$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft File: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft (raw, json) Hash identifier: Kw8nXacY+nJmbB8pva2gfXFyxD/RtBMjrYXrSh9LqsA= Subject key identifier: 82:22:F8:49:76:87:99:AE:93:D7:92:39:AE:31:76:53:77:0E:75:64 Authority key identifier: 3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 Certificate issuer: /CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Certificate serial: 4967BA1852F25E6ECC673A80EEE6DE742B836E74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:18:46 +0000 Manifest this update: Tue 16 Jun 2026 20:13:46 +0000 Manifest next update: Wed 17 Jun 2026 23:26:46 +0000 Files and hashes: 1: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl (hash: tErTAO/wRK07gbv1r7OKAiIQjhqg3IA9PIGA5oxl6p0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:67:ba:18:52:f2:5e:6e:cc:67:3a:80:ee:e6:de:74:2b:83:6e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Validity Not Before: Jun 16 20:13:46 2026 GMT Not After : Jun 17 23:26:46 2026 GMT Subject: CN=8222F849768799AE93D79239AE317653770E7564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:ab:fb:bd:3f:fe:44:11:57:e7:7e:33:ad: 90:4b:ed:02:2b:4f:59:ec:d7:b7:5e:5b:07:17:ce: b2:8b:b9:c1:18:9d:7e:19:84:06:45:fc:5a:ee:79: bc:c5:90:58:6e:14:37:73:ae:c7:c5:66:23:06:30: 12:b4:bf:5b:f5:95:6d:30:41:fb:5d:cc:dc:12:ed: 65:e9:8b:a9:37:21:20:e0:65:df:3a:11:ab:4a:46: b1:1f:42:df:0e:77:59:90:9b:8d:e1:4a:f6:b4:b9: 3e:96:a6:ff:ec:17:24:62:3d:f2:ab:54:a7:33:c3: 7f:c2:24:b2:6b:ac:7d:b7:94:ee:b9:f9:14:53:d7: eb:41:92:19:af:72:01:05:05:a0:87:d8:9a:4a:9f: f3:0e:f7:0a:b5:ab:60:8e:b7:3e:16:44:93:50:19: 60:b1:dd:bb:21:55:40:58:29:07:93:82:ab:6b:d6: 03:5d:a6:b8:b1:fd:09:d5:5b:8a:f6:f7:f2:fd:81: 26:d5:43:38:3c:f5:3c:74:28:00:74:6e:39:67:59: 2f:b0:ff:83:03:14:52:7e:0c:64:f7:c7:cf:e1:cd: 0b:4a:a5:75:e8:5f:c3:27:9c:f8:14:40:3d:fb:86: a3:3c:31:96:6e:c3:1c:a8:6a:92:1f:a1:32:96:42: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:F8:49:76:87:99:AE:93:D7:92:39:AE:31:76:53:77:0E:75:64 X509v3 Authority Key Identifier: keyid:3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3b:18:5d:cf:24:43:a8:fe:8a:5c:04:32:9a:a6:20:74:67: 99:6f:57:4f:e9:50:18:fc:49:7c:2c:72:99:c4:c0:44:6d:d3: 6e:80:7b:90:30:52:42:51:ea:69:00:0a:5e:cd:78:de:9e:80: 4c:45:af:f1:72:19:7e:25:4b:28:e2:16:a6:77:12:3a:11:51: ac:7f:9d:79:ec:58:1d:75:ff:c2:8b:0d:c5:a0:3b:3e:e7:50: fc:7b:9f:bc:de:7e:54:67:17:2f:9e:15:38:d3:04:0e:27:37: b0:a1:d1:3e:1d:06:0a:6f:82:71:c6:35:9a:00:9b:42:b8:3d: b4:db:88:e1:f2:f9:3d:6a:a9:1f:6b:e8:28:e8:48:f7:ef:02: d8:31:68:64:54:05:99:94:fd:4e:9f:a7:29:e0:f5:ec:b6:03: d9:3c:45:29:78:fa:86:40:0d:68:50:8a:02:46:33:01:3c:51: fe:42:3f:4d:16:77:9e:47:61:a1:be:99:ca:e1:c0:9b:76:de: ba:6b:0e:1e:5c:51:f9:51:ff:82:57:8b:c1:b9:0f:90:d7:b9: a9:33:6b:5c:e1:77:f1:05:1d:ec:4e:67:e4:0a:97:20:65:4f: a7:e4:d8:52:32:73:30:8c:c9:8e:fb:23:29:07:9c:97:6e:94: 0b:bb:69:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWe6GFLyXm7MZzqA7ubedCuDbnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0 NjFFQjlCNTAeFw0yNjA2MTYyMDEzNDZaFw0yNjA2MTcyMzI2NDZaMDMxMTAvBgNV BAMTKDgyMjJGODQ5NzY4Nzk5QUU5M0Q3OTIzOUFFMzE3NjUzNzcwRTc1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJKv7vT/+RBFX534zrZBL7QIr T1ns17deWwcXzrKLucEYnX4ZhAZF/FruebzFkFhuFDdzrsfFZiMGMBK0v1v1lW0w QftdzNwS7WXpi6k3ISDgZd86EatKRrEfQt8Od1mQm43hSva0uT6Wpv/sFyRiPfKr VKczw3/CJLJrrH23lO65+RRT1+tBkhmvcgEFBaCH2JpKn/MO9wq1q2COtz4WRJNQ GWCx3bshVUBYKQeTgqtr1gNdprix/QnVW4r29/L9gSbVQzg89Tx0KAB0bjlnWS+w /4MDFFJ+DGT3x8/hzQtKpXXoX8MnnPgUQD37hqM8MZZuwxyoapIfoTKWQg37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgiL4SXaHma6T15I5rjF2U3cOdWQwHwYDVR0j BBgwFoAUOnIM3Qni+XqRK5t98sM1KUYeubUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJhYzYxOWItMjFlNi00MWQ2LThlOTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQw OUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0NjFFQjlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTcyMENERDA5RTJGOTdBOTEyQjlCN0RGMkMzMzUyOTQ2MUVC OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1 Mjk0NjFFQjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg7GF3PJEOo/opcBDKapiB0Z5lvV0/pUBj8 SXwscpnEwERt026Ae5AwUkJR6mkACl7NeN6egExFr/FyGX4lSyjiFqZ3EjoRUax/ nXnsWB11/8KLDcWgOz7nUPx7n7zeflRnFy+eFTjTBA4nN7Ch0T4dBgpvgnHGNZoA m0K4PbTbiOHy+T1qqR9r6CjoSPfvAtgxaGRUBZmU/U6fpyng9ey2A9k8RSl4+oZA DWhQigJGMwE8Uf5CP00Wd55HYaG+mcrhwJt23rprDh5cUflR/4JXi8G5D5DXuakz a1zhd/EFHexOZ+QKlyBlT6fk2FIyczCMyY77IykHnJdulAu7adc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:53 2026 by rpki-client