$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: rMy8LVPQcPb1eXd/bLNSUmPRdiQpvOtwuUsanK1ZGSY= Subject key identifier: E5:6A:35:6D:78:7C:CC:32:97:35:55:E7:BB:3F:6A:E5:2A:D2:62:F7 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 3CB99D50FD47D6F2B1DF121D54163C809DA0D057 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:30:41 +0000 Manifest this update: Sat 13 Jun 2026 17:25:41 +0000 Manifest next update: Sun 14 Jun 2026 19:46:41 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 2: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 3: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: DsKYUVfa+3Rugtnr62LV/JVDLU0Z18GVUy6Sq07T3jg=) 4: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: B5ukxagssxCFfNmL/M+i5ue/1MCU5d6NS/ddZ7eTpIY=) 5: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: oaMZvvPhg7sQ6sU35Q1iSLRP325On6qyrsdfo7OOPY8=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 7: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: bXRUilxrcrzJiP9PjPQFqMqVk2Gw/CWvQhfR/EgAeXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b9:9d:50:fd:47:d6:f2:b1:df:12:1d:54:16:3c:80:9d:a0:d0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Jun 13 17:25:41 2026 GMT Not After : Jun 14 19:46:41 2026 GMT Subject: CN=E56A356D787CCC32973555E7BB3F6AE52AD262F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:50:ed:f2:32:d4:58:2e:a3:05:ea:7d:62: 6e:89:40:a0:03:e8:4d:4a:e5:58:76:bd:fb:19:87: d0:7d:e3:01:ab:6c:b8:6a:4b:10:0b:92:9b:8c:ec: 6b:55:af:5e:84:af:7c:02:84:1d:39:1b:11:cc:9f: d8:74:ca:b9:a2:88:4d:eb:ab:77:0f:59:22:48:a8: 8e:f3:21:63:ec:99:ba:f2:a9:50:72:c7:92:22:b4: 0a:87:3b:2d:ea:ad:1a:ba:97:2d:1b:66:f4:f8:4c: 7f:6c:5e:7e:c9:92:e2:3d:fc:9e:ed:3a:84:46:f3: c3:d1:37:e8:1f:4f:da:db:32:3a:ee:ab:df:24:c2: ec:66:21:50:6f:b5:50:c6:7f:a8:26:e0:21:86:48: 9f:68:45:e1:dd:39:2f:b4:66:3f:46:c8:ae:f6:f7: 69:05:2e:09:67:15:ba:ad:85:76:4e:5b:5f:30:b5: e9:6e:2a:51:fa:53:1c:12:f3:fe:fa:2a:5a:75:4c: 96:6b:1f:b2:e3:07:ab:f5:ed:85:85:54:e3:4e:76: 16:cf:a6:7d:91:2a:5b:7a:e9:09:83:dc:1a:0e:31: 81:07:5e:5d:8c:d6:f7:26:90:73:16:ef:95:0f:72: d1:9a:38:2a:1c:5f:ad:d1:87:6e:14:35:4e:ed:2c: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:35:6D:78:7C:CC:32:97:35:55:E7:BB:3F:6A:E5:2A:D2:62:F7 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:90:6c:e9:55:88:44:ef:5b:a1:b7:ac:fc:40:82:cb:1e:f7: ed:b5:c8:49:e2:e7:23:e1:70:4c:57:7e:bd:45:c6:18:48:da: 9f:f7:3f:61:1d:21:5a:8e:cc:a0:c7:0d:b6:33:bf:9b:b0:b0: f6:e1:0a:c2:2e:9d:b7:17:59:96:1e:f1:5f:97:ca:a7:a8:79: 1f:53:8a:96:97:1d:ba:fc:64:48:b6:94:9f:5a:9a:39:22:dc: 82:4f:ef:05:66:b0:3d:63:52:10:bc:6b:3a:86:75:88:e9:98: b4:31:6c:b8:23:0e:8f:98:ca:19:d0:55:b1:c7:37:a7:2a:ea: 25:be:07:54:1b:4e:93:ba:47:7d:6d:a7:c5:03:57:da:24:a6: 33:df:41:29:cc:55:b9:9a:03:5d:4a:2c:5d:9e:a2:ca:7d:c8: 0f:c3:36:a7:45:c3:45:65:00:41:37:fb:ae:75:e4:66:8d:5a: 54:9c:42:cb:9d:fe:67:eb:a6:ba:11:b8:0a:22:63:06:d7:09: 38:0d:4f:63:da:33:9e:ca:51:d3:16:08:54:46:b5:b0:54:59: 7e:3f:9b:f9:04:6a:bf:3f:ab:a9:d9:bb:22:68:ed:67:bd:09: 1e:84:85:13:42:d7:51:31:cf:f6:8b:4e:ce:49:72:06:5c:f3: b4:5a:b1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLmdUP1H1vKx3xIdVBY8gJ2g0FcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA2MTMxNzI1NDFaFw0yNjA2MTQxOTQ2NDFaMDMxMTAvBgNV BAMTKEU1NkEzNTZENzg3Q0NDMzI5NzM1NTVFN0JCM0Y2QUU1MkFEMjYyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsFDt8jLUWC6jBep9Ym6JQKAD 6E1K5Vh2vfsZh9B94wGrbLhqSxALkpuM7GtVr16Er3wChB05GxHMn9h0yrmiiE3r q3cPWSJIqI7zIWPsmbryqVByx5IitAqHOy3qrRq6ly0bZvT4TH9sXn7JkuI9/J7t OoRG88PRN+gfT9rbMjruq98kwuxmIVBvtVDGf6gm4CGGSJ9oReHdOS+0Zj9GyK72 92kFLglnFbqthXZOW18wteluKlH6UxwS8/76Klp1TJZrH7LjB6v17YWFVONOdhbP pn2RKlt66QmD3BoOMYEHXl2M1vcmkHMW75UPctGaOCocX63Rh24UNU7tLAVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Wo1bXh8zDKXNVXnuz9q5SrSYvcwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeQbOlViETvW6G3rPxAgsse9+21yEni5yPh cExXfr1FxhhI2p/3P2EdIVqOzKDHDbYzv5uwsPbhCsIunbcXWZYe8V+XyqeoeR9T ipaXHbr8ZEi2lJ9amjki3IJP7wVmsD1jUhC8azqGdYjpmLQxbLgjDo+YyhnQVbHH N6cq6iW+B1QbTpO6R31tp8UDV9okpjPfQSnMVbmaA11KLF2eosp9yA/DNqdFw0Vl AEE3+6515GaNWlScQsud/mfrproRuAoiYwbXCTgNT2PaM57KUdMWCFRGtbBUWX4/ m/kEar8/q6nZuyJo7We9CR6EhRNC11Exz/aLTs5JcgZc87RasUQ= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:39 2026 by rpki-client