$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: AbmUHcY0qgD4uY4P1b2Dg01MKwa5EyHIAs6JG67x18s= Subject key identifier: 65:34:4B:40:5A:8B:8E:E5:69:24:5D:51:B8:22:7C:7B:95:54:36:29 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 4EDF1B445011B3B81E691F1C8D457A4AEF3850AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:44:26 +0000 Manifest this update: Tue 16 Jun 2026 16:39:26 +0000 Manifest next update: Wed 17 Jun 2026 20:17:26 +0000 Files and hashes: 1: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) 2: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 3: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) 4: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: 6PfNSrLRsnp+6GS28zDR2HRr9EwLsftAZeG+4KLF4GM=) 5: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 6: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:df:1b:44:50:11:b3:b8:1e:69:1f:1c:8d:45:7a:4a:ef:38:50:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Jun 16 16:39:26 2026 GMT Not After : Jun 17 20:17:26 2026 GMT Subject: CN=65344B405A8B8EE569245D51B8227C7B95543629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:9f:24:9e:9a:6b:12:99:c2:88:77:3c:fb: 96:39:fe:a6:26:7c:58:cb:8b:af:74:88:73:d6:ee: cd:9e:a0:41:83:d4:fa:18:f9:43:a1:9d:1f:38:a5: 68:06:b8:57:25:ea:56:2e:3f:9d:99:70:28:80:e9: f6:b7:95:80:97:6a:5f:fd:1c:ef:d1:87:1d:45:5a: 9a:49:01:1d:c3:5f:7e:e3:d8:a5:32:bc:2d:fb:1f: 5a:52:c7:6e:fb:f6:eb:0b:62:14:1c:98:d0:d2:80: 2b:4f:31:9f:33:59:e6:79:31:69:bd:00:1c:c6:4c: 66:9b:ae:f3:d5:28:fe:db:db:74:f7:c6:33:00:e4: da:48:b0:5c:5a:2e:35:cc:a2:47:9b:b5:77:80:b8: 95:cc:b0:34:1e:ca:9c:d6:db:3e:eb:fc:4f:f7:ad: ad:b7:c3:b3:0c:ee:c1:bc:83:ae:ea:d8:ce:3a:45: 09:44:c5:85:94:82:4d:e3:0c:11:b9:8d:11:0f:bf: 10:ed:f4:bb:0f:0e:bd:d6:49:e6:95:f7:17:f2:d4: cd:ac:0b:84:38:e0:7c:a7:47:98:29:8a:a3:48:eb: 6e:fe:ee:13:21:41:9c:fd:5d:83:57:b3:35:a4:9e: 74:77:d9:4e:bf:1c:b4:2c:8c:3a:36:2f:8d:e9:dd: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:34:4B:40:5A:8B:8E:E5:69:24:5D:51:B8:22:7C:7B:95:54:36:29 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:be:86:84:c4:6a:80:44:62:5f:66:16:6f:36:bb:63:b2:5e: 2f:89:eb:09:ed:5c:30:8a:dd:c9:6b:b9:a5:b8:08:af:ff:5a: b8:65:0d:fa:64:00:6f:b3:3f:2c:0b:3d:02:11:25:6e:c3:c8: 5b:4a:e1:4c:0e:6d:24:7f:be:1c:de:22:f3:19:eb:c8:0d:33: 3b:85:68:53:21:51:94:85:2d:19:66:6e:db:3c:98:63:29:59: 7a:a0:64:41:d0:29:f7:74:8f:73:d9:c4:05:b6:a9:04:29:25: 8b:ed:83:a9:77:f6:10:d7:8a:29:3b:bf:83:87:eb:81:cb:ab: 6d:b2:60:98:ca:b7:8e:df:a6:bc:42:a2:f4:85:ef:4a:e0:bc: 9a:93:22:f2:cf:b5:19:06:fa:8f:29:f3:69:bc:80:ee:74:21: e1:21:ec:6f:ec:34:bc:04:bc:d2:e3:18:06:44:84:99:cc:0a: 11:d6:10:d2:57:64:87:ff:d9:05:28:f1:59:4c:79:8c:75:2b: 00:8d:df:3a:80:20:89:b3:1c:21:4e:cd:2f:9e:38:23:7b:4f: 57:8c:dc:54:04:e9:c8:5f:81:ab:54:e6:2d:2b:d9:c0:81:ec: de:52:7a:67:4a:39:29:30:35:08:ad:e2:a0:38:31:4d:28:0e: d1:18:40:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTt8bRFARs7geaR8cjUV6Su84UKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA2MTYxNjM5MjZaFw0yNjA2MTcyMDE3MjZaMDMxMTAvBgNV BAMTKDY1MzQ0QjQwNUE4QjhFRTU2OTI0NUQ1MUI4MjI3QzdCOTU1NDM2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNp8knpprEpnCiHc8+5Y5/qYm fFjLi690iHPW7s2eoEGD1PoY+UOhnR84pWgGuFcl6lYuP52ZcCiA6fa3lYCXal/9 HO/Rhx1FWppJAR3DX37j2KUyvC37H1pSx2779usLYhQcmNDSgCtPMZ8zWeZ5MWm9 ABzGTGabrvPVKP7b23T3xjMA5NpIsFxaLjXMokebtXeAuJXMsDQeypzW2z7r/E/3 ra23w7MM7sG8g67q2M46RQlExYWUgk3jDBG5jREPvxDt9LsPDr3WSeaV9xfy1M2s C4Q44HynR5gpiqNI627+7hMhQZz9XYNXszWknnR32U6/HLQsjDo2L43p3Y/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZTRLQFqLjuVpJF1RuCJ8e5VUNikwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm+hoTEaoBEYl9mFm82u2OyXi+J6wntXDCK 3clruaW4CK//WrhlDfpkAG+zPywLPQIRJW7DyFtK4UwObSR/vhzeIvMZ68gNMzuF aFMhUZSFLRlmbts8mGMpWXqgZEHQKfd0j3PZxAW2qQQpJYvtg6l39hDXiik7v4OH 64HLq22yYJjKt47fprxCovSF70rgvJqTIvLPtRkG+o8p82m8gO50IeEh7G/sNLwE vNLjGAZEhJnMChHWENJXZIf/2QUo8VlMeYx1KwCN3zqAIImzHCFOzS+eOCN7T1eM 3FQE6chfgatU5i0r2cCB7N5SemdKOSkwNQit4qA4MU0oDtEYQKI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:09 2026 by rpki-client