$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: 3z/L5peVn9K7YGYexm9EM1bKhCbai7kYcbU3LOiFYXQ= Subject key identifier: D9:31:A0:5F:64:5B:D5:5C:7C:53:98:6B:14:0B:17:D7:95:DE:15:0B Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 61099897EB9D8C35BE0825DA0A1CAD017DD72033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:00:59 +0000 Manifest this update: Tue 16 Jun 2026 21:55:59 +0000 Manifest next update: Wed 17 Jun 2026 23:33:59 +0000 Files and hashes: 1: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) 2: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 3: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: ypWZ0aBn3OIVJ/qTigHegjmRPeJTfKz9PNcavDSdSeo=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 5: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:09:98:97:eb:9d:8c:35:be:08:25:da:0a:1c:ad:01:7d:d7:20:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Jun 16 21:55:59 2026 GMT Not After : Jun 17 23:33:59 2026 GMT Subject: CN=D931A05F645BD55C7C53986B140B17D795DE150B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:73:20:33:f2:22:ea:5a:35:04:24:28:78: f3:6e:4a:87:0e:5c:20:a2:91:82:bf:cc:56:ae:12: 5a:3d:ee:9e:10:05:07:28:bc:f6:b1:9b:18:0e:57: 97:e4:c8:ce:5f:d4:59:ab:cb:ab:46:0c:3c:1e:39: d4:44:e2:1a:2e:41:02:20:91:e8:b5:bd:39:0c:e7: c4:de:61:d6:d9:ae:42:4d:e0:18:67:d1:87:b0:70: bb:f9:fa:77:e5:42:90:f7:7a:5e:d8:28:a4:ef:4d: 31:5b:17:f2:1a:9b:fa:fd:08:42:6a:09:2a:af:4a: 7a:f1:02:ed:01:c9:39:cd:cf:4c:8f:94:03:de:70: d2:4e:20:8c:78:5f:e9:22:9c:b0:1a:68:28:94:74: 8d:ba:87:27:2c:08:00:d0:1a:15:ad:ed:1e:cf:7f: 97:b9:f4:ae:57:c2:ad:03:4c:27:78:8d:51:a4:28: 89:75:1d:d4:48:bd:dc:99:0d:0c:59:6b:64:79:66: a1:d1:36:72:9d:94:98:8c:5d:7f:3a:cd:4d:1f:40: fd:cd:ba:21:3a:f2:c4:2c:07:47:1d:80:85:40:f1: 1d:75:32:4e:e5:5a:b1:31:da:48:e8:98:8b:a5:50: b3:07:87:3a:9a:86:a3:d1:f7:46:43:26:eb:aa:dc: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:A0:5F:64:5B:D5:5C:7C:53:98:6B:14:0B:17:D7:95:DE:15:0B X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:22:23:0e:7e:ee:eb:d8:a1:23:8a:2c:b7:5c:c7:c3:d0:86: 9d:31:3f:3d:f8:62:1a:a3:3b:2f:0b:ff:d4:63:c7:81:91:10: 32:eb:7d:4b:d2:2d:f0:c4:a6:09:8f:54:2a:0b:16:f4:ad:32: fa:47:5f:27:2d:a5:5f:c6:63:47:6c:ce:df:f3:7c:d7:f5:f4: 0d:a0:d6:92:72:14:7c:01:c9:df:2e:12:69:04:ae:60:6d:5e: cc:3f:d6:f9:15:b1:41:58:45:60:06:ee:6a:2e:36:dc:35:7c: 1c:19:1e:96:e4:b3:0e:62:ce:7c:f8:9f:b9:68:1f:0f:22:08: 6f:0b:2d:c1:9f:26:1b:4d:17:83:21:a8:82:43:8a:26:e6:07: bd:a4:1c:a6:24:8f:05:bf:85:e7:e3:c5:9d:cd:7f:33:e9:8d: c1:ad:b6:c7:d3:ee:9c:65:c7:08:d4:3f:30:06:36:23:30:24: 5e:22:06:47:d3:ea:fb:07:3c:69:2c:b4:04:c9:22:bd:a1:19: 8f:c1:e2:4a:3c:86:45:57:4a:7c:76:af:35:ba:f8:88:ce:0b: c0:ce:fc:ca:69:46:8e:96:64:8b:00:68:73:49:e5:be:8f:1a: a3:18:ec:a8:29:65:29:2c:5c:71:81:a0:65:6d:05:7b:27:cc: 7c:d9:b0:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQmYl+udjDW+CCXaChytAX3XIDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA2MTYyMTU1NTlaFw0yNjA2MTcyMzMzNTlaMDMxMTAvBgNV BAMTKEQ5MzFBMDVGNjQ1QkQ1NUM3QzUzOTg2QjE0MEIxN0Q3OTVERTE1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloXMgM/Ii6lo1BCQoePNuSocO XCCikYK/zFauElo97p4QBQcovPaxmxgOV5fkyM5f1Fmry6tGDDweOdRE4houQQIg kei1vTkM58TeYdbZrkJN4Bhn0YewcLv5+nflQpD3el7YKKTvTTFbF/Iam/r9CEJq CSqvSnrxAu0ByTnNz0yPlAPecNJOIIx4X+kinLAaaCiUdI26hycsCADQGhWt7R7P f5e59K5Xwq0DTCd4jVGkKIl1HdRIvdyZDQxZa2R5ZqHRNnKdlJiMXX86zU0fQP3N uiE68sQsB0cdgIVA8R11Mk7lWrEx2kjomIulULMHhzqahqPR90ZDJuuq3IQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TGgX2Rb1Vx8U5hrFAsX15XeFQswHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsiIw5+7uvYoSOKLLdcx8PQhp0xPz34Yhqj Oy8L/9Rjx4GREDLrfUvSLfDEpgmPVCoLFvStMvpHXyctpV/GY0dszt/zfNf19A2g 1pJyFHwByd8uEmkErmBtXsw/1vkVsUFYRWAG7mouNtw1fBwZHpbksw5iznz4n7lo Hw8iCG8LLcGfJhtNF4MhqIJDiibmB72kHKYkjwW/hefjxZ3NfzPpjcGttsfT7pxl xwjUPzAGNiMwJF4iBkfT6vsHPGkstATJIr2hGY/B4ko8hkVXSnx2rzW6+IjOC8DO /MppRo6WZIsAaHNJ5b6PGqMY7KgpZSksXHGBoGVtBXsnzHzZsK4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:57 2026 by rpki-client