$ rpki-client -vvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: bVY+l4oX4FTmmS0JUDYUDajh1QvZNThLPJoIw9RwmN4= Subject key identifier: 44:23:BF:44:88:5F:FC:73:F9:79:89:B8:C2:45:16:46:DD:01:01:49 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 018AE0FF62F5327A5E38F84F57543CC10FF280D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:32:06 +0000 Manifest this update: Wed 17 Jun 2026 03:27:06 +0000 Manifest next update: Thu 18 Jun 2026 05:45:06 +0000 Files and hashes: 1: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: utiHS2PldWTwoB431VslDK6fcz+WMBkKPAKYaXfXSGM=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:e0:ff:62:f5:32:7a:5e:38:f8:4f:57:54:3c:c1:0f:f2:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Jun 17 03:27:06 2026 GMT Not After : Jun 18 05:45:06 2026 GMT Subject: CN=4423BF44885FFC73F97989B8C2451646DD010149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:55:f2:08:b5:c9:0b:83:2c:d3:4c:50:68: 8e:1e:b3:43:1d:10:2d:52:df:f7:81:45:46:f2:ee: 39:3c:7d:69:ca:9b:dd:3d:3a:0f:0f:86:32:ef:3b: b8:8a:08:70:d7:7a:33:60:91:4d:2d:9c:b3:d6:66: 76:12:f2:91:ce:07:6d:1e:2e:47:48:d9:37:58:cf: e6:6a:eb:88:44:50:3e:04:28:04:ed:0d:49:58:4d: 77:6b:ea:df:ba:74:0c:89:e5:e6:52:2f:ea:f8:65: 39:bc:a5:c2:18:87:99:88:21:12:82:66:b2:71:83: fb:45:4c:ff:73:a1:0b:1f:16:a1:fb:98:a3:d8:af: b6:0d:0d:b2:9d:29:d6:c0:22:ba:0a:9e:e1:f4:e1: 3b:9b:2d:b9:ef:8e:4f:d7:ba:1f:a5:13:0f:e0:d9: 07:50:c5:cc:af:91:b5:2b:f2:60:6c:f8:63:1c:4e: e7:83:87:d5:19:4e:01:4d:64:08:2a:30:06:54:ff: 04:7d:6f:81:7f:1b:3a:97:71:31:40:5d:4e:aa:90: 17:10:10:d0:26:d8:d6:70:f6:c2:27:a9:1e:18:58: 29:f7:a0:5f:45:37:87:1a:26:21:7e:54:2e:5a:71: c6:28:06:36:38:cd:b5:1e:de:7b:e9:17:0a:47:37: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:23:BF:44:88:5F:FC:73:F9:79:89:B8:C2:45:16:46:DD:01:01:49 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:63:ae:7a:af:07:bd:f8:bf:96:9a:7e:a3:b8:ae:3e:31:6e: e6:49:0e:52:65:a6:22:45:fd:ca:84:3d:2b:10:5d:1a:8e:af: 76:eb:c3:2e:39:ad:02:40:3f:a9:01:e9:f8:da:62:c0:63:17: b3:c1:a3:aa:6c:fe:a2:cd:25:85:9d:34:21:f8:f1:4e:a2:91: 73:19:d4:69:e9:34:b1:23:81:b4:1c:16:74:8f:45:0f:d8:45: 93:e3:61:1a:ff:11:4f:0d:58:a8:fd:bd:bd:2d:d7:39:7a:f4: 1c:b9:d0:0c:1f:48:fd:98:a3:ed:25:39:5b:20:bf:42:63:a4: 35:fe:f2:9f:c6:3f:5f:61:63:be:8a:23:f8:63:e2:7b:1c:5b: d4:b4:40:35:59:a5:41:1a:20:50:36:b7:a8:e3:56:09:df:4e: 82:00:15:a0:df:b0:7b:64:35:20:5c:80:55:30:aa:02:8b:1f: 58:db:35:65:23:5b:a2:0a:c6:a8:e4:0a:55:fb:43:ca:a3:37: fa:8c:4b:5a:0e:af:ee:89:19:2f:b7:f9:d2:e3:6a:7f:b5:68: f3:7c:2e:64:b8:a2:45:97:d5:b2:74:0e:ef:bf:90:3d:bc:8f: b9:b0:55:8a:ef:34:02:fa:60:d0:b3:89:df:67:12:69:8b:a7: 65:bf:f7:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYrg/2L1MnpeOPhPV1Q8wQ/ygNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA2MTcwMzI3MDZaFw0yNjA2MTgwNTQ1MDZaMDMxMTAvBgNV BAMTKDQ0MjNCRjQ0ODg1RkZDNzNGOTc5ODlCOEMyNDUxNjQ2REQwMTAxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQo1XyCLXJC4Ms00xQaI4es0Md EC1S3/eBRUby7jk8fWnKm909Og8PhjLvO7iKCHDXejNgkU0tnLPWZnYS8pHOB20e LkdI2TdYz+Zq64hEUD4EKATtDUlYTXdr6t+6dAyJ5eZSL+r4ZTm8pcIYh5mIIRKC ZrJxg/tFTP9zoQsfFqH7mKPYr7YNDbKdKdbAIroKnuH04TubLbnvjk/Xuh+lEw/g 2QdQxcyvkbUr8mBs+GMcTueDh9UZTgFNZAgqMAZU/wR9b4F/GzqXcTFAXU6qkBcQ ENAm2NZw9sInqR4YWCn3oF9FN4caJiF+VC5accYoBjY4zbUe3nvpFwpHN5UhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURCO/RIhf/HP5eYm4wkUWRt0BAUkwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtjrnqvB734v5aafqO4rj4xbuZJDlJlpiJF /cqEPSsQXRqOr3brwy45rQJAP6kB6fjaYsBjF7PBo6ps/qLNJYWdNCH48U6ikXMZ 1GnpNLEjgbQcFnSPRQ/YRZPjYRr/EU8NWKj9vb0t1zl69By50AwfSP2Yo+0lOVsg v0JjpDX+8p/GP19hY76KI/hj4nscW9S0QDVZpUEaIFA2t6jjVgnfToIAFaDfsHtk NSBcgFUwqgKLH1jbNWUjW6IKxqjkClX7Q8qjN/qMS1oOr+6JGS+3+dLjan+1aPN8 LmS4okWX1bJ0Du+/kD28j7mwVYrvNAL6YNCzid9nEmmLp2W/9/M= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:17 2026 by rpki-client