$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: Bcw4vYw6rDIEIoJh+gMbUEOeJdBFv5V8YczD0nAahhQ= Subject key identifier: F2:10:F0:2F:A3:5E:D9:6C:C5:BF:07:99:F2:21:2C:10:3F:A8:04:B4 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 3E37F0BFE34D56E6CDC1BA5CEF46380349437EE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:37:19 +0000 Manifest this update: Sat 13 Jun 2026 10:32:19 +0000 Manifest next update: Sun 14 Jun 2026 11:35:19 +0000 Files and hashes: 1: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: nzMULnbeYpo2BfJ5immDMhIx26rCYQxjgaUHLu8aWhE=) 2: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 3: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 4: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:37:f0:bf:e3:4d:56:e6:cd:c1:ba:5c:ef:46:38:03:49:43:7e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Jun 13 10:32:19 2026 GMT Not After : Jun 14 11:35:19 2026 GMT Subject: CN=F210F02FA35ED96CC5BF0799F2212C103FA804B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:a4:b3:a2:5c:b1:aa:3a:09:48:66:5c:ce: 3a:87:52:2d:54:e6:e8:20:e3:07:af:71:e3:7e:f6: 44:6d:68:34:a7:56:82:73:91:bd:35:e4:54:57:97: ad:d2:da:29:96:dc:69:99:7e:03:fb:46:66:df:a1: ff:99:3c:6a:61:e0:6f:21:f5:c2:e4:41:0d:bf:8f: f4:93:7e:5d:b0:5a:e0:27:3b:05:47:c0:85:7a:a2: 31:e7:42:ab:ba:0a:b0:60:e6:25:de:3b:18:94:f3: 1b:b4:e8:e3:54:c9:3e:2f:26:6d:dc:91:2c:bc:07: ac:4c:82:41:47:13:20:04:f6:1e:6c:f7:86:c6:c3: bd:80:ea:73:5a:d9:95:ac:5b:64:57:a6:8d:f9:ba: d0:62:2f:26:96:22:ec:b4:55:a7:52:f2:f8:9a:32: 79:97:66:55:9b:66:b1:c6:3e:68:fb:45:49:e6:b4: cd:14:93:b3:5e:0b:08:d7:8c:9a:6a:79:ea:76:ee: 62:6f:85:e6:af:60:6c:8a:6a:ab:f8:82:66:82:d9: be:12:bd:56:c0:83:dc:24:4b:d3:61:a3:f6:60:a9: d2:e0:c5:b3:49:5a:c6:0a:cd:a8:c5:a9:82:d5:a4: 67:ef:31:b1:69:08:fc:1b:ef:8e:64:1d:6f:c0:9f: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:F0:2F:A3:5E:D9:6C:C5:BF:07:99:F2:21:2C:10:3F:A8:04:B4 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:67:68:75:23:be:6a:b3:14:3c:25:b3:98:79:43:bd:99: b6:9f:56:18:72:71:59:27:bc:cc:da:ed:f3:6c:52:9a:88:a1: c4:c5:4b:7c:b3:36:a5:87:3a:b0:a9:fb:84:ab:de:f2:86:70: 9d:7f:13:40:6c:5d:d2:ee:25:3d:23:77:d9:96:63:d9:bb:d0: f7:8b:b9:e5:42:7e:35:14:79:b9:20:0b:25:06:9a:34:e0:d2: 9b:da:f9:ed:c4:73:b5:d9:2f:a9:bf:a7:f6:6b:1a:6e:76:2a: 68:74:84:78:4a:da:3e:36:8f:82:33:8d:14:ac:b5:c5:5c:d5: 93:1a:b2:9b:8b:ac:5d:1c:a7:56:fa:bc:8b:1d:65:1a:1c:25: 1b:c0:09:53:27:c1:4c:2a:a0:11:d1:9b:e9:35:37:04:75:7d: fd:72:a6:ac:aa:a7:97:37:93:ca:53:ee:52:ce:89:e7:01:d2: a9:b8:59:52:a8:e5:99:f2:ca:98:42:50:e9:9f:0e:ac:5a:55: dd:13:1b:db:4f:5c:c2:e0:c8:dc:3c:d1:f5:3a:f1:e6:7b:dd: 5c:4c:46:24:4a:cf:7f:cc:7a:c2:c7:c2:80:1a:7e:71:29:11: 4e:83:74:e5:08:31:47:5a:21:f5:49:9e:d6:18:cd:9e:55:05: 69:96:e9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjfwv+NNVubNwbpc70Y4A0lDfuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA2MTMxMDMyMTlaFw0yNjA2MTQxMTM1MTlaMDMxMTAvBgNV BAMTKEYyMTBGMDJGQTM1RUQ5NkNDNUJGMDc5OUYyMjEyQzEwM0ZBODA0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZKSzolyxqjoJSGZczjqHUi1U 5ugg4wevceN+9kRtaDSnVoJzkb015FRXl63S2imW3GmZfgP7Rmbfof+ZPGph4G8h 9cLkQQ2/j/STfl2wWuAnOwVHwIV6ojHnQqu6CrBg5iXeOxiU8xu06ONUyT4vJm3c kSy8B6xMgkFHEyAE9h5s94bGw72A6nNa2ZWsW2RXpo35utBiLyaWIuy0VadS8via MnmXZlWbZrHGPmj7RUnmtM0Uk7NeCwjXjJpqeep27mJvheavYGyKaqv4gmaC2b4S vVbAg9wkS9Nho/ZgqdLgxbNJWsYKzajFqYLVpGfvMbFpCPwb745kHW/An7IHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hDwL6Ne2WzFvweZ8iEsED+oBLQwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlbZ2h1I75qsxQ8JbOYeUO9mbafVhhycVkn vMza7fNsUpqIocTFS3yzNqWHOrCp+4Sr3vKGcJ1/E0BsXdLuJT0jd9mWY9m70PeL ueVCfjUUebkgCyUGmjTg0pva+e3Ec7XZL6m/p/ZrGm52Kmh0hHhK2j42j4IzjRSs tcVc1ZMaspuLrF0cp1b6vIsdZRocJRvACVMnwUwqoBHRm+k1NwR1ff1ypqyqp5c3 k8pT7lLOiecB0qm4WVKo5ZnyyphCUOmfDqxaVd0TG9tPXMLgyNw80fU68eZ73VxM RiRKz3/MesLHwoAafnEpEU6DdOUIMUdaIfVJntYYzZ5VBWmW6WI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:54:15 2026 by rpki-client