$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: 2nZkVqXm2K0OQRMAcy5ciV6wq8vrsgugwOmSvUEOUdA= Subject key identifier: CF:75:94:4A:61:4F:85:E7:43:15:7E:5E:E6:E4:75:F0:F0:D9:F8:6A Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 61166B64414E92415DB1C8517996B528F02DF18D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:05:13 +0000 Manifest this update: Wed 17 Jun 2026 02:00:13 +0000 Manifest next update: Thu 18 Jun 2026 03:33:13 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) 3: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 4: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: jCM8lF8w9k0r1XvMRyn+3FWlZ5S1t7PWfGh2EXA69Vw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:16:6b:64:41:4e:92:41:5d:b1:c8:51:79:96:b5:28:f0:2d:f1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Jun 17 02:00:13 2026 GMT Not After : Jun 18 03:33:13 2026 GMT Subject: CN=CF75944A614F85E743157E5EE6E475F0F0D9F86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:9e:a6:0a:2f:69:e1:6f:6d:ea:5d:cb:36: 47:bb:de:69:68:d8:cf:e3:ea:99:c5:96:51:79:9b: a6:0b:8c:d3:92:15:e1:43:74:6c:80:91:a6:0b:d7: 9d:c1:b8:bf:8a:08:2e:a1:9a:06:0f:05:6d:e5:cc: a4:48:01:5d:bc:e2:f1:ee:4a:28:d5:fc:aa:99:f5: a7:28:3a:35:3c:59:62:1c:36:e9:0b:aa:39:78:73: c4:bd:12:78:30:11:3e:80:be:e9:c2:e2:a8:2c:b5: 19:25:9b:63:3e:1d:88:70:92:04:d6:5f:73:dd:e1: 13:f5:90:91:f0:1d:8d:38:22:cc:f2:0a:77:c5:51: 80:8b:00:61:d3:34:8c:2e:54:0b:c9:49:73:0e:c2: d7:2a:11:54:da:e5:3f:df:91:05:39:9e:52:d5:a0: e0:80:a6:1b:6b:19:4c:ba:c4:f2:ee:c2:55:75:f0: 32:9d:9a:bb:bf:2b:ce:a3:f5:15:05:2a:26:e4:75: 25:25:1f:61:86:ca:20:31:25:bf:c5:0c:46:52:8d: c8:d6:db:89:4d:2b:c8:78:49:b2:c4:7f:6b:12:1a: a9:c6:48:1c:b8:44:12:06:6f:a8:0f:0c:52:ac:bc: 57:f0:9f:e9:73:74:2c:7c:2b:9a:27:4a:19:7f:4e: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:94:4A:61:4F:85:E7:43:15:7E:5E:E6:E4:75:F0:F0:D9:F8:6A X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:e2:82:23:0f:3b:44:c1:f7:e8:1e:09:91:b6:23:3e:d7: 59:75:c7:ff:0f:34:08:0a:a7:e3:18:6b:6e:0b:68:71:44:1e: 9b:85:ca:d3:10:1c:28:fc:c0:9b:2c:b5:5c:11:5d:8b:1b:72: 7f:bf:d1:e3:c9:36:2d:d7:5d:9a:43:a4:89:ab:d3:4a:75:cb: 98:82:74:4f:68:48:73:eb:9a:ef:5a:43:a8:e0:bc:13:6e:8e: 18:ee:24:48:0c:8f:89:fa:36:11:49:eb:6e:6e:5d:10:3a:8a: ae:0d:14:f2:8d:82:3b:0b:3e:10:9e:95:03:5d:ef:21:3b:28: 5a:d8:e8:5b:83:e2:eb:c8:6c:3d:a4:ed:e3:78:d5:19:eb:53: ce:54:f6:b8:c5:20:4e:d8:15:1f:47:c8:e7:a8:57:4d:98:61: 6a:ca:45:88:27:6a:28:c1:c4:7d:a1:c1:a0:94:b2:b2:59:64: c5:62:c2:5e:b8:be:90:72:a9:0a:ab:fb:66:77:94:fc:c6:96: e0:51:d7:48:9a:72:25:b8:5a:15:4e:80:2c:8d:d9:c7:79:a1: e8:7d:f2:fa:e3:c6:9a:fb:05:ba:94:61:88:1e:23:78:60:b0: 9e:29:a9:af:d7:41:7e:07:89:3e:39:e6:17:f1:3e:54:b6:de: ac:35:0f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRZrZEFOkkFdschReZa1KPAt8Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA2MTcwMjAwMTNaFw0yNjA2MTgwMzMzMTNaMDMxMTAvBgNV BAMTKENGNzU5NDRBNjE0Rjg1RTc0MzE1N0U1RUU2RTQ3NUYwRjBEOUY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyp6mCi9p4W9t6l3LNke73mlo 2M/j6pnFllF5m6YLjNOSFeFDdGyAkaYL153BuL+KCC6hmgYPBW3lzKRIAV284vHu SijV/KqZ9acoOjU8WWIcNukLqjl4c8S9EngwET6AvunC4qgstRklm2M+HYhwkgTW X3Pd4RP1kJHwHY04IszyCnfFUYCLAGHTNIwuVAvJSXMOwtcqEVTa5T/fkQU5nlLV oOCAphtrGUy6xPLuwlV18DKdmru/K86j9RUFKibkdSUlH2GGyiAxJb/FDEZSjcjW 24lNK8h4SbLEf2sSGqnGSBy4RBIGb6gPDFKsvFfwn+lzdCx8K5onShl/TuRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz3WUSmFPhedDFX5e5uR18PDZ+GowHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw14oIjDztEwffoHgmRtiM+11l1x/8PNAgK p+MYa24LaHFEHpuFytMQHCj8wJsstVwRXYsbcn+/0ePJNi3XXZpDpImr00p1y5iC dE9oSHPrmu9aQ6jgvBNujhjuJEgMj4n6NhFJ625uXRA6iq4NFPKNgjsLPhCelQNd 7yE7KFrY6FuD4uvIbD2k7eN41RnrU85U9rjFIE7YFR9HyOeoV02YYWrKRYgnaijB xH2hwaCUsrJZZMViwl64vpByqQqr+2Z3lPzGluBR10iaciW4WhVOgCyN2cd5oeh9 8vrjxpr7BbqUYYgeI3hgsJ4pqa/XQX4HiT455hfxPlS23qw1D/4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:08 2026 by rpki-client