$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft File: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft (raw, json) Hash identifier: MckF+XbPqhpcc+IoZlPlJreq6Xj99uLVwvcx3JaBtcs= Subject key identifier: 26:46:23:D9:41:B4:B0:15:A7:DA:EA:8A:49:9A:40:61:7A:6A:AB:F7 Authority key identifier: 31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 Certificate issuer: /CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Certificate serial: 3CF9304C5B0B34875F5816DD4465E5A2F09FD31C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:28:33 +0000 Manifest this update: Wed 17 Jun 2026 00:23:33 +0000 Manifest next update: Thu 18 Jun 2026 01:39:33 +0000 Files and hashes: 1: 3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl (hash: nk55MJFh2+UFdV61tUsjutuBKsty7mevPftJWYVOlBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f9:30:4c:5b:0b:34:87:5f:58:16:dd:44:65:e5:a2:f0:9f:d3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3126FC86C5B0754173EA2F94CCA9C8F9A41162C4 Validity Not Before: Jun 17 00:23:33 2026 GMT Not After : Jun 18 01:39:33 2026 GMT Subject: CN=264623D941B4B015A7DAEA8A499A40617A6AABF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:fc:f9:31:6d:f3:ac:e3:8f:99:69:ed:92: 21:29:84:0c:a0:73:b8:5d:8e:df:23:73:a9:f7:14: 0d:af:8c:89:44:8f:0a:fe:e0:f3:e0:a2:b2:52:3d: b1:d1:21:b0:28:dd:40:63:56:40:d4:79:7a:38:f6: 8c:5c:50:4e:c1:c4:e1:17:e5:1e:a5:36:fa:45:0c: 14:ed:33:c8:76:83:2a:12:9f:67:aa:75:08:83:aa: ae:d5:f8:90:cb:e3:74:f6:2b:5e:f0:fa:48:92:1e: af:31:d8:f3:a0:0d:c0:89:31:21:7f:d2:c0:e0:eb: d3:81:9c:54:a6:d4:b3:b3:bd:95:72:fa:81:bb:17: 7b:f5:ab:27:37:1e:2e:bd:41:fc:b2:cc:71:fe:f2: 17:e7:a5:91:4e:7c:7e:7f:12:66:66:5b:21:94:4d: 15:d0:8b:80:43:1b:99:3e:1e:10:c1:57:26:a9:45: 22:b3:c8:e5:16:90:42:7e:0b:5e:82:5b:e6:fa:a3: 9c:14:19:12:e9:f4:ff:69:5b:a4:91:89:11:94:31: 53:9f:19:8f:4f:5d:bc:35:06:71:28:8c:2a:ea:ec: 1c:12:4c:66:a9:15:93:d0:bc:d2:14:f6:33:4d:ae: ec:4c:9e:c7:62:ce:c1:ed:b5:3f:b8:35:b7:47:e1: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:23:D9:41:B4:B0:15:A7:DA:EA:8A:49:9A:40:61:7A:6A:AB:F7 X509v3 Authority Key Identifier: keyid:31:26:FC:86:C5:B0:75:41:73:EA:2F:94:CC:A9:C8:F9:A4:11:62:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/3126FC86C5B0754173EA2F94CCA9C8F9A41162C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ba:2a:dd:e5:05:91:e8:aa:91:1e:02:55:0b:4d:2f:ca:70: 00:5c:e5:ee:e7:30:74:d2:3f:a1:ff:f1:f9:56:38:3f:29:ae: 35:2c:4c:e3:9f:45:9b:18:7f:b8:6d:8f:4b:d4:0e:d5:53:bd: 4c:a6:06:72:70:e1:f5:74:f0:57:56:1c:6b:34:89:db:f3:d0: f6:dc:8c:f5:4c:19:74:5e:bb:d1:4a:bd:63:61:8c:ff:9b:7a: 67:17:a0:b4:de:cc:7a:3b:50:39:bf:2c:6f:d7:9e:3c:ac:0c: ca:6e:aa:ee:c1:d5:35:5f:a2:cf:1b:21:be:fb:eb:46:c6:0b: 50:1f:05:00:7f:c0:d0:64:91:49:ad:eb:80:3f:cf:f9:17:27: 0a:70:8f:75:83:cc:db:b2:f2:6e:0a:ee:5c:94:a9:af:6e:c5: 4f:f8:b7:f2:8f:0f:9e:76:e9:59:bd:ef:b7:32:30:01:36:e9: 94:a2:7d:e8:69:b5:c3:f5:e5:57:50:f7:2a:9e:52:d4:9e:37: 73:5f:b5:c7:34:15:4a:1d:8a:0c:58:9e:d2:f4:46:38:8e:18: 8a:3e:b2:4d:40:73:aa:13:bb:5f:d2:b8:7b:35:07:37:cc:05: 12:4c:54:d1:e6:14:23:81:85:f8:82:e4:53:f2:3c:0e:53:3b: 96:ec:d9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPkwTFsLNIdfWBbdRGXlovCf0xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlB NDExNjJDNDAeFw0yNjA2MTcwMDIzMzNaFw0yNjA2MTgwMTM5MzNaMDMxMTAvBgNV BAMTKDI2NDYyM0Q5NDFCNEIwMTVBN0RBRUE4QTQ5OUE0MDYxN0E2QUFCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmo/z5MW3zrOOPmWntkiEphAyg c7hdjt8jc6n3FA2vjIlEjwr+4PPgorJSPbHRIbAo3UBjVkDUeXo49oxcUE7BxOEX 5R6lNvpFDBTtM8h2gyoSn2eqdQiDqq7V+JDL43T2K17w+kiSHq8x2POgDcCJMSF/ 0sDg69OBnFSm1LOzvZVy+oG7F3v1qyc3Hi69QfyyzHH+8hfnpZFOfH5/EmZmWyGU TRXQi4BDG5k+HhDBVyapRSKzyOUWkEJ+C16CW+b6o5wUGRLp9P9pW6SRiRGUMVOf GY9PXbw1BnEojCrq7BwSTGapFZPQvNIU9jNNruxMnsdizsHttT+4NbdH4aHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJkYj2UG0sBWn2uqKSZpAYXpqq/cwHwYDVR0j BBgwFoAUMSb8hsWwdUFz6i+UzKnI+aQRYsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZD NUIwNzU0MTczRUEyRjk0Q0NBOUM4RjlBNDExNjJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTI2RkM4NkM1QjA3NTQxNzNFQTJGOTRDQ0E5QzhGOUE0MTE2 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvMzEyNkZDODZDNUIwNzU0MTczRUEyRjk0Q0NBOUM4 RjlBNDExNjJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm6Kt3lBZHoqpEeAlULTS/KcABc5e7nMHTS P6H/8flWOD8prjUsTOOfRZsYf7htj0vUDtVTvUymBnJw4fV08FdWHGs0idvz0Pbc jPVMGXReu9FKvWNhjP+bemcXoLTezHo7UDm/LG/XnjysDMpuqu7B1TVfos8bIb77 60bGC1AfBQB/wNBkkUmt64A/z/kXJwpwj3WDzNuy8m4K7lyUqa9uxU/4t/KPD552 6Vm977cyMAE26ZSifehptcP15VdQ9yqeUtSeN3Nftcc0FUodigxYntL0RjiOGIo+ sk1Ac6oTu1/SuHs1BzfMBRJMVNHmFCOBhfiC5FPyPA5TO5bs2eA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:16 2026 by rpki-client