$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: wNA1m2No+vx1PqWZmTGenhnqzrVqFXyb2i48fHDl9JI= Subject key identifier: 1E:BE:D9:5A:9A:DB:97:91:34:C4:D2:DF:FF:DF:49:47:39:C1:D3:E7 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 43D5C00E98555B3C5A456084F2AC565D2DA54EE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:38:12 +0000 Manifest this update: Tue 16 Jun 2026 15:33:12 +0000 Manifest next update: Wed 17 Jun 2026 17:46:12 +0000 Files and hashes: 1: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: AehRYEaUP6wKKv8jRdYkossQVBE+PiNRRw1P03sQq5w=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 4: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d5:c0:0e:98:55:5b:3c:5a:45:60:84:f2:ac:56:5d:2d:a5:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Jun 16 15:33:12 2026 GMT Not After : Jun 17 17:46:12 2026 GMT Subject: CN=1EBED95A9ADB979134C4D2DFFFDF494739C1D3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:3f:43:bc:ce:82:28:fb:65:f7:7f:0b:14: 93:22:43:2f:4d:cb:3f:3e:0e:7f:fc:d9:52:77:1a: 55:9b:0d:ad:5e:65:85:a3:e6:3f:60:45:48:f2:1f: 1d:cc:04:e3:65:2e:9d:db:74:8e:83:be:47:a0:f2: af:da:92:a4:6f:b8:38:39:f6:ab:fd:d3:16:9e:53: dc:c3:d6:bb:3b:b4:2d:5b:0a:a3:64:cd:48:3b:e8: e8:50:67:04:fe:78:f3:c5:e8:4b:b3:71:65:2a:f6: 85:85:bd:41:c6:fb:84:85:df:a8:31:e7:0e:5f:e5: 32:23:9d:bd:9e:4a:95:72:44:7d:09:3e:c0:a1:e2: 74:ae:72:b9:95:fa:40:f1:00:9c:0d:74:2a:0c:97: 62:95:85:8d:43:fa:ef:79:03:86:a1:85:77:65:44: 97:95:3b:a2:07:90:97:91:3a:7b:f4:58:c6:31:47: 37:22:09:4d:38:b5:2d:e9:e9:d5:82:9b:b2:75:2d: 51:60:77:a6:c7:49:32:a8:60:0f:bb:da:05:05:49: 8f:df:7e:2f:86:1e:90:9a:d4:85:aa:61:3b:7c:ba: 60:bf:7c:5f:cc:fd:c3:5d:68:d2:e0:84:70:39:6d: 55:d2:57:e0:ed:a7:a9:10:71:48:92:30:17:3f:08: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:D9:5A:9A:DB:97:91:34:C4:D2:DF:FF:DF:49:47:39:C1:D3:E7 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:ca:38:6a:72:46:cb:b8:f2:4c:8b:60:70:33:c2:45:e3: 28:7d:01:d6:b5:25:96:c9:b2:ac:56:69:7b:1a:fb:e4:11:19: 4f:f1:a5:97:28:46:eb:8f:eb:6b:7b:bc:7c:3c:58:18:3f:c2: 56:39:29:ed:66:70:d5:32:d9:96:46:84:99:b8:37:5c:fc:93: fb:46:a5:98:a0:6e:11:a8:92:69:42:41:46:04:a0:39:4d:8b: 4e:5e:ad:d5:21:32:b3:88:00:d9:be:46:e2:6b:bb:b5:4d:44: d2:4b:1d:c5:9d:62:0e:7f:0a:b7:9f:1c:d6:08:28:62:27:49: 92:35:db:39:d8:8e:22:3e:05:0b:50:34:fe:29:c2:e9:dc:2d: d1:01:4a:42:62:57:72:53:46:3e:2e:74:2e:f0:a7:8e:f0:b6: b7:23:be:b2:20:1c:ac:cd:ee:20:3d:26:1b:d5:0c:66:c1:27: 14:c7:4d:65:08:37:29:7c:d5:23:53:49:2f:ba:5a:06:40:05: 69:12:ce:86:f6:d7:b9:93:af:e8:9c:23:8d:cb:00:01:55:b6: f5:2d:0a:aa:e1:d4:22:8c:2f:28:49:70:f2:c1:f6:64:4a:bd: 03:c8:47:f7:5d:27:02:5b:be:31:e0:eb:33:58:01:3e:30:d7: 81:14:89:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9XADphVWzxaRWCE8qxWXS2lTugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA2MTYxNTMzMTJaFw0yNjA2MTcxNzQ2MTJaMDMxMTAvBgNV BAMTKDFFQkVEOTVBOUFEQjk3OTEzNEM0RDJERkZGREY0OTQ3MzlDMUQzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Uj9DvM6CKPtl938LFJMiQy9N yz8+Dn/82VJ3GlWbDa1eZYWj5j9gRUjyHx3MBONlLp3bdI6Dvkeg8q/akqRvuDg5 9qv90xaeU9zD1rs7tC1bCqNkzUg76OhQZwT+ePPF6EuzcWUq9oWFvUHG+4SF36gx 5w5f5TIjnb2eSpVyRH0JPsCh4nSucrmV+kDxAJwNdCoMl2KVhY1D+u95A4ahhXdl RJeVO6IHkJeROnv0WMYxRzciCU04tS3p6dWCm7J1LVFgd6bHSTKoYA+72gUFSY/f fi+GHpCa1IWqYTt8umC/fF/M/cNdaNLghHA5bVXSV+Dtp6kQcUiSMBc/CFxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHr7ZWprbl5E0xNLf/99JRznB0+cwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnwyjhqckbLuPJMi2BwM8JF4yh9Ada1JZbJ sqxWaXsa++QRGU/xpZcoRuuP62t7vHw8WBg/wlY5Ke1mcNUy2ZZGhJm4N1z8k/tG pZigbhGokmlCQUYEoDlNi05erdUhMrOIANm+RuJru7VNRNJLHcWdYg5/CrefHNYI KGInSZI12znYjiI+BQtQNP4pwuncLdEBSkJiV3JTRj4udC7wp47wtrcjvrIgHKzN 7iA9JhvVDGbBJxTHTWUINyl81SNTSS+6WgZABWkSzob217mTr+icI43LAAFVtvUt Cqrh1CKMLyhJcPLB9mRKvQPIR/ddJwJbvjHg6zNYAT4w14EUiWM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:21:37 2026 by rpki-client