$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: WWNA4LFtLJa3cQPGpNdCle6bGYi27n0zUaS3XliLxBw= Subject key identifier: E2:61:47:E6:77:AF:D4:28:39:6F:2A:FA:09:35:24:94:5B:0F:32:90 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 7A2C862D9A9EDF1ECC9EC172EF727BE71379F910 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:09:28 +0000 Manifest this update: Tue 02 Jun 2026 20:04:28 +0000 Manifest next update: Wed 03 Jun 2026 20:35:28 +0000 Files and hashes: 1: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 2: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 3: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: XfDKpiWfUTv5TfH9BKhKHMGjVbx31UZGJjXmkOnzkgU=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2c:86:2d:9a:9e:df:1e:cc:9e:c1:72:ef:72:7b:e7:13:79:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Jun 2 20:04:28 2026 GMT Not After : Jun 3 20:35:28 2026 GMT Subject: CN=E26147E677AFD428396F2AFA093524945B0F3290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c8:7b:62:5d:f6:ad:ee:1c:cb:bf:d9:64:a2: 57:9d:1f:bf:be:99:b6:7f:21:17:78:1a:84:1a:40: e8:73:0d:83:d4:8f:17:97:17:72:66:53:33:be:86: e7:bb:e6:c5:48:a8:9d:4c:d4:0b:07:61:1d:48:15: 4d:7a:39:ba:a0:1c:5b:86:bc:4c:d8:2a:02:92:9b: 9b:13:ba:a8:96:3a:99:99:6f:97:bf:83:de:06:2b: da:29:c0:c1:6e:25:53:b3:87:e4:01:d2:4b:d9:41: a6:68:1d:ec:05:b8:94:48:0f:0a:4a:d9:73:e1:46: 61:0e:23:29:23:cd:bd:17:d6:ac:cb:be:0c:dc:6c: c3:a4:0b:e7:db:42:27:b9:89:7a:0c:d5:35:67:c3: 61:eb:89:00:f2:12:41:53:35:46:87:4a:83:63:48: a1:fc:08:70:5c:b1:8c:33:03:18:66:48:3b:21:13: 4f:50:9e:38:53:e7:d5:83:3c:c4:33:f9:73:19:00: 65:93:c7:15:56:2b:1a:28:6e:6a:a4:2f:84:40:f1: f6:69:ea:63:ea:78:44:9b:e6:17:ee:37:41:14:17: 1c:8e:0b:c0:86:e7:99:6d:7d:5d:d1:92:c4:44:d1: 07:3c:e8:8d:80:b8:ce:35:9f:f1:ac:04:73:ee:9a: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:61:47:E6:77:AF:D4:28:39:6F:2A:FA:09:35:24:94:5B:0F:32:90 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:86:75:81:64:9c:58:26:6f:4b:93:d0:7f:9b:ee:67:33:42: 62:ce:da:e7:bd:48:a3:58:f2:7a:0e:51:5e:91:30:ab:ac:c8: 49:f2:99:81:dd:d4:26:b2:b8:a0:78:70:1e:48:b3:24:37:dc: 7e:c0:fd:78:3b:61:99:1c:d9:f2:8e:b9:8c:7b:22:ba:d8:90: f4:70:5a:53:82:5e:8b:ce:81:92:29:b4:9c:9f:76:8d:2b:29: ad:ff:3a:4a:9d:ae:d9:61:4b:29:80:5a:e1:05:bf:16:8d:86: 04:6e:6b:78:17:75:cd:91:b3:3f:2b:20:27:d5:ec:51:b3:6b: c0:4a:a4:7e:a4:22:31:db:c6:52:69:95:9e:05:75:c6:34:47: e3:d1:b5:b1:eb:bb:f2:de:c8:9e:aa:33:64:9f:78:57:10:29: 36:0e:0c:83:f5:c5:c0:46:b5:c3:77:d7:12:2e:b5:b1:3f:08: 97:fb:39:41:82:88:77:58:66:0c:aa:78:4c:9c:19:8e:fd:e2: fb:e3:53:74:3f:f8:0c:75:da:d0:2f:dd:d0:29:11:03:51:17: f5:c1:ad:09:c2:b6:06:23:e1:27:c3:5b:4b:60:93:ca:5f:a6: 06:5a:91:6f:bc:94:7a:24:f2:a8:f0:ac:73:83:7a:c3:84:6d: 43:55:e9:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiyGLZqe3x7MnsFy73J75xN5+RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA2MDIyMDA0MjhaFw0yNjA2MDMyMDM1MjhaMDMxMTAvBgNV BAMTKEUyNjE0N0U2NzdBRkQ0MjgzOTZGMkFGQTA5MzUyNDk0NUIwRjMyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryHtiXfat7hzLv9lkoledH7++ mbZ/IRd4GoQaQOhzDYPUjxeXF3JmUzO+hue75sVIqJ1M1AsHYR1IFU16ObqgHFuG vEzYKgKSm5sTuqiWOpmZb5e/g94GK9opwMFuJVOzh+QB0kvZQaZoHewFuJRIDwpK 2XPhRmEOIykjzb0X1qzLvgzcbMOkC+fbQie5iXoM1TVnw2HriQDyEkFTNUaHSoNj SKH8CHBcsYwzAxhmSDshE09QnjhT59WDPMQz+XMZAGWTxxVWKxoobmqkL4RA8fZp 6mPqeESb5hfuN0EUFxyOC8CG55ltfV3RksRE0Qc86I2AuM41n/GsBHPumpRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4mFH5nev1Cg5byr6CTUklFsPMpAwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOGdYFknFgmb0uT0H+b7mczQmLO2ue9SKNY 8noOUV6RMKusyEnymYHd1CayuKB4cB5IsyQ33H7A/Xg7YZkc2fKOuYx7IrrYkPRw WlOCXovOgZIptJyfdo0rKa3/OkqdrtlhSymAWuEFvxaNhgRua3gXdc2Rsz8rICfV 7FGza8BKpH6kIjHbxlJplZ4FdcY0R+PRtbHru/LeyJ6qM2SfeFcQKTYODIP1xcBG tcN31xIutbE/CJf7OUGCiHdYZgyqeEycGY794vvjU3Q/+Ax12tAv3dApEQNRF/XB rQnCtgYj4SfDW0tgk8pfpgZakW+8lHok8qjwrHODesOEbUNV6Uo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:15 2026 by rpki-client