$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json) Hash identifier: VpcL6KgC5QFBRmq16nyqnp/4kRQ3awu2jEdaLYGQmq8= Subject key identifier: D8:88:D3:C8:8B:22:A7:2A:27:E8:20:C1:FC:4E:99:0E:86:33:47:8A Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Certificate serial: 3AC3B4D54CF93AFF95F3BD245B9A58DE9F1466EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 22:39:43 +0000 Manifest this update: Sun 14 Jun 2026 22:34:43 +0000 Manifest next update: Tue 16 Jun 2026 00:46:43 +0000 Files and hashes: 1: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: 9EuntJn75mQWCPpaZAtTeN6UvYf5be1RXTAhmq4Y0uw=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 00:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c3:b4:d5:4c:f9:3a:ff:95:f3:bd:24:5b:9a:58:de:9f:14:66:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A Validity Not Before: Jun 14 22:34:43 2026 GMT Not After : Jun 16 00:46:43 2026 GMT Subject: CN=D888D3C88B22A72A27E820C1FC4E990E8633478A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:97:ef:c7:06:f1:de:dc:14:73:69:a5:cc:81: 64:80:56:77:8e:75:70:6a:79:12:fa:5a:c1:eb:2c: 91:74:e4:da:01:f0:83:61:69:24:1e:a3:c6:b9:52: 55:e2:5a:65:e3:1c:d7:97:88:6b:cb:a1:e3:54:63: 27:29:11:07:9b:81:28:95:bc:19:cc:21:58:85:81: 4e:cd:19:04:10:59:ae:57:f2:d6:7b:ec:82:b2:36: 99:6e:1a:bf:30:74:fe:64:6d:83:fa:28:73:27:f8: 51:7b:ad:df:4d:cf:f2:f6:8d:c9:be:d7:75:99:19: 2c:2a:d5:1d:50:30:74:42:84:d7:fe:0d:b3:8d:0a: 8b:e8:e5:8d:cb:25:1a:26:09:1a:7a:32:1d:b4:2f: c8:43:2f:33:21:ea:db:e4:c8:68:b1:e7:2c:21:37: 6e:0d:6c:87:78:3a:38:10:11:44:f0:35:66:5a:36: 3a:32:39:96:cd:a2:ee:27:13:e7:62:31:8e:1d:aa: f7:0f:58:85:67:f7:07:23:2d:6c:99:1b:08:6a:a9: c9:5b:1f:89:08:19:ff:44:76:e9:4d:26:3c:69:09: 41:36:d3:91:82:cc:c4:14:fb:01:68:ad:b3:0b:b5: 7b:32:ae:ee:da:22:6d:ea:b8:7d:94:b9:05:e5:51: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:D3:C8:8B:22:A7:2A:27:E8:20:C1:FC:4E:99:0E:86:33:47:8A X509v3 Authority Key Identifier: keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:02:b9:dc:8b:eb:7b:c5:e6:f7:f1:10:5b:42:98:af:6e:91: e7:c4:78:7a:91:fa:05:70:d5:55:a7:bd:b3:67:0c:c5:1d:a7: 08:00:b5:3b:24:53:e5:35:e6:86:b7:04:09:d7:6f:3f:13:d2: 78:99:9e:40:06:86:5e:69:7a:c5:22:35:01:81:59:98:53:f4: 3b:11:68:ee:42:03:84:ec:fa:3a:b6:05:de:39:82:26:bc:be: 47:1b:bb:69:af:55:61:e4:af:c4:3a:1e:52:c4:b3:3e:a3:90: 07:74:ae:10:a3:b0:fa:88:0b:25:df:92:f2:e1:19:34:a8:32: 18:17:b7:bc:0a:7c:57:98:96:67:ab:a6:6e:7a:7e:34:e9:42: f3:95:15:e6:da:f3:24:4a:27:88:f4:12:01:b2:83:ce:30:d6: 35:58:d0:22:fd:c0:c7:47:7c:8a:ed:9a:29:f5:df:04:5d:df: c6:f6:59:ff:12:b4:91:fe:d2:6a:05:39:86:d7:69:62:27:16: ab:14:9c:ef:c9:5a:a6:85:35:e5:30:e7:e4:bd:f5:40:0a:c9: b1:de:98:8c:f1:ab:07:a8:51:56:7c:07:da:76:85:b9:b6:86: 56:65:4b:aa:1b:6f:6f:4f:af:8b:6f:36:28:98:d2:e5:6e:d8: d8:bf:94:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsO01Uz5Ov+V870kW5pY3p8UZu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkExOEEx Mjc3QTU5QTAeFw0yNjA2MTQyMjM0NDNaFw0yNjA2MTYwMDQ2NDNaMDMxMTAvBgNV BAMTKEQ4ODhEM0M4OEIyMkE3MkEyN0U4MjBDMUZDNEU5OTBFODYzMzQ3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSl+/HBvHe3BRzaaXMgWSAVneO dXBqeRL6WsHrLJF05NoB8INhaSQeo8a5UlXiWmXjHNeXiGvLoeNUYycpEQebgSiV vBnMIViFgU7NGQQQWa5X8tZ77IKyNpluGr8wdP5kbYP6KHMn+FF7rd9Nz/L2jcm+ 13WZGSwq1R1QMHRChNf+DbONCovo5Y3LJRomCRp6Mh20L8hDLzMh6tvkyGix5ywh N24NbId4OjgQEUTwNWZaNjoyOZbNou4nE+diMY4dqvcPWIVn9wcjLWyZGwhqqclb H4kIGf9EdulNJjxpCUE205GCzMQU+wForbMLtXsyru7aIm3quH2UuQXlUWb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IjTyIsipyon6CDB/E6ZDoYzR4owHwYDVR0j BBgwFoAU//PY3FwMhlKfl7uGk0ahihJ3pZowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2ZmZhZDItMjBiYy00MjQ2LTgyOTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1 QzBDODY1MjlGOTdCQjg2OTM0NkExOEExMjc3QTU5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkYzRDhEQzVDMEM4NjUyOUY5N0JCODY5MzQ2QTE4QTEyNzdB NTlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvRkZGM0Q4REM1QzBDODY1MjlGOTdCQjg2OTM0NkEx OEExMjc3QTU5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQCudyL63vF5vfxEFtCmK9ukefEeHqR+gVw 1VWnvbNnDMUdpwgAtTskU+U15oa3BAnXbz8T0niZnkAGhl5pesUiNQGBWZhT9DsR aO5CA4Ts+jq2Bd45gia8vkcbu2mvVWHkr8Q6HlLEsz6jkAd0rhCjsPqICyXfkvLh GTSoMhgXt7wKfFeYlmerpm56fjTpQvOVFeba8yRKJ4j0EgGyg84w1jVY0CL9wMdH fIrtmin13wRd38b2Wf8StJH+0moFOYbXaWInFqsUnO/JWqaFNeUw5+S99UAKybHe mIzxqweoUVZ8B9p2hbm2hlZlS6obb29Pr4tvNiiY0uVu2Ni/lMg= -----END CERTIFICATE-----Generated at Mon Jun 15 14:13:24 2026 by rpki-client