$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json) Hash identifier: rPAxqkeIQo8MYd3Ly0Dn6dNWrHBQGhkFzrhr6kOEWgs= Subject key identifier: 11:2D:94:6D:F6:A1:E2:EA:24:7C:54:B6:BB:37:95:5C:16:ED:53:D0 Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Certificate serial: 07751F5284345217606615F378F556895A614102 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:21:48 +0000 Manifest this update: Wed 17 Jun 2026 07:16:48 +0000 Manifest next update: Thu 18 Jun 2026 07:31:48 +0000 Files and hashes: 1: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: NaHKlfJe2ByZz4R41K4QRCnqGAJo+a8Zgm26WEiMVXY=) 2: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=) 3: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=) 4: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=) 5: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=) 6: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=) 7: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:75:1f:52:84:34:52:17:60:66:15:f3:78:f5:56:89:5a:61:41:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Validity Not Before: Jun 17 07:16:48 2026 GMT Not After : Jun 18 07:31:48 2026 GMT Subject: CN=112D946DF6A1E2EA247C54B6BB37955C16ED53D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:42:cb:1d:64:81:52:85:05:92:bd:bb:e3: ad:32:6b:8c:84:d8:e1:3b:54:1d:26:e0:b4:ff:98: 9c:92:2a:88:22:13:1d:71:5f:41:b8:54:82:9b:10: e4:79:1f:c9:eb:ef:cf:18:1b:66:8f:01:d9:6a:d0: 89:b4:b4:37:4e:48:ea:0f:2a:ea:8c:27:1d:dc:5e: 16:1e:79:5c:9b:51:ab:2c:2a:22:0a:ce:4f:99:36: b8:3d:e1:9b:7e:f8:e4:7e:d0:93:ed:e5:dd:81:15: 83:bc:59:dd:71:da:88:4d:15:61:b7:eb:c7:90:29: e6:ee:71:23:f0:31:9f:51:70:50:90:28:17:20:f3: 9f:25:b8:01:74:41:e7:9a:4a:36:6f:c4:ea:dc:d6: 81:30:86:97:19:05:b2:63:3f:e7:8c:6e:df:e5:96: 1d:6d:b2:d3:6c:2f:76:cc:72:65:16:e8:f1:8d:38: 43:03:e6:25:ce:bd:14:70:c9:7f:36:02:cb:ee:57: 66:58:43:22:23:4a:0e:9e:11:8c:d3:fd:f7:ef:0d: ea:fe:71:6e:df:de:83:cf:57:f4:95:e4:aa:b8:5f: f6:d4:d6:97:ff:db:5a:a0:f4:c3:46:f0:fe:45:aa: c1:09:0a:ce:27:5e:05:9d:11:ff:7d:6d:d7:cc:5c: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:94:6D:F6:A1:E2:EA:24:7C:54:B6:BB:37:95:5C:16:ED:53:D0 X509v3 Authority Key Identifier: keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:50:33:57:86:e7:24:f9:d8:08:c1:1f:7c:d3:58:8b:2f:25: f7:b3:4d:bf:ff:e7:44:a7:2d:a9:15:c9:e0:b3:d1:ba:6b:c6: 0f:dd:de:2a:c9:5f:95:c7:e4:25:29:80:ae:59:75:c0:4c:85: 79:23:df:01:9b:8f:f5:41:d6:aa:87:8f:e2:61:cd:d0:af:a4: e7:5f:e3:30:8f:bc:18:66:22:03:96:dc:8c:e9:83:d9:87:52: 93:db:0b:c2:2e:33:fa:14:d3:b3:a7:92:2c:7b:48:01:13:ee: 41:c0:03:44:00:b9:b1:43:43:0d:37:e8:fb:e6:57:29:ac:c7: a2:c1:ff:56:cb:34:72:41:cf:12:05:99:2b:f2:35:4e:28:6a: 61:07:09:64:c2:6d:c6:59:fa:48:fd:87:07:24:e1:e9:6c:2e: 9d:7f:2d:9b:bb:72:85:b5:cf:bf:b5:95:41:ce:89:68:a5:06: 88:49:0c:27:b2:f1:1e:f8:6f:bb:49:3b:54:8a:83:68:26:50: 44:cd:1c:c1:8a:f2:4d:fe:f6:da:cb:4c:fb:b0:8e:ec:d6:f1: bf:40:c3:de:58:77:97:fa:90:e9:d7:62:51:38:ac:4b:64:e6: a1:fc:7c:15:69:c7:5f:99:c4:8b:69:17:bf:d5:5e:e2:6f:e8: 2a:93:cc:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3UfUoQ0UhdgZhXzePVWiVphQQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQxOTAw MTFFNDYzRDAeFw0yNjA2MTcwNzE2NDhaFw0yNjA2MTgwNzMxNDhaMDMxMTAvBgNV BAMTKDExMkQ5NDZERjZBMUUyRUEyNDdDNTRCNkJCMzc5NTVDMTZFRDUzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtF0LLHWSBUoUFkr27460ya4yE 2OE7VB0m4LT/mJySKogiEx1xX0G4VIKbEOR5H8nr788YG2aPAdlq0Im0tDdOSOoP KuqMJx3cXhYeeVybUassKiIKzk+ZNrg94Zt++OR+0JPt5d2BFYO8Wd1x2ohNFWG3 68eQKebucSPwMZ9RcFCQKBcg858luAF0QeeaSjZvxOrc1oEwhpcZBbJjP+eMbt/l lh1tstNsL3bMcmUW6PGNOEMD5iXOvRRwyX82AsvuV2ZYQyIjSg6eEYzT/ffvDer+ cW7f3oPPV/SV5Kq4X/bU1pf/21qg9MNG8P5FqsEJCs4nXgWdEf99bdfMXKN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUES2Ubfah4uokfFS2uzeVXBbtU9AwHwYDVR0j BBgwFoAUs+j9PRc70Yn4CAxMHenRkAEeRj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcyODA0MDAtOTY1NC00ZDQ1LTg4OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0Qx NzNCRDE4OUY4MDgwQzRDMURFOUQxOTAwMTFFNDYzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0U4RkQzRDE3M0JEMTg5RjgwODBDNEMxREU5RDE5MDAxMUU0 NjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQx OTAwMTFFNDYzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdQM1eG5yT52AjBH3zTWIsvJfezTb//50Sn LakVyeCz0bprxg/d3irJX5XH5CUpgK5ZdcBMhXkj3wGbj/VB1qqHj+JhzdCvpOdf 4zCPvBhmIgOW3Izpg9mHUpPbC8IuM/oU07Onkix7SAET7kHAA0QAubFDQw036Pvm Vymsx6LB/1bLNHJBzxIFmSvyNU4oamEHCWTCbcZZ+kj9hwck4elsLp1/LZu7coW1 z7+1lUHOiWilBohJDCey8R74b7tJO1SKg2gmUETNHMGK8k3+9trLTPuwjuzW8b9A w95Yd5f6kOnXYlE4rEtk5qH8fBVpx1+ZxItpF7/VXuJv6CqTzAw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:26 2026 by rpki-client