$ rpki-client -vvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: SnWp8Y+mqkzkeKz7fNhtJ9njM7VFor+DMulDtNj27F8= Subject key identifier: DC:63:1F:34:BE:C4:FD:8D:1B:92:37:8D:92:93:F8:52:BD:F4:55:EC Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 5057405117B8AA72B58D378EC5448F91DC5F3B56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:11:09 +0000 Manifest this update: Tue 16 Jun 2026 18:06:09 +0000 Manifest next update: Wed 17 Jun 2026 20:24:09 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: E1TpWhjccvaNhyexnzTDPzB6NT8X/mXR0SP384Yf4Ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:57:40:51:17:b8:aa:72:b5:8d:37:8e:c5:44:8f:91:dc:5f:3b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Jun 16 18:06:09 2026 GMT Not After : Jun 17 20:24:09 2026 GMT Subject: CN=DC631F34BEC4FD8D1B92378D9293F852BDF455EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:84:8c:4e:70:fc:1c:80:54:7c:3a:73:73: c2:28:8a:c5:d8:42:85:05:4b:dd:2c:4a:a6:01:60: 5e:a8:25:db:fe:4a:72:ec:f4:7a:5e:c8:9c:7e:4a: 6b:ba:0c:3a:42:72:6e:4e:9a:39:6e:16:82:3c:2f: e7:62:22:ea:15:14:87:13:3a:6a:fc:a0:73:7a:bc: fe:cb:c4:1a:0b:36:fe:d8:b1:d0:e6:bf:5c:b3:a3: 24:09:cd:2c:c9:78:c6:9d:c0:4d:de:52:a1:2b:76: 75:f7:0d:9e:44:73:94:83:6a:1b:27:98:ff:0c:dd: 66:81:0e:a3:84:23:63:1b:f9:78:7f:d2:1a:84:9e: 01:45:66:a9:b4:45:1e:81:e5:a7:99:1a:c6:cc:6d: 76:c3:f3:1d:1c:4e:f3:05:fe:ae:75:32:89:37:d6: 5d:2d:c4:d8:28:ca:1b:3a:52:44:9f:ed:3e:ac:83: 5a:74:25:c8:8c:98:89:2c:1e:1d:41:1a:1c:cf:28: ed:25:34:2b:22:fd:5e:54:c7:d5:12:cc:87:dc:96: 3f:4d:7c:4f:59:77:9c:f6:56:14:5a:68:39:2e:12: 20:f7:ed:10:d3:ee:84:16:13:eb:c5:8f:c5:c2:99: 39:45:78:bf:e6:ee:e0:72:9d:14:58:78:10:4e:b9: 82:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:63:1F:34:BE:C4:FD:8D:1B:92:37:8D:92:93:F8:52:BD:F4:55:EC X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:13:99:4e:ea:82:b1:61:9c:80:36:61:8f:72:76:cc:df:33: d6:f9:89:30:6a:98:6e:9a:46:d5:50:89:ad:c3:fa:bf:78:55: 68:fd:76:58:b6:e6:bd:14:8b:c0:f3:66:ee:58:d5:c5:9b:7f: dd:5e:e5:6b:c8:26:c3:0f:9f:b8:4e:76:86:df:ff:0e:df:87: 4a:7f:49:9b:d8:bf:13:ca:90:57:3f:b6:ee:da:dc:f9:9b:6e: 1f:0d:f1:c3:7d:77:e6:f4:38:c6:0e:e4:19:04:85:b5:d4:bb: a7:dd:52:37:79:d0:4e:75:a5:2c:f6:b2:44:44:53:83:d2:ee: 37:24:d1:1e:a6:fd:df:f0:57:1b:5d:6a:f4:46:53:20:8a:7e: 9c:32:3a:6e:40:9f:ca:b4:07:fb:6f:f3:69:f4:96:ed:db:30: 87:f0:59:5e:e8:56:40:58:1c:da:a2:f4:42:f5:b7:ab:47:87: 8d:28:d2:58:0e:46:a0:a1:90:1b:ee:17:3b:a1:a2:4c:de:8c: 4f:87:c6:25:85:d7:b2:77:b5:58:73:1f:bf:5d:88:18:d3:dd: 34:36:23:12:5a:09:88:e6:2a:df:e4:83:6d:69:28:77:d1:3d: 14:cf:aa:2e:de:32:71:ac:9f:f0:4b:d6:6e:9b:c3:ab:3d:ae: b8:b8:93:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFdAURe4qnK1jTeOxUSPkdxfO1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA2MTYxODA2MDlaFw0yNjA2MTcyMDI0MDlaMDMxMTAvBgNV BAMTKERDNjMxRjM0QkVDNEZEOEQxQjkyMzc4RDkyOTNGODUyQkRGNDU1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWISMTnD8HIBUfDpzc8IoisXY QoUFS90sSqYBYF6oJdv+SnLs9HpeyJx+Smu6DDpCcm5OmjluFoI8L+diIuoVFIcT Omr8oHN6vP7LxBoLNv7YsdDmv1yzoyQJzSzJeMadwE3eUqErdnX3DZ5Ec5SDahsn mP8M3WaBDqOEI2Mb+Xh/0hqEngFFZqm0RR6B5aeZGsbMbXbD8x0cTvMF/q51Mok3 1l0txNgoyhs6UkSf7T6sg1p0JciMmIksHh1BGhzPKO0lNCsi/V5Ux9USzIfclj9N fE9Zd5z2VhRaaDkuEiD37RDT7oQWE+vFj8XCmTlFeL/m7uBynRRYeBBOuYIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GMfNL7E/Y0bkjeNkpP4Ur30VewwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQTmU7qgrFhnIA2YY9ydszfM9b5iTBqmG6a RtVQia3D+r94VWj9dli25r0Ui8DzZu5Y1cWbf91e5WvIJsMPn7hOdobf/w7fh0p/ SZvYvxPKkFc/tu7a3Pmbbh8N8cN9d+b0OMYO5BkEhbXUu6fdUjd50E51pSz2skRE U4PS7jck0R6m/d/wVxtdavRGUyCKfpwyOm5An8q0B/tv82n0lu3bMIfwWV7oVkBY HNqi9EL1t6tHh40o0lgORqChkBvuFzuhokzejE+HxiWF17J3tVhzH79diBjT3TQ2 IxJaCYjmKt/kg21pKHfRPRTPqi7eMnGsn/BL1m6bw6s9rri4k18= -----END CERTIFICATE-----Generated at Wed Jun 17 13:16:14 2026 by rpki-client