$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: xs6Eb3/qVH/YvN51G/rlrZ4ZaeyZi5lR55TqJK+ARCs= Subject key identifier: 76:D4:03:21:78:4B:59:99:A7:D9:E2:0B:61:7C:FC:26:26:B7:3A:BA Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 52747F9912312F311F7469EC3766B56BD51B5077 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:40:01 +0000 Manifest this update: Tue 02 Jun 2026 20:35:01 +0000 Manifest next update: Wed 03 Jun 2026 21:13:01 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 2: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: FkMSwIes9mGT3zY/YMB+iet32cgF0VCxZZq+Qgw58Rc=) 3: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:74:7f:99:12:31:2f:31:1f:74:69:ec:37:66:b5:6b:d5:1b:50:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Jun 2 20:35:01 2026 GMT Not After : Jun 3 21:13:01 2026 GMT Subject: CN=76D40321784B5999A7D9E20B617CFC2626B73ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:ba:49:0a:c5:3c:21:6d:ab:7b:5d:f2:f4: ca:79:82:53:af:2f:50:8f:c2:4d:34:53:3d:50:f4: 40:f5:dc:71:69:c7:e4:ab:05:ee:89:81:7e:7b:fd: e5:1b:c4:6a:42:60:25:8b:6b:a6:a2:ae:49:e4:55: b6:48:11:c2:61:96:23:7e:c5:b9:83:69:45:3b:85: 94:4b:81:9c:a3:a6:12:8c:fb:71:55:64:aa:8e:0c: d0:1d:2f:04:3e:8d:cc:85:71:28:92:62:2a:7b:cc: f6:ae:67:c7:6a:74:62:b7:87:54:35:31:e1:4a:d8: 70:29:e3:82:64:7d:3f:c6:60:a0:1b:5e:db:fe:98: 2a:99:10:e2:29:f7:8e:48:f5:12:0d:78:a7:60:1a: 5f:53:82:c5:1b:3f:8d:e1:15:c5:91:4b:ac:d9:74: 23:9c:e2:e7:b9:a2:57:96:3b:0e:72:10:bb:07:59: 22:c7:7e:17:d4:3a:5d:48:64:74:cd:f2:65:b0:1a: 6a:5b:32:9c:e7:be:73:4b:5e:74:cc:f4:c2:2c:7e: 17:45:b5:e9:62:a9:da:27:ef:a6:96:fc:d1:a3:90: 43:b9:fb:f9:c7:69:99:49:6f:05:a9:3a:cc:d6:e4: 77:5b:57:5c:85:da:70:ae:2d:44:44:9b:d8:be:ea: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D4:03:21:78:4B:59:99:A7:D9:E2:0B:61:7C:FC:26:26:B7:3A:BA X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:82:e1:21:ed:ad:47:c5:6c:ee:35:30:23:ca:55:c8:26:d0: 28:ec:e0:cd:76:3c:85:b4:f6:86:a0:d9:79:50:a0:c8:72:1f: 38:0f:a0:0a:aa:5d:83:b6:cb:07:c8:4b:c9:2a:0d:86:01:18: 60:bd:0a:93:d0:9f:eb:f4:ae:4a:be:54:02:04:6a:80:6f:f4: 92:b6:c5:4d:52:51:8a:81:d9:fb:9e:8f:ff:10:f5:e7:ca:62: 74:03:42:85:77:28:9c:6e:60:c2:b1:7c:12:5f:c3:32:a0:c0: 89:b7:88:4e:ec:77:e3:10:67:6d:6c:9c:4a:65:54:25:21:3c: 10:4f:5e:60:5d:44:f9:d5:62:fa:8c:9b:23:3e:4c:c7:8a:85: 27:45:10:92:2e:3c:4a:df:b5:86:72:64:c1:d1:67:b4:3f:13: f2:d1:6a:a3:0a:6d:23:fc:eb:f4:0c:49:4f:96:7f:fc:23:57: 3e:23:05:18:a3:d2:5e:ee:8b:16:dc:bf:d4:53:df:04:c5:87: 98:86:ff:9e:3c:cc:7f:d9:5e:64:98:6d:ef:17:b7:06:c4:6f: 44:1e:52:33:91:82:a0:d8:00:b6:82:95:bf:44:29:55:8d:e9: 90:a1:00:ac:a9:8b:83:1f:4c:b5:7b:c5:22:75:27:55:d2:c9: ae:06:24:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnR/mRIxLzEfdGnsN2a1a9UbUHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA2MDIyMDM1MDFaFw0yNjA2MDMyMTEzMDFaMDMxMTAvBgNV BAMTKDc2RDQwMzIxNzg0QjU5OTlBN0Q5RTIwQjYxN0NGQzI2MjZCNzNBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94bpJCsU8IW2re13y9Mp5glOv L1CPwk00Uz1Q9ED13HFpx+SrBe6JgX57/eUbxGpCYCWLa6airknkVbZIEcJhliN+ xbmDaUU7hZRLgZyjphKM+3FVZKqODNAdLwQ+jcyFcSiSYip7zPauZ8dqdGK3h1Q1 MeFK2HAp44JkfT/GYKAbXtv+mCqZEOIp945I9RINeKdgGl9TgsUbP43hFcWRS6zZ dCOc4ue5oleWOw5yELsHWSLHfhfUOl1IZHTN8mWwGmpbMpznvnNLXnTM9MIsfhdF teliqdon76aW/NGjkEO5+/nHaZlJbwWpOszW5HdbV1yF2nCuLUREm9i+6kY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtQDIXhLWZmn2eILYXz8Jia3OrowHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaC4SHtrUfFbO41MCPKVcgm0Cjs4M12PIW0 9oag2XlQoMhyHzgPoAqqXYO2ywfIS8kqDYYBGGC9CpPQn+v0rkq+VAIEaoBv9JK2 xU1SUYqB2fuej/8Q9efKYnQDQoV3KJxuYMKxfBJfwzKgwIm3iE7sd+MQZ21snEpl VCUhPBBPXmBdRPnVYvqMmyM+TMeKhSdFEJIuPErftYZyZMHRZ7Q/E/LRaqMKbSP8 6/QMSU+Wf/wjVz4jBRij0l7uixbcv9RT3wTFh5iG/548zH/ZXmSYbe8XtwbEb0Qe UjORgqDYALaClb9EKVWN6ZChAKypi4MfTLV7xSJ1J1XSya4GJHo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:11 2026 by rpki-client