$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: IJewttm+eEJlXxxD3K73Bw0O8TzTR3N+ttNRpb7Sjh4= Subject key identifier: 65:62:5F:39:0C:21:DD:B7:91:8C:BD:65:75:47:0B:A0:6C:CB:36:BC Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 6CE8EE077DDE8BBFA3ACB597932BF8EB33EFCD2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:26 +0000 Manifest this update: Tue 02 Jun 2026 19:13:26 +0000 Manifest next update: Wed 03 Jun 2026 21:11:26 +0000 Files and hashes: 1: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: cmv8nU7pzq2aA5g+42hf30KHbcm4W7GyVVa7WjrYN/Q=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e8:ee:07:7d:de:8b:bf:a3:ac:b5:97:93:2b:f8:eb:33:ef:cd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Jun 2 19:13:26 2026 GMT Not After : Jun 3 21:11:26 2026 GMT Subject: CN=65625F390C21DDB7918CBD6575470BA06CCB36BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:a2:db:d6:02:1b:ff:ac:e5:c6:7f:ab:dc: e5:22:ef:23:27:c4:7d:31:0f:4c:85:07:8e:3a:e1: e2:21:c3:8e:bc:db:77:99:08:d7:d3:04:9f:0f:a9: 05:9e:cc:41:9b:9f:3d:f4:7d:c7:73:66:66:f8:8c: bb:e4:a7:22:36:f4:f0:29:1a:84:d2:56:81:70:9a: ac:75:7c:b6:a1:db:e6:64:91:2e:b3:72:99:4f:67: b8:7a:d7:65:90:02:fe:4a:d0:b2:77:6d:4a:b1:28: a3:ac:38:d8:cb:11:a7:95:ec:64:de:10:e3:3a:41: 78:64:19:ae:7b:d7:d4:f7:74:ba:d5:ce:84:a9:ab: a3:b7:50:98:0e:ba:c2:5d:20:95:0c:53:ac:88:0f: fa:17:25:39:96:a8:34:28:bb:ad:ef:9a:45:62:ae: 50:39:66:9a:cb:b2:48:fb:a5:03:50:2e:64:12:62: 0f:01:43:2b:c2:e8:45:c6:46:75:2a:b7:f9:c9:20: 35:a4:eb:df:33:64:29:10:f4:99:66:b0:a6:11:fd: bd:a0:bf:81:22:37:74:c6:91:4e:35:c4:36:12:a5: 0f:c4:1d:c4:c6:e3:21:93:2d:4c:d8:56:94:b2:87: 7e:c5:5c:7c:bb:e7:b6:ce:27:6d:6c:68:a5:b4:eb: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:5F:39:0C:21:DD:B7:91:8C:BD:65:75:47:0B:A0:6C:CB:36:BC X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f7:79:9d:d9:a9:7e:2e:3e:1e:09:64:2b:6d:75:76:2f:0d: 90:91:21:b5:c4:66:7e:68:1a:9d:fe:d9:14:e9:9a:3e:d9:6a: 4f:09:62:10:ad:aa:1e:d8:65:0b:7b:05:8f:0e:5d:4d:0d:c3: ec:fa:28:64:3c:9b:c7:54:ba:c2:85:c7:92:39:d4:cf:f9:20: 89:23:6a:d5:12:28:0f:88:38:63:8e:2d:b8:53:ba:97:ca:0b: 6d:72:6d:41:ab:0c:60:8e:39:03:ec:31:fe:ce:74:c0:a4:81: f5:a3:e8:3e:5e:3e:98:a7:23:11:2e:23:8a:22:ac:1d:07:70: cf:da:bf:43:b3:ed:12:20:b8:5f:31:c3:d2:50:ce:2f:99:8e: 6d:e2:fa:e5:ff:b4:a9:59:9a:bf:92:a9:4f:cf:fc:a5:f3:f7: e2:ae:57:d1:5a:10:52:fb:5b:84:3d:a2:78:11:ee:82:17:ae: 27:07:a7:af:e0:3b:30:e5:bc:97:ca:fb:35:89:7e:ca:4c:f1: 28:79:27:5d:b2:15:81:78:65:fa:59:ce:09:ce:ee:34:b4:a1: d2:13:54:19:f3:91:4d:fc:6b:aa:83:62:5f:c6:65:02:3d:ef: a4:be:af:03:b9:e6:d6:7a:c7:49:00:b6:d7:1a:97:03:76:9e: a3:fb:cb:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOjuB33ei7+jrLWXkyv46zPvzS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjA2MDIxOTEzMjZaFw0yNjA2MDMyMTExMjZaMDMxMTAvBgNV BAMTKDY1NjI1RjM5MEMyMUREQjc5MThDQkQ2NTc1NDcwQkEwNkNDQjM2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SaLb1gIb/6zlxn+r3OUi7yMn xH0xD0yFB4464eIhw46823eZCNfTBJ8PqQWezEGbnz30fcdzZmb4jLvkpyI29PAp GoTSVoFwmqx1fLah2+ZkkS6zcplPZ7h612WQAv5K0LJ3bUqxKKOsONjLEaeV7GTe EOM6QXhkGa5719T3dLrVzoSpq6O3UJgOusJdIJUMU6yID/oXJTmWqDQou63vmkVi rlA5ZprLskj7pQNQLmQSYg8BQyvC6EXGRnUqt/nJIDWk698zZCkQ9JlmsKYR/b2g v4EiN3TGkU41xDYSpQ/EHcTG4yGTLUzYVpSyh37FXHy757bOJ21saKW06yg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWJfOQwh3beRjL1ldUcLoGzLNrwwHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL3eZ3ZqX4uPh4JZCttdXYvDZCRIbXEZn5o Gp3+2RTpmj7Zak8JYhCtqh7YZQt7BY8OXU0Nw+z6KGQ8m8dUusKFx5I51M/5IIkj atUSKA+IOGOOLbhTupfKC21ybUGrDGCOOQPsMf7OdMCkgfWj6D5ePpinIxEuI4oi rB0HcM/av0Oz7RIguF8xw9JQzi+Zjm3i+uX/tKlZmr+SqU/P/KXz9+KuV9FaEFL7 W4Q9ongR7oIXricHp6/gOzDlvJfK+zWJfspM8Sh5J12yFYF4ZfpZzgnO7jS0odIT VBnzkU38a6qDYl/GZQI976S+rwO55tZ6x0kAttcalwN2nqP7y8c= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:41 2026 by rpki-client