$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: dZE6NSsc75b6OVpof9pcOzdMdutc6rSgExwbQ7bP2S0= Subject key identifier: BB:22:47:1D:D2:00:EC:67:1A:57:7B:CC:C6:34:E5:E4:31:5A:40:61 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 1364BFA69828265A734F4D65BC07B856FC218383 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:22:36 +0000 Manifest this update: Wed 03 Jun 2026 02:17:36 +0000 Manifest next update: Thu 04 Jun 2026 03:27:36 +0000 Files and hashes: 1: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 2: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: WOWhGlHFxnJG8WvnAopiJjP6oRNzUMIQj2lUd395K4w=) 3: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 4: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) 5: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 6: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:64:bf:a6:98:28:26:5a:73:4f:4d:65:bc:07:b8:56:fc:21:83:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Jun 3 02:17:36 2026 GMT Not After : Jun 4 03:27:36 2026 GMT Subject: CN=BB22471DD200EC671A577BCCC634E5E4315A4061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:74:50:04:5a:ac:0a:15:21:69:49:90:4a: 08:ce:b0:65:19:bd:db:08:56:1a:18:e6:55:d4:93: af:6f:1e:de:b7:03:31:0b:7d:e4:6c:d5:cb:c3:36: 10:e5:d3:de:18:69:f2:c3:8e:ce:11:86:96:3b:b0: d4:2b:a8:bf:30:d5:47:e0:1f:e2:73:1f:6a:3e:ff: d2:7c:b2:aa:18:ce:6b:c3:92:d0:d5:ab:c7:bb:13: d0:21:79:29:5a:fe:35:23:3a:97:9f:13:79:fb:b6: a9:0b:63:fc:38:df:53:f3:f5:b2:3c:e3:e4:67:4a: 9f:a6:19:d1:6c:78:12:52:a8:fb:0c:de:38:75:3d: 1f:04:4b:d4:39:15:8f:d6:ca:79:59:66:e0:9c:b7: ba:2d:1a:ae:54:de:6c:c8:cd:25:9d:50:42:8c:32: 34:76:b6:4d:1f:9a:59:85:38:0c:29:6c:a8:35:2c: 2d:d4:10:b8:4b:19:b2:16:05:76:5a:de:bd:21:0b: 52:c6:de:5f:2b:c1:7e:ea:2d:1c:4b:d5:b1:fa:9b: 6f:c4:55:ca:50:ee:94:21:e5:ff:4d:f9:e1:91:33: c4:50:d4:c9:35:24:ac:64:47:c4:47:89:28:89:6c: fe:fd:3a:13:bb:ed:5f:82:63:f3:05:1b:71:ee:1f: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:47:1D:D2:00:EC:67:1A:57:7B:CC:C6:34:E5:E4:31:5A:40:61 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ef:e2:e3:c9:85:15:d1:90:74:44:39:4b:b7:b8:c8:7f:57: 45:a0:a4:5a:7d:c9:e4:40:79:2e:82:bd:11:ad:82:47:87:ca: 4b:6b:be:14:cb:3f:94:60:bb:72:bf:1c:20:14:27:7d:a2:a8: 70:40:85:d0:6b:af:96:74:6a:77:9d:3b:85:06:ef:7f:a3:50: b9:18:5d:5e:4e:1a:af:a5:61:58:58:17:5d:be:c3:87:78:db: b2:20:c9:fb:1c:e9:e8:75:79:e7:92:d8:0b:16:ef:de:21:d2: 4d:af:b2:6c:08:7b:14:9d:ae:ca:90:a5:10:df:89:34:59:a3: 94:7c:bd:f0:63:cf:70:9c:e3:20:2a:0b:ca:f5:79:ae:ec:ca: 34:38:e9:ba:d6:7f:29:05:1a:ce:5c:91:c4:4c:0d:26:bd:b5: d8:b7:89:d8:e4:a0:30:5a:5b:cd:01:b6:bb:2d:00:11:94:a1: d6:fb:a5:5b:ee:3f:5e:4a:91:82:2b:55:67:04:4b:6e:5b:9d: 37:28:4d:7e:79:fd:29:60:2c:2d:73:d1:9f:7f:1f:2f:d5:bb: e2:50:cf:78:53:ba:55:eb:67:40:9a:f0:91:1e:ca:a2:59:7d: 7e:40:8a:04:7d:cc:27:39:f1:10:76:28:5e:c1:3d:1d:ba:09: c2:5d:03:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2S/ppgoJlpzT01lvAe4Vvwhg4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA2MDMwMjE3MzZaFw0yNjA2MDQwMzI3MzZaMDMxMTAvBgNV BAMTKEJCMjI0NzFERDIwMEVDNjcxQTU3N0JDQ0M2MzRFNUU0MzE1QTQwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJnRQBFqsChUhaUmQSgjOsGUZ vdsIVhoY5lXUk69vHt63AzELfeRs1cvDNhDl094YafLDjs4RhpY7sNQrqL8w1Ufg H+JzH2o+/9J8sqoYzmvDktDVq8e7E9AheSla/jUjOpefE3n7tqkLY/w431Pz9bI8 4+RnSp+mGdFseBJSqPsM3jh1PR8ES9Q5FY/WynlZZuCct7otGq5U3mzIzSWdUEKM MjR2tk0fmlmFOAwpbKg1LC3UELhLGbIWBXZa3r0hC1LG3l8rwX7qLRxL1bH6m2/E VcpQ7pQh5f9N+eGRM8RQ1Mk1JKxkR8RHiSiJbP79OhO77V+CY/MFG3HuH3H3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyJHHdIA7GcaV3vMxjTl5DFaQGEwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/v4uPJhRXRkHREOUu3uMh/V0WgpFp9yeRA eS6CvRGtgkeHyktrvhTLP5Rgu3K/HCAUJ32iqHBAhdBrr5Z0anedO4UG73+jULkY XV5OGq+lYVhYF12+w4d427Igyfsc6eh1eeeS2AsW794h0k2vsmwIexSdrsqQpRDf iTRZo5R8vfBjz3Cc4yAqC8r1ea7syjQ46brWfykFGs5ckcRMDSa9tdi3idjkoDBa W80BtrstABGUodb7pVvuP15KkYIrVWcES25bnTcoTX55/SlgLC1z0Z9/Hy/Vu+JQ z3hTulXrZ0Ca8JEeyqJZfX5AigR9zCc58RB2KF7BPR26CcJdA34= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:19 2026 by rpki-client