$ rpki-client -vvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: L3WiyHk6C+qY7O70Q8zuCNis/DDUQXOS49JsBbw99aU= Subject key identifier: 06:8F:A4:CA:22:A5:7A:C8:D1:B5:AB:A1:C6:71:CB:97:65:77:A5:02 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 3271B68F9DB5C4DCB8CDF95FA901B7DFF2DEC206 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:01:24 +0000 Manifest this update: Wed 17 Jun 2026 02:56:24 +0000 Manifest next update: Thu 18 Jun 2026 04:01:24 +0000 Files and hashes: 1: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: IMrHkHEwRDn0oINRmmS9Yub191xs7gceNMXKUoY6SMM=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) 3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:71:b6:8f:9d:b5:c4:dc:b8:cd:f9:5f:a9:01:b7:df:f2:de:c2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Jun 17 02:56:24 2026 GMT Not After : Jun 18 04:01:24 2026 GMT Subject: CN=068FA4CA22A57AC8D1B5ABA1C671CB976577A502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:53:e0:d8:26:ae:d6:c7:c1:dd:98:13:4b: 69:6e:08:8c:08:4a:56:c3:66:eb:f8:85:65:8f:41: 15:4c:65:07:85:36:12:4b:7f:14:63:59:ae:35:ef: cd:b3:9f:c9:c1:3f:43:18:4b:2d:1a:38:bc:0b:85: 70:fa:df:5a:cf:5a:35:77:51:da:d6:9a:5a:14:cc: 68:a3:23:61:71:b6:c0:a0:7c:31:a8:7a:65:19:c5: d0:a3:ed:7b:10:c0:c5:da:42:06:eb:07:af:4d:c7: dc:c5:c9:99:42:0a:fb:ff:ad:af:eb:0a:29:79:a9: 3e:db:32:f2:d7:3e:8f:8f:ff:51:57:92:1f:58:92: 9d:03:12:49:a0:db:20:5c:48:71:b5:df:b7:00:6c: 83:95:e1:6b:ef:0c:ba:d4:73:61:93:06:72:61:6a: 59:6e:a8:3e:0a:9a:c1:f6:57:ae:66:c4:9d:98:80: 6f:7a:c4:e1:e2:e4:db:70:ac:e5:6f:73:7c:85:0f: 49:b9:e3:2b:ae:d0:ed:03:a2:5c:5b:30:59:dc:03: 22:27:85:21:5d:0e:f0:d5:91:43:d0:36:dd:e1:d0: f2:1f:23:56:4f:e7:9c:47:71:1a:0c:e3:06:53:f8: bc:cf:a6:e1:0e:87:53:6a:98:88:97:c1:94:d5:ca: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:A4:CA:22:A5:7A:C8:D1:B5:AB:A1:C6:71:CB:97:65:77:A5:02 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:0f:40:38:13:ca:30:82:7c:93:a5:eb:4e:ec:b8:d2:e3: 29:d5:b8:0f:11:d2:a3:0b:82:64:07:93:ca:5d:5b:34:e7:df: 09:d5:c3:11:04:39:57:f5:f8:a4:ca:66:0b:0e:e2:f7:49:76: 7e:60:c8:48:06:7e:42:de:fe:0b:c0:f1:dd:55:e9:da:79:46: 9e:b4:73:99:37:bc:12:19:54:72:19:a7:8b:40:fe:d9:bf:ae: e4:b9:e2:fe:65:cb:49:23:71:83:9c:ac:6b:b5:cf:ae:76:6c: 29:54:71:88:b3:cc:f2:1f:8f:ac:5e:b9:63:ba:d5:16:ca:c7: e3:75:da:d4:f0:42:1f:98:12:16:e8:da:fa:41:8f:d4:03:42: ca:52:89:fd:a7:4f:31:8a:56:90:74:db:31:be:87:b2:0d:df: f6:4d:cb:29:d1:cc:56:67:b8:3c:16:a8:09:e5:e1:1f:cd:70: ed:96:af:10:82:99:61:53:1f:7b:13:50:32:a0:56:7c:ca:f8: f6:97:35:ea:13:7f:94:09:b4:47:78:22:06:6b:5a:d6:3c:12: 87:60:44:ba:57:33:3a:1f:89:0e:74:42:a9:60:3e:a1:70:bf: eb:1f:54:f9:03:7c:15:82:e3:02:11:c2:2e:78:30:1b:b5:6c: 74:bb:c8:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnG2j521xNy4zflfqQG33/LewgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA2MTcwMjU2MjRaFw0yNjA2MTgwNDAxMjRaMDMxMTAvBgNV BAMTKDA2OEZBNENBMjJBNTdBQzhEMUI1QUJBMUM2NzFDQjk3NjU3N0E1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJlPg2Cau1sfB3ZgTS2luCIwI SlbDZuv4hWWPQRVMZQeFNhJLfxRjWa41782zn8nBP0MYSy0aOLwLhXD631rPWjV3 UdrWmloUzGijI2FxtsCgfDGoemUZxdCj7XsQwMXaQgbrB69Nx9zFyZlCCvv/ra/r Cil5qT7bMvLXPo+P/1FXkh9Ykp0DEkmg2yBcSHG137cAbIOV4WvvDLrUc2GTBnJh alluqD4KmsH2V65mxJ2YgG96xOHi5NtwrOVvc3yFD0m54yuu0O0DolxbMFncAyIn hSFdDvDVkUPQNt3h0PIfI1ZP55xHcRoM4wZT+LzPpuEOh1NqmIiXwZTVynhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBo+kyiKlesjRtauhxnHLl2V3pQIwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr1D0A4E8owgnyTpetO7LjS4ynVuA8R0qML gmQHk8pdWzTn3wnVwxEEOVf1+KTKZgsO4vdJdn5gyEgGfkLe/gvA8d1V6dp5Rp60 c5k3vBIZVHIZp4tA/tm/ruS54v5ly0kjcYOcrGu1z652bClUcYizzPIfj6xeuWO6 1RbKx+N12tTwQh+YEhbo2vpBj9QDQspSif2nTzGKVpB02zG+h7IN3/ZNyynRzFZn uDwWqAnl4R/NcO2WrxCCmWFTH3sTUDKgVnzK+PaXNeoTf5QJtEd4IgZrWtY8Eodg RLpXMzofiQ50QqlgPqFwv+sfVPkDfBWC4wIRwi54MBu1bHS7yGw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:18 2026 by rpki-client