$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: RA+dJxblacc2PMFYhvalvT9exLtNVQrbQPpMT/n+FMg= Subject key identifier: 9F:F7:52:1A:F0:5C:2D:A6:AF:62:1F:97:F3:F2:5B:DC:A3:9A:7D:9C Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 2564B80EED6D0DC6B656838B2388E7B1BB35B94C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:45:12 +0000 Manifest this update: Tue 02 Jun 2026 20:40:12 +0000 Manifest next update: Wed 03 Jun 2026 22:47:12 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: rNqdPoep2Y8QdEdFLx6UOhjzIsIoC/G6XVqtl1COHNY=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:64:b8:0e:ed:6d:0d:c6:b6:56:83:8b:23:88:e7:b1:bb:35:b9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Jun 2 20:40:12 2026 GMT Not After : Jun 3 22:47:12 2026 GMT Subject: CN=9FF7521AF05C2DA6AF621F97F3F25BDCA39A7D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:ea:39:5f:6f:1e:9c:3b:b7:13:5a:c0:ed: 5b:89:f2:71:86:85:18:b0:d8:c5:87:d4:b7:60:c8: 5e:cc:99:88:c7:8a:e4:e2:e4:78:18:de:6a:94:61: 68:75:95:33:23:e6:01:4c:96:c8:2e:aa:d5:ec:d0: 50:48:af:30:c3:fa:4a:e1:40:37:34:5c:de:3c:3a: 4f:d6:5f:fa:88:fb:f2:e4:6a:65:07:be:72:a8:85: 34:62:03:ff:1c:26:c3:bc:0e:f3:33:26:b9:b1:ce: 42:de:d1:98:7d:ea:86:6d:03:56:56:a6:b1:67:40: 0b:2a:9c:8b:3b:3f:24:f4:be:b1:c8:d1:27:bc:ff: 7e:b9:c7:28:f4:a3:de:4f:39:62:fa:e5:97:0c:b0: 95:72:9e:0c:2a:8f:48:34:d3:92:0b:30:4f:49:76: ca:38:82:e0:d0:67:11:b3:21:4c:70:43:b4:2a:b8: d2:90:d8:3a:28:8b:56:0e:98:ca:19:3f:64:b8:80: ac:0e:cc:7a:e3:ff:de:02:12:89:73:f8:4f:f5:9f: 9c:a0:7a:dd:8e:f3:5d:10:fb:d7:46:12:4e:4c:a8: a3:78:d0:67:b0:58:98:71:fe:41:3b:98:f5:a5:92: 94:d9:97:85:b8:7d:14:62:8b:8a:fc:32:a5:8d:d9: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F7:52:1A:F0:5C:2D:A6:AF:62:1F:97:F3:F2:5B:DC:A3:9A:7D:9C X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:be:b5:b2:e0:e3:cf:53:a2:5d:0f:3a:6c:78:f1:bf:1c:9e: 02:46:7c:c7:a0:7a:33:7f:14:b6:d7:b4:72:71:ad:51:40:1c: 7b:5f:9f:44:b2:93:00:b2:9c:30:22:08:2b:1d:fb:78:ae:5d: 47:ab:f6:28:b9:2f:0b:ae:f2:82:42:cc:a8:2e:aa:cc:7e:f8: da:ae:0f:20:65:d6:f0:5c:56:90:2c:c0:04:93:41:61:eb:5f: 11:79:71:b1:4b:21:51:29:80:64:e7:13:ba:2f:89:10:f5:40: c0:e1:9d:3e:bc:86:ee:8e:31:38:8a:9f:28:f9:a7:2d:a4:6b: 45:f9:c8:e5:ed:76:a0:8f:f1:a3:3c:ec:90:cf:70:b5:36:b6: 23:c6:93:c7:64:70:1d:91:cd:b7:1d:f3:5a:00:95:29:2d:1f: 66:93:ba:0d:3e:df:af:39:69:2d:5c:50:9a:b4:35:e3:ac:92: 16:f0:ac:a3:5b:da:dd:78:d3:f2:7e:ef:95:19:d7:be:7d:15: 05:b7:cc:94:e4:0a:e8:37:37:04:da:60:22:e1:c6:bb:9a:2c: 46:6c:fe:d4:eb:d9:ce:eb:17:79:e3:56:2c:88:d6:4c:29:5f: c9:48:16:38:a2:e7:22:e7:4b:b1:62:75:dd:ed:6c:13:72:25: f4:83:7d:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWS4Du1tDca2VoOLI4jnsbs1uUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA2MDIyMDQwMTJaFw0yNjA2MDMyMjQ3MTJaMDMxMTAvBgNV BAMTKDlGRjc1MjFBRjA1QzJEQTZBRjYyMUY5N0YzRjI1QkRDQTM5QTdEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxw+o5X28enDu3E1rA7VuJ8nGG hRiw2MWH1LdgyF7MmYjHiuTi5HgY3mqUYWh1lTMj5gFMlsguqtXs0FBIrzDD+krh QDc0XN48Ok/WX/qI+/LkamUHvnKohTRiA/8cJsO8DvMzJrmxzkLe0Zh96oZtA1ZW prFnQAsqnIs7PyT0vrHI0Se8/365xyj0o95POWL65ZcMsJVyngwqj0g005ILME9J dso4guDQZxGzIUxwQ7QquNKQ2Dooi1YOmMoZP2S4gKwOzHrj/94CEolz+E/1n5yg et2O810Q+9dGEk5MqKN40GewWJhx/kE7mPWlkpTZl4W4fRRii4r8MqWN2aTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/dSGvBcLaavYh+X8/Jb3KOafZwwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy+tbLg489Tol0POmx48b8cngJGfMegejN/ FLbXtHJxrVFAHHtfn0SykwCynDAiCCsd+3iuXUer9ii5Lwuu8oJCzKguqsx++Nqu DyBl1vBcVpAswASTQWHrXxF5cbFLIVEpgGTnE7oviRD1QMDhnT68hu6OMTiKnyj5 py2ka0X5yOXtdqCP8aM87JDPcLU2tiPGk8dkcB2Rzbcd81oAlSktH2aTug0+3685 aS1cUJq0NeOskhbwrKNb2t140/J+75UZ1759FQW3zJTkCug3NwTaYCLhxruaLEZs /tTr2c7rF3njViyI1kwpX8lIFjii5yLnS7Fidd3tbBNyJfSDfTY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:35 2026 by rpki-client