$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: grzD72DpzXOiC/HrmwvnX0bJ7nQIxelU0+A4G11kfWE= Subject key identifier: 81:51:D7:92:D5:19:6A:AE:9A:3E:78:89:2E:E5:02:15:36:84:78:9B Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 6124485E02B10D990D2FF19751FA3C7C269F64CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:41:41 +0000 Manifest this update: Tue 16 Jun 2026 18:36:41 +0000 Manifest next update: Wed 17 Jun 2026 21:13:41 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: +GLEE60vftSIXh2+RbZSTYbFsX5UsOK3dvydXTftLYw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:24:48:5e:02:b1:0d:99:0d:2f:f1:97:51:fa:3c:7c:26:9f:64:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Jun 16 18:36:41 2026 GMT Not After : Jun 17 21:13:41 2026 GMT Subject: CN=8151D792D5196AAE9A3E78892EE502153684789B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:7c:cb:5e:21:e1:00:3d:8e:a9:82:be:61: bc:c3:26:a5:d9:c6:9f:0f:28:9a:62:e9:be:3b:06: b9:36:c7:c5:f0:04:c2:5c:27:91:10:9e:09:2b:36: 70:50:e7:44:8d:b0:60:c3:f7:92:f4:a1:dd:dc:cd: 8f:86:dd:19:c2:30:5a:93:b2:22:74:af:a2:c1:fe: 6f:40:8a:3a:71:02:7a:6f:83:8b:2f:07:06:fb:ea: ea:88:9a:48:16:a4:1e:43:7c:68:9e:55:53:da:ed: df:04:6c:e9:41:e5:e2:2e:9c:ba:a9:ce:2a:c7:2d: 2c:a4:d3:a6:7d:8e:0c:94:b8:d7:a8:f7:8f:dd:1c: 0d:f6:ea:2a:4d:e3:28:dd:b7:4b:ed:05:68:cd:53: 7e:68:14:5e:f2:ca:05:ea:b9:99:dc:c7:35:40:63: f0:49:ed:7f:4f:9d:63:d9:15:8d:a4:99:9d:de:c0: c1:ec:06:07:5a:d8:92:8d:7c:e7:32:3e:1e:14:d8: 70:6b:60:2c:a7:7c:8c:fb:74:4f:8a:da:33:ae:71: 43:cc:ab:a0:31:9f:a5:ca:cf:78:39:b1:23:11:91: 86:77:00:e7:55:1b:c9:2d:b6:67:79:e6:93:82:3e: 26:6a:de:3b:eb:e4:f4:d8:69:b5:4d:65:28:d0:34: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:D7:92:D5:19:6A:AE:9A:3E:78:89:2E:E5:02:15:36:84:78:9B X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:2f:4c:71:46:31:38:dc:99:64:75:75:07:6d:13:e6:80: 13:4d:6d:89:0a:e8:b2:42:35:5a:e6:a5:0c:47:1a:aa:99:11: 68:7e:ed:e9:5c:47:c9:bb:35:26:a7:8a:3f:50:4b:a0:c8:6d: 9d:14:09:0c:9f:03:bb:c3:9f:d8:45:9b:61:04:40:dd:45:1c: 37:58:73:00:c4:d2:96:a1:cb:a6:86:5b:1d:63:f1:d3:84:53: 40:6a:e9:de:d1:45:d9:ff:dd:2d:ca:03:0c:e3:37:d3:49:8a: f6:f2:e8:08:cc:61:4e:0d:3b:a8:e7:58:ed:be:62:18:f8:9a: b1:7b:b2:e1:0c:aa:55:b1:02:7a:99:73:8c:c9:22:16:d9:3b: b9:71:89:43:a0:d2:96:4a:bf:58:0a:6e:ca:7e:5a:e4:6b:5f: 2c:17:bb:51:c0:b3:b7:31:4e:33:cf:0f:5e:f3:65:e9:6f:bf: bd:a9:5b:9b:3d:82:3e:c9:d1:55:b4:a1:1e:d2:29:04:0d:da: 43:d1:2e:89:22:5c:a1:d7:f5:ef:d9:18:8c:43:c8:7f:6b:10: e1:a5:49:ce:fd:6a:41:35:68:3c:5b:9e:da:61:6d:82:6a:85: 94:32:49:9a:45:71:79:5c:1d:8c:0f:38:25:97:29:b2:2b:7c: 2d:42:3f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSRIXgKxDZkNL/GXUfo8fCafZMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA2MTYxODM2NDFaFw0yNjA2MTcyMTEzNDFaMDMxMTAvBgNV BAMTKDgxNTFENzkyRDUxOTZBQUU5QTNFNzg4OTJFRTUwMjE1MzY4NDc4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQnzLXiHhAD2OqYK+YbzDJqXZ xp8PKJpi6b47Brk2x8XwBMJcJ5EQngkrNnBQ50SNsGDD95L0od3czY+G3RnCMFqT siJ0r6LB/m9AijpxAnpvg4svBwb76uqImkgWpB5DfGieVVPa7d8EbOlB5eIunLqp zirHLSyk06Z9jgyUuNeo94/dHA326ipN4yjdt0vtBWjNU35oFF7yygXquZncxzVA Y/BJ7X9PnWPZFY2kmZ3ewMHsBgda2JKNfOcyPh4U2HBrYCynfIz7dE+K2jOucUPM q6Axn6XKz3g5sSMRkYZ3AOdVG8kttmd55pOCPiZq3jvr5PTYabVNZSjQNI+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVHXktUZaq6aPniJLuUCFTaEeJswHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5WL0xxRjE43JlkdXUHbRPmgBNNbYkK6LJC NVrmpQxHGqqZEWh+7elcR8m7NSanij9QS6DIbZ0UCQyfA7vDn9hFm2EEQN1FHDdY cwDE0pahy6aGWx1j8dOEU0Bq6d7RRdn/3S3KAwzjN9NJivby6AjMYU4NO6jnWO2+ Yhj4mrF7suEMqlWxAnqZc4zJIhbZO7lxiUOg0pZKv1gKbsp+WuRrXywXu1HAs7cx TjPPD17zZelvv72pW5s9gj7J0VW0oR7SKQQN2kPRLokiXKHX9e/ZGIxDyH9rEOGl Sc79akE1aDxbntphbYJqhZQySZpFcXlcHYwPOCWXKbIrfC1CP/E= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:49 2026 by rpki-client