$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: 16hlEZwMdEPHE6P387YrYuLllzvsxKsM4QrNMK8abto= Subject key identifier: 58:F4:8F:3E:56:44:E4:04:F6:2D:FE:53:29:F6:BF:A2:80:03:90:02 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 7774B2BC12B32F7E29712CA283320DB74E423FE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 04:28:13 +0000 Manifest this update: Wed 17 Jun 2026 04:23:13 +0000 Manifest next update: Thu 18 Jun 2026 07:52:13 +0000 Files and hashes: 1: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) 2: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: nqI3034GulcKuptfts0gwQzxdSpkTk9SFcSUERU5LKU=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 4: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:74:b2:bc:12:b3:2f:7e:29:71:2c:a2:83:32:0d:b7:4e:42:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Jun 17 04:23:13 2026 GMT Not After : Jun 18 07:52:13 2026 GMT Subject: CN=58F48F3E5644E404F62DFE5329F6BFA280039002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:17:13:7b:01:0d:9d:02:a1:99:d6:ed:c4: cf:94:81:86:b7:72:b6:6c:14:38:ce:74:12:ef:c1: 09:c4:9a:35:39:88:49:6a:85:4e:97:45:8d:73:e5: 34:a6:00:5f:0f:b5:65:62:06:97:f7:f3:b3:9d:7c: 33:3a:2e:a8:64:6d:3b:00:39:89:3b:2d:02:f4:df: 94:6e:24:84:f1:c5:43:72:3f:cc:d9:f3:6a:b0:e5: 28:15:66:d0:f6:1a:69:78:b4:df:4a:95:57:a9:77: 89:20:0c:4c:d6:8b:30:de:35:f3:df:15:09:5d:de: 1a:20:c8:e3:1a:0b:0d:49:3e:b4:1b:77:f6:e4:7c: 32:8d:2a:89:64:91:3e:a9:a5:36:5a:48:28:ff:2d: ec:ae:85:67:2a:1c:94:c6:7b:c3:6c:80:fe:01:73: 6b:af:c1:24:58:5e:bc:21:1a:f8:08:b7:e7:ce:2d: 9d:38:2a:3f:75:23:89:3d:0d:58:70:07:df:67:d7: f3:d4:f3:60:94:e1:48:cd:c3:ad:c1:fa:54:9e:fd: 72:97:03:36:ba:2f:cf:46:b5:f4:d1:0c:34:0b:76: b5:2d:39:6a:d4:5e:10:04:7b:00:84:11:d4:ec:b3: a5:4d:ad:95:0e:ed:9f:09:2f:12:28:e9:69:e4:1f: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F4:8F:3E:56:44:E4:04:F6:2D:FE:53:29:F6:BF:A2:80:03:90:02 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0f:af:1c:37:2d:35:a0:c1:b3:85:c2:aa:db:0b:d0:78:51: 33:05:76:7d:6b:ca:20:64:4b:49:03:c9:df:33:6d:af:74:df: aa:86:ef:54:df:4c:1e:08:89:eb:b9:5b:e5:1f:3d:11:97:5e: 26:7c:70:46:0c:4e:dd:bc:f4:6d:fb:d9:09:ea:0c:48:54:4b: 71:a7:9f:6c:3c:c4:8e:6b:60:37:6c:b2:fe:94:c1:06:87:f0: b2:74:01:79:9e:00:3f:46:53:b1:7c:d2:14:8e:5c:0c:a5:5c: 6e:12:ed:c8:93:9d:d3:48:6a:7a:8e:4e:18:8c:ce:97:7b:6f: 5e:27:7b:e1:73:f5:29:e5:cd:84:bd:88:80:35:0a:05:af:04: 4a:97:2c:53:5c:cd:cd:5d:f3:6e:14:08:8c:22:e4:b0:44:6c: 9e:38:1a:ba:e1:d8:85:0f:d9:dc:05:1e:19:a4:cb:b1:ca:13: 81:2e:aa:91:93:df:62:f6:3e:21:b0:72:71:b8:1b:11:e7:e9: 14:1a:3c:fd:50:e5:5e:89:32:72:16:44:cf:c0:9a:ba:ef:6b: e8:10:6e:cd:db:5b:1c:99:eb:d6:55:e7:46:a8:2c:9e:e6:d7: d4:78:1c:f0:b2:4c:e9:38:fc:87:76:2a:ae:d5:b4:1a:c4:ad: ae:c0:93:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3SyvBKzL34pcSyigzINt05CP+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA2MTcwNDIzMTNaFw0yNjA2MTgwNzUyMTNaMDMxMTAvBgNV BAMTKDU4RjQ4RjNFNTY0NEU0MDRGNjJERkU1MzI5RjZCRkEyODAwMzkwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaBcTewENnQKhmdbtxM+UgYa3 crZsFDjOdBLvwQnEmjU5iElqhU6XRY1z5TSmAF8PtWViBpf387OdfDM6LqhkbTsA OYk7LQL035RuJITxxUNyP8zZ82qw5SgVZtD2Gml4tN9KlVepd4kgDEzWizDeNfPf FQld3hogyOMaCw1JPrQbd/bkfDKNKolkkT6ppTZaSCj/LeyuhWcqHJTGe8NsgP4B c2uvwSRYXrwhGvgIt+fOLZ04Kj91I4k9DVhwB99n1/PU82CU4UjNw63B+lSe/XKX Aza6L89GtfTRDDQLdrUtOWrUXhAEewCEEdTss6VNrZUO7Z8JLxIo6WnkH4TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPSPPlZE5AT2Lf5TKfa/ooADkAIwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAPrxw3LTWgwbOFwqrbC9B4UTMFdn1ryiBk S0kDyd8zba9036qG71TfTB4Iieu5W+UfPRGXXiZ8cEYMTt289G372QnqDEhUS3Gn n2w8xI5rYDdssv6UwQaH8LJ0AXmeAD9GU7F80hSOXAylXG4S7ciTndNIanqOThiM zpd7b14ne+Fz9SnlzYS9iIA1CgWvBEqXLFNczc1d824UCIwi5LBEbJ44Grrh2IUP 2dwFHhmky7HKE4EuqpGT32L2PiGwcnG4GxHn6RQaPP1Q5V6JMnIWRM/Amrrva+gQ bs3bWxyZ69ZV50aoLJ7m19R4HPCyTOk4/Id2Kq7VtBrEra7Ak2k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:24 2026 by rpki-client