$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: BWkHwu+htO8RjyCkIj8pO8g0sCs5trtdIvsxPzaGoss= Subject key identifier: B2:93:46:25:97:0C:0B:EC:EF:8B:1F:A8:EE:60:2E:9E:92:A2:A3:1E Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 69DEA8C6D65EF0CCCBAA3C754469D7195D08502A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:33:45 +0000 Manifest this update: Tue 02 Jun 2026 19:28:45 +0000 Manifest next update: Wed 03 Jun 2026 21:24:45 +0000 Files and hashes: 1: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: Wro7PLr7VVVORQ4lIKWzlBUUCrWiE/ZnG0miGc03xeI=) 2: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 4: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 5: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:de:a8:c6:d6:5e:f0:cc:cb:aa:3c:75:44:69:d7:19:5d:08:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Jun 2 19:28:45 2026 GMT Not After : Jun 3 21:24:45 2026 GMT Subject: CN=B2934625970C0BECEF8B1FA8EE602E9E92A2A31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:bc:74:0e:98:cc:a3:33:a6:cd:24:a4:3e: 7e:fa:24:fa:9b:17:24:4e:b1:60:6a:58:ee:1d:95: 97:51:e2:f0:3a:21:95:e2:4b:a2:41:19:b5:1a:5e: 38:0a:f3:78:43:97:48:67:00:d4:ad:7d:ea:28:b5: f6:65:93:8e:89:4b:6b:d5:38:40:55:a1:6d:35:d4: fd:12:36:b3:e1:28:18:ee:68:e4:b2:3b:ef:0b:e9: 53:6e:b4:5e:49:dc:0b:36:13:12:9e:3e:7f:6a:6a: 5b:0c:e9:64:eb:2e:b6:81:b9:35:e0:88:9e:10:e8: 0b:7b:52:cf:1a:18:7f:9f:da:be:d2:e3:02:6e:9a: fd:f0:67:64:56:6c:a3:ac:3e:31:e2:af:6a:82:83: f6:ef:a6:dd:ac:f8:e1:f6:17:7e:24:45:07:5e:fb: 26:2c:89:5c:49:5b:ab:ab:15:96:06:4c:2c:a5:23: 7c:24:28:e0:b2:68:c2:a5:da:d1:04:94:33:33:d4: a1:ea:1a:82:0d:69:c3:77:b7:e8:87:a7:b1:87:80: 5b:d8:63:3f:45:dc:db:c7:d7:31:98:1b:39:2b:42: c2:2d:03:b2:6d:19:8c:13:fe:97:84:73:d0:73:53: 36:73:ad:3c:09:f6:b7:9b:8e:ef:f6:2f:b5:5b:15: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:46:25:97:0C:0B:EC:EF:8B:1F:A8:EE:60:2E:9E:92:A2:A3:1E X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:39:37:a0:f8:2f:19:5b:c1:86:73:5f:5b:2e:23:8f:70:da: 60:e3:23:53:4f:87:cc:9a:14:be:1c:28:40:dc:bb:fe:39:81: a8:f9:70:de:f9:79:4c:62:fb:0d:8d:a8:41:98:68:77:5f:be: 07:a6:be:5b:05:ba:80:f8:83:12:4a:f4:eb:49:4c:0a:cf:d5: bb:58:07:3c:37:1c:0c:42:69:09:33:1a:8e:9c:ac:4b:77:2c: e7:31:48:e3:d9:06:60:ff:5b:0f:c8:33:de:ca:55:f2:0b:4e: b9:f9:ea:74:df:e6:84:84:a1:cb:af:ef:8a:bf:8b:67:7c:ed: 8b:91:ab:4c:49:a8:14:c4:cb:0c:ef:72:01:80:6d:c6:4d:74: a1:fc:55:7b:66:8c:fe:1d:67:20:ea:1e:33:d9:a4:d7:27:93: 05:0b:ca:60:52:4d:e7:11:be:68:b0:ac:4a:23:ef:d0:62:92: cd:f5:d5:76:d2:16:5b:12:9d:52:72:29:fc:1a:b7:dd:d2:5f: bc:0f:c3:6a:ea:33:73:69:2a:72:a6:3c:a6:2d:7b:50:b3:9c: 76:92:b5:9a:be:e5:19:ff:1c:df:7d:e1:6f:c7:e4:58:40:ca: 9c:8d:dc:c8:3d:cc:f7:6d:31:c2:fb:59:f4:49:7d:fb:a2:ba: 00:b1:ba:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUad6oxtZe8MzLqjx1RGnXGV0IUCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA2MDIxOTI4NDVaFw0yNjA2MDMyMTI0NDVaMDMxMTAvBgNV BAMTKEIyOTM0NjI1OTcwQzBCRUNFRjhCMUZBOEVFNjAyRTlFOTJBMkEzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67bx0DpjMozOmzSSkPn76JPqb FyROsWBqWO4dlZdR4vA6IZXiS6JBGbUaXjgK83hDl0hnANStfeootfZlk46JS2vV OEBVoW011P0SNrPhKBjuaOSyO+8L6VNutF5J3As2ExKePn9qalsM6WTrLraBuTXg iJ4Q6At7Us8aGH+f2r7S4wJumv3wZ2RWbKOsPjHir2qCg/bvpt2s+OH2F34kRQde +yYsiVxJW6urFZYGTCylI3wkKOCyaMKl2tEElDMz1KHqGoINacN3t+iHp7GHgFvY Yz9F3NvH1zGYGzkrQsItA7JtGYwT/peEc9BzUzZzrTwJ9rebju/2L7VbFTC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspNGJZcMC+zvix+o7mAunpKiox4wHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg5N6D4LxlbwYZzX1suI49w2mDjI1NPh8ya FL4cKEDcu/45gaj5cN75eUxi+w2NqEGYaHdfvgemvlsFuoD4gxJK9OtJTArP1btY Bzw3HAxCaQkzGo6crEt3LOcxSOPZBmD/Ww/IM97KVfILTrn56nTf5oSEocuv74q/ i2d87YuRq0xJqBTEywzvcgGAbcZNdKH8VXtmjP4dZyDqHjPZpNcnkwULymBSTecR vmiwrEoj79Biks311XbSFlsSnVJyKfwat93SX7wPw2rqM3NpKnKmPKYte1CznHaS tZq+5Rn/HN994W/H5FhAypyN3Mg9zPdtMcL7WfRJffuiugCxun0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:44 2026 by rpki-client