$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json) Hash identifier: bkLVE5sQDMMRrUl/RQ5lUDzPLfugwsgfOa94v2gfckQ= Subject key identifier: F4:3D:C0:BC:20:BE:EE:90:ED:3E:E6:CE:FC:12:53:21:B2:20:64:CD Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Certificate serial: 3B551E611F20914BE695F550C3C0E6762D3A6D35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:11:09 +0000 Manifest this update: Tue 16 Jun 2026 18:06:09 +0000 Manifest next update: Wed 17 Jun 2026 19:00:09 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=) 3: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=) 6: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: z1YAhYiKMFH8IVU4DUv8pua9TT8w5J2aMmfBI1f39uI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:55:1e:61:1f:20:91:4b:e6:95:f5:50:c3:c0:e6:76:2d:3a:6d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Validity Not Before: Jun 16 18:06:09 2026 GMT Not After : Jun 17 19:00:09 2026 GMT Subject: CN=F43DC0BC20BEEE90ED3EE6CEFC125321B22064CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:b6:5d:58:de:ca:f3:ca:e0:82:cc:ea:97: 0e:d1:6b:be:08:06:32:7c:35:83:fe:b4:90:57:66: 28:eb:88:a3:e8:e4:71:8d:d4:28:02:dd:85:9b:cb: 32:36:de:39:80:58:54:e6:89:d4:fe:5d:5b:38:42: f5:08:6b:4b:64:12:6a:99:56:16:0b:9c:4e:e6:5f: 58:52:c9:a5:86:f7:d2:7a:ab:50:11:48:11:90:30: 2a:fc:09:4f:b1:16:d2:ca:bf:77:fd:03:0a:d7:df: ba:db:9b:71:59:ee:39:41:81:09:fc:8f:55:0a:e3: 9f:33:06:be:04:15:ec:b1:7c:57:1c:55:28:08:b8: 57:66:6b:5d:88:36:7a:85:e1:f7:02:b5:6c:1d:94: 1c:e9:98:07:4a:49:d3:c2:56:7d:cd:ed:6d:80:ad: 65:cc:88:ed:aa:95:be:d4:f9:cd:c3:66:7d:df:5f: 41:b7:94:e3:bf:8d:47:73:a4:f9:f5:c0:f2:a7:44: 27:b6:88:cc:6c:bd:7d:4d:72:cf:6e:af:ac:fe:ac: 35:27:61:60:55:1b:07:38:26:e0:df:ae:c2:1d:79: 6a:21:e8:dd:2e:0a:54:e0:8d:d3:1a:32:e9:05:4d: 20:e0:86:a1:0a:d5:27:c4:3a:52:ac:8f:2e:66:03: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:C0:BC:20:BE:EE:90:ED:3E:E6:CE:FC:12:53:21:B2:20:64:CD X509v3 Authority Key Identifier: keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4c:42:46:02:de:48:c7:e3:6f:0a:9b:5d:65:d0:c6:87:80: b5:48:93:cb:97:06:8e:73:8a:f2:b0:4b:5c:9c:b9:44:60:08: 5f:56:bb:77:a9:eb:e0:2c:98:72:80:77:27:19:be:74:ce:8e: fb:60:8a:d3:00:1b:a0:d3:fc:17:5f:c5:47:e8:fb:c3:b3:a6: 5e:f2:52:71:39:27:0f:73:03:37:39:bb:fd:2e:48:eb:bd:9a: dd:f2:ab:50:aa:23:86:4b:5a:4d:1f:c3:c5:d9:be:00:90:60: e7:50:78:bb:2d:c2:24:89:1d:74:6e:40:12:37:b6:a5:f2:4d: 3e:cd:ae:47:1b:83:4e:15:50:45:8d:7a:b3:ae:bd:f3:62:f0: a9:74:9b:21:58:56:68:cb:4e:23:1a:39:3d:d3:da:e9:fd:cf: 8d:db:18:c3:e2:4e:fd:63:af:13:d4:36:c0:98:7a:01:d0:14: 5d:24:69:bc:65:00:a2:51:d0:f9:aa:c6:14:74:73:d2:c1:0c: b3:cd:de:f0:75:9c:88:b3:74:34:b7:a5:12:55:f6:d7:a9:1a: d0:1f:2d:13:35:6b:87:fb:cf:40:4a:ca:96:7c:2f:04:5a:17: 45:ba:17:d7:97:13:72:18:54:25:e7:e1:35:b9:ff:4f:52:e4: 08:85:53:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1UeYR8gkUvmlfVQw8Dmdi06bTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRB MDMzQzhDRTAeFw0yNjA2MTYxODA2MDlaFw0yNjA2MTcxOTAwMDlaMDMxMTAvBgNV BAMTKEY0M0RDMEJDMjBCRUVFOTBFRDNFRTZDRUZDMTI1MzIxQjIyMDY0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+LZdWN7K88rggszqlw7Ra74I BjJ8NYP+tJBXZijriKPo5HGN1CgC3YWbyzI23jmAWFTmidT+XVs4QvUIa0tkEmqZ VhYLnE7mX1hSyaWG99J6q1ARSBGQMCr8CU+xFtLKv3f9AwrX37rbm3FZ7jlBgQn8 j1UK458zBr4EFeyxfFccVSgIuFdma12INnqF4fcCtWwdlBzpmAdKSdPCVn3N7W2A rWXMiO2qlb7U+c3DZn3fX0G3lOO/jUdzpPn1wPKnRCe2iMxsvX1Ncs9ur6z+rDUn YWBVGwc4JuDfrsIdeWoh6N0uClTgjdMaMukFTSDghqEK1SfEOlKsjy5mAydLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9D3AvCC+7pDtPubO/BJTIbIgZM0wHwYDVR0j BBgwFoAUNpO9uNlTnVOXjUK3FBH3LaAzyM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IxMzBiNzUtNDU5My00MTQxLWEwNmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhE OTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRBMDMzQzhDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjkzQkRCOEQ5NTM5RDUzOTc4RDQyQjcxNDExRjcyREEwMzND OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3 MkRBMDMzQzhDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1MQkYC3kjH428Km11l0MaHgLVIk8uXBo5z ivKwS1ycuURgCF9Wu3ep6+AsmHKAdycZvnTOjvtgitMAG6DT/BdfxUfo+8Ozpl7y UnE5Jw9zAzc5u/0uSOu9mt3yq1CqI4ZLWk0fw8XZvgCQYOdQeLstwiSJHXRuQBI3 tqXyTT7Nrkcbg04VUEWNerOuvfNi8Kl0myFYVmjLTiMaOT3T2un9z43bGMPiTv1j rxPUNsCYegHQFF0kabxlAKJR0PmqxhR0c9LBDLPN3vB1nIizdDS3pRJV9tepGtAf LRM1a4f7z0BKypZ8LwRaF0W6F9eXE3IYVCXn4TW5/09S5AiFU2g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:53 2026 by rpki-client