$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: A901v18yufhkjf1mya3eQjgZXVjY7jIaw52m5F/o9T4= Subject key identifier: 16:29:A6:44:70:4B:0F:B4:49:AB:4D:6F:F7:E2:FC:E3:ED:7C:7E:13 Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 63DBA6FAFD4A85743B89D200F5784D6E27927E38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:12:34 +0000 Manifest this update: Tue 16 Jun 2026 15:07:34 +0000 Manifest next update: Wed 17 Jun 2026 16:19:34 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) 2: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: ZlAyiF0bumdAPdMBQrDirOYdqinsDxuGCgp0yJBjRS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:db:a6:fa:fd:4a:85:74:3b:89:d2:00:f5:78:4d:6e:27:92:7e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Jun 16 15:07:34 2026 GMT Not After : Jun 17 16:19:34 2026 GMT Subject: CN=1629A644704B0FB449AB4D6FF7E2FCE3ED7C7E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:87:a0:46:9a:0a:d5:60:b6:64:ec:a3:75: f3:8d:d5:f0:fb:2d:ce:d0:6b:23:52:78:cd:ef:ca: a8:47:fe:67:eb:9d:ba:a3:1a:5e:81:5b:1b:ea:64: c0:aa:f3:7d:75:2b:4e:6b:33:78:b1:b3:16:c9:15: 92:51:32:d1:9d:93:d1:ef:a3:dd:cd:58:19:6a:b3: 25:22:95:d7:40:4d:3f:85:b4:b0:1f:53:e9:3b:aa: 1c:b8:0a:c4:9c:21:ad:81:c1:ee:2f:e4:c5:8c:07: f1:c8:5a:7a:0c:5a:3e:16:6e:8d:0e:e1:41:7b:f6: e6:ee:32:56:7f:3c:15:49:5c:7b:2d:6d:1a:4c:61: 40:1e:4f:6e:f4:fd:0e:51:c7:fe:89:79:db:9c:9b: a3:c4:66:3f:09:bf:f6:13:18:d1:21:48:f6:5e:fd: 5d:0b:16:b9:63:94:ae:3b:8c:2c:e3:6c:1e:be:5d: 3e:3c:71:5e:c6:3b:a3:60:cc:21:07:76:c8:47:5e: 78:8b:29:bc:19:d9:ca:c1:08:35:9e:96:49:20:ad: fd:82:57:be:40:30:5e:d4:53:b2:94:63:2e:fe:2a: fa:fb:b4:ac:4f:11:e4:76:f7:1d:21:f4:a4:b8:2b: 0a:b4:43:28:18:8f:1b:9f:3c:e4:49:97:4b:15:c6: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:29:A6:44:70:4B:0F:B4:49:AB:4D:6F:F7:E2:FC:E3:ED:7C:7E:13 X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:78:4f:8e:f1:28:48:ce:57:5c:3b:3f:a4:c4:05:4a:70:de: c9:62:d2:7b:ad:94:e6:21:d9:8e:8d:4c:f9:71:1d:24:7f:3e: a9:14:d0:cf:ee:50:18:d7:ed:19:dc:dc:79:b4:b5:54:45:4a: 1a:9f:ec:af:bd:ac:4d:9d:c5:e7:1d:81:78:f2:c3:bb:ce:05: 6c:b3:a5:2c:28:38:3e:04:18:56:62:8e:0d:6d:09:57:b7:c9: 6a:7c:f0:b9:c1:96:fb:fb:aa:40:eb:52:d0:a3:6e:84:3b:8d: 78:4b:8d:06:5b:d3:94:e7:5d:eb:4f:f9:78:8f:8b:8d:67:51: 42:80:fd:9c:96:09:ba:52:4f:04:ce:06:ba:92:cf:82:a2:1b: 57:cd:b1:cf:42:10:62:ef:c7:c9:f8:75:f2:2f:97:d7:1f:a9: 6e:f7:b0:35:92:36:cc:a5:55:72:40:00:c5:27:c6:2a:4f:8d: 99:b4:6b:75:24:47:64:5a:3d:65:29:97:7c:36:f9:7e:a1:1a: 50:c3:a9:76:f8:96:91:93:9c:57:cf:68:e9:4c:5f:7e:30:a4: 10:dd:b1:cd:6d:40:62:15:45:93:0e:42:60:4b:af:11:95:b7: 55:d8:e8:02:9e:d2:76:e2:c8:a3:c3:7a:11:fb:03:2b:37:a8: a9:0f:6b:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9um+v1KhXQ7idIA9XhNbieSfjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA2MTYxNTA3MzRaFw0yNjA2MTcxNjE5MzRaMDMxMTAvBgNV BAMTKDE2MjlBNjQ0NzA0QjBGQjQ0OUFCNEQ2RkY3RTJGQ0UzRUQ3QzdFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBYegRpoK1WC2ZOyjdfON1fD7 Lc7QayNSeM3vyqhH/mfrnbqjGl6BWxvqZMCq8311K05rM3ixsxbJFZJRMtGdk9Hv o93NWBlqsyUilddATT+FtLAfU+k7qhy4CsScIa2Bwe4v5MWMB/HIWnoMWj4Wbo0O 4UF79ubuMlZ/PBVJXHstbRpMYUAeT270/Q5Rx/6Jeducm6PEZj8Jv/YTGNEhSPZe /V0LFrljlK47jCzjbB6+XT48cV7GO6NgzCEHdshHXniLKbwZ2crBCDWelkkgrf2C V75AMF7UU7KUYy7+Kvr7tKxPEeR29x0h9KS4Kwq0QygYjxufPORJl0sVxmy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFimmRHBLD7RJq01v9+L84+18fhMwHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt4T47xKEjOV1w7P6TEBUpw3sli0nutlOYh 2Y6NTPlxHSR/PqkU0M/uUBjX7Rnc3Hm0tVRFShqf7K+9rE2dxecdgXjyw7vOBWyz pSwoOD4EGFZijg1tCVe3yWp88LnBlvv7qkDrUtCjboQ7jXhLjQZb05TnXetP+XiP i41nUUKA/ZyWCbpSTwTOBrqSz4KiG1fNsc9CEGLvx8n4dfIvl9cfqW73sDWSNsyl VXJAAMUnxipPjZm0a3UkR2RaPWUpl3w2+X6hGlDDqXb4lpGTnFfPaOlMX34wpBDd sc1tQGIVRZMOQmBLrxGVt1XY6AKe0nbiyKPDehH7Ays3qKkPawM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:09 2026 by rpki-client