$ rpki-client -vvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json) Hash identifier: zA3r2GYX2jUhr27SsRW9G4fTLrdbge5IfOT0hn98eIo= Subject key identifier: 37:DB:78:A8:DD:18:CA:D1:90:86:23:23:0D:C8:BC:16:8E:32:37:BE Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Certificate serial: 42BB77C38F549D12697A2127DE7A80E308C16C72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:30:31 +0000 Manifest this update: Wed 03 Jun 2026 00:25:31 +0000 Manifest next update: Thu 04 Jun 2026 03:32:31 +0000 Files and hashes: 1: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=) 2: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=) 3: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=) 4: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=) 5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=) 6: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: ZeJ/h3AmqlMR6a1tqRrf89n9of09U5yldac1lHp4+Kg=) 7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:77:c3:8f:54:9d:12:69:7a:21:27:de:7a:80:e3:08:c1:6c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Validity Not Before: Jun 3 00:25:31 2026 GMT Not After : Jun 4 03:32:31 2026 GMT Subject: CN=37DB78A8DD18CAD1908623230DC8BC168E3237BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:39:7a:eb:43:4c:5d:e6:b3:ae:18:fd:45: 33:1c:45:69:1f:8e:f6:c8:31:55:e2:bb:42:69:32: 6c:9e:39:e3:82:65:b2:d8:c3:57:c8:21:54:2d:33: 47:9d:90:ce:58:5a:ed:b6:a6:be:70:7d:b9:4d:ec: 20:3a:1f:38:8f:4f:d3:fa:cb:48:3d:f8:6f:59:43: 91:37:f4:0e:33:36:b0:34:39:1e:55:a9:26:e8:41: 9d:bd:c1:b7:eb:88:1b:60:a6:53:0e:f2:b7:1f:66: 83:2e:03:07:aa:4d:be:dc:6a:3d:78:78:43:55:ad: c7:2a:a2:5e:41:97:da:05:c9:fb:23:d4:7c:60:39: 5a:2b:37:53:1a:60:70:16:b7:e3:f6:69:16:00:21: 6d:17:8d:5d:20:4a:25:e7:01:7e:ad:93:eb:e9:32: f7:95:c7:fd:9b:4b:f7:f4:0d:03:b7:a8:28:bb:17: 93:ac:31:dd:30:bd:a9:55:79:a4:ca:79:94:b9:e0: a9:2a:4d:4e:dd:e9:db:f6:d2:5d:e9:5a:01:14:4d: 78:e9:fe:61:4f:1c:ee:aa:d9:4b:e1:82:53:4b:f3: 2c:14:52:1d:36:b7:01:5f:66:22:7b:e8:e3:09:0a: b4:93:e4:83:be:46:13:e1:8d:dd:18:80:ad:94:ef: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DB:78:A8:DD:18:CA:D1:90:86:23:23:0D:C8:BC:16:8E:32:37:BE X509v3 Authority Key Identifier: keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:79:4b:4d:47:c5:10:3d:01:f7:60:7d:ed:db:af:09:dc:65: 42:95:73:36:3b:53:3b:ec:ef:41:8f:75:98:32:ac:df:53:e8: 7d:23:48:59:28:79:75:9b:51:46:79:c8:5a:55:7e:83:46:a0: 19:b5:2f:93:45:e1:7f:68:f3:1e:41:ee:8a:8c:3c:d6:df:37: 59:8f:b3:92:d8:b6:70:5a:18:03:83:de:7f:0e:f7:15:da:62: 80:43:07:4e:4a:07:7d:ff:c8:a8:75:a5:4e:22:4b:98:12:8e: 23:63:e5:f0:a7:83:0f:0d:04:10:b4:42:91:8b:8f:ae:e7:c9: dd:a9:2a:4f:2e:fa:2d:5b:6d:24:25:16:cc:07:63:80:a3:ec: 21:3d:47:03:3c:a3:e0:fd:18:3d:0b:bc:a9:27:a2:8a:ba:77: 33:3a:b4:cd:3c:5e:7c:31:79:7e:ad:d4:0b:17:88:80:18:11: 3b:37:e5:78:34:d8:cd:7e:4b:27:2c:58:70:96:39:2f:f6:48: c0:ef:8e:48:f4:ef:20:bc:81:3b:b1:aa:ee:2e:a0:cb:45:61: f5:11:f8:ff:88:da:2e:88:db:b9:73:25:19:58:f8:ba:e1:a5: 26:1e:ab:8d:f1:bb:a2:71:eb:21:cd:4c:f1:0f:8d:84:06:e4: 01:b3:39:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrt3w49UnRJpeiEn3nqA4wjBbHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQxOTAw MTFFNDYzRDAeFw0yNjA2MDMwMDI1MzFaFw0yNjA2MDQwMzMyMzFaMDMxMTAvBgNV BAMTKDM3REI3OEE4REQxOENBRDE5MDg2MjMyMzBEQzhCQzE2OEUzMjM3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ljl660NMXeazrhj9RTMcRWkf jvbIMVXiu0JpMmyeOeOCZbLYw1fIIVQtM0edkM5YWu22pr5wfblN7CA6HziPT9P6 y0g9+G9ZQ5E39A4zNrA0OR5VqSboQZ29wbfriBtgplMO8rcfZoMuAweqTb7caj14 eENVrccqol5Bl9oFyfsj1HxgOVorN1MaYHAWt+P2aRYAIW0XjV0gSiXnAX6tk+vp MveVx/2bS/f0DQO3qCi7F5OsMd0wvalVeaTKeZS54KkqTU7d6dv20l3pWgEUTXjp /mFPHO6q2UvhglNL8ywUUh02twFfZiJ76OMJCrST5IO+RhPhjd0YgK2U70Q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9t4qN0YytGQhiMjDci8Fo4yN74wHwYDVR0j BBgwFoAUs+j9PRc70Yn4CAxMHenRkAEeRj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcyODA0MDAtOTY1NC00ZDQ1LTg4OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0Qx NzNCRDE4OUY4MDgwQzRDMURFOUQxOTAwMTFFNDYzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0U4RkQzRDE3M0JEMTg5RjgwODBDNEMxREU5RDE5MDAxMUU0 NjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQx OTAwMTFFNDYzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV5S01HxRA9Afdgfe3brwncZUKVczY7Uzvs 70GPdZgyrN9T6H0jSFkoeXWbUUZ5yFpVfoNGoBm1L5NF4X9o8x5B7oqMPNbfN1mP s5LYtnBaGAOD3n8O9xXaYoBDB05KB33/yKh1pU4iS5gSjiNj5fCngw8NBBC0QpGL j67nyd2pKk8u+i1bbSQlFswHY4Cj7CE9RwM8o+D9GD0LvKknooq6dzM6tM08Xnwx eX6t1AsXiIAYETs35Xg02M1+SycsWHCWOS/2SMDvjkj07yC8gTuxqu4uoMtFYfUR +P+I2i6I27lzJRlY+LrhpSYeq43xu6Jx6yHNTPEPjYQG5AGzOTQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:58:29 2026 by rpki-client