$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: e2vsDQ7izK+8CwXq2Fnp7H5TDT2ncQ82sNYH2nMbIMk= Subject key identifier: 5F:30:3D:CD:CC:B9:67:B2:37:9E:5D:81:08:FD:77:41:91:E3:B8:0E Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 66C0031B93E4F2F007C91B29BFF69C96C1B8E21B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:46:06 +0000 Manifest this update: Wed 17 Jun 2026 02:41:06 +0000 Manifest next update: Thu 18 Jun 2026 05:21:06 +0000 Files and hashes: 1: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: 7VLb61GV6S5J22Vsq9qQZnBFOuwddEOKUzZCu5f2O2w=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:03:1b:93:e4:f2:f0:07:c9:1b:29:bf:f6:9c:96:c1:b8:e2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Jun 17 02:41:06 2026 GMT Not After : Jun 18 05:21:06 2026 GMT Subject: CN=5F303DCDCCB967B2379E5D8108FD774191E3B80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:71:e7:60:a2:ad:26:ce:c4:b7:e4:d2:0a: 89:6c:0f:c3:63:18:3f:5a:85:60:fd:1b:71:54:05: c8:81:f6:4c:d1:0b:96:b7:b5:89:47:72:98:81:70: 70:ed:43:4f:06:45:3d:f4:fe:5f:67:07:d5:6f:e0: 91:37:d5:8e:78:e0:3e:a1:ef:08:32:46:02:c8:7b: 80:6e:b5:2b:00:4a:06:2f:46:28:e1:81:38:f8:c5: 7b:e0:a3:53:71:e7:17:58:29:29:e0:5f:08:d8:61: 9c:93:ab:30:a5:03:17:13:a8:35:05:a3:9f:8d:84: 81:a2:61:1d:77:78:d1:6b:6f:74:aa:22:88:30:54: b4:80:58:01:42:c5:dc:f4:e7:05:ef:ee:17:e5:c6: 8a:1f:0d:ca:c9:24:74:ac:f0:cc:2a:db:57:d4:85: 36:ea:5b:4d:5d:18:71:b5:10:f4:d5:6b:e0:a9:0b: d8:fc:64:d4:71:4a:87:a7:4e:88:a1:9b:30:58:04: b0:cf:c2:60:f3:ed:00:9d:97:b7:14:d1:50:3f:ce: f0:64:13:32:37:75:20:54:a8:3e:bf:7c:e6:c2:8e: 11:ba:25:5a:1b:87:c0:93:26:0c:54:dd:99:8f:82: f3:76:cf:54:db:73:39:72:95:1d:1d:ef:f9:21:d5: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:30:3D:CD:CC:B9:67:B2:37:9E:5D:81:08:FD:77:41:91:E3:B8:0E X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d6:16:a6:33:bc:ee:87:40:ae:18:5a:c1:24:3a:6a:a7:21: ed:d7:94:20:54:d4:9a:31:6e:f1:20:a2:45:63:3f:28:a2:7a: 74:6e:ac:9e:79:ab:01:96:06:1d:92:a4:db:12:98:82:cf:93: 3a:54:54:5c:9c:ed:ef:ca:ec:0e:d7:5e:1e:64:f1:36:0f:8c: 46:31:dc:71:a8:02:28:68:d6:5a:e3:08:2d:88:82:46:3f:71: 72:dc:0a:11:13:2b:e5:56:47:2d:24:2b:ac:5d:98:2f:cb:64: ea:63:c9:96:96:ff:93:8e:da:1d:0f:aa:7a:97:b1:97:3c:aa: ea:7c:d9:52:02:17:90:bd:15:a4:09:6b:6e:69:1f:70:88:e1: a7:67:c7:a9:6b:bf:00:d9:8f:df:b1:9f:55:c1:58:14:d9:a9: 7f:40:ba:30:54:98:a5:76:ff:2f:4e:96:d6:8f:fd:59:46:85: 90:33:3e:b7:84:b0:29:ea:14:ef:cd:fa:53:21:d9:9e:ff:59: fe:6d:98:5a:16:17:74:6a:0b:e4:0c:91:46:41:f9:0c:5b:e7: 92:04:98:9d:76:9b:38:77:cf:24:93:c3:d1:68:9c:90:9e:03: 1b:da:b9:a1:70:84:b4:35:80:82:6f:44:e4:93:eb:a5:4d:c3: aa:35:68:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsADG5Pk8vAHyRspv/aclsG44hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA2MTcwMjQxMDZaFw0yNjA2MTgwNTIxMDZaMDMxMTAvBgNV BAMTKDVGMzAzRENEQ0NCOTY3QjIzNzlFNUQ4MTA4RkQ3NzQxOTFFM0I4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMxXHnYKKtJs7Et+TSColsD8Nj GD9ahWD9G3FUBciB9kzRC5a3tYlHcpiBcHDtQ08GRT30/l9nB9Vv4JE31Y544D6h 7wgyRgLIe4ButSsASgYvRijhgTj4xXvgo1Nx5xdYKSngXwjYYZyTqzClAxcTqDUF o5+NhIGiYR13eNFrb3SqIogwVLSAWAFCxdz05wXv7hflxoofDcrJJHSs8Mwq21fU hTbqW01dGHG1EPTVa+CpC9j8ZNRxSoenToihmzBYBLDPwmDz7QCdl7cU0VA/zvBk EzI3dSBUqD6/fObCjhG6JVobh8CTJgxU3ZmPgvN2z1TbczlylR0d7/kh1RRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXzA9zcy5Z7I3nl2BCP13QZHjuA4wHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInWFqYzvO6HQK4YWsEkOmqnIe3XlCBU1Jox bvEgokVjPyiienRurJ55qwGWBh2SpNsSmILPkzpUVFyc7e/K7A7XXh5k8TYPjEYx 3HGoAiho1lrjCC2IgkY/cXLcChETK+VWRy0kK6xdmC/LZOpjyZaW/5OO2h0PqnqX sZc8qup82VICF5C9FaQJa25pH3CI4adnx6lrvwDZj9+xn1XBWBTZqX9AujBUmKV2 /y9OltaP/VlGhZAzPreEsCnqFO/N+lMh2Z7/Wf5tmFoWF3RqC+QMkUZB+Qxb55IE mJ12mzh3zySTw9FonJCeAxvauaFwhLQ1gIJvROST66VNw6o1aCM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:21 2026 by rpki-client