$ rpki-client -vvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: sfoo7PMVGkQN+4QEp7HhJ0A7YSGS4iUcjsV1NEXk1tk= Subject key identifier: AD:3B:94:0C:DD:C4:A9:5E:20:F1:2E:57:E0:2B:C1:97:81:8C:29:E0 Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 6404E347D19E0DD9E97CC6639C2AB6BEC6919B2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:04:53 +0000 Manifest this update: Sat 13 Jun 2026 08:59:53 +0000 Manifest next update: Sun 14 Jun 2026 12:43:53 +0000 Files and hashes: 1: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) 2: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: SK4ga47lYOPTXQA3LiXC2RX3q6is6sitNBzSnyrc7dY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:04:e3:47:d1:9e:0d:d9:e9:7c:c6:63:9c:2a:b6:be:c6:91:9b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: Jun 13 08:59:53 2026 GMT Not After : Jun 14 12:43:53 2026 GMT Subject: CN=AD3B940CDDC4A95E20F12E57E02BC197818C29E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:b6:6c:59:61:ea:67:ff:50:82:ba:c8:38: 52:e1:6d:ef:d4:4b:74:f5:de:0d:09:65:02:35:19: ed:f8:bd:d9:8b:71:91:35:aa:dc:77:05:70:af:00: fa:11:ff:9f:ba:bc:1e:69:8f:8a:c8:91:c1:1c:aa: 72:75:e8:bd:bb:7a:45:87:48:02:97:50:e3:07:13: 79:f4:6c:64:56:63:e1:6a:2e:4f:ab:99:99:42:8b: d9:08:0a:5c:f4:23:f3:67:5c:03:e0:80:cb:12:50: 9b:67:05:4d:49:57:5a:de:57:fe:2b:0a:2a:90:fd: 17:2d:c6:61:0c:7a:fc:4f:b4:9b:e8:89:24:f8:d7: c4:75:f5:94:fa:73:84:6b:a2:83:3e:c5:af:1e:f4: cb:fa:70:c4:f2:3e:29:fb:48:47:20:1e:9b:74:d8: 3d:1a:78:57:d2:f0:05:92:fd:48:3c:d7:44:05:bb: 85:24:a5:b2:61:72:87:17:9d:46:4d:c9:e6:e3:04: 8c:ea:63:79:36:74:6c:ce:5d:13:69:49:ff:f7:d0: cc:fd:d2:d6:aa:7f:f4:3e:28:c9:48:f5:0b:78:4c: 84:da:56:05:b6:57:b3:25:de:1f:f6:81:aa:74:a1: 6b:45:7e:0f:a9:5f:c4:b5:69:a7:ac:06:78:e5:b6: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:94:0C:DD:C4:A9:5E:20:F1:2E:57:E0:2B:C1:97:81:8C:29:E0 X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:d6:7c:48:ba:8b:bd:47:80:be:50:63:41:33:5c:25:e5: 26:f7:8a:39:d7:2a:59:a8:46:53:83:fb:4e:e8:ca:68:5c:17: f5:86:d8:ec:a8:cb:91:10:2d:e9:6d:99:31:9f:64:1f:da:24: f4:b4:de:c9:d2:0a:1e:cb:7e:fe:11:d1:ae:ef:6a:b3:a3:d3: b2:33:a2:ae:60:6f:1b:5c:f9:7a:a7:05:16:40:08:ed:29:16: 39:13:48:75:ab:f6:d8:e6:92:b7:ec:3f:22:f7:f9:52:86:fa: c4:74:ed:42:04:08:ea:dc:4b:34:75:80:a7:78:51:09:6e:0b: eb:9b:46:de:18:a8:24:c4:83:50:63:c0:48:39:f2:ef:49:89: 4a:a8:80:f7:19:73:b1:84:3f:1f:62:6a:c9:f3:ee:87:51:d6: e1:36:63:0a:b5:a6:ca:78:01:b2:c0:a9:42:42:af:4d:4b:97: 63:0b:a7:ff:92:cc:27:eb:87:df:90:8d:5e:c7:23:7f:60:20: 76:1e:ef:c0:92:ec:71:a4:6a:75:ae:06:f7:77:03:08:52:06: 31:4f:fb:52:54:25:97:04:d1:f0:e2:e6:a0:ce:17:3a:06:cf: bc:91:32:9e:d4:0a:fa:3e:aa:b7:ad:92:5d:d7:d2:41:8f:3a: 81:51:ee:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZATjR9GeDdnpfMZjnCq2vsaRmyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA2MTMwODU5NTNaFw0yNjA2MTQxMjQzNTNaMDMxMTAvBgNV BAMTKEFEM0I5NDBDRERDNEE5NUUyMEYxMkU1N0UwMkJDMTk3ODE4QzI5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5bZsWWHqZ/9QgrrIOFLhbe/U S3T13g0JZQI1Ge34vdmLcZE1qtx3BXCvAPoR/5+6vB5pj4rIkcEcqnJ16L27ekWH SAKXUOMHE3n0bGRWY+FqLk+rmZlCi9kIClz0I/NnXAPggMsSUJtnBU1JV1reV/4r CiqQ/RctxmEMevxPtJvoiST418R19ZT6c4RrooM+xa8e9Mv6cMTyPin7SEcgHpt0 2D0aeFfS8AWS/Ug810QFu4UkpbJhcocXnUZNyebjBIzqY3k2dGzOXRNpSf/30Mz9 0taqf/Q+KMlI9Qt4TITaVgW2V7Ml3h/2gap0oWtFfg+pX8S1aaesBnjltsJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTuUDN3EqV4g8S5X4CvBl4GMKeAwHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxs1nxIuou9R4C+UGNBM1wl5Sb3ijnXKlmo RlOD+07oymhcF/WG2Oyoy5EQLeltmTGfZB/aJPS03snSCh7Lfv4R0a7varOj07Iz oq5gbxtc+XqnBRZACO0pFjkTSHWr9tjmkrfsPyL3+VKG+sR07UIECOrcSzR1gKd4 UQluC+ubRt4YqCTEg1BjwEg58u9JiUqogPcZc7GEPx9iasnz7odR1uE2Ywq1psp4 AbLAqUJCr01Ll2MLp/+SzCfrh9+QjV7HI39gIHYe78CS7HGkanWuBvd3AwhSBjFP +1JUJZcE0fDi5qDOFzoGz7yRMp7UCvo+qretkl3X0kGPOoFR7jk= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:36 2026 by rpki-client