsAQhOySg1q5PwgfJjvS/ZaJY U2UxTzE4xvcyFnohPs61s65wmWspXVtXGOZGBPKTbY106bppfp7pYCHtigIZvlVt 0vFAVMb7naUfywEJTlejLQB911KBYw2G2qmYoV82lyL2PdgkZAmkD6s3CY7/jxQO TEme6A2gCASSKCO7X1qYll2WDO9xCj9nKvbYgye8lzJQUAZOx6c= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:08 2026 by rpki-client