$ rpki-client -vvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: gxM7LVpY6j8Mi3L5vGyeo1H0vV6E5H3sGwiyfXNgl+I= Subject key identifier: EE:D2:F6:A8:CC:09:29:0E:29:3A:49:AF:95:C5:1C:F7:6C:C2:6B:98 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 362EDF441A00E69D65E14ADF463960C6CF3C3A9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:05:35 +0000 Manifest this update: Tue 02 Jun 2026 17:00:35 +0000 Manifest next update: Wed 03 Jun 2026 17:54:35 +0000 Files and hashes: 1: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: RQST1d+41AAQFNeX6uk/T2HSbiOw2K6V0sDLVgquWNE=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2e:df:44:1a:00:e6:9d:65:e1:4a:df:46:39:60:c6:cf:3c:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Jun 2 17:00:35 2026 GMT Not After : Jun 3 17:54:35 2026 GMT Subject: CN=EED2F6A8CC09290E293A49AF95C51CF76CC26B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:d3:92:6a:ab:6e:c9:ba:b0:cc:dd:d6:4d: 8a:89:f0:72:70:d8:8a:ec:40:88:03:14:bf:ae:4b: 52:37:a7:2a:99:7e:c6:14:5e:ad:7a:0e:04:41:d7: 6e:6f:72:cc:3d:99:00:fa:c2:d4:1f:d8:1e:23:c0: ff:ce:9d:87:7e:1a:d1:8e:bb:ec:3d:33:19:6c:c5: be:f0:66:ce:1c:42:3e:39:6c:ff:d6:6f:3e:17:90: b5:c7:39:69:4e:f1:ec:b4:c0:b1:13:c9:97:7e:11: 7a:40:4a:d5:4f:b5:b3:f7:2e:12:06:5e:cf:9d:45: 14:92:0e:60:24:b6:d0:74:98:49:17:b2:ac:91:3b: 64:86:8d:2f:de:77:00:88:e0:80:94:60:3f:16:70: 14:31:0d:0e:f9:e3:f3:15:f3:cf:1c:d8:18:cd:33: 55:86:6f:e0:ff:d4:29:2a:4c:98:60:f8:c1:37:c1: bd:ab:b4:83:58:23:4a:b6:c9:dc:10:d9:5a:c6:57: ff:1d:71:0b:13:82:96:71:40:35:a1:b8:95:ad:78: 10:db:e6:68:81:db:2f:d2:7f:cc:53:4f:38:35:c6: bf:09:13:22:51:98:ab:4a:73:9a:0e:1e:45:e3:26: 12:56:d3:c0:29:d3:15:e8:67:d6:61:fd:56:23:dd: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D2:F6:A8:CC:09:29:0E:29:3A:49:AF:95:C5:1C:F7:6C:C2:6B:98 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:07:ba:49:db:c3:44:a8:46:c4:4c:57:27:3f:bd:37:fa:d0: 34:b0:e4:d8:ce:cf:8d:3d:f8:0a:5f:d8:67:df:db:32:ef:cd: e8:a2:19:d6:16:03:fa:8e:89:7e:f6:3a:9f:f9:21:0b:d0:67: fd:5d:45:79:07:3b:a5:c3:4e:9f:7a:c6:0b:e1:f7:5b:fb:3d: 5a:71:88:a7:7e:90:17:d0:22:79:b6:08:6e:f0:60:7b:61:c0: 84:9d:9a:00:5d:ed:e5:7c:0e:f1:2b:78:3f:b9:67:b4:bd:be: 5a:9a:59:99:27:62:75:77:ef:6c:55:e4:52:c0:16:61:98:8a: f1:4e:2c:5f:ef:cd:60:01:c2:c2:9a:78:e5:e8:aa:24:2d:1e: 7b:fe:c5:f3:3b:15:5c:de:6a:72:05:33:24:ff:bf:4c:18:94: 4a:47:ec:8a:4b:c0:d0:e8:b7:a4:0d:1e:d1:3f:15:43:70:27: 97:d4:ae:6b:24:76:57:29:e9:3d:39:24:5d:85:da:3b:0a:b3: ed:ae:6b:b2:95:29:8a:e3:ae:dc:fd:26:16:b7:dd:02:07:85: cf:d9:5d:e5:9e:d9:d5:07:95:00:9b:4b:6f:af:90:25:1b:04: 52:75:9d:50:c6:b1:ae:49:f4:06:6e:a7:07:22:17:db:b2:64: b8:1f:96:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNi7fRBoA5p1l4UrfRjlgxs88OpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA2MDIxNzAwMzVaFw0yNjA2MDMxNzU0MzVaMDMxMTAvBgNV BAMTKEVFRDJGNkE4Q0MwOTI5MEUyOTNBNDlBRjk1QzUxQ0Y3NkNDMjZCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BtOSaqtuybqwzN3WTYqJ8HJw 2IrsQIgDFL+uS1I3pyqZfsYUXq16DgRB125vcsw9mQD6wtQf2B4jwP/OnYd+GtGO u+w9Mxlsxb7wZs4cQj45bP/Wbz4XkLXHOWlO8ey0wLETyZd+EXpAStVPtbP3LhIG Xs+dRRSSDmAkttB0mEkXsqyRO2SGjS/edwCI4ICUYD8WcBQxDQ754/MV888c2BjN M1WGb+D/1CkqTJhg+ME3wb2rtINYI0q2ydwQ2VrGV/8dcQsTgpZxQDWhuJWteBDb 5miB2y/Sf8xTTzg1xr8JEyJRmKtKc5oOHkXjJhJW08Ap0xXoZ9Zh/VYj3UmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7tL2qMwJKQ4pOkmvlcUc92zCa5gwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoHuknbw0SoRsRMVyc/vTf60DSw5NjOz409 +Apf2Gff2zLvzeiiGdYWA/qOiX72Op/5IQvQZ/1dRXkHO6XDTp96xgvh91v7PVpx iKd+kBfQInm2CG7wYHthwISdmgBd7eV8DvEreD+5Z7S9vlqaWZknYnV372xV5FLA FmGYivFOLF/vzWABwsKaeOXoqiQtHnv+xfM7FVzeanIFMyT/v0wYlEpH7IpLwNDo t6QNHtE/FUNwJ5fUrmskdlcp6T05JF2F2jsKs+2ua7KVKYrjrtz9Jha33QIHhc/Z XeWe2dUHlQCbS2+vkCUbBFJ1nVDGsa5J9AZupwciF9uyZLgflmQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:46 2026 by rpki-client