$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: Pm7Wkig2SR7mx4ZWQGnP+z5t9FLAdF81BMcj+7Ckcgw= Subject key identifier: 09:F1:42:29:58:D2:74:78:A9:0B:E7:03:AD:B3:AF:6F:B1:AF:D7:2F Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 0C22BC8F108682AF61B389D2432FC3D3A493BDE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:06:06 +0000 Manifest this update: Wed 03 Jun 2026 01:01:06 +0000 Manifest next update: Thu 04 Jun 2026 02:03:06 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 3: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: V2LBwPb/W4qdDafUEX3srLpyvTNaQpavRh4Jm7d9+to=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:22:bc:8f:10:86:82:af:61:b3:89:d2:43:2f:c3:d3:a4:93:bd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Jun 3 01:01:06 2026 GMT Not After : Jun 4 02:03:06 2026 GMT Subject: CN=09F1422958D27478A90BE703ADB3AF6FB1AFD72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:31:1a:a4:3a:89:15:85:df:d0:9a:2c:84: 08:ac:2a:a7:99:eb:eb:ab:a2:bb:b5:0a:fd:af:d8: 48:7b:17:12:8d:09:78:09:57:6f:55:87:04:b8:11: 01:b5:3d:23:3a:07:49:c2:0a:b8:1c:78:9a:ca:4c: ec:9c:cb:67:51:c3:66:f4:99:02:9b:2e:5c:f0:7e: 88:f9:a8:c3:4e:b5:c3:c8:0f:4f:4e:d6:ad:97:26: da:8d:57:4c:c2:52:0a:d4:af:fe:a7:fa:c8:87:8e: d8:b4:9f:56:81:09:18:65:99:6d:28:4a:c5:7a:dd: 07:a8:da:92:17:15:96:4e:2c:d2:d3:bc:cf:d4:ad: 4a:c6:1d:cf:b7:12:a9:44:6f:cc:6c:83:f2:31:f9: 3c:3a:41:f3:0d:4e:4c:ed:45:90:7f:c0:ee:d0:50: e9:0d:f0:9d:b1:d1:ec:c5:82:66:d7:15:62:01:0b: 37:88:3d:e8:35:23:86:dd:a2:d5:39:6d:d2:e2:ac: f5:8a:ee:e8:5e:00:e3:e6:95:f4:ff:d6:8d:63:2a: a4:1f:72:a4:88:91:c9:16:e0:eb:06:78:02:f8:c5: 00:b6:fa:d2:cd:1a:79:ce:8f:3a:a1:27:c4:c7:8a: 46:32:0c:73:86:ba:90:3b:f3:0e:05:df:e0:d5:b2: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:42:29:58:D2:74:78:A9:0B:E7:03:AD:B3:AF:6F:B1:AF:D7:2F X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:94:c7:71:20:a6:f8:48:12:16:97:cb:b1:2b:9f:b7:45:c1: bd:02:e8:ba:99:31:d0:dd:b6:f9:7c:04:c9:25:e4:20:fa:67: 13:8b:77:d5:b6:12:88:6a:8f:82:96:0d:dd:34:a1:0f:97:ba: 4e:20:fc:23:46:cb:3b:c8:26:88:8d:c2:c6:81:d6:ca:19:8c: f4:75:16:4c:a7:e5:fb:f6:7b:45:97:9a:43:6c:82:8a:f5:6d: 70:43:f7:27:dd:25:16:d9:b6:9d:bc:6e:2b:43:e9:e3:36:45: a1:47:6a:5d:74:f2:8a:28:59:e1:0e:10:1a:3e:45:47:c5:2b: 27:01:6e:a9:eb:8b:aa:0f:26:89:00:90:13:50:67:f1:19:27: 48:5a:18:01:80:55:8a:58:dd:e4:36:a3:5a:47:ec:f9:69:4b: 94:9f:f6:b7:9e:23:10:ac:a5:93:14:6c:d5:12:7d:cd:00:78: cf:d0:2d:36:95:8a:a7:62:af:60:f0:85:2c:f5:bb:6e:2a:0a: 2f:70:76:01:a3:d8:21:d4:fd:72:d6:4e:0b:37:e5:63:19:c0: 4a:ee:ba:57:55:f9:cb:31:e6:f4:87:86:1a:9f:8c:53:10:87: 5c:2b:1b:62:5b:ce:4d:07:0a:09:3e:07:b2:ad:2f:62:75:cd: 62:8b:cc:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCK8jxCGgq9hs4nSQy/D06STveEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA2MDMwMTAxMDZaFw0yNjA2MDQwMjAzMDZaMDMxMTAvBgNV BAMTKDA5RjE0MjI5NThEMjc0NzhBOTBCRTcwM0FEQjNBRjZGQjFBRkQ3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLDEapDqJFYXf0JoshAisKqeZ 6+uroru1Cv2v2Eh7FxKNCXgJV29VhwS4EQG1PSM6B0nCCrgceJrKTOycy2dRw2b0 mQKbLlzwfoj5qMNOtcPID09O1q2XJtqNV0zCUgrUr/6n+siHjti0n1aBCRhlmW0o SsV63Qeo2pIXFZZOLNLTvM/UrUrGHc+3EqlEb8xsg/Ix+Tw6QfMNTkztRZB/wO7Q UOkN8J2x0ezFgmbXFWIBCzeIPeg1I4bdotU5bdLirPWK7uheAOPmlfT/1o1jKqQf cqSIkckW4OsGeAL4xQC2+tLNGnnOjzqhJ8THikYyDHOGupA78w4F3+DVsvDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCfFCKVjSdHipC+cDrbOvb7Gv1y8wHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Ux3EgpvhIEhaXy7Ern7dFwb0C6LqZMdDd tvl8BMkl5CD6ZxOLd9W2Eohqj4KWDd00oQ+Xuk4g/CNGyzvIJoiNwsaB1soZjPR1 Fkyn5fv2e0WXmkNsgor1bXBD9yfdJRbZtp28bitD6eM2RaFHal108oooWeEOEBo+ RUfFKycBbqnri6oPJokAkBNQZ/EZJ0haGAGAVYpY3eQ2o1pH7PlpS5Sf9reeIxCs pZMUbNUSfc0AeM/QLTaViqdir2DwhSz1u24qCi9wdgGj2CHU/XLWTgs35WMZwEru uldV+csx5vSHhhqfjFMQh1wrG2Jbzk0HCgk+B7KtL2J1zWKLzH0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:55 2026 by rpki-client