$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: OfX2pg5769tI/MKvQYW9VaWRQUYK8KF+9J5QrtwiEk0= Subject key identifier: 8E:CC:ED:D6:6D:16:DF:FE:94:43:DF:BB:6F:90:EB:89:2B:12:E7:FE Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 4992092A0187CDD12DD481968CEBB3D07CB6256D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:03:46 +0000 Manifest this update: Tue 02 Jun 2026 22:58:46 +0000 Manifest next update: Thu 04 Jun 2026 00:40:46 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) 3: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: KpovxHSDCn3/tyoEnrJiHvIGUrOI3PkTSSYgkTs6sEw=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:92:09:2a:01:87:cd:d1:2d:d4:81:96:8c:eb:b3:d0:7c:b6:25:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Jun 2 22:58:46 2026 GMT Not After : Jun 4 00:40:46 2026 GMT Subject: CN=8ECCEDD66D16DFFE9443DFBB6F90EB892B12E7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:f3:d0:8d:8a:d0:d2:48:7c:49:ca:2b:5a: a6:87:fd:36:be:92:fc:bd:b3:25:b3:ad:7a:e9:1c: 0c:b7:89:da:b6:d9:df:ed:b5:4a:66:00:a6:70:69: 7e:c3:5c:1b:66:46:8e:8b:c9:8f:73:e2:a9:bc:5a: 9c:ec:f0:3b:b0:04:18:dc:2a:4a:9a:36:c3:d9:13: ed:52:43:cd:50:e5:60:66:45:4c:29:3b:af:10:e1: fe:fe:d8:a9:21:e1:9d:e2:a9:e2:dc:f8:98:11:e0: 0d:f2:26:bf:57:65:d4:e7:fe:9d:56:60:63:ec:bc: 69:91:3b:5c:2b:e7:f8:b6:74:37:46:5d:41:71:40: 2b:06:d7:e4:7a:b1:12:e2:f4:19:e9:63:e0:ae:44: 46:d9:69:b4:1c:76:f3:e4:c1:e8:b0:88:76:b7:5c: d1:06:ee:89:19:ca:28:3e:da:e7:b2:70:cb:95:81: e5:b7:60:bd:35:69:dc:c5:17:03:85:22:d3:e0:23: ae:d8:56:82:2a:c8:c3:90:e5:0c:c7:f8:f9:45:d0: 3c:08:63:60:f5:a8:d4:a6:12:e3:fb:02:dd:c6:4a: ea:06:25:39:55:3b:41:00:c7:bc:85:d4:5a:b6:fd: 42:c2:95:de:31:9e:70:f4:19:a1:1e:b9:c8:db:06: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CC:ED:D6:6D:16:DF:FE:94:43:DF:BB:6F:90:EB:89:2B:12:E7:FE X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:01:53:02:e9:23:8d:68:05:69:98:4b:7b:7b:a0:8f:55: 55:82:95:00:ce:01:fe:a4:68:15:50:e8:04:df:f4:06:57:26: eb:81:44:40:d6:8c:fc:27:d7:f4:d0:3e:ef:a5:77:b9:53:5d: 81:07:c3:dc:2b:a9:79:71:41:57:44:44:98:7c:b5:fa:10:c2: 86:ab:03:57:f0:0d:be:a8:0d:f0:c4:fa:80:d0:22:b8:9e:6d: 26:a6:ab:6e:b0:2f:b1:f0:5b:34:de:3a:9a:58:d3:1d:ad:3c: 0f:d8:9c:54:28:1d:cf:87:19:6c:40:57:31:2c:71:7b:19:6a: a4:7c:fc:ed:73:70:39:d6:c5:5b:1f:c5:74:db:6e:82:86:9d: ec:f5:fb:bc:97:41:70:c9:c4:f1:4a:74:3c:9f:45:8f:b8:fc: 88:3a:39:28:98:95:93:73:3a:69:8f:36:48:96:c5:42:3a:e3: 1d:54:6e:2d:4b:5a:12:73:da:d8:fc:b5:bc:52:0e:a1:89:ea: 9d:e3:ee:44:bb:39:37:bd:9f:66:cf:9b:1e:f6:e8:ef:aa:6a: c9:80:f8:98:60:cb:8d:6f:5a:d0:ac:1e:f5:92:7e:da:10:ae: bf:c8:bb:a5:51:f2:63:27:69:f0:3d:62:b6:a4:61:11:47:28: 3e:14:f7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZIJKgGHzdEt1IGWjOuz0Hy2JW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA2MDIyMjU4NDZaFw0yNjA2MDQwMDQwNDZaMDMxMTAvBgNV BAMTKDhFQ0NFREQ2NkQxNkRGRkU5NDQzREZCQjZGOTBFQjg5MkIxMkU3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebPPQjYrQ0kh8ScorWqaH/Ta+ kvy9syWzrXrpHAy3idq22d/ttUpmAKZwaX7DXBtmRo6LyY9z4qm8Wpzs8DuwBBjc KkqaNsPZE+1SQ81Q5WBmRUwpO68Q4f7+2Kkh4Z3iqeLc+JgR4A3yJr9XZdTn/p1W YGPsvGmRO1wr5/i2dDdGXUFxQCsG1+R6sRLi9BnpY+CuREbZabQcdvPkweiwiHa3 XNEG7okZyig+2ueycMuVgeW3YL01adzFFwOFItPgI67YVoIqyMOQ5QzH+PlF0DwI Y2D1qNSmEuP7At3GSuoGJTlVO0EAx7yF1Fq2/ULCld4xnnD0GaEeucjbBkxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjszt1m0W3/6UQ9+7b5DriSsS5/4wHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy0AVMC6SONaAVpmEt7e6CPVVWClQDOAf6k aBVQ6ATf9AZXJuuBREDWjPwn1/TQPu+ld7lTXYEHw9wrqXlxQVdERJh8tfoQwoar A1fwDb6oDfDE+oDQIriebSamq26wL7HwWzTeOppY0x2tPA/YnFQoHc+HGWxAVzEs cXsZaqR8/O1zcDnWxVsfxXTbboKGnez1+7yXQXDJxPFKdDyfRY+4/Ig6OSiYlZNz OmmPNkiWxUI64x1Ubi1LWhJz2tj8tbxSDqGJ6p3j7kS7OTe9n2bPmx726O+qasmA +Jhgy41vWtCsHvWSftoQrr/Iu6VR8mMnafA9YrakYRFHKD4U99I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:53:01 2026 by rpki-client