$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: yEWiO7+hzMDb+p/jQ5MHTBFia/iRevBugxaSq1p/E4o= Subject key identifier: B6:2A:E3:4C:68:DB:61:34:F5:BD:24:21:8D:90:A1:DB:48:6E:32:4D Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 08424DF4B4FF2AD16010221CD48AA6F5FDD2416A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:09:22 +0000 Manifest this update: Wed 17 Jun 2026 01:04:22 +0000 Manifest next update: Thu 18 Jun 2026 04:49:22 +0000 Files and hashes: 1: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: ArrVlpC7rj5M5K+jl5Ic7YTlLdqdLXTJqmbtiTwUqgE=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) 3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:42:4d:f4:b4:ff:2a:d1:60:10:22:1c:d4:8a:a6:f5:fd:d2:41:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Jun 17 01:04:22 2026 GMT Not After : Jun 18 04:49:22 2026 GMT Subject: CN=B62AE34C68DB6134F5BD24218D90A1DB486E324D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:43:11:99:df:09:32:b5:7f:9b:eb:89:a1: 26:20:6f:fc:c9:6e:11:68:32:3b:d0:16:5c:5d:73: 52:1d:27:ee:de:23:4f:8f:93:6f:12:6f:e0:f1:18: a5:7a:3e:ab:af:b4:ac:eb:21:ac:1b:a8:c6:62:bd: 5a:cd:95:cb:4b:30:2b:1c:84:0f:d3:7e:a8:23:61: 2a:ff:a1:c4:79:82:d6:26:13:a2:16:8f:a3:c0:6e: 16:06:98:2d:79:21:1d:b9:dd:82:02:45:2f:79:5f: 28:b4:90:97:ce:8c:8a:07:eb:a2:12:91:53:4c:32: 79:af:97:35:c9:a5:cb:6c:f3:07:2e:df:6e:4c:02: 61:f2:bb:a4:75:76:5f:0b:83:58:7a:c3:89:27:a3: 4e:89:03:bf:a2:c8:d3:0e:50:69:d3:2c:fe:73:97: 0a:82:04:b8:26:90:1b:9a:3b:76:06:cb:b5:ee:c6: f0:e7:a3:83:52:fe:9d:10:1e:c2:31:66:7b:78:e8: 04:e1:de:45:33:1f:6b:c9:e5:f6:6f:37:af:27:3a: 76:8d:d1:b0:3e:d7:c9:e0:ee:09:fc:16:b9:f9:83: 58:54:82:9f:39:c5:e7:f0:e2:23:c3:5f:3d:b0:9c: 1d:d7:0f:c3:d0:06:b8:9d:f5:62:ca:94:95:35:eb: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:E3:4C:68:DB:61:34:F5:BD:24:21:8D:90:A1:DB:48:6E:32:4D X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:59:9c:70:78:29:b5:a6:0b:ae:03:74:f7:5f:98:da:1e:20: 46:b8:af:a2:ba:b7:3e:f8:00:54:2e:82:df:5a:5e:a8:a9:00: 4c:32:d7:49:cb:92:e8:ab:5b:82:94:52:99:b9:d4:ce:60:6a: 8a:cb:55:43:1e:37:06:0d:aa:0b:58:6a:b0:9a:61:1e:09:16: 3c:b9:11:70:7b:a2:e7:3d:ce:c2:7a:69:a8:a8:8c:8f:46:1e: 5b:0a:36:96:53:38:f3:5f:21:ff:11:86:01:e3:c6:64:dc:ce: c4:b2:19:5b:95:86:3a:d3:03:c9:23:d5:d2:36:94:1a:0b:6d: 14:5a:9b:c8:19:bb:bb:87:57:28:6e:68:c7:ef:a9:8c:7c:cb: a6:fb:32:da:e0:a1:31:1c:52:89:f6:2f:27:60:e1:51:18:9d: c6:14:78:1c:29:f0:0b:58:3c:23:d8:98:34:b6:c0:26:3d:25: bc:cc:7f:9d:c3:dc:a6:31:37:34:47:82:be:94:53:55:8d:1a: 64:e5:bf:57:e9:f2:85:da:9d:38:8d:85:d4:bc:aa:3b:c0:3e: e9:ed:7a:97:3a:56:0c:ba:22:b2:6f:91:94:d2:f2:68:3d:19: 80:61:74:92:01:81:9a:36:95:fc:54:8e:96:cc:4a:88:76:fc: 0c:98:f4:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEJN9LT/KtFgECIc1Iqm9f3SQWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA2MTcwMTA0MjJaFw0yNjA2MTgwNDQ5MjJaMDMxMTAvBgNV BAMTKEI2MkFFMzRDNjhEQjYxMzRGNUJEMjQyMThEOTBBMURCNDg2RTMyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnUMRmd8JMrV/m+uJoSYgb/zJ bhFoMjvQFlxdc1IdJ+7eI0+Pk28Sb+DxGKV6PquvtKzrIawbqMZivVrNlctLMCsc hA/TfqgjYSr/ocR5gtYmE6IWj6PAbhYGmC15IR253YICRS95Xyi0kJfOjIoH66IS kVNMMnmvlzXJpcts8wcu325MAmHyu6R1dl8Lg1h6w4kno06JA7+iyNMOUGnTLP5z lwqCBLgmkBuaO3YGy7XuxvDno4NS/p0QHsIxZnt46ATh3kUzH2vJ5fZvN68nOnaN 0bA+18ng7gn8Frn5g1hUgp85xefw4iPDXz2wnB3XD8PQBrid9WLKlJU162SlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtirjTGjbYTT1vSQhjZCh20huMk0wHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9ZnHB4KbWmC64DdPdfmNoeIEa4r6K6tz74 AFQugt9aXqipAEwy10nLkuirW4KUUpm51M5gaorLVUMeNwYNqgtYarCaYR4JFjy5 EXB7ouc9zsJ6aaiojI9GHlsKNpZTOPNfIf8RhgHjxmTczsSyGVuVhjrTA8kj1dI2 lBoLbRRam8gZu7uHVyhuaMfvqYx8y6b7MtrgoTEcUon2Lydg4VEYncYUeBwp8AtY PCPYmDS2wCY9JbzMf53D3KYxNzRHgr6UU1WNGmTlv1fp8oXanTiNhdS8qjvAPunt epc6Vgy6IrJvkZTS8mg9GYBhdJIBgZo2lfxUjpbMSoh2/AyY9Kw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:10 2026 by rpki-client