$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: seVufz1NJPzkcr8/gHF1/vWZYWppXK8jwg95GKGzu5s= Subject key identifier: 9D:92:85:39:E6:9F:CC:CC:05:2B:37:FD:C7:43:61:6B:69:74:7C:40 Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 62D4D421FC1381B18F6ECA924D737E4108F3A7C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:58:54 +0000 Manifest this update: Wed 17 Jun 2026 04:53:54 +0000 Manifest next update: Thu 18 Jun 2026 06:41:54 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) 3: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: 0Lvtio/5D/UpTDE23c0ZGuOJWxSXPcdmh08Ogrjypf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d4:d4:21:fc:13:81:b1:8f:6e:ca:92:4d:73:7e:41:08:f3:a7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Jun 17 04:53:54 2026 GMT Not After : Jun 18 06:41:54 2026 GMT Subject: CN=9D928539E69FCCCC052B37FDC743616B69747C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:6e:d3:fc:4b:29:4e:d3:da:89:d2:4b:0a: 1c:11:5d:7b:25:57:a1:8f:cb:eb:0a:66:1e:d3:f1: f8:a7:1e:1f:f0:56:1f:94:73:e4:c0:a7:dd:c4:3a: 63:63:7e:99:b7:6c:c9:13:59:31:85:67:e3:61:25: 38:e4:f5:99:40:dc:00:b0:8c:7f:fe:da:95:9d:5b: a4:a6:43:60:90:3c:12:3f:65:d7:bd:ce:69:c7:81: d0:74:04:94:6a:b9:e5:68:03:d8:cc:ac:32:02:ab: f7:28:40:e4:06:4e:52:64:97:dd:22:ce:1f:f1:a2: fc:07:0c:4a:5c:a2:02:ea:7e:11:fa:dc:e1:3d:49: 99:e8:56:e4:6f:67:ec:5d:b4:49:d5:e2:6c:d7:a2: 64:d9:b9:ba:5a:c6:7f:da:99:09:16:a5:39:44:bc: 5a:da:34:38:a2:3b:4c:5f:e2:58:79:6b:72:89:9a: 1e:af:f7:70:4d:e0:4e:7f:0c:ef:7a:ba:d1:c3:fa: 46:6c:cb:86:f6:a6:b1:15:0f:7d:d6:a0:83:2c:24: f2:44:2a:e7:27:ac:6f:25:23:e9:17:fc:49:94:bd: d0:ca:ac:5d:c2:4c:ef:d0:8c:75:51:ca:cd:53:8b: 1d:e2:2d:50:28:c1:e4:2a:0b:be:8d:08:ff:e6:5f: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:92:85:39:E6:9F:CC:CC:05:2B:37:FD:C7:43:61:6B:69:74:7C:40 X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9d:54:01:1a:e4:9d:aa:14:a3:b3:cb:64:24:95:42:7e:67: 9a:18:17:e3:a7:f4:3d:20:95:d1:47:a9:d4:25:c0:9a:82:b7: 13:c8:23:26:a4:ee:d9:b7:39:e7:0b:b2:ee:16:84:4c:88:24: 75:74:66:e5:21:34:b1:95:ca:39:60:f9:be:37:f4:2c:82:ca: 65:24:59:af:2c:65:8b:3b:10:94:7f:ab:28:f4:e4:54:bd:3f: dd:de:20:25:7b:32:99:5d:57:5f:d3:e8:10:e6:8c:54:ad:c1: a1:37:e8:6d:91:18:e4:74:88:67:b0:82:8e:87:11:54:09:78: 04:d8:43:54:67:41:e4:bc:87:d2:2b:02:98:55:60:2d:06:f4: cd:0f:89:ed:20:88:71:95:d4:87:e1:f3:af:0a:c9:82:93:dc: d7:46:dd:9d:47:77:cc:77:ea:5f:73:4f:91:b5:a9:8a:80:22: e4:d4:6c:e3:bb:6c:e9:ea:b4:21:a5:4b:2c:99:31:70:bd:6d: 65:f5:93:ba:0c:2e:00:72:75:20:01:8e:af:b1:57:ad:ad:6f: b9:5a:6b:71:ce:4f:9d:53:28:3c:2a:4c:81:39:94:5f:52:c0: 86:01:59:61:39:b4:5a:2d:3c:cf:0d:90:cb:3b:b6:d0:28:be: 57:a9:dd:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtTUIfwTgbGPbsqSTXN+QQjzp8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA2MTcwNDUzNTRaFw0yNjA2MTgwNjQxNTRaMDMxMTAvBgNV BAMTKDlEOTI4NTM5RTY5RkNDQ0MwNTJCMzdGREM3NDM2MTZCNjk3NDdDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uW7T/EspTtPaidJLChwRXXsl V6GPy+sKZh7T8finHh/wVh+Uc+TAp93EOmNjfpm3bMkTWTGFZ+NhJTjk9ZlA3ACw jH/+2pWdW6SmQ2CQPBI/Zde9zmnHgdB0BJRqueVoA9jMrDICq/coQOQGTlJkl90i zh/xovwHDEpcogLqfhH63OE9SZnoVuRvZ+xdtEnV4mzXomTZubpaxn/amQkWpTlE vFraNDiiO0xf4lh5a3KJmh6v93BN4E5/DO96utHD+kZsy4b2prEVD33WoIMsJPJE KucnrG8lI+kX/EmUvdDKrF3CTO/QjHVRys1Tix3iLVAoweQqC76NCP/mX+9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZKFOeafzMwFKzf9x0Nha2l0fEAwHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWdVAEa5J2qFKOzy2QklUJ+Z5oYF+On9D0g ldFHqdQlwJqCtxPIIyak7tm3OecLsu4WhEyIJHV0ZuUhNLGVyjlg+b439CyCymUk Wa8sZYs7EJR/qyj05FS9P93eICV7MpldV1/T6BDmjFStwaE36G2RGOR0iGewgo6H EVQJeATYQ1RnQeS8h9IrAphVYC0G9M0Pie0giHGV1Ifh868KyYKT3NdG3Z1Hd8x3 6l9zT5G1qYqAIuTUbOO7bOnqtCGlSyyZMXC9bWX1k7oMLgBydSABjq+xV62tb7la a3HOT51TKDwqTIE5lF9SwIYBWWE5tFotPM8NkMs7ttAovlep3Z8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:18 2026 by rpki-client