$ rpki-client -vvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: Y3dX8HNZ7Q53l24gn6LJ+5uuONbD/pkYP7giOJW9sYA= Subject key identifier: 3C:4F:D0:2C:BC:25:E7:90:40:79:4B:20:F3:DB:71:4C:D8:3A:6E:7F Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 050DB408B199CD8511EAF6C924B29F1144BAEA0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:57:26 +0000 Manifest this update: Tue 02 Jun 2026 21:52:26 +0000 Manifest next update: Wed 03 Jun 2026 22:00:26 +0000 Files and hashes: 1: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) 2: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: XlkFUI5aE6SH5CT1l6wI1AdcurBISOw55YDo/ZdH+Mk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0d:b4:08:b1:99:cd:85:11:ea:f6:c9:24:b2:9f:11:44:ba:ea:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Jun 2 21:52:26 2026 GMT Not After : Jun 3 22:00:26 2026 GMT Subject: CN=3C4FD02CBC25E79040794B20F3DB714CD83A6E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:af:b6:45:37:a5:4e:15:ed:bd:c5:58:7a: 5c:53:04:93:3c:4a:19:92:14:3b:c2:31:d6:bd:db: 4b:71:34:4b:c3:f3:49:9c:2e:79:5e:7b:ce:18:a1: 67:7b:52:fd:0f:05:6b:6d:d2:8b:08:9c:3e:2c:7a: 03:f8:45:e5:79:df:1b:3a:3a:0a:e4:9e:19:1c:21: d5:db:dc:82:ce:c1:0c:6d:1c:ee:dc:90:15:f3:ad: 44:c4:f1:24:30:64:f5:56:db:e4:a2:13:67:cd:da: b9:d3:77:27:4c:53:db:71:41:1b:b7:05:88:19:b1: 5a:5d:c0:3f:d7:c9:8c:38:d1:ef:c7:72:6e:8a:16: 6a:56:fe:d7:8e:12:2a:4d:60:53:9c:27:1c:3d:5a: 15:4d:be:be:c4:3a:6f:e0:7a:d7:b4:47:b2:d8:07: 68:d0:88:b6:2c:c2:74:85:fb:19:bd:5c:1e:bc:81: 16:41:b5:71:c8:5c:eb:84:0d:90:67:6d:d6:00:ef: 8e:90:ab:1e:fb:a5:50:0c:1c:4f:b1:b9:a1:fb:6b: e3:32:6b:e1:32:43:ca:78:19:41:f1:0c:49:3f:3b: 50:83:0f:78:44:93:56:ed:20:9c:21:f0:d9:12:3e: 9c:f3:31:03:dd:e3:8c:3c:1b:41:32:a7:18:31:2b: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:D0:2C:BC:25:E7:90:40:79:4B:20:F3:DB:71:4C:D8:3A:6E:7F X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4a:6f:fd:6f:46:f7:3b:58:de:3e:6a:5e:8e:c3:cb:33:fc: 79:18:b5:21:96:3b:20:8a:8d:c6:9d:dc:4f:82:c3:d0:21:66: 12:63:b7:c0:b2:66:1a:d3:95:5d:22:ef:47:23:39:d9:7c:62: 08:d1:6d:4d:c9:a1:76:c3:85:8b:ef:9c:38:8b:fb:2f:fd:b0: 9d:17:c0:14:ff:be:b5:ed:c6:87:03:f7:2a:06:fd:fa:46:3b: 02:1f:7c:b1:a0:7d:f6:59:a3:ad:62:f5:3d:46:c6:60:2f:56: 3c:52:9f:ca:da:ec:ee:2c:6e:c5:e8:72:78:05:b2:b1:6f:9a: 59:34:fa:79:c3:32:0e:6a:38:c6:0a:f4:cf:24:2e:94:f6:6e: 56:da:68:34:12:08:d1:a2:8b:65:df:59:32:63:69:71:99:0a: 34:70:fd:36:ec:d0:01:7b:7e:ae:6e:1a:aa:90:03:08:71:b8: 9e:35:a7:76:90:27:90:36:bf:56:f1:04:a2:24:0b:6a:7a:20: 0c:ff:21:03:57:d3:96:e6:7a:ce:ae:ca:ee:1d:b6:bb:c9:f9: 2a:cd:26:24:1c:e0:f4:d1:03:e5:5c:2d:99:17:f5:cc:7a:34: 71:69:d6:2c:07:c8:8f:89:76:21:93:a7:02:e9:3d:8c:97:e0: 9d:96:2c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQ20CLGZzYUR6vbJJLKfEUS66g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA2MDIyMTUyMjZaFw0yNjA2MDMyMjAwMjZaMDMxMTAvBgNV BAMTKDNDNEZEMDJDQkMyNUU3OTA0MDc5NEIyMEYzREI3MTRDRDgzQTZFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYq+2RTelThXtvcVYelxTBJM8 ShmSFDvCMda920txNEvD80mcLnlee84YoWd7Uv0PBWtt0osInD4segP4ReV53xs6 OgrknhkcIdXb3ILOwQxtHO7ckBXzrUTE8SQwZPVW2+SiE2fN2rnTdydMU9txQRu3 BYgZsVpdwD/XyYw40e/Hcm6KFmpW/teOEipNYFOcJxw9WhVNvr7EOm/gete0R7LY B2jQiLYswnSF+xm9XB68gRZBtXHIXOuEDZBnbdYA746Qqx77pVAMHE+xuaH7a+My a+EyQ8p4GUHxDEk/O1CDD3hEk1btIJwh8NkSPpzzMQPd44w8G0EypxgxK7WjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPE/QLLwl55BAeUsg89txTNg6bn8wHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRKb/1vRvc7WN4+al6Ow8sz/HkYtSGWOyCK jcad3E+Cw9AhZhJjt8CyZhrTlV0i70cjOdl8YgjRbU3JoXbDhYvvnDiL+y/9sJ0X wBT/vrXtxocD9yoG/fpGOwIffLGgffZZo61i9T1GxmAvVjxSn8ra7O4sbsXocngF srFvmlk0+nnDMg5qOMYK9M8kLpT2blbaaDQSCNGii2XfWTJjaXGZCjRw/Tbs0AF7 fq5uGqqQAwhxuJ41p3aQJ5A2v1bxBKIkC2p6IAz/IQNX05bmes6uyu4dtrvJ+SrN JiQc4PTRA+VcLZkX9cx6NHFp1iwHyI+JdiGTpwLpPYyX4J2WLIA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:45:12 2026 by rpki-client