$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: ulMyaFAjQi7VatlqRWfdppviggM4EMOEODh+aJ6TqWI= Subject key identifier: 86:AB:AF:6D:56:70:66:F7:2B:0E:80:63:4C:B4:6F:F9:D8:19:C8:F4 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 4EC870BD61CD7541EF6F6A3D492D558CF7A8B20F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 06:06:26 +0000 Manifest this update: Sat 13 Jun 2026 06:01:26 +0000 Manifest next update: Sun 14 Jun 2026 06:27:26 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 4: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: 1XPHhe8kiAxMJxDoh98IfNvxAgcXhnK42LMrjmZamn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 06:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c8:70:bd:61:cd:75:41:ef:6f:6a:3d:49:2d:55:8c:f7:a8:b2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Jun 13 06:01:26 2026 GMT Not After : Jun 14 06:27:26 2026 GMT Subject: CN=86ABAF6D567066F72B0E80634CB46FF9D819C8F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:51:4b:27:f4:4a:fb:1c:a6:e6:94:1c:53: 76:51:17:c0:cc:a9:bd:ba:8a:8f:90:e9:26:d6:09: b5:d4:1f:08:2d:8f:17:6e:b6:fc:05:41:20:bd:ab: 17:79:96:34:25:e8:05:fa:63:4b:3c:d8:b5:20:56: 2f:0b:d6:61:71:1d:94:57:eb:39:81:55:cd:96:e9: 80:41:58:60:2a:10:78:8e:cf:60:57:45:bf:7e:b4: fe:be:17:e1:b4:c3:82:2a:15:09:a6:7d:a5:8b:b2: c1:bb:ab:a0:0b:b2:42:3c:c0:2a:f6:93:98:0b:06: 3a:a1:19:e7:8b:09:d9:82:b6:fd:05:f0:78:c3:8f: 02:41:19:7e:0a:50:3b:77:cd:00:50:ca:49:41:8e: db:f3:ae:44:84:3b:b7:2e:35:f3:c3:1b:53:84:e4: fe:b0:19:b1:b1:46:04:7f:b6:6d:4d:16:0b:3f:f5: 0a:c9:03:c3:e2:0c:09:95:f2:5d:5e:a1:ab:62:79: d8:c8:79:6b:e7:99:3d:ee:65:ba:ba:20:c5:f6:fc: c6:12:ed:38:2c:5a:7c:ae:8a:37:d2:11:5e:e3:f3: ac:3c:a2:ec:b8:81:a1:5e:61:2a:f9:af:75:64:be: a5:d7:f2:49:25:79:58:8f:91:4b:07:db:51:5d:d0: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:AF:6D:56:70:66:F7:2B:0E:80:63:4C:B4:6F:F9:D8:19:C8:F4 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:34:45:5c:78:f3:e8:a4:d1:1a:e0:0a:68:f7:c5:58:d2: 1c:76:a5:3c:4d:96:0b:91:95:6f:94:a1:03:28:0b:d9:6a:78: 6e:d4:ec:f9:f4:50:b4:e2:0e:1b:e9:91:9a:4f:b2:08:96:5f: 5e:db:28:3c:f7:84:e7:4b:4c:02:5c:dc:82:bb:24:e7:00:31: f0:57:c6:a5:8f:f8:c8:bb:1c:e8:3d:74:bf:d2:57:ca:ac:bd: 33:27:ce:e9:bc:d1:f2:a2:4b:31:47:f8:82:a1:c2:bb:f6:7a: 60:26:1d:13:7a:ba:03:13:be:78:c2:12:d7:03:9f:e0:17:0d: ca:b5:0a:93:a7:c1:64:5c:cf:90:86:7f:bd:75:43:06:8c:05: f3:05:56:a9:e9:6a:05:35:0e:d5:37:02:45:a6:15:e1:12:00: 06:97:5f:8a:76:07:ef:b0:6b:ff:3c:1d:09:35:4c:6f:0a:a4: 8d:cb:cc:32:7a:30:b4:92:b2:8f:32:84:a3:ee:ff:63:75:2e: d7:dd:9c:21:b3:0f:51:dd:84:02:92:52:1a:90:2a:44:c8:ba: 06:29:c6:9a:c7:93:04:16:3d:9c:e9:4d:fe:30:05:25:9e:5e: c8:4c:60:55:12:1f:ee:bc:f2:f3:c7:61:3a:3d:7e:32:7f:3f: 99:52:00:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTshwvWHNdUHvb2o9SS1VjPeosg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA2MTMwNjAxMjZaFw0yNjA2MTQwNjI3MjZaMDMxMTAvBgNV BAMTKDg2QUJBRjZENTY3MDY2RjcyQjBFODA2MzRDQjQ2RkY5RDgxOUM4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeglFLJ/RK+xym5pQcU3ZRF8DM qb26io+Q6SbWCbXUHwgtjxdutvwFQSC9qxd5ljQl6AX6Y0s82LUgVi8L1mFxHZRX 6zmBVc2W6YBBWGAqEHiOz2BXRb9+tP6+F+G0w4IqFQmmfaWLssG7q6ALskI8wCr2 k5gLBjqhGeeLCdmCtv0F8HjDjwJBGX4KUDt3zQBQyklBjtvzrkSEO7cuNfPDG1OE 5P6wGbGxRgR/tm1NFgs/9QrJA8PiDAmV8l1eoatiedjIeWvnmT3uZbq6IMX2/MYS 7TgsWnyuijfSEV7j86w8ouy4gaFeYSr5r3VkvqXX8kkleViPkUsH21Fd0PefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhquvbVZwZvcrDoBjTLRv+dgZyPQwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErkNEVcePPopNEa4Apo98VY0hx2pTxNlguR lW+UoQMoC9lqeG7U7Pn0ULTiDhvpkZpPsgiWX17bKDz3hOdLTAJc3IK7JOcAMfBX xqWP+Mi7HOg9dL/SV8qsvTMnzum80fKiSzFH+IKhwrv2emAmHRN6ugMTvnjCEtcD n+AXDcq1CpOnwWRcz5CGf711QwaMBfMFVqnpagU1DtU3AkWmFeESAAaXX4p2B++w a/88HQk1TG8KpI3LzDJ6MLSSso8yhKPu/2N1LtfdnCGzD1HdhAKSUhqQKkTIugYp xprHkwQWPZzpTf4wBSWeXshMYFUSH+688vPHYTo9fjJ/P5lSADg= -----END CERTIFICATE-----Generated at Sat Jun 13 20:28:20 2026 by rpki-client