$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: ZZwMYIa7eeiixu59a326lRtUB0AD+h/kYR1cNHdCKJw= Subject key identifier: A0:E8:96:65:64:EA:16:B2:77:B0:1B:D2:78:CC:84:5A:70:22:75:CA Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 63569423A4BE89CD916D70136D36159143B06911 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:43:40 +0000 Manifest this update: Wed 17 Jun 2026 04:38:40 +0000 Manifest next update: Thu 18 Jun 2026 08:09:40 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) 3: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: xU1zAkuA6MJ62T09TcDSFqgrOfjehjiaPNnfkQun8Eg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:56:94:23:a4:be:89:cd:91:6d:70:13:6d:36:15:91:43:b0:69:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Jun 17 04:38:40 2026 GMT Not After : Jun 18 08:09:40 2026 GMT Subject: CN=A0E8966564EA16B277B01BD278CC845A702275CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:c8:20:45:1a:f3:33:fd:e6:81:87:10:32: 71:29:a7:ef:ea:91:67:19:1d:bc:08:ff:e0:ef:f6: 47:f3:88:62:91:3b:01:29:f5:ef:a1:80:f6:77:36: 25:f7:ba:69:d0:4e:f7:cc:3d:cd:87:38:0f:90:04: d1:0c:1b:62:37:5c:db:35:fa:47:03:69:bc:69:f6: 0e:b4:9d:f2:af:4b:6a:cd:22:96:cd:94:6d:c7:90: f7:9c:42:3f:db:a5:ab:cd:5b:e8:41:ce:cf:0b:71: 87:14:ce:9c:4a:00:27:c3:38:f1:b5:8b:71:94:47: f7:28:54:ac:f0:cb:e9:47:4c:89:65:f2:21:88:97: c0:f9:1c:d8:9c:eb:7f:51:68:ee:df:b3:44:da:e8: 4b:8f:5f:61:c4:c5:fe:27:a7:41:66:7c:8a:8d:83: 79:41:aa:e9:88:28:58:11:bc:10:1e:b8:2c:b6:29: ba:b7:57:6f:12:d6:a3:bf:09:77:d4:e8:68:c5:dc: 9d:12:9d:a2:bf:fc:1e:52:5a:3f:21:02:bc:ed:0e: 61:b4:aa:69:c3:c9:03:01:40:3e:3b:6e:c7:ba:26: 37:7d:f1:f6:bd:ad:a8:d4:12:72:a4:a6:f4:37:8c: a5:fa:49:56:f0:93:a3:37:6f:87:23:e2:df:22:f5: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:96:65:64:EA:16:B2:77:B0:1B:D2:78:CC:84:5A:70:22:75:CA X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c7:d0:c4:83:bd:7c:b8:e9:b7:98:71:f1:d1:16:1e:2f:e0: 3c:91:78:64:a1:51:34:f5:e2:a3:8c:44:d1:e9:ef:e2:6d:d5: 3e:48:08:cf:d4:f5:6e:c5:7d:25:b1:d7:98:9c:0d:2f:cb:9f: 51:5c:68:32:ff:8e:f4:42:14:13:fe:34:34:45:15:4c:6a:f7: 54:38:a8:01:1b:e2:f2:83:b6:f0:c4:8b:e2:40:50:a7:96:92: a3:44:b4:47:12:ff:96:3e:41:15:3d:3e:f8:12:2b:b2:a5:5d: b0:fd:78:91:f1:a6:dc:a7:ec:3f:88:98:4b:ba:5a:78:dd:9b: 0a:a4:7f:87:55:fd:f0:8d:5a:b4:78:27:e0:e2:28:f7:cc:38: ab:77:01:df:26:23:b7:41:bb:d6:5e:88:20:cf:89:ce:1d:11: bd:f6:bc:a9:8e:23:b7:bf:78:04:48:47:0c:5e:55:72:eb:40: 7a:53:dd:65:5a:99:c7:83:4c:41:29:6e:73:b5:83:69:f0:10: 37:92:0a:03:c4:b7:06:d3:1a:14:80:b1:f3:8e:ed:56:cc:ed: 68:cf:e7:5f:ba:d7:dd:7c:f7:5a:72:99:0e:98:a2:5f:af:ae: f2:66:18:5b:86:f0:41:e6:c0:cf:19:e6:90:bc:2d:7f:19:68: 07:02:88:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1aUI6S+ic2RbXATbTYVkUOwaREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA2MTcwNDM4NDBaFw0yNjA2MTgwODA5NDBaMDMxMTAvBgNV BAMTKEEwRTg5NjY1NjRFQTE2QjI3N0IwMUJEMjc4Q0M4NDVBNzAyMjc1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76MggRRrzM/3mgYcQMnEpp+/q kWcZHbwI/+Dv9kfziGKROwEp9e+hgPZ3NiX3umnQTvfMPc2HOA+QBNEMG2I3XNs1 +kcDabxp9g60nfKvS2rNIpbNlG3HkPecQj/bpavNW+hBzs8LcYcUzpxKACfDOPG1 i3GUR/coVKzwy+lHTIll8iGIl8D5HNic639RaO7fs0Ta6EuPX2HExf4np0FmfIqN g3lBqumIKFgRvBAeuCy2Kbq3V28S1qO/CXfU6GjF3J0SnaK//B5SWj8hArztDmG0 qmnDyQMBQD47bse6Jjd98fa9rajUEnKkpvQ3jKX6SVbwk6M3b4cj4t8i9c5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOiWZWTqFrJ3sBvSeMyEWnAidcowHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHH0MSDvXy46beYcfHRFh4v4DyReGShUTT1 4qOMRNHp7+Jt1T5ICM/U9W7FfSWx15icDS/Ln1FcaDL/jvRCFBP+NDRFFUxq91Q4 qAEb4vKDtvDEi+JAUKeWkqNEtEcS/5Y+QRU9PvgSK7KlXbD9eJHxptyn7D+ImEu6 Wnjdmwqkf4dV/fCNWrR4J+DiKPfMOKt3Ad8mI7dBu9ZeiCDPic4dEb32vKmOI7e/ eARIRwxeVXLrQHpT3WVamceDTEEpbnO1g2nwEDeSCgPEtwbTGhSAsfOO7VbM7WjP 51+6191891pymQ6Yol+vrvJmGFuG8EHmwM8Z5pC8LX8ZaAcCiOg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:07 2026 by rpki-client