$ rpki-client -vvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: z2Ih74GtP9Mtoi8DUa9LrmFc33MiFSf/UY9bM/IOOCk= Subject key identifier: 37:C5:A6:E4:16:18:7B:F4:4F:9E:66:6D:86:1D:00:D1:9C:28:3B:C8 Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 2D5FC384E2F7D557A69C6AA899C8C062FC63A9E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:54:15 +0000 Manifest this update: Tue 02 Jun 2026 15:49:15 +0000 Manifest next update: Wed 03 Jun 2026 17:17:15 +0000 Files and hashes: 1: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: I23hoO7W8Nu/GFVjQw6Yjov12tI/0R+7ONoOWctIPWs=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) 3: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5f:c3:84:e2:f7:d5:57:a6:9c:6a:a8:99:c8:c0:62:fc:63:a9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Jun 2 15:49:15 2026 GMT Not After : Jun 3 17:17:15 2026 GMT Subject: CN=37C5A6E416187BF44F9E666D861D00D19C283BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:cc:89:c9:96:49:23:dd:77:b2:0f:a0:8b: f2:63:12:6a:30:81:08:22:5b:b5:da:a3:46:c2:d9: 8b:7f:9b:1b:5c:3d:3c:49:73:aa:4f:69:bd:96:ca: 92:60:99:67:ef:68:6b:92:9c:76:e2:fe:8f:2f:0f: fa:29:90:8c:1d:56:c3:37:13:b6:8c:32:34:cd:ed: 7f:e6:12:51:2b:1c:2d:81:7d:b4:f6:35:d9:90:45: 25:88:b0:a1:ec:bb:ba:1c:2f:7d:0f:69:01:54:90: 8a:a5:3b:2e:23:84:e7:90:34:80:ca:c2:f6:7a:7d: c7:ac:f7:1c:ad:ed:33:29:70:a7:da:c2:77:b2:9f: 66:1f:f9:1b:5e:b1:4c:41:f5:04:d4:d8:4e:62:ae: a6:84:b1:2f:3f:de:93:11:dc:f6:51:f5:30:1d:04: d1:bd:89:79:e3:d9:3d:4a:3b:bb:a2:dd:5a:04:c7: 0f:42:55:dc:11:58:e8:6d:a5:0a:f5:ad:40:a3:92: 4a:85:44:b3:60:fe:d1:d9:ac:5d:e4:e8:57:59:ac: 64:6c:9f:a0:c9:68:5a:0c:b2:18:72:23:2e:f5:d8: 49:35:0b:95:d1:5c:25:5a:2c:f1:ed:96:64:54:8b: 23:2e:17:30:f0:46:9f:88:e9:09:7b:d1:e7:00:c7: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C5:A6:E4:16:18:7B:F4:4F:9E:66:6D:86:1D:00:D1:9C:28:3B:C8 X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:0a:46:89:76:cf:ca:b3:77:2c:a4:7c:b9:90:c7:29:62: 3c:bb:b7:a0:76:cd:41:1d:b4:95:fc:69:33:68:78:a4:bb:e0: c9:d7:96:64:c9:d7:e4:69:80:5a:ba:d8:44:5a:1e:70:04:14: 71:54:2f:2d:0e:c9:c3:02:dc:04:d8:cf:3c:ef:df:d4:e3:d6: f2:9f:7a:ab:93:2c:d3:51:f8:3c:60:22:d5:63:3c:1b:4e:9e: af:05:0b:9a:b6:5a:a5:b5:ec:65:a8:0b:b9:26:fb:d2:16:c6: 5a:15:78:35:41:46:bd:89:32:a2:7f:2c:83:1a:38:b4:67:52: 78:86:5a:70:98:fa:0f:a2:6e:bb:02:45:b7:9d:ed:79:42:40: 47:12:8f:30:7b:47:63:1c:21:da:b7:9b:85:12:e4:5c:50:66: 12:0e:7c:7d:de:82:a9:3b:52:04:89:01:32:c0:0b:b5:38:03: d7:24:b3:77:07:0f:5c:2c:73:80:97:e5:f5:ed:eb:7b:5f:99: 01:a3:6c:ae:7f:e2:98:73:d3:de:f7:d2:55:fb:f9:c2:be:71: ce:ab:32:21:0a:15:91:57:0c:5a:aa:ab:3a:7b:b2:db:9f:60: de:5c:f7:eb:07:7c:74:5b:55:e7:1a:4c:87:44:1c:1a:43:c5: 4f:ee:b6:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULV/DhOL31VemnGqomcjAYvxjqecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA2MDIxNTQ5MTVaFw0yNjA2MDMxNzE3MTVaMDMxMTAvBgNV BAMTKDM3QzVBNkU0MTYxODdCRjQ0RjlFNjY2RDg2MUQwMEQxOUMyODNCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJMyJyZZJI913sg+gi/JjEmow gQgiW7Xao0bC2Yt/mxtcPTxJc6pPab2WypJgmWfvaGuSnHbi/o8vD/opkIwdVsM3 E7aMMjTN7X/mElErHC2BfbT2NdmQRSWIsKHsu7ocL30PaQFUkIqlOy4jhOeQNIDK wvZ6fces9xyt7TMpcKfawneyn2Yf+RtesUxB9QTU2E5irqaEsS8/3pMR3PZR9TAd BNG9iXnj2T1KO7ui3VoExw9CVdwRWOhtpQr1rUCjkkqFRLNg/tHZrF3k6FdZrGRs n6DJaFoMshhyIy712Ek1C5XRXCVaLPHtlmRUiyMuFzDwRp+I6Ql70ecAxwnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8Wm5BYYe/RPnmZthh0A0ZwoO8gwHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtACkaJds/Ks3cspHy5kMcpYjy7t6B2zUEd tJX8aTNoeKS74MnXlmTJ1+RpgFq62ERaHnAEFHFULy0OycMC3ATYzzzv39Tj1vKf equTLNNR+DxgItVjPBtOnq8FC5q2WqW17GWoC7km+9IWxloVeDVBRr2JMqJ/LIMa OLRnUniGWnCY+g+ibrsCRbed7XlCQEcSjzB7R2McIdq3m4US5FxQZhIOfH3egqk7 UgSJATLAC7U4A9cks3cHD1wsc4CX5fXt63tfmQGjbK5/4phz09730lX7+cK+cc6r MiEKFZFXDFqqqzp7stufYN5c9+sHfHRbVecaTIdEHBpDxU/utvE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:58 2026 by rpki-client