$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft File: 3B740E02ADF50A090229B5DFEE5D48777D442C83.mft (raw, json) Hash identifier: ubVMjtufLCTcCNQx+0NU8WPFyt53552Z14/Aqkmnfiw= Subject key identifier: 04:B7:1E:DD:00:CE:D0:0E:A4:54:9B:3C:CA:2B:4C:58:4E:7B:B2:1C Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 Certificate issuer: /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Certificate serial: 2A06428B8053F0C7DA7898974D78808BD6D64BE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:39:24 +0000 Manifest this update: Tue 16 Jun 2026 16:34:24 +0000 Manifest next update: Wed 17 Jun 2026 18:39:24 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: t900xpPMJSc/gFkRKXE//s7FBpHQK9U7wVdaIlj2010=) 2: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: A64nz+PX97FI4XaYpiwCqqmRUX6++gtRUre5i1lF2QA=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=) 4: 3B740E02ADF50A090229B5DFEE5D48777D442C83.crl (hash: ZTnhI8ved24yxawr9HtdlHEPPaYd3LpYHyeKpUmGifY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:06:42:8b:80:53:f0:c7:da:78:98:97:4d:78:80:8b:d6:d6:4b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Validity Not Before: Jun 16 16:34:24 2026 GMT Not After : Jun 17 18:39:24 2026 GMT Subject: CN=04B71EDD00CED00EA4549B3CCA2B4C584E7BB21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:58:07:f3:56:dc:5f:c9:ee:f6:4b:85:71: 48:28:04:ac:eb:dc:c9:25:12:cc:7d:10:2a:49:fd: 40:6d:87:c8:51:40:7a:ff:38:6d:cc:82:e9:27:74: c8:63:6e:5f:04:0c:66:93:80:c8:bd:aa:8b:1d:e4: 95:85:cb:44:27:a5:73:8e:66:62:28:60:96:ab:3d: 07:1e:a3:05:40:72:b7:9a:89:ac:f3:b2:03:ee:94: b2:91:ae:17:88:9f:c3:eb:6f:ba:bf:0f:24:77:4a: ef:0a:c5:c2:81:5f:58:07:8d:cc:22:b0:63:85:e7: 7e:18:23:92:bd:b8:8f:2a:5e:ae:05:b0:fd:74:d6: c2:81:11:97:f4:85:ce:a1:83:2b:72:2a:e4:90:07: aa:8b:e7:9d:50:e7:4e:a1:5e:e1:d7:f0:8a:97:c6: 44:9d:89:65:f6:43:f9:46:44:b2:13:4b:47:95:d9: 30:b5:b3:2c:84:ed:c1:9f:94:af:c8:79:1d:80:3e: 5e:5f:de:d4:d0:2b:c5:9e:6e:36:78:16:97:24:66: bb:e2:a6:03:2d:c9:5b:18:e6:6e:2c:2e:71:a1:c3: 5d:c4:35:09:d0:37:f5:07:fe:82:16:1e:d7:8f:5a: 1f:77:d6:09:b8:d6:27:3d:f3:bb:72:6d:fd:80:c9: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B7:1E:DD:00:CE:D0:0E:A4:54:9B:3C:CA:2B:4C:58:4E:7B:B2:1C X509v3 Authority Key Identifier: keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:ae:29:ca:2c:e1:89:cb:80:7b:fa:ea:f4:c9:b6:c6:f6: b4:91:31:70:f3:24:b8:2c:e9:92:d0:0b:92:bd:7e:8a:82:b9: 93:11:0c:10:c4:d2:96:10:a5:59:75:21:03:41:bb:c0:c1:d4: ce:b8:d4:d2:a7:9b:9e:d6:6f:84:0f:94:15:28:f1:aa:d7:65: 40:51:99:6e:eb:87:04:66:9c:a6:21:fb:0b:be:54:b0:a8:78: ba:11:1c:34:8c:f6:30:43:14:70:8a:d2:ed:18:c2:53:95:83: e1:c2:00:49:84:da:0c:24:8c:a5:c6:ba:31:8c:3d:f2:b3:5a: 47:fc:e1:fa:84:8b:c7:bf:e4:bb:0e:b8:7e:cc:63:17:0a:f6: 18:04:c7:26:44:28:68:41:cb:f4:66:7f:7e:46:d9:6e:99:54: 62:e9:31:c0:e3:44:7f:6d:b8:f7:57:d0:1c:de:66:32:f7:9e: 60:7d:88:02:d7:4c:28:bc:26:c1:03:2e:1e:91:5e:a6:9d:be: f2:d9:ef:65:fc:c4:92:08:b5:42:b5:b0:d9:ce:41:07:6b:fd: e3:85:09:a3:53:7a:13:6f:3a:c7:b6:b5:74:51:ad:77:ce:36: 60:38:48:98:7b:ab:39:65:77:bc:33:6e:75:52:42:a7:85:68: b7:47:cd:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgZCi4BT8MfaeJiXTXiAi9bWS+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3 RDQ0MkM4MzAeFw0yNjA2MTYxNjM0MjRaFw0yNjA2MTcxODM5MjRaMDMxMTAvBgNV BAMTKDA0QjcxRUREMDBDRUQwMEVBNDU0OUIzQ0NBMkI0QzU4NEU3QkIyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ1gH81bcX8nu9kuFcUgoBKzr 3MklEsx9ECpJ/UBth8hRQHr/OG3MgukndMhjbl8EDGaTgMi9qosd5JWFy0QnpXOO ZmIoYJarPQceowVAcreaiazzsgPulLKRrheIn8Prb7q/DyR3Su8KxcKBX1gHjcwi sGOF534YI5K9uI8qXq4FsP101sKBEZf0hc6hgytyKuSQB6qL551Q506hXuHX8IqX xkSdiWX2Q/lGRLITS0eV2TC1syyE7cGflK/IeR2APl5f3tTQK8WebjZ4FpckZrvi pgMtyVsY5m4sLnGhw13ENQnQN/UH/oIWHtePWh931gm41ic987tybf2AyT9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBLce3QDO0A6kVJs8yitMWE57shwwHwYDVR0j BBgwFoAUO3QOAq31CgkCKbXf7l1Id31ELIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwZDQwYmMtOTNjOC00MTViLWI2YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJB REY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3RDQ0MkM4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc0MEUwMkFERjUwQTA5MDIyOUI1REZFRTVENDg3NzdENDQy QzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4 Nzc3RDQ0MkM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+vrinKLOGJy4B7+ur0ybbG9rSRMXDzJLgs 6ZLQC5K9foqCuZMRDBDE0pYQpVl1IQNBu8DB1M641NKnm57Wb4QPlBUo8arXZUBR mW7rhwRmnKYh+wu+VLCoeLoRHDSM9jBDFHCK0u0YwlOVg+HCAEmE2gwkjKXGujGM PfKzWkf84fqEi8e/5LsOuH7MYxcK9hgExyZEKGhBy/Rmf35G2W6ZVGLpMcDjRH9t uPdX0BzeZjL3nmB9iALXTCi8JsEDLh6RXqadvvLZ72X8xJIItUK1sNnOQQdr/eOF CaNTehNvOse2tXRRrXfONmA4SJh7qzlld7wzbnVSQqeFaLdHzY0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:08 2026 by rpki-client