$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft File: 3FB91A5366225ED818B1E745D18CD5555C3F9180.mft (raw, json) Hash identifier: Ca5o8c3aZz4WAMKXLB5Tb+IV4oqxWF9mkEz64PQ/iCg= Subject key identifier: A2:C5:9D:19:3D:0E:06:DD:86:0A:3D:75:49:21:9E:6E:B3:5C:86:5E Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Certificate serial: 2AF9BA436EA660425FA3E8E578435307FEB16E54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 18:21:42 +0000 Manifest this update: Sat 13 Jun 2026 18:16:42 +0000 Manifest next update: Sun 14 Jun 2026 19:20:42 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=) 2: 3FB91A5366225ED818B1E745D18CD5555C3F9180.crl (hash: i1xVbHcNaOlia6+FXfziFT+B8mXo+FuSGLbm6ZoyJrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:ba:43:6e:a6:60:42:5f:a3:e8:e5:78:43:53:07:fe:b1:6e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Validity Not Before: Jun 13 18:16:42 2026 GMT Not After : Jun 14 19:20:42 2026 GMT Subject: CN=A2C59D193D0E06DD860A3D7549219E6EB35C865E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:75:da:59:77:92:3a:a1:a2:b5:68:92:7b: 26:1a:d4:57:0a:a3:1c:44:d5:91:73:cf:a7:85:0e: d3:e6:e9:a2:18:83:4c:b3:cb:66:25:cc:e7:25:af: 0b:1e:09:77:5f:6a:76:5c:bb:56:e8:0e:36:ba:23: 61:e8:21:a7:3c:9e:82:0c:19:06:0c:59:8f:7f:29: 6b:75:dc:93:ed:09:9e:16:e7:ed:12:07:3a:9a:2e: ad:62:6b:a3:39:4b:1c:19:c3:b4:f8:d5:e5:57:d2: d5:9d:1e:75:04:5e:31:f8:47:90:99:27:f2:a1:a3: be:63:bf:ff:35:ce:00:3a:d2:88:1f:34:96:2e:01: cd:74:af:72:a4:07:0f:d4:12:f4:6b:e8:93:97:91: 33:27:56:ab:c8:f7:a1:29:2f:bc:a6:28:55:91:99: 4b:d3:f9:a2:03:59:57:91:32:83:b5:9a:d3:7a:af: b3:b3:98:be:fc:a5:bf:a6:4b:52:d8:00:dd:0a:a4: fe:30:fc:b7:9e:50:20:b5:07:15:75:71:83:a9:d3: e1:9c:32:4a:65:7f:36:49:d6:41:dd:11:3a:0d:ed: 39:3a:50:6e:08:b4:de:e2:1c:12:88:11:29:eb:bd: e5:26:32:98:82:ed:e5:67:15:be:b0:46:c0:d1:e2: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:9D:19:3D:0E:06:DD:86:0A:3D:75:49:21:9E:6E:B3:5C:86:5E X509v3 Authority Key Identifier: keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:de:53:ef:2a:a2:a0:a5:af:05:42:96:9e:be:6c:49:9a:49: ae:5b:77:e5:2f:61:5b:bf:1d:8c:b7:dc:07:ef:55:fd:02:c8: 70:a1:30:c2:4b:5a:bd:bb:9a:18:6f:7f:91:84:b3:bc:1a:2f: 4d:d8:1b:94:97:5f:dd:03:ad:d6:cd:66:64:be:40:aa:0c:a7: 08:2c:4b:a6:e4:75:81:47:b0:74:99:28:41:69:2a:4d:82:63: ca:41:93:55:a2:f6:e5:2a:35:05:b1:ca:1d:1d:94:74:7f:84: fd:12:5b:83:82:29:6a:4c:df:b0:97:07:8d:cb:d0:2b:ae:42: 99:93:80:50:71:a6:da:f4:66:ad:8c:69:f4:c4:92:9d:bc:f8: f5:3b:2e:b5:dc:b7:1e:b1:35:5e:87:5f:1e:d1:be:29:41:e0: 1e:e5:82:32:48:5d:db:45:1b:2a:4a:5d:a6:89:b0:4d:68:b2: 09:dc:32:79:34:c9:99:cc:d2:a3:78:21:83:9d:a6:e2:d6:e5: 2f:9c:76:3a:12:cd:61:f5:3b:3f:c5:a9:66:c0:9b:88:3b:94: c4:99:c4:f2:88:fb:4e:30:e2:57:ce:63:ad:0c:5a:f7:87:96: 94:bc:2a:b2:d2:ad:6d:96:5c:fa:5c:cd:86:41:0b:4a:5c:5e: 5c:e2:34:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvm6Q26mYEJfo+jleENTB/6xblQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1 QzNGOTE4MDAeFw0yNjA2MTMxODE2NDJaFw0yNjA2MTQxOTIwNDJaMDMxMTAvBgNV BAMTKEEyQzU5RDE5M0QwRTA2REQ4NjBBM0Q3NTQ5MjE5RTZFQjM1Qzg2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdXXaWXeSOqGitWiSeyYa1FcK oxxE1ZFzz6eFDtPm6aIYg0yzy2YlzOclrwseCXdfanZcu1boDja6I2HoIac8noIM GQYMWY9/KWt13JPtCZ4W5+0SBzqaLq1ia6M5SxwZw7T41eVX0tWdHnUEXjH4R5CZ J/Kho75jv/81zgA60ogfNJYuAc10r3KkBw/UEvRr6JOXkTMnVqvI96EpL7ymKFWR mUvT+aIDWVeRMoO1mtN6r7OzmL78pb+mS1LYAN0KpP4w/LeeUCC1BxV1cYOp0+Gc MkplfzZJ1kHdEToN7Tk6UG4ItN7iHBKIESnrveUmMpiC7eVnFb6wRsDR4hkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosWdGT0OBt2GCj11SSGebrNchl4wHwYDVR0j BBgwFoAUP7kaU2YiXtgYsedF0YzVVVw/kYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzVjZTktMGVhNS00N2Q4LTlmY2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2 NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1QzNGOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkI5MUE1MzY2MjI1RUQ4MThCMUU3NDVEMThDRDU1NTVDM0Y5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1 NTU1QzNGOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3eU+8qoqClrwVClp6+bEmaSa5bd+UvYVu/ HYy33AfvVf0CyHChMMJLWr27mhhvf5GEs7waL03YG5SXX90DrdbNZmS+QKoMpwgs S6bkdYFHsHSZKEFpKk2CY8pBk1Wi9uUqNQWxyh0dlHR/hP0SW4OCKWpM37CXB43L 0CuuQpmTgFBxptr0Zq2MafTEkp28+PU7LrXctx6xNV6HXx7RvilB4B7lgjJIXdtF GypKXaaJsE1osgncMnk0yZnM0qN4IYOdpuLW5S+cdjoSzWH1Oz/FqWbAm4g7lMSZ xPKI+04w4lfOY60MWveHlpS8KrLSrW2WXPpczYZBC0pcXlziNDI= -----END CERTIFICATE-----Generated at Sun Jun 14 02:43:58 2026 by rpki-client