$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: RqwboNBREzu3W74/ZnX4ph0Bw5b3gr23tRCbNkcclWY= Subject key identifier: 58:9A:2D:6A:7B:DC:27:A5:C1:F6:96:AA:EF:8F:83:32:B6:3C:0D:17 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 1C7BA31A8AB01BF43791706983ECB8DAE737CE85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 08:24:02 +0000 Manifest this update: Sat 13 Jun 2026 08:19:02 +0000 Manifest next update: Sun 14 Jun 2026 11:32:02 +0000 Files and hashes: 1: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: XgPDV5hx2lXLWTuIt9EPHqe+uFkjShJXHNMQvk+m7Nc=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) 4: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7b:a3:1a:8a:b0:1b:f4:37:91:70:69:83:ec:b8:da:e7:37:ce:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Jun 13 08:19:02 2026 GMT Not After : Jun 14 11:32:02 2026 GMT Subject: CN=589A2D6A7BDC27A5C1F696AAEF8F8332B63C0D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:50:a3:67:a8:c3:28:dc:75:3d:2b:51:de: af:8e:42:e9:4d:b2:ca:a7:bd:c9:60:bf:99:dd:0b: 13:31:fd:9b:20:31:52:80:4b:2c:a6:3e:6a:06:0f: 31:22:78:e5:5e:53:15:a6:0f:12:1e:b9:63:6d:fc: d0:8e:11:e2:b3:42:47:76:1b:06:f8:2c:76:aa:68: e2:b0:7f:76:9b:bd:ce:fc:a4:f1:05:4b:5d:41:ab: 18:04:9f:33:ef:c4:fe:0b:ac:b3:06:e7:80:f3:91: af:98:f8:a8:f0:83:e6:4e:05:c1:68:22:b3:ff:c2: ed:2c:6d:f5:10:99:2c:46:65:c8:44:e8:07:e5:37: 66:4e:f4:c0:8f:94:86:7e:56:eb:9d:f2:e8:70:30: dc:2d:f3:45:27:00:1c:7a:5c:bd:d9:cc:36:97:fb: a0:e1:35:91:11:d1:70:57:be:38:95:b2:c3:0b:08: de:f8:27:ee:82:f3:8d:b7:f2:d8:56:1a:3f:bb:8a: 80:48:22:9a:22:0f:9d:f8:6a:09:50:fa:46:e2:a7: f1:15:6c:8b:07:51:ce:18:34:3a:48:01:df:c0:3d: 67:9e:c9:e3:38:df:b2:c5:e5:fd:1b:87:99:ea:91: 99:a0:6e:9d:41:20:fc:89:88:b7:d2:c7:46:ab:db: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:2D:6A:7B:DC:27:A5:C1:F6:96:AA:EF:8F:83:32:B6:3C:0D:17 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3c:8a:73:e1:cc:13:bc:99:c4:a2:d2:a3:cf:50:73:dd:ae: 69:2f:54:7d:a7:98:19:74:49:f7:cc:39:14:2a:7e:a3:be:f8: b4:f2:47:d5:dd:68:24:1a:7b:54:60:6c:25:42:88:14:27:7b: c2:30:39:14:db:c7:b5:d1:d3:38:2b:27:9d:3c:7d:a9:47:b5: 1c:80:ec:a5:3d:fd:53:f7:1a:8a:f0:13:66:96:1f:13:22:15: 47:c1:be:0d:0e:d8:78:b9:83:50:82:e2:88:ba:46:a3:47:9f: 2c:d7:51:e0:fd:02:c2:97:cb:86:bf:9a:3a:a1:5e:bd:4c:26: d3:78:1b:b9:28:79:c1:e8:7a:64:d5:14:61:98:9d:b6:f8:e4: e7:bd:8f:44:24:0b:02:19:5d:18:28:37:8a:03:a6:ec:f8:ff: 39:3b:7e:59:98:c0:26:0e:ae:b8:ac:2a:c0:9f:f4:66:fa:40: 68:49:55:ce:7f:5b:8f:e1:18:a0:f2:2a:b9:73:05:25:d8:ef: ac:a6:8d:85:da:0d:62:0c:e9:ec:14:f6:1e:1b:ee:00:c5:86: aa:72:e0:c6:a4:fa:9e:94:b0:1a:20:11:04:48:8f:37:0d:6c: 13:6d:dc:d6:17:91:5e:85:51:6b:1b:1b:03:9e:c1:0b:fa:47: 29:41:56:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHujGoqwG/Q3kXBpg+y42uc3zoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA2MTMwODE5MDJaFw0yNjA2MTQxMTMyMDJaMDMxMTAvBgNV BAMTKDU4OUEyRDZBN0JEQzI3QTVDMUY2OTZBQUVGOEY4MzMyQjYzQzBEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3a1CjZ6jDKNx1PStR3q+OQulN ssqnvclgv5ndCxMx/ZsgMVKASyymPmoGDzEieOVeUxWmDxIeuWNt/NCOEeKzQkd2 Gwb4LHaqaOKwf3abvc78pPEFS11BqxgEnzPvxP4LrLMG54Dzka+Y+Kjwg+ZOBcFo IrP/wu0sbfUQmSxGZchE6AflN2ZO9MCPlIZ+Vuud8uhwMNwt80UnABx6XL3ZzDaX +6DhNZER0XBXvjiVssMLCN74J+6C84238thWGj+7ioBIIpoiD534aglQ+kbip/EV bIsHUc4YNDpIAd/APWeeyeM437LF5f0bh5nqkZmgbp1BIPyJiLfSx0ar23MDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJotanvcJ6XB9paq74+DMrY8DRcwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY8inPhzBO8mcSi0qPPUHPdrmkvVH2nmBl0 SffMORQqfqO++LTyR9XdaCQae1RgbCVCiBQne8IwORTbx7XR0zgrJ508falHtRyA 7KU9/VP3GorwE2aWHxMiFUfBvg0O2Hi5g1CC4oi6RqNHnyzXUeD9AsKXy4a/mjqh Xr1MJtN4G7koecHoemTVFGGYnbb45Oe9j0QkCwIZXRgoN4oDpuz4/zk7flmYwCYO rrisKsCf9Gb6QGhJVc5/W4/hGKDyKrlzBSXY76ymjYXaDWIM6ewU9h4b7gDFhqpy 4Mak+p6UsBogEQRIjzcNbBNt3NYXkV6FUWsbGwOewQv6RylBVjo= -----END CERTIFICATE-----Generated at Sat Jun 13 16:36:45 2026 by rpki-client