$ rpki-client -vvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: aqsbU6TCbvjYyiC80QehHC414q9fIWh+9eLSFxNXWsM= Subject key identifier: 64:5E:98:E4:B6:52:79:55:96:3A:9C:E3:59:A0:5A:BE:93:19:69:A9 Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 4AB424945CA2C77FC805D63796314772BD58F501 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:17:28 +0000 Manifest this update: Tue 16 Jun 2026 19:12:28 +0000 Manifest next update: Wed 17 Jun 2026 22:58:28 +0000 Files and hashes: 1: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) 3: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) 4: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: XPY26ze1zkuNkM0P0aNBJbiR4QAZM5EFayRXkeL2Mfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b4:24:94:5c:a2:c7:7f:c8:05:d6:37:96:31:47:72:bd:58:f5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Jun 16 19:12:28 2026 GMT Not After : Jun 17 22:58:28 2026 GMT Subject: CN=645E98E4B6527955963A9CE359A05ABE931969A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:84:fb:1f:32:8e:b6:02:25:99:b7:80:51: 98:5a:73:7a:0a:7d:6b:aa:1f:85:b3:a2:63:e6:43: a6:a9:17:a1:74:2b:3c:2a:cc:bf:18:14:f6:b1:74: 31:9e:42:eb:7c:08:2b:de:a2:42:7b:dc:a1:ae:19: 16:1f:e0:ef:15:6a:05:13:ff:a0:db:4b:5e:71:1d: c0:55:a6:2b:c0:ca:8f:53:79:bd:19:ae:4a:bd:1a: d0:68:66:78:70:78:0b:f0:2e:a8:26:c2:94:8f:c8: b7:27:a2:4f:c3:d3:d0:2d:98:08:36:f2:ba:2d:11: 22:8a:a3:11:97:ad:56:42:5a:5a:da:80:ef:4b:4c: 6d:3a:8e:8c:aa:f6:1a:5a:78:dc:e6:f1:ad:96:d1: 28:7c:99:7f:29:f9:b8:3f:a8:a7:26:70:e3:53:34: 44:c9:f4:48:2e:4a:45:b2:dc:74:e5:cb:f2:e5:82: ae:fb:76:b4:38:e1:ac:b3:d4:2b:42:c9:73:91:ef: 33:9e:68:bb:78:d8:e5:63:ce:2b:b9:7c:b0:ad:7f: 15:85:6f:17:f4:3b:b6:8a:52:84:bd:c7:61:77:17: 0c:46:5c:a1:72:e8:0e:99:16:29:04:ac:f4:9c:d5: 3b:38:a9:f9:b5:da:dd:61:83:79:10:b0:38:3c:77: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5E:98:E4:B6:52:79:55:96:3A:9C:E3:59:A0:5A:BE:93:19:69:A9 X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:3c:b4:e2:2c:bd:89:fb:ed:c3:66:74:19:40:23:1d:03: 6d:09:aa:8f:2a:14:ac:c7:24:01:64:dd:b5:b7:54:f8:60:e0: 44:6e:3a:c4:d9:24:bb:b7:fc:0e:57:e8:c2:54:74:c5:f9:5d: 5e:34:b3:b9:41:04:de:b0:ce:32:87:0f:a4:e2:0a:4a:d8:ae: 8a:86:30:34:72:69:49:fc:da:9b:f7:25:2c:97:08:6c:bb:52: 77:96:03:15:4b:8d:19:7b:15:ce:b9:8d:a8:34:e6:3a:65:01: be:39:a0:6b:57:86:4d:08:54:0c:59:7a:56:9c:b7:ef:2f:72: ca:33:a0:1e:dd:61:d0:1b:42:b1:02:a8:d7:e4:86:d3:46:fc: 4b:bd:c5:9c:23:a2:4f:62:b3:c4:79:76:e6:91:50:9b:f2:d3: 93:45:61:35:56:19:8c:0f:c8:db:81:58:64:a1:28:ed:c5:c3: 12:20:58:c6:a5:17:bb:d4:08:4b:0c:f0:92:d1:dc:0c:5b:19: 4f:e6:62:af:53:f2:75:7b:84:a9:f9:18:43:3c:3d:26:2d:56: 3f:b9:64:61:a3:5b:fe:74:48:e5:ce:ee:0b:59:6b:2e:fb:82: 6c:10:75:9e:38:a6:99:72:36:37:c2:3d:85:d0:29:a8:8f:aa: 95:62:22:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrQklFyix3/IBdY3ljFHcr1Y9QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA2MTYxOTEyMjhaFw0yNjA2MTcyMjU4MjhaMDMxMTAvBgNV BAMTKDY0NUU5OEU0QjY1Mjc5NTU5NjNBOUNFMzU5QTA1QUJFOTMxOTY5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqIT7HzKOtgIlmbeAUZhac3oK fWuqH4WzomPmQ6apF6F0KzwqzL8YFPaxdDGeQut8CCveokJ73KGuGRYf4O8VagUT /6DbS15xHcBVpivAyo9Teb0Zrkq9GtBoZnhweAvwLqgmwpSPyLcnok/D09AtmAg2 8rotESKKoxGXrVZCWlragO9LTG06joyq9hpaeNzm8a2W0Sh8mX8p+bg/qKcmcONT NETJ9EguSkWy3HTly/Llgq77drQ44ayz1CtCyXOR7zOeaLt42OVjziu5fLCtfxWF bxf0O7aKUoS9x2F3FwxGXKFy6A6ZFikErPSc1Ts4qfm12t1hg3kQsDg8d3OfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZF6Y5LZSeVWWOpzjWaBavpMZaakwHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI5PLTiLL2J++3DZnQZQCMdA20Jqo8qFKzH JAFk3bW3VPhg4ERuOsTZJLu3/A5X6MJUdMX5XV40s7lBBN6wzjKHD6TiCkrYroqG MDRyaUn82pv3JSyXCGy7UneWAxVLjRl7Fc65jag05jplAb45oGtXhk0IVAxZelac t+8vcsozoB7dYdAbQrECqNfkhtNG/Eu9xZwjok9is8R5duaRUJvy05NFYTVWGYwP yNuBWGShKO3FwxIgWMalF7vUCEsM8JLR3AxbGU/mYq9T8nV7hKn5GEM8PSYtVj+5 ZGGjW/50SOXO7gtZay77gmwQdZ44pplyNjfCPYXQKaiPqpViIpE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:35 2026 by rpki-client