$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: 9zlUsm2UXSOs1CkP/MRrbb2VosxMzF68CAFVdx5VuNc= Subject key identifier: 51:51:09:D7:EA:71:05:55:9D:D8:F1:0C:06:D0:7B:B3:42:4F:FC:18 Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 3C3777C3EA452B9AC5EF2AE95A341A978D89A330 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 08:02:30 +0000 Manifest this update: Wed 17 Jun 2026 07:57:30 +0000 Manifest next update: Thu 18 Jun 2026 10:21:30 +0000 Files and hashes: 1: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: PLVoQJ0mfDk27rf3Yj95J0U9iPPnsZxh/5YzaiL57Xo=) 2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:37:77:c3:ea:45:2b:9a:c5:ef:2a:e9:5a:34:1a:97:8d:89:a3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Jun 17 07:57:30 2026 GMT Not After : Jun 18 10:21:30 2026 GMT Subject: CN=515109D7EA7105559DD8F10C06D07BB3424FFC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:d6:8e:03:4f:a8:50:47:10:d2:8d:23:b8: 10:59:26:bb:12:0a:07:17:6c:9b:21:95:72:53:4e: 23:a1:6d:40:4f:09:b1:b0:58:14:57:55:a1:62:01: b6:8c:51:5b:2c:24:1e:a6:73:e6:48:e6:92:c4:f3: 38:88:e7:ec:3e:88:a9:43:29:f7:80:2d:4a:d8:3a: a6:b4:c0:b4:b4:4e:5b:a1:c1:9a:7f:76:d5:37:6f: 00:53:07:87:9b:de:64:14:35:7a:0f:41:0e:e6:53: 0d:e1:13:f9:d7:41:e5:d5:9a:9f:25:b4:60:52:78: 8c:9d:d6:4e:40:6d:f1:d4:d0:78:74:71:80:6f:fa: 61:49:62:66:66:4f:6a:7d:f4:93:84:4d:d5:a8:73: 92:3d:bb:92:78:e8:47:20:9c:fc:c3:a0:84:2c:7b: f1:16:ca:e6:dd:06:58:7d:d6:3e:40:f4:38:c3:27: 8a:b4:f1:7d:a5:e7:72:00:5a:8d:0e:b2:f6:f9:60: d1:42:ab:36:e7:f9:84:c2:eb:ec:30:57:02:15:24: 10:25:11:2f:2d:d4:6e:4d:10:1c:24:3f:59:6d:7f: 31:99:eb:47:46:1c:60:db:98:61:f2:de:d5:63:c2: 08:b1:db:46:93:c7:d3:99:a7:f0:b3:38:cf:31:ba: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:51:09:D7:EA:71:05:55:9D:D8:F1:0C:06:D0:7B:B3:42:4F:FC:18 X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:09:78:b2:b4:3e:73:19:5d:58:76:3d:77:31:84:06:9f:d6: 66:30:9b:39:3e:ac:47:23:c6:1d:90:ea:b3:c0:7a:3b:fc:11: 09:59:de:d8:2a:18:e0:06:b2:18:8b:19:03:a4:90:74:ef:ba: 52:e9:e9:97:09:ba:7d:64:2e:8f:df:8b:68:a9:e2:c1:27:dc: 14:11:d5:4b:90:6d:a0:b8:c5:19:f4:fe:7a:a5:17:c6:98:30: dd:1c:35:2c:4b:58:4f:89:9b:d0:bd:de:a9:c1:2c:f8:00:9a: 62:19:4b:cb:04:23:6b:09:c2:24:62:47:bf:8a:08:e1:be:6c: fb:d8:8b:e3:46:fd:bf:2b:60:3b:ac:90:cc:b0:2d:43:06:a8: af:19:54:40:11:8b:97:96:5a:fb:c0:52:57:9e:26:d8:d9:93: 37:de:11:a5:38:3f:a0:1a:7b:8f:39:c8:08:4d:ce:bc:08:ca: ad:20:cb:8d:c2:59:32:2f:51:45:1d:9b:e9:bb:6a:d1:7b:07: 71:90:08:40:d9:42:c4:3e:09:76:d4:a9:99:6a:fa:c0:c6:15: 14:d9:33:d0:77:d3:b6:a8:67:23:42:4f:d1:e1:b2:a3:ca:d9: 83:f4:50:8f:98:bc:5d:c8:bd:bb:d7:d2:c3:a4:35:41:5a:44: de:01:1c:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDd3w+pFK5rF7yrpWjQal42JozAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA2MTcwNzU3MzBaFw0yNjA2MTgxMDIxMzBaMDMxMTAvBgNV BAMTKDUxNTEwOUQ3RUE3MTA1NTU5REQ4RjEwQzA2RDA3QkIzNDI0RkZDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcNaOA0+oUEcQ0o0juBBZJrsS CgcXbJshlXJTTiOhbUBPCbGwWBRXVaFiAbaMUVssJB6mc+ZI5pLE8ziI5+w+iKlD KfeALUrYOqa0wLS0TluhwZp/dtU3bwBTB4eb3mQUNXoPQQ7mUw3hE/nXQeXVmp8l tGBSeIyd1k5AbfHU0Hh0cYBv+mFJYmZmT2p99JOETdWoc5I9u5J46EcgnPzDoIQs e/EWyubdBlh91j5A9DjDJ4q08X2l53IAWo0Osvb5YNFCqzbn+YTC6+wwVwIVJBAl ES8t1G5NEBwkP1ltfzGZ60dGHGDbmGHy3tVjwgix20aTx9OZp/CzOM8xutl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVEJ1+pxBVWd2PEMBtB7s0JP/BgwHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0JeLK0PnMZXVh2PXcxhAaf1mYwmzk+rEcj xh2Q6rPAejv8EQlZ3tgqGOAGshiLGQOkkHTvulLp6ZcJun1kLo/fi2ip4sEn3BQR 1UuQbaC4xRn0/nqlF8aYMN0cNSxLWE+Jm9C93qnBLPgAmmIZS8sEI2sJwiRiR7+K COG+bPvYi+NG/b8rYDuskMywLUMGqK8ZVEARi5eWWvvAUleeJtjZkzfeEaU4P6Aa e485yAhNzrwIyq0gy43CWTIvUUUdm+m7atF7B3GQCEDZQsQ+CXbUqZlq+sDGFRTZ M9B307aoZyNCT9HhsqPK2YP0UI+YvF3IvbvX0sOkNUFaRN4BHLM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:41 2026 by rpki-client