$ rpki-client -vvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json) Hash identifier: kucQFVmey8X+QJ9cyKNii3AhdvTzbW7Q6FIEP5zLuOw= Subject key identifier: 57:0E:4F:3B:AC:B1:EE:13:7D:62:A8:FF:BE:57:35:09:BE:E0:5E:C4 Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Certificate serial: 21DE6A77426E3C9A08D3DDF98BEB8135645EC3B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:17:26 +0000 Manifest this update: Tue 02 Jun 2026 14:12:26 +0000 Manifest next update: Wed 03 Jun 2026 17:02:26 +0000 Files and hashes: 1: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: fKWV9MjR1JG/uoxLnQ2n5+7Pv9fxZV8TZo/Vri6s9Ec=) 2: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:de:6a:77:42:6e:3c:9a:08:d3:dd:f9:8b:eb:81:35:64:5e:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Validity Not Before: Jun 2 14:12:26 2026 GMT Not After : Jun 3 17:02:26 2026 GMT Subject: CN=570E4F3BACB1EE137D62A8FFBE573509BEE05EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:bb:94:4a:65:6a:89:21:ea:c3:e1:b1:bb: e9:66:4e:80:34:04:41:4f:c7:ef:b6:a1:4c:0a:ae: 4e:ca:0c:30:09:e0:4b:09:ab:c8:6c:9c:b6:2d:14: 20:a5:54:46:e7:3d:e8:b5:5f:1e:83:e5:40:f6:e5: b4:52:6f:79:fd:54:40:15:9a:4b:0c:e2:ac:76:e7: fa:21:d4:f2:1f:74:40:bc:dc:3c:03:3d:a7:61:15: ec:49:32:23:46:d7:1e:26:62:b7:f0:58:5e:31:d7: d3:93:b3:17:ef:57:f8:5c:a1:2c:fd:c8:07:47:52: a5:78:6b:08:8a:a2:65:72:21:c7:e8:2a:3c:7e:18: 2b:d6:95:01:24:ee:df:a6:d6:e9:5b:5b:15:95:be: 98:a6:65:f4:f1:ca:b9:94:bf:69:2e:3e:37:ed:b1: 58:50:eb:36:23:7d:fd:b7:21:24:d1:f2:26:f3:6d: 43:1c:cf:dc:e1:36:aa:ac:0e:55:cd:de:80:d7:b2: 52:d0:27:7c:2b:95:55:7b:36:5c:2f:89:e9:6b:83: 1d:0e:9f:7f:ef:9d:e6:9f:ca:ce:cf:81:a7:47:e8: 08:fe:42:5e:08:c1:e1:e7:e8:75:ba:20:16:e6:42: 22:35:cf:a5:e0:e4:1f:92:fd:4d:45:31:2d:ed:b1: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:4F:3B:AC:B1:EE:13:7D:62:A8:FF:BE:57:35:09:BE:E0:5E:C4 X509v3 Authority Key Identifier: keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5b:93:f5:8e:95:84:38:69:52:86:32:0d:0c:80:e4:54:48: 84:ae:48:50:d9:10:98:4f:b6:66:f9:44:c7:95:71:88:ef:ef: 00:dd:ff:f0:06:94:30:8a:6c:54:e5:9e:98:13:a1:59:a8:54: 07:4d:df:b0:1f:8d:65:92:68:af:f4:83:6c:2e:5a:ff:67:fb: d9:39:6a:db:4e:69:ae:fe:eb:5a:da:f6:c6:f4:c2:ea:19:e8: 64:ea:49:82:b2:07:98:96:8f:d8:51:d4:ed:6f:ad:0c:5c:4c: 74:54:e0:d1:96:f1:8b:ac:56:f1:ca:9e:9a:8c:d4:5b:df:0e: dd:40:42:16:23:7c:9f:e6:73:89:e3:4c:fb:54:6d:20:29:0f: 42:a3:6d:41:e0:3b:64:54:ee:bf:97:f4:a7:21:50:c9:01:39: 99:2a:52:c6:7e:ac:db:d0:72:fd:31:3b:a7:71:8a:82:86:65: e8:e1:67:fd:32:2b:a4:be:61:45:4c:79:bf:c2:11:27:a4:4e: 3b:ba:1b:eb:34:7e:ce:f0:f1:69:96:8a:f3:21:63:a9:3c:91: a4:26:f2:51:8f:95:ea:28:ac:15:72:a1:be:f0:69:3b:1c:49: c5:73:c9:7c:4e:a5:d3:65:ea:e5:7d:e8:42:0d:94:b3:68:ee: 04:ac:87:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId5qd0JuPJoI0935i+uBNWRew7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3 NjM4MjRBMTAeFw0yNjA2MDIxNDEyMjZaFw0yNjA2MDMxNzAyMjZaMDMxMTAvBgNV BAMTKDU3MEU0RjNCQUNCMUVFMTM3RDYyQThGRkJFNTczNTA5QkVFMDVFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf7uUSmVqiSHqw+Gxu+lmToA0 BEFPx++2oUwKrk7KDDAJ4EsJq8hsnLYtFCClVEbnPei1Xx6D5UD25bRSb3n9VEAV mksM4qx25/oh1PIfdEC83DwDPadhFexJMiNG1x4mYrfwWF4x19OTsxfvV/hcoSz9 yAdHUqV4awiKomVyIcfoKjx+GCvWlQEk7t+m1ulbWxWVvpimZfTxyrmUv2kuPjft sVhQ6zYjff23ISTR8ibzbUMcz9zhNqqsDlXN3oDXslLQJ3wrlVV7Nlwvielrgx0O n3/vneafys7PgadH6Aj+Ql4IweHn6HW6IBbmQiI1z6Xg5B+S/U1FMS3tsW0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVw5PO6yx7hN9Yqj/vlc1Cb7gXsQwHwYDVR0j BBgwFoAUPr4udPDuWaY5XzJeaSgIS3Y4JKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThiNDI0MjAtNTZkMC00NTFhLWEyOWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRG MEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3NjM4MjRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRUJFMkU3NEYwRUU1OUE2Mzk1RjMyNUU2OTI4MDg0Qjc2Mzgy NEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4 NEI3NjM4MjRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZbk/WOlYQ4aVKGMg0MgORUSISuSFDZEJhP tmb5RMeVcYjv7wDd//AGlDCKbFTlnpgToVmoVAdN37AfjWWSaK/0g2wuWv9n+9k5 attOaa7+61ra9sb0wuoZ6GTqSYKyB5iWj9hR1O1vrQxcTHRU4NGW8YusVvHKnpqM 1FvfDt1AQhYjfJ/mc4njTPtUbSApD0KjbUHgO2RU7r+X9KchUMkBOZkqUsZ+rNvQ cv0xO6dxioKGZejhZ/0yK6S+YUVMeb/CESekTju6G+s0fs7w8WmWivMhY6k8kaQm 8lGPleoorBVyob7waTscScVzyXxOpdNl6uV96EINlLNo7gSsh+k= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:12 2026 by rpki-client