$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: XUByvuXlLxKW3wVlFiJjEfE9RnQLJsGPviCkrTFVfrU= Subject key identifier: 99:31:14:F0:B5:EA:FE:12:F6:5E:CF:D4:1E:1F:C0:5D:E4:F9:33:38 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 371BE1D7ADE0E8F81338287B87BE423225E023A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 04:13:01 +0000 Manifest this update: Sun 14 Jun 2026 04:08:01 +0000 Manifest next update: Mon 15 Jun 2026 07:13:01 +0000 Files and hashes: 1: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 2: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) 3: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: W766rRVbIoeweNebhna2c1srtE2EU22KTfz1hIIaaAE=) 4: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 5: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 6: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 07:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1b:e1:d7:ad:e0:e8:f8:13:38:28:7b:87:be:42:32:25:e0:23:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Jun 14 04:08:01 2026 GMT Not After : Jun 15 07:13:01 2026 GMT Subject: CN=993114F0B5EAFE12F65ECFD41E1FC05DE4F93338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:40:0e:ec:1a:60:fb:3a:92:a9:75:48:6f: 2c:5f:f0:a1:31:f8:6a:af:a9:81:d1:19:10:be:46: 89:72:9c:1d:dc:13:5c:e0:34:0f:f8:d9:d6:5e:b8: 34:bb:39:e9:ad:6b:cb:59:1a:bc:f7:d0:c2:84:e7: c1:65:91:a2:31:c8:51:59:8b:52:7f:77:96:d9:b5: b5:c0:50:2a:c3:6b:40:90:69:a5:c8:f9:fe:83:0b: a4:95:c3:74:cc:f7:c8:aa:a7:62:c2:dd:bd:fb:72: 6a:31:27:31:91:24:15:dc:91:df:59:08:3b:2f:8e: 6b:8c:bf:2e:7a:ae:7b:57:a3:21:2f:93:55:b5:e4: a9:18:53:97:85:41:94:d7:c9:9f:44:51:5b:cd:4b: 99:e5:2c:d9:e6:b3:d4:52:fc:f5:a2:ea:39:c4:5a: 99:e9:44:7f:61:92:24:36:d2:4e:7e:29:b6:83:39: 8f:32:ca:79:6e:d9:84:ee:d4:33:3e:3f:f6:f1:b0: 63:b9:ee:24:f8:76:87:82:fa:e6:bc:ef:bc:4a:fb: 4a:ff:1c:4c:a7:9d:99:54:e3:46:5d:48:43:0c:9c: e5:20:6b:36:b3:e4:db:a1:47:b8:c5:a9:41:9d:b6: 9c:e6:ed:38:6d:60:c3:44:b1:e1:ac:c9:20:9a:a1: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:31:14:F0:B5:EA:FE:12:F6:5E:CF:D4:1E:1F:C0:5D:E4:F9:33:38 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c9:20:41:87:bd:b4:e5:f9:d8:f2:4d:40:42:96:d0:37:72: 8d:3f:38:92:65:84:86:29:79:a4:42:54:c0:75:40:6a:c8:4f: 0d:a8:0f:01:ee:bb:c8:b3:1b:0d:98:29:d0:f7:43:51:22:6f: a2:50:d8:f3:8e:2c:bd:f9:71:60:0b:c7:32:54:25:8f:78:35: 53:3a:59:f4:2c:f8:06:19:8c:43:8b:bf:86:0f:a6:e8:3b:66: 17:80:cf:37:fd:15:42:59:60:13:e0:29:97:4a:b9:07:db:57: 3b:36:5e:da:46:47:cc:c8:cc:87:23:51:81:fa:a7:58:70:1e: aa:a8:1d:53:07:b0:90:05:4e:c4:b3:d9:02:bf:9e:21:15:00: 58:3b:f4:b2:0f:03:7f:e4:86:60:b3:38:98:ce:41:c5:d1:d1: 92:b0:ae:26:d8:a7:8c:56:d2:df:53:d6:a2:a2:49:1c:16:d9: 8c:56:f8:e8:3b:79:9e:e7:18:56:2d:b3:63:b8:f1:f7:46:72: 3b:9d:24:98:aa:10:ab:fa:55:85:f6:38:48:d0:d2:25:a6:5a: 15:5a:07:ed:7b:b5:1d:4f:fa:cf:75:db:46:e8:f0:64:35:5f: c1:7a:59:57:48:52:90:49:31:48:68:1d:9b:90:7e:1f:4d:21: 8b:90:d4:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxvh163g6PgTOCh7h75CMiXgI6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA2MTQwNDA4MDFaFw0yNjA2MTUwNzEzMDFaMDMxMTAvBgNV BAMTKDk5MzExNEYwQjVFQUZFMTJGNjVFQ0ZENDFFMUZDMDVERTRGOTMzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bEAO7Bpg+zqSqXVIbyxf8KEx +GqvqYHRGRC+RolynB3cE1zgNA/42dZeuDS7Oemta8tZGrz30MKE58FlkaIxyFFZ i1J/d5bZtbXAUCrDa0CQaaXI+f6DC6SVw3TM98iqp2LC3b37cmoxJzGRJBXckd9Z CDsvjmuMvy56rntXoyEvk1W15KkYU5eFQZTXyZ9EUVvNS5nlLNnms9RS/PWi6jnE WpnpRH9hkiQ20k5+KbaDOY8yynlu2YTu1DM+P/bxsGO57iT4doeC+ua877xK+0r/ HEynnZlU40ZdSEMMnOUgazaz5NuhR7jFqUGdtpzm7ThtYMNEseGsySCaoUK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmTEU8LXq/hL2Xs/UHh/AXeT5MzgwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzJIEGHvbTl+djyTUBCltA3co0/OJJlhIYp eaRCVMB1QGrITw2oDwHuu8izGw2YKdD3Q1Eib6JQ2POOLL35cWALxzJUJY94NVM6 WfQs+AYZjEOLv4YPpug7ZheAzzf9FUJZYBPgKZdKuQfbVzs2XtpGR8zIzIcjUYH6 p1hwHqqoHVMHsJAFTsSz2QK/niEVAFg79LIPA3/khmCzOJjOQcXR0ZKwribYp4xW 0t9T1qKiSRwW2YxW+Og7eZ7nGFYts2O48fdGcjudJJiqEKv6VYX2OEjQ0iWmWhVa B+17tR1P+s9120bo8GQ1X8F6WVdIUpBJMUhoHZuQfh9NIYuQ1Ps= -----END CERTIFICATE-----Generated at Sun Jun 14 11:04:58 2026 by rpki-client