$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: XZUBJptUnGe4bkySauy640dZ+2rYMeKtzxRETtIUwy0= Subject key identifier: 64:20:EB:20:D4:99:E3:66:B9:82:2D:E7:69:A9:A2:A2:6C:B6:41:7D Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 6278C3EF11C56D51DFA519D222277E260195A9A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:57:29 +0000 Manifest this update: Wed 17 Jun 2026 07:52:29 +0000 Manifest next update: Thu 18 Jun 2026 09:34:29 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 2: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: Pdo8KO0nemSsXIciW5JtUgj2ldLRSwRGlTYozFVKO7Q=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:78:c3:ef:11:c5:6d:51:df:a5:19:d2:22:27:7e:26:01:95:a9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Jun 17 07:52:29 2026 GMT Not After : Jun 18 09:34:29 2026 GMT Subject: CN=6420EB20D499E366B9822DE769A9A2A26CB6417D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:dc:8a:bf:04:df:02:96:8e:35:16:22:0c: b5:53:b9:af:fb:2b:0d:25:2e:79:41:6c:f9:2d:7d: d7:2a:a9:7f:6b:d3:4f:6d:73:e0:ce:b0:ef:3d:1f: 23:97:40:2b:f8:74:97:05:22:01:cd:05:21:26:cc: f0:e5:3d:d3:07:e1:c8:ca:66:2f:57:b2:54:1c:da: ab:c5:10:62:87:7e:96:d6:37:b6:db:53:55:e8:70: 8f:fc:a5:6b:d1:ef:b3:5e:ed:ca:1c:7d:25:9a:d5: 82:01:b3:ad:35:c0:a1:7c:87:b9:5a:09:31:60:47: c4:c1:16:d6:a8:5f:60:44:01:48:ba:94:df:c1:be: 8f:d7:3c:b4:e3:af:3b:69:99:b1:79:e1:84:6f:78: e7:18:be:a5:09:a5:96:b6:15:9b:da:45:70:84:1c: 69:76:5f:09:4c:09:c0:26:5a:00:7f:9c:12:ec:ff: 3e:80:83:35:dd:11:71:b4:4d:6f:00:87:90:84:19: b1:30:4b:38:44:63:2c:dd:e9:4e:5b:d0:0c:bb:1a: ad:35:61:69:55:ee:84:a5:08:2e:34:5a:26:9f:00: 48:7b:88:ac:5a:b9:09:db:98:f0:0c:3e:d4:f8:25: 49:83:f0:eb:b8:54:f0:e7:cd:80:08:a9:65:93:df: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:20:EB:20:D4:99:E3:66:B9:82:2D:E7:69:A9:A2:A2:6C:B6:41:7D X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:ef:5a:6d:bb:fe:6a:ae:fc:46:68:72:2f:e1:5f:01:0b: 8a:7f:42:a4:e5:c8:69:d6:65:e3:ee:df:85:fb:34:1f:a7:bd: 5c:61:c7:c4:23:af:7d:01:c5:8f:04:36:18:0b:58:98:94:cd: 30:5f:e2:b1:cc:7d:d5:7a:e3:b5:f7:e7:50:d3:9e:30:13:0a: 45:b5:f0:d3:8b:1c:73:68:aa:10:4e:2a:ed:e9:cb:4e:1c:33: c2:c1:99:9e:7d:c7:fd:ff:f8:08:de:67:28:68:a8:03:f5:d9: dc:f9:ff:82:ca:44:1e:94:fd:09:5f:93:c2:b2:95:c9:58:58: ae:27:78:0b:e3:32:7e:96:22:d3:4f:e1:75:1e:4b:b5:b4:d4: 53:2c:0e:eb:50:7b:5c:f6:fc:55:3f:f5:ca:97:fd:67:bf:7f: 64:95:8d:46:82:23:aa:1a:72:3e:17:9f:79:fb:3b:b9:29:7c: ac:97:bb:df:38:39:b9:ff:41:2a:33:bd:d6:01:b1:ff:62:c3: 7c:34:84:61:97:bc:cf:f7:1f:04:80:13:5e:1e:df:32:65:ad: 75:1b:41:fa:dd:23:c5:e4:bb:e1:ae:c6:ed:83:19:02:e7:67: d2:f4:3c:c7:60:40:61:b8:24:a6:77:5b:fa:13:19:15:7c:85: a9:07:bc:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnjD7xHFbVHfpRnSIid+JgGVqaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA2MTcwNzUyMjlaFw0yNjA2MTgwOTM0MjlaMDMxMTAvBgNV BAMTKDY0MjBFQjIwRDQ5OUUzNjZCOTgyMkRFNzY5QTlBMkEyNkNCNjQxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTU9yKvwTfApaONRYiDLVTua/7 Kw0lLnlBbPktfdcqqX9r009tc+DOsO89HyOXQCv4dJcFIgHNBSEmzPDlPdMH4cjK Zi9XslQc2qvFEGKHfpbWN7bbU1XocI/8pWvR77Ne7cocfSWa1YIBs601wKF8h7la CTFgR8TBFtaoX2BEAUi6lN/Bvo/XPLTjrztpmbF54YRveOcYvqUJpZa2FZvaRXCE HGl2XwlMCcAmWgB/nBLs/z6AgzXdEXG0TW8Ah5CEGbEwSzhEYyzd6U5b0Ay7Gq01 YWlV7oSlCC40WiafAEh7iKxauQnbmPAMPtT4JUmD8Ou4VPDnzYAIqWWT31lfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZCDrINSZ42a5gi3naamiomy2QX0wHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABo871ptu/5qrvxGaHIv4V8BC4p/QqTlyGnW ZePu34X7NB+nvVxhx8Qjr30BxY8ENhgLWJiUzTBf4rHMfdV647X351DTnjATCkW1 8NOLHHNoqhBOKu3py04cM8LBmZ59x/3/+AjeZyhoqAP12dz5/4LKRB6U/Qlfk8Ky lclYWK4neAvjMn6WItNP4XUeS7W01FMsDutQe1z2/FU/9cqX/We/f2SVjUaCI6oa cj4Xn3n7O7kpfKyXu984Obn/QSozvdYBsf9iw3w0hGGXvM/3HwSAE14e3zJlrXUb QfrdI8Xku+Guxu2DGQLnZ9L0PMdgQGG4JKZ3W/oTGRV8hakHvBw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:41 2026 by rpki-client