$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: n1ls2w91qa7cAjLlVFN3ZaIveJ91WEtbqDKcr6J6Rx8= Subject key identifier: 2A:25:F3:D3:B2:5E:5E:93:98:E7:F8:4F:3F:AE:9B:94:40:05:21:E0 Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 456CB5B5631C28CDF79D063F5D1D4228BFE4F568 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:01:22 +0000 Manifest this update: Wed 17 Jun 2026 02:56:21 +0000 Manifest next update: Thu 18 Jun 2026 06:44:21 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 2: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: SLl6b9aBG22pAYeHdCq5ppXz0nOOLzh6ISuMkEPnZmM=) 3: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6c:b5:b5:63:1c:28:cd:f7:9d:06:3f:5d:1d:42:28:bf:e4:f5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Jun 17 02:56:21 2026 GMT Not After : Jun 18 06:44:21 2026 GMT Subject: CN=2A25F3D3B25E5E9398E7F84F3FAE9B94400521E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:95:f7:be:9e:3a:3f:2f:5b:96:78:d2:b8: cd:68:b5:f6:14:70:a8:f4:8f:3f:52:60:c1:33:60: d6:6c:9a:3f:db:3e:77:a6:0a:93:52:d4:83:d1:ec: a1:80:09:de:24:c9:83:a6:47:ec:f9:51:01:19:0e: 00:e6:fe:09:69:62:ba:ca:3e:38:22:0f:90:f2:af: 1d:eb:ab:6b:f3:ae:7a:b9:ff:6a:e7:87:74:2c:8a: 43:f5:08:bd:30:c7:3e:6a:97:04:33:b5:40:38:9f: 30:69:c4:6d:2f:97:bb:11:64:81:cb:2b:bb:a6:c6: d0:92:1a:a4:1d:da:72:15:6b:1a:ed:2e:b2:78:23: 7b:56:41:15:60:eb:45:b7:89:8d:51:28:ec:07:31: c9:fb:26:b0:21:43:e1:d5:cd:2d:90:fa:91:63:4a: 2c:dc:42:be:b3:5d:cf:59:42:77:ff:12:89:84:9a: a5:52:ff:22:7a:82:96:0b:e1:96:72:f5:87:d8:ea: da:12:b8:62:3f:c5:98:71:29:e1:37:c1:54:64:14: bc:2a:1e:2c:4b:ba:3d:23:30:82:e9:97:2d:cf:39: 73:b5:25:23:f9:9a:c6:10:c5:d2:13:c5:ca:90:cd: b2:16:fc:6e:ac:31:ef:df:03:ff:83:d3:31:c1:c8: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:25:F3:D3:B2:5E:5E:93:98:E7:F8:4F:3F:AE:9B:94:40:05:21:E0 X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e6:c2:0c:d0:c2:05:e5:cf:61:91:33:46:ad:1d:69:98:e7: e1:14:14:26:6e:c1:38:5b:a1:cc:20:1f:b1:4d:27:cf:83:17: a2:2e:8d:a1:61:ff:9c:ee:4e:1a:88:97:a4:60:e0:d2:71:8f: 86:4b:c3:a7:a7:4d:30:db:da:fc:0a:02:99:6a:9d:03:a8:88: 48:30:f1:1f:7d:0d:3d:f4:7c:6e:e2:fb:fb:e3:e1:03:cd:5d: 02:de:92:fc:5d:40:97:7f:d8:0c:96:1f:3b:5b:55:c4:67:4c: 78:44:be:58:85:16:70:25:81:03:2a:a8:00:5b:22:ea:94:17: bf:13:d9:2f:e8:f7:ff:28:a7:5c:dd:8c:23:9b:bb:37:6c:f3: 28:fa:b4:41:ce:f2:fc:38:f0:88:9c:6e:2a:59:63:3d:d3:20: 0b:36:3d:74:68:fb:31:66:05:2b:ae:48:00:32:8b:bd:2c:98: cd:ec:a6:c0:ed:9f:15:c8:b4:e4:bd:02:d0:63:7f:05:2c:de: 81:93:bd:e1:96:ea:8c:1b:e6:19:df:2f:35:f2:52:95:41:40: 80:9f:bb:6d:ce:90:be:cf:ba:84:ed:db:56:5c:b1:fc:18:30: c0:02:8b:d6:62:34:e9:94:95:4c:8d:4b:76:f9:96:af:72:3e: 20:ff:32:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWy1tWMcKM33nQY/XR1CKL/k9WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA2MTcwMjU2MjFaFw0yNjA2MTgwNjQ0MjFaMDMxMTAvBgNV BAMTKDJBMjVGM0QzQjI1RTVFOTM5OEU3Rjg0RjNGQUU5Qjk0NDAwNTIxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdJX3vp46Py9blnjSuM1otfYU cKj0jz9SYMEzYNZsmj/bPnemCpNS1IPR7KGACd4kyYOmR+z5UQEZDgDm/glpYrrK PjgiD5Dyrx3rq2vzrnq5/2rnh3QsikP1CL0wxz5qlwQztUA4nzBpxG0vl7sRZIHL K7umxtCSGqQd2nIVaxrtLrJ4I3tWQRVg60W3iY1RKOwHMcn7JrAhQ+HVzS2Q+pFj SizcQr6zXc9ZQnf/EomEmqVS/yJ6gpYL4ZZy9YfY6toSuGI/xZhxKeE3wVRkFLwq HixLuj0jMILply3POXO1JSP5msYQxdITxcqQzbIW/G6sMe/fA/+D0zHByLP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKiXz07JeXpOY5/hPP66blEAFIeAwHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPmwgzQwgXlz2GRM0atHWmY5+EUFCZuwThb ocwgH7FNJ8+DF6IujaFh/5zuThqIl6Rg4NJxj4ZLw6enTTDb2vwKAplqnQOoiEgw 8R99DT30fG7i+/vj4QPNXQLekvxdQJd/2AyWHztbVcRnTHhEvliFFnAlgQMqqABb IuqUF78T2S/o9/8op1zdjCObuzds8yj6tEHO8vw48IicbipZYz3TIAs2PXRo+zFm BSuuSAAyi70smM3spsDtnxXItOS9AtBjfwUs3oGTveGW6owb5hnfLzXyUpVBQICf u23OkL7PuoTt21ZcsfwYMMACi9ZiNOmUlUyNS3b5lq9yPiD/Mjk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:11 2026 by rpki-client