$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft File: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft (raw, json) Hash identifier: C4eWj0da+BCRjrMAg0/03K2A+eo+8zU9dhmIBnYQ1NM= Subject key identifier: 10:A0:2A:E8:75:9C:DF:3F:69:B1:AA:13:3D:2B:4D:5E:75:79:5C:9B Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 021750E5F94038334000B4006FF19DEBBCC41954 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:12:09 +0000 Manifest this update: Tue 16 Jun 2026 23:07:09 +0000 Manifest next update: Thu 18 Jun 2026 01:17:09 +0000 Files and hashes: 1: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: KJK22WdEptN4Z5tJMclzFpxJ7XT8hQKbX5zWOGXbC6s=) 2: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: 4WWBK+Xqi+9dfO6ReYcexqiP6BjY/M7vdE8KEBcG6ss=) 3: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl (hash: bhME4K53wUt1/YyfW08vAmJUB5kTxPCci2Kh8o7D6Ww=) 4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:50:e5:f9:40:38:33:40:00:b4:00:6f:f1:9d:eb:bc:c4:19:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: Jun 16 23:07:09 2026 GMT Not After : Jun 18 01:17:09 2026 GMT Subject: CN=10A02AE8759CDF3F69B1AA133D2B4D5E75795C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:75:9d:63:4b:ae:17:b9:7e:8e:7c:a8:a0: 4f:32:ef:92:d7:b2:7f:61:67:8a:01:a6:46:c4:37: 0c:26:f2:11:c8:5b:a0:95:00:1f:f2:09:6d:a8:20: 7a:50:0a:24:6a:86:8c:25:3a:6d:17:19:24:09:08: c8:5c:8c:e2:8f:eb:9f:99:e7:11:c1:f9:9f:7f:33: 13:1a:42:65:5b:c5:16:0f:f6:ea:91:55:0e:10:da: 04:7f:c6:9c:78:22:2b:b8:b5:5b:fb:34:27:6d:42: fc:17:76:24:cb:f8:e2:f1:e6:59:9b:e8:3f:d2:5c: e1:8a:67:d6:b0:f6:26:13:82:0d:c2:15:ba:90:59: 22:22:1d:9d:7b:47:55:0a:ef:50:b9:dc:5e:86:42: dc:cb:29:04:60:91:19:0f:f5:d9:85:0e:92:30:21: 87:72:10:e5:d5:9a:35:cf:6a:16:f4:6e:b3:c1:04: ed:53:3f:27:9d:8e:2f:29:91:18:b7:b4:03:4a:25: e0:b7:a7:7a:9a:55:f0:e4:f9:73:5a:53:7a:39:cc: ed:f0:22:85:a1:9d:ab:af:71:e1:a7:44:cc:ce:6b: 0c:32:82:b2:26:0a:7c:4f:16:d6:f4:de:8f:c3:f2: 56:50:33:14:e8:d5:c6:40:cb:36:35:41:55:3b:0c: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:2A:E8:75:9C:DF:3F:69:B1:AA:13:3D:2B:4D:5E:75:79:5C:9B X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a6:5e:85:87:dc:bc:dc:8d:7c:c0:fc:62:e3:9f:44:88:49: 68:6b:9b:4e:50:27:2e:cd:2a:b6:ce:27:fc:ab:e6:37:d2:dd: c3:b6:19:cb:7b:7b:d5:48:17:f6:36:ea:1c:68:cb:48:fb:73: b1:7b:ff:a3:77:e6:5f:a0:98:a1:95:4a:e7:c7:09:75:e0:8e: 2c:7d:87:25:ce:30:72:55:1e:1f:80:dc:da:9c:7a:01:e9:8f: da:05:a6:49:03:5e:36:cd:57:08:d7:d3:97:98:91:80:2f:b1: 56:88:4a:48:ba:ed:ea:b9:65:6e:5a:83:04:b3:8f:b7:6e:d0: 55:7e:3b:9b:1a:a3:c4:45:d7:bb:1a:e1:5d:56:62:ee:e4:80: 6a:c2:cf:67:a3:2a:aa:33:ed:30:34:79:f8:8b:47:5d:65:ab: d3:55:26:43:13:68:68:02:60:39:4c:ca:0b:0f:a1:ce:4c:cb: aa:7d:4f:6f:62:17:bb:88:14:d4:61:24:1d:9b:3d:42:b4:8b: 05:eb:8b:75:39:e7:66:97:80:90:9b:03:f1:10:fa:21:13:02: 0e:36:cb:7a:7a:60:13:02:d2:65:64:4b:00:37:75:5d:46:06: 28:84:ca:74:be:0a:49:0c:88:f2:a2:66:5a:22:4c:93:61:e8: cf:7e:e1:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhdQ5flAODNAALQAb/Gd67zEGVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA2MTYyMzA3MDlaFw0yNjA2MTgwMTE3MDlaMDMxMTAvBgNV BAMTKDEwQTAyQUU4NzU5Q0RGM0Y2OUIxQUExMzNEMkI0RDVFNzU3OTVDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQHWdY0uuF7l+jnyooE8y75LX sn9hZ4oBpkbENwwm8hHIW6CVAB/yCW2oIHpQCiRqhowlOm0XGSQJCMhcjOKP65+Z 5xHB+Z9/MxMaQmVbxRYP9uqRVQ4Q2gR/xpx4Iiu4tVv7NCdtQvwXdiTL+OLx5lmb 6D/SXOGKZ9aw9iYTgg3CFbqQWSIiHZ17R1UK71C53F6GQtzLKQRgkRkP9dmFDpIw IYdyEOXVmjXPahb0brPBBO1TPyedji8pkRi3tANKJeC3p3qaVfDk+XNaU3o5zO3w IoWhnauvceGnRMzOawwygrImCnxPFtb03o/D8lZQMxTo1cZAyzY1QVU7DKpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKAq6HWc3z9psaoTPStNXnV5XJswHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhE N0VERUU4MDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6mXoWH3LzcjXzA/GLjn0SISWhrm05QJy7N KrbOJ/yr5jfS3cO2Gct7e9VIF/Y26hxoy0j7c7F7/6N35l+gmKGVSufHCXXgjix9 hyXOMHJVHh+A3NqcegHpj9oFpkkDXjbNVwjX05eYkYAvsVaISki67eq5ZW5agwSz j7du0FV+O5sao8RF17sa4V1WYu7kgGrCz2ejKqoz7TA0efiLR11lq9NVJkMTaGgC YDlMygsPoc5My6p9T29iF7uIFNRhJB2bPUK0iwXri3U552aXgJCbA/EQ+iETAg42 y3p6YBMC0mVkSwA3dV1GBiiEynS+CkkMiPKiZloiTJNh6M9+4Wc= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:54 2026 by rpki-client