$ rpki-client -vvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: OGYz4voigj5R9ow33/7422sJbdWUJakpPBuZZ2onNQU= Subject key identifier: F6:BC:C3:DE:C9:8F:C5:B5:60:9C:7B:F5:31:C3:49:28:DF:6F:E8:FF Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 2C5B15BFDC7EED1BF45A161A512E273CC72931A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:01:28 +0000 Manifest this update: Wed 17 Jun 2026 02:56:28 +0000 Manifest next update: Thu 18 Jun 2026 04:32:28 +0000 Files and hashes: 1: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) 2: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: fUZy2e1NodO+G1GVOOMWxjq5fFunmkenRQ8wYS4Nzug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5b:15:bf:dc:7e:ed:1b:f4:5a:16:1a:51:2e:27:3c:c7:29:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Jun 17 02:56:28 2026 GMT Not After : Jun 18 04:32:28 2026 GMT Subject: CN=F6BCC3DEC98FC5B5609C7BF531C34928DF6FE8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:86:1f:89:0a:9b:75:ec:4f:35:fa:72:ab: 6b:ba:a9:93:98:10:e9:95:5d:4f:72:b3:0c:32:35: ed:63:cf:1a:4a:7f:52:70:1b:4e:d2:46:cc:dc:49: 17:e8:d2:d4:35:da:0a:19:f4:5e:b3:ce:aa:6f:40: 75:31:a7:a2:3b:26:f6:ee:7d:f2:30:69:c1:a9:c6: fe:5d:1f:9a:3a:0f:f1:71:be:f5:4e:cd:81:50:c8: 16:cd:59:78:19:41:04:43:11:0f:c1:ef:b5:c3:fa: 80:cd:a3:64:36:c8:97:49:54:8d:4f:c7:5f:72:45: 4c:21:ac:ef:b4:b3:e7:c6:a8:45:18:a4:a5:e4:eb: 36:53:a2:07:e3:f3:30:60:4f:92:36:e7:1a:19:9d: 6d:bf:dc:a6:63:40:32:a3:01:2e:cb:5e:b8:e4:09: ca:2a:6a:7c:f8:bb:1f:de:b0:a0:d6:d8:dd:f5:7c: af:cd:ea:a1:36:19:69:bb:0e:93:9e:81:43:2c:32: ff:6e:d0:41:5d:0e:7d:20:7e:ae:53:c0:6c:d6:c2: d4:cb:10:b8:5e:66:dc:cc:ce:ca:b3:9a:50:b8:fd: 72:19:4d:16:c4:20:fd:49:fb:c4:84:2f:4b:06:86: a9:27:ff:4e:f9:e2:be:cf:aa:02:74:03:15:e8:b1: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:C3:DE:C9:8F:C5:B5:60:9C:7B:F5:31:C3:49:28:DF:6F:E8:FF X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:07:d0:b1:50:3e:3c:19:06:c5:71:11:f2:3b:32:55:b9: 04:c6:0f:23:bd:0d:d6:e8:83:e7:ba:33:e9:0b:5d:7b:68:67: 18:f7:f7:c3:6f:59:b4:4d:2d:f5:fa:d5:0b:3d:46:fc:a3:a2: 72:ac:ea:e4:e8:1b:6b:0a:ca:bd:41:4b:9e:c5:64:89:dd:fd: d3:c3:8f:12:0d:76:94:f8:40:2e:52:ab:16:47:97:a2:79:59: 10:5d:f2:80:6c:1e:4a:03:c4:48:22:f4:7d:bd:0e:c1:bc:b4: 0c:92:93:de:d2:fb:ea:44:25:2e:af:81:ab:a3:c5:1f:37:71: b7:04:70:ef:f6:6d:b1:1e:a1:aa:4f:42:46:52:f1:02:fa:b2: 0b:b7:ed:19:d5:0c:72:02:d7:27:7c:9a:31:af:e2:42:58:02: e5:92:83:d2:24:a3:61:06:bc:90:ca:22:6d:68:9d:49:94:6a: b4:83:c6:50:c0:52:91:f1:2d:a0:54:b1:24:ff:88:49:ad:fc: 94:18:38:2d:d8:e0:a4:c9:33:f6:89:c5:38:b7:23:63:d9:68: 2a:e6:e8:50:1f:c0:7a:20:00:62:9f:9e:ee:52:0f:dc:2e:3d: a2:5a:9f:f4:54:b7:5b:e5:2d:7b:04:61:6f:90:4b:5c:e5:dd: 6f:0f:cd:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFsVv9x+7Rv0WhYaUS4nPMcpMaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA2MTcwMjU2MjhaFw0yNjA2MTgwNDMyMjhaMDMxMTAvBgNV BAMTKEY2QkNDM0RFQzk4RkM1QjU2MDlDN0JGNTMxQzM0OTI4REY2RkU4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl4YfiQqbdexPNfpyq2u6qZOY EOmVXU9yswwyNe1jzxpKf1JwG07SRszcSRfo0tQ12goZ9F6zzqpvQHUxp6I7Jvbu ffIwacGpxv5dH5o6D/FxvvVOzYFQyBbNWXgZQQRDEQ/B77XD+oDNo2Q2yJdJVI1P x19yRUwhrO+0s+fGqEUYpKXk6zZTogfj8zBgT5I25xoZnW2/3KZjQDKjAS7LXrjk Ccoqanz4ux/esKDW2N31fK/N6qE2GWm7DpOegUMsMv9u0EFdDn0gfq5TwGzWwtTL ELheZtzMzsqzmlC4/XIZTRbEIP1J+8SEL0sGhqkn/0754r7PqgJ0AxXosbePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9rzD3smPxbVgnHv1McNJKN9v6P8wHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFygB9CxUD48GQbFcRHyOzJVuQTGDyO9Ddbo g+e6M+kLXXtoZxj398NvWbRNLfX61Qs9RvyjonKs6uToG2sKyr1BS57FZInd/dPD jxINdpT4QC5SqxZHl6J5WRBd8oBsHkoDxEgi9H29DsG8tAySk97S++pEJS6vgauj xR83cbcEcO/2bbEeoapPQkZS8QL6sgu37RnVDHIC1yd8mjGv4kJYAuWSg9Iko2EG vJDKIm1onUmUarSDxlDAUpHxLaBUsST/iEmt/JQYOC3Y4KTJM/aJxTi3I2PZaCrm 6FAfwHogAGKfnu5SD9wuPaJan/RUt1vlLXsEYW+QS1zl3W8Pzfs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:36 2026 by rpki-client