$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: X+Z87JjJWRq/roqZ2GepqxHt5YnPDqlYP/WoCv9nrP4= Subject key identifier: 42:2F:E0:6B:81:A7:F2:12:A5:28:9D:F2:F2:01:BF:4D:AC:3C:26:FD Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 345360BF0D7C16886E123BB47FB437C474629496 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:23:08 +0000 Manifest this update: Wed 17 Jun 2026 04:18:08 +0000 Manifest next update: Thu 18 Jun 2026 08:13:08 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) 2: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: ZzNwPu09ONzB7prN9gzVu+pn0+VgmCVSkKBbo2O1kj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:53:60:bf:0d:7c:16:88:6e:12:3b:b4:7f:b4:37:c4:74:62:94:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Jun 17 04:18:08 2026 GMT Not After : Jun 18 08:13:08 2026 GMT Subject: CN=422FE06B81A7F212A5289DF2F201BF4DAC3C26FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:c1:b6:77:1e:66:1b:b3:3b:21:97:9a:43: 1a:f9:ec:2e:67:4e:d8:63:41:d6:1d:28:ca:7f:34: d7:07:81:42:c3:7f:13:a9:2a:8b:c0:66:7d:c9:19: d3:23:d2:cc:25:00:a6:b8:00:0c:a6:f0:0f:82:60: 5f:a0:31:5e:4d:51:c8:6b:b3:63:70:70:6c:51:4e: 2f:5e:66:de:dc:97:14:1a:eb:61:7f:c6:9b:29:19: 43:97:f3:68:4b:de:64:e8:75:6a:46:01:db:4c:b4: 67:ed:0a:76:25:85:d4:74:32:f2:ce:ae:06:f7:d4: a9:55:94:ab:5a:7d:9c:55:4c:46:15:f1:7e:0e:eb: e6:00:c6:45:40:26:56:13:15:db:f9:a5:fb:d3:b2: 0d:13:e6:0d:7d:2c:94:d3:c0:5e:a3:2b:de:2e:7b: f8:70:76:e7:2e:22:7d:24:75:80:7b:f4:8d:d6:08: 4b:62:ad:a4:b0:51:2c:6d:1f:b5:46:7d:7c:4b:09: 10:f0:e3:bc:ff:ab:10:37:fc:9c:7c:fa:b7:89:c6: f5:10:b6:96:90:f8:32:17:a5:9a:39:e8:51:3a:fb: 2e:70:dd:af:c1:71:45:4d:7a:d2:71:71:87:4e:7c: 53:c1:93:3b:88:e6:0a:b8:74:c2:23:74:93:df:68: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:E0:6B:81:A7:F2:12:A5:28:9D:F2:F2:01:BF:4D:AC:3C:26:FD X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:05:06:b2:90:35:c5:8b:f4:86:29:80:62:ac:ee:65:01:c5: 36:e8:67:c2:df:a7:0a:48:1e:c1:a7:79:fe:b2:ed:6f:4d:b9: d9:69:dd:cf:f1:82:e3:3b:c0:f0:f1:97:5b:c5:3e:2b:53:d8: de:ac:e9:a3:a1:88:75:dd:04:bd:9f:98:0d:7a:90:a0:07:35: 43:c7:85:42:f7:10:59:b0:1d:8c:c8:53:e3:b8:88:8f:6e:b9: 8f:0d:19:7b:da:a0:03:58:ca:bf:d6:36:67:9d:6a:41:18:e3: a0:84:2c:26:53:cc:33:33:e6:ff:1b:fb:a4:a6:80:5c:8d:42: 04:b4:bc:ac:99:8a:f8:18:e9:fc:be:e3:82:c0:52:8d:6e:4d: 0a:2d:9c:14:1f:fc:3f:d7:76:d3:e9:a8:b7:e2:f2:a8:49:26: 7f:b0:1c:a6:94:db:4c:c8:18:8c:9e:fb:44:fe:b5:e5:2c:6b: bd:e2:ac:ad:ce:9a:4a:4d:d0:e4:e2:36:9d:fa:f8:f5:91:53: 19:d2:c9:fc:de:f6:11:65:9a:90:8f:51:c9:0d:4c:66:d3:1d: ce:29:05:08:6b:55:bb:06:89:40:cf:a3:9e:0a:7a:69:92:cd: 4d:69:2a:17:03:95:88:75:03:9b:ea:12:bd:22:5f:3e:fc:92: b9:5f:f4:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFNgvw18FohuEju0f7Q3xHRilJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA2MTcwNDE4MDhaFw0yNjA2MTgwODEzMDhaMDMxMTAvBgNV BAMTKDQyMkZFMDZCODFBN0YyMTJBNTI4OURGMkYyMDFCRjREQUMzQzI2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvU8G2dx5mG7M7IZeaQxr57C5n TthjQdYdKMp/NNcHgULDfxOpKovAZn3JGdMj0swlAKa4AAym8A+CYF+gMV5NUchr s2NwcGxRTi9eZt7clxQa62F/xpspGUOX82hL3mTodWpGAdtMtGftCnYlhdR0MvLO rgb31KlVlKtafZxVTEYV8X4O6+YAxkVAJlYTFdv5pfvTsg0T5g19LJTTwF6jK94u e/hwducuIn0kdYB79I3WCEtiraSwUSxtH7VGfXxLCRDw47z/qxA3/Jx8+reJxvUQ tpaQ+DIXpZo56FE6+y5w3a/BcUVNetJxcYdOfFPBkzuI5gq4dMIjdJPfaGW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQi/ga4Gn8hKlKJ3y8gG/Taw8Jv0wHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsFBrKQNcWL9IYpgGKs7mUBxTboZ8LfpwpI HsGnef6y7W9Nudlp3c/xguM7wPDxl1vFPitT2N6s6aOhiHXdBL2fmA16kKAHNUPH hUL3EFmwHYzIU+O4iI9uuY8NGXvaoANYyr/WNmedakEY46CELCZTzDMz5v8b+6Sm gFyNQgS0vKyZivgY6fy+44LAUo1uTQotnBQf/D/XdtPpqLfi8qhJJn+wHKaU20zI GIye+0T+teUsa73irK3OmkpN0OTiNp36+PWRUxnSyfze9hFlmpCPUckNTGbTHc4p BQhrVbsGiUDPo54KemmSzU1pKhcDlYh1A5vqEr0iXz78krlf9Ns= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:33 2026 by rpki-client