$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: o4mf3yZ9nEuW97f8VcCT0QgPgF358fkI0OKMplOCx6g= Subject key identifier: DE:A0:DB:FF:F2:8E:AB:35:A7:3B:3D:33:15:D4:52:72:5A:DD:9C:EC Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 2E913599C72C5E4F275A8B74B1485337234AE032 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:58:33 +0000 Manifest this update: Wed 03 Jun 2026 02:53:33 +0000 Manifest next update: Thu 04 Jun 2026 06:27:33 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 2: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: MSJc1Pxwup2qf4WtBXHJWQUYRXAbsnwRbXq5D1Ajmz0=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:91:35:99:c7:2c:5e:4f:27:5a:8b:74:b1:48:53:37:23:4a:e0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Jun 3 02:53:33 2026 GMT Not After : Jun 4 06:27:33 2026 GMT Subject: CN=DEA0DBFFF28EAB35A73B3D3315D452725ADD9CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:19:78:fe:84:2f:22:50:67:7b:64:78:b3: 6a:9f:32:b8:e3:56:aa:b9:a9:35:d6:8f:24:99:b2: 8c:23:c1:2b:ae:47:34:64:38:5c:08:cc:5b:75:99: 86:b8:e4:ee:41:7c:27:f8:8a:ad:16:a2:8a:ad:a1: 65:34:6a:0e:d5:41:48:c7:5f:74:db:21:03:17:89: 5d:47:1c:6f:20:c9:ee:ef:b2:36:53:3c:58:1a:77: 92:57:fb:34:42:ff:9d:51:9a:93:95:98:a8:61:c0: 03:a4:82:25:29:0a:5d:c7:a8:67:36:14:e0:1b:75: 13:7d:c8:49:f0:59:37:af:40:e0:8f:83:0e:1b:82: 33:e4:f7:25:18:6c:47:b8:09:53:69:5f:59:e5:b1: 33:70:48:c7:de:ef:3e:f4:ef:d6:c0:ce:df:6f:90: 53:95:16:cd:31:1c:a7:5c:c3:8e:dd:02:8a:bf:55: a3:02:f3:65:18:46:73:1b:ec:87:b5:ae:32:ac:5f: 09:b8:33:4e:ce:c5:54:aa:a3:52:b3:67:7e:5c:ee: 28:3b:63:15:dd:56:61:b3:f9:87:21:87:ed:84:57: b2:39:90:d5:62:d6:19:16:27:a7:4b:1b:01:22:fd: ba:21:45:cc:e9:b0:6b:d8:6f:f1:b4:53:b5:70:0d: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A0:DB:FF:F2:8E:AB:35:A7:3B:3D:33:15:D4:52:72:5A:DD:9C:EC X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e6:58:45:72:14:31:7c:09:2d:9d:74:e5:34:b8:3d:81:37: b0:fa:8d:c0:81:01:e6:fb:03:06:70:b3:d1:a3:6d:7e:95:a1: f8:60:aa:7a:c9:8e:18:b1:b7:49:37:eb:c9:a5:82:17:ce:b9: e5:ac:7a:7a:e3:ec:b7:37:e2:e1:18:3b:61:61:0f:3f:c3:9d: d5:a8:0d:3c:ae:0b:9a:8f:0c:4c:e1:2d:f2:fd:74:da:ca:d1: f6:fd:89:f8:c4:d8:6e:c0:31:eb:7f:7e:bf:d6:fb:a4:1c:7b: 8e:0d:7e:28:9e:8e:8f:ab:c0:81:96:d3:e2:1c:27:d9:5d:e4: bc:53:8d:14:72:4d:0b:65:cc:59:66:da:2c:ed:83:1b:92:21: 3f:9b:73:d1:77:f4:6d:63:5b:31:70:fb:23:f9:f3:26:b3:cd: e9:8a:b6:d5:c2:6d:da:fb:ce:0b:68:88:45:1a:be:73:7e:a2: 4d:23:74:f7:6c:64:48:05:16:69:d2:db:63:e8:a0:0f:1a:68: 79:78:ec:dc:e4:50:0e:60:1e:00:00:fe:f4:52:02:1f:de:53: 91:db:57:16:d4:33:29:73:35:57:1c:97:a4:d1:e6:a1:d3:98: 8a:fb:d9:3c:52:9c:b9:e0:07:a3:1d:d7:9a:4f:42:74:51:8b: 13:d7:08:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpE1mccsXk8nWot0sUhTNyNK4DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA2MDMwMjUzMzNaFw0yNjA2MDQwNjI3MzNaMDMxMTAvBgNV BAMTKERFQTBEQkZGRjI4RUFCMzVBNzNCM0QzMzE1RDQ1MjcyNUFERDlDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaxl4/oQvIlBne2R4s2qfMrjj Vqq5qTXWjySZsowjwSuuRzRkOFwIzFt1mYa45O5BfCf4iq0WooqtoWU0ag7VQUjH X3TbIQMXiV1HHG8gye7vsjZTPFgad5JX+zRC/51RmpOVmKhhwAOkgiUpCl3HqGc2 FOAbdRN9yEnwWTevQOCPgw4bgjPk9yUYbEe4CVNpX1nlsTNwSMfe7z7079bAzt9v kFOVFs0xHKdcw47dAoq/VaMC82UYRnMb7Ie1rjKsXwm4M07OxVSqo1KzZ35c7ig7 YxXdVmGz+Ychh+2EV7I5kNVi1hkWJ6dLGwEi/bohRczpsGvYb/G0U7VwDSc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qDb//KOqzWnOz0zFdRSclrdnOwwHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfmWEVyFDF8CS2ddOU0uD2BN7D6jcCBAeb7 AwZws9GjbX6VofhgqnrJjhixt0k368mlghfOueWsenrj7Lc34uEYO2FhDz/DndWo DTyuC5qPDEzhLfL9dNrK0fb9ifjE2G7AMet/fr/W+6Qce44Nfiiejo+rwIGW0+Ic J9ld5LxTjRRyTQtlzFlm2iztgxuSIT+bc9F39G1jWzFw+yP58yazzemKttXCbdr7 zgtoiEUavnN+ok0jdPdsZEgFFmnS22PooA8aaHl47NzkUA5gHgAA/vRSAh/eU5Hb VxbUMylzNVccl6TR5qHTmIr72TxSnLngB6Md15pPQnRRixPXCC4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:45:39 2026 by rpki-client