$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: o6PrNi22aoLyuCBhlKaEiC5JGkOhdgwTZttamupNOrI= Subject key identifier: AA:13:9B:4B:3A:64:1B:EF:67:0A:B6:DD:61:F1:16:06:DA:DA:78:EE Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 58FCBCFC377D9EEF8C9120D962BBBD8529D4A1BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:59:47 +0000 Manifest this update: Tue 16 Jun 2026 16:54:47 +0000 Manifest next update: Wed 17 Jun 2026 20:41:47 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) 2: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: fptv6okN8RCKAYToPe+0fFUHNMnkZhmXE3sBljhYY2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fc:bc:fc:37:7d:9e:ef:8c:91:20:d9:62:bb:bd:85:29:d4:a1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: Jun 16 16:54:47 2026 GMT Not After : Jun 17 20:41:47 2026 GMT Subject: CN=AA139B4B3A641BEF670AB6DD61F11606DADA78EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:35:0b:c9:43:74:00:c6:44:6b:7c:00:d2: f7:e0:bf:a1:b4:9b:55:64:b2:46:d1:d5:15:62:5f: e6:10:ed:6e:4c:8f:d1:cc:f1:bb:31:8c:3a:a7:30: 8e:c1:7a:17:34:51:f2:4f:41:94:d5:19:65:e2:74: 28:9a:50:c1:52:a2:89:bb:8e:8c:95:61:7a:61:e9: be:d0:d5:46:ee:3d:79:d8:96:77:02:2d:07:62:7e: bb:f1:0c:08:74:30:c1:58:5a:b3:77:12:c8:b5:78: ab:0c:7f:d3:82:10:a1:d4:f8:22:a4:d9:84:90:08: 27:a2:b8:3b:d3:05:cf:11:46:50:77:a2:d6:83:d8: 1e:82:41:af:2d:9a:bb:ca:96:69:74:87:9d:61:ce: 2e:95:7d:7d:63:e2:16:a3:84:15:e5:8a:ae:a4:8f: 96:c4:3d:d2:a8:1c:1c:41:7e:77:ad:72:0d:b6:ae: 4c:6b:3d:a4:e7:c8:ce:be:03:fd:56:1e:4b:ed:ff: 00:e8:f0:f5:d5:d5:5d:8b:53:24:34:99:4b:46:b4: 70:13:4b:bd:2f:c0:d5:d7:8b:43:e7:d6:a5:7c:28: de:30:7a:3d:64:c4:e5:02:9f:12:94:09:ab:44:5b: b5:42:4c:13:fb:bd:ff:41:87:8e:52:d0:7c:0c:1e: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:9B:4B:3A:64:1B:EF:67:0A:B6:DD:61:F1:16:06:DA:DA:78:EE X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:32:80:49:48:ab:e5:35:b5:bc:a6:b6:3b:a2:26:d2:45:0b: 3a:46:de:f6:ce:b3:19:02:75:92:f7:2a:b1:26:f3:88:45:75: 16:07:71:c3:d7:d8:d1:65:ee:cb:2d:d9:c6:4e:73:76:9e:f6: 0f:af:53:a8:1c:8a:21:91:2e:fa:c7:f6:81:94:d8:e6:b0:1e: 83:d0:68:97:92:17:9d:69:dd:fe:67:26:25:a8:3e:76:08:56: fe:bf:16:ad:10:7e:90:30:a1:8a:ee:fc:42:8d:b8:38:da:7f: 1d:6c:ce:c7:b6:6c:35:6a:80:69:83:d9:93:7b:1a:ae:7d:1f: 15:25:4f:b7:35:2f:54:17:8f:f6:1a:cb:03:3e:fa:0c:f0:39: 5d:f1:39:40:54:04:1c:e7:27:48:6b:eb:2c:b7:f4:e5:70:97: 05:79:ef:e3:05:7b:37:ad:9b:27:2f:ec:44:0e:7c:e9:87:0c: 00:e9:86:24:8b:58:7f:8c:77:19:ed:c8:1d:55:b0:1d:22:fd: 63:de:72:3d:df:00:5d:19:a1:de:fa:d2:de:7e:cd:c4:ba:2b: e6:76:82:00:1c:9c:17:ae:a1:78:7a:57:09:ec:48:7e:30:40: bc:15:73:eb:86:11:f3:65:49:7a:c5:e5:30:b6:c7:e1:4f:d1: 00:fa:15:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPy8/Dd9nu+MkSDZYru9hSnUob8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjA2MTYxNjU0NDdaFw0yNjA2MTcyMDQxNDdaMDMxMTAvBgNV BAMTKEFBMTM5QjRCM0E2NDFCRUY2NzBBQjZERDYxRjExNjA2REFEQTc4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ5zULyUN0AMZEa3wA0vfgv6G0 m1VkskbR1RViX+YQ7W5Mj9HM8bsxjDqnMI7Behc0UfJPQZTVGWXidCiaUMFSoom7 joyVYXph6b7Q1UbuPXnYlncCLQdifrvxDAh0MMFYWrN3Esi1eKsMf9OCEKHU+CKk 2YSQCCeiuDvTBc8RRlB3otaD2B6CQa8tmrvKlml0h51hzi6VfX1j4hajhBXliq6k j5bEPdKoHBxBfnetcg22rkxrPaTnyM6+A/1WHkvt/wDo8PXV1V2LUyQ0mUtGtHAT S70vwNXXi0Pn1qV8KN4wej1kxOUCnxKUCatEW7VCTBP7vf9Bh45S0HwMHoAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhObSzpkG+9nCrbdYfEWBtraeO4wHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcygElIq+U1tbymtjuiJtJFCzpG3vbOsxkC dZL3KrEm84hFdRYHccPX2NFl7sst2cZOc3ae9g+vU6gciiGRLvrH9oGU2OawHoPQ aJeSF51p3f5nJiWoPnYIVv6/Fq0QfpAwoYru/EKNuDjafx1szse2bDVqgGmD2ZN7 Gq59HxUlT7c1L1QXj/YaywM++gzwOV3xOUBUBBznJ0hr6yy39OVwlwV57+MFezet mycv7EQOfOmHDADphiSLWH+MdxntyB1VsB0i/WPecj3fAF0Zod760t5+zcS6K+Z2 ggAcnBeuoXh6VwnsSH4wQLwVc+uGEfNlSXrF5TC2x+FP0QD6FcY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:23 2026 by rpki-client