$ rpki-client -vvf rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft File: 3B15BA656D26B1B7E87FC6809B5DC98888377711.mft (raw, json) Hash identifier: p1u4uHYka+SZpY2cfiN2FAeyKhjDqobrw3EPKJ6+uIk= Subject key identifier: 9D:0E:F1:BF:BD:3C:5C:86:EE:CE:0D:74:F2:B7:33:D2:48:C5:DB:F9 Authority key identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 Certificate issuer: /CN=3B15BA656D26B1B7E87FC6809B5DC98888377711 Certificate serial: 24A436D1E8C916BC5907A6EAE041303BD03C34BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:46:55 +0000 Manifest this update: Tue 02 Jun 2026 13:41:55 +0000 Manifest next update: Wed 03 Jun 2026 16:30:55 +0000 Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: ORkadPFDAal3pRKFSqyDMiG09OIpPciiMF7Guuyi4C0=) 2: 3B15BA656D26B1B7E87FC6809B5DC98888377711.crl (hash: rQ7mPWdEhI8dbbxpXC0atnQDT/Y2v817+1ISklMz4JI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a4:36:d1:e8:c9:16:bc:59:07:a6:ea:e0:41:30:3b:d0:3c:34:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B15BA656D26B1B7E87FC6809B5DC98888377711 Validity Not Before: Jun 2 13:41:55 2026 GMT Not After : Jun 3 16:30:55 2026 GMT Subject: CN=9D0EF1BFBD3C5C86EECE0D74F2B733D248C5DBF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:49:65:37:43:ee:8b:e0:13:af:8a:9c:e8: f6:4c:e3:e1:06:c1:73:bd:cc:f0:c6:ec:9a:6e:2f: dc:36:21:1c:76:bb:d3:24:7c:73:f9:5e:f5:c7:b4: b2:d8:33:5a:33:ab:4b:bb:2e:96:06:04:99:7b:a8: c0:d2:c4:fa:32:50:cc:b2:22:f2:23:57:20:25:d3: d6:5d:f1:ff:15:f2:ff:a0:6f:13:37:c5:c9:cb:f9: 12:9e:88:ec:f5:70:08:58:ba:57:8e:62:dd:ad:b9: 1b:4c:86:52:44:dd:3c:5b:3d:92:92:cd:53:2e:01: f5:c7:9b:41:bd:e3:6f:ff:8d:db:68:67:e2:96:aa: 83:80:d7:e2:bc:b2:c3:61:7e:cd:c5:66:9e:d1:2a: 3b:76:b1:50:e2:00:63:8f:ae:82:af:3c:6b:b4:9e: 11:b9:e2:86:ed:08:44:71:ca:2f:27:ca:e2:67:8c: 8a:6b:2e:10:a3:80:39:71:57:1a:8d:45:80:77:7e: 3f:d7:a2:9f:18:f9:64:f7:e7:70:69:4c:57:e1:57: 2e:c0:0f:2e:e7:89:a2:f6:03:f7:f6:e7:b6:cd:9b: a5:4f:53:cd:75:e8:51:fd:6f:ec:d4:4b:d1:07:d1: 19:af:52:49:0c:55:bf:d7:18:16:47:41:68:7e:e5: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0E:F1:BF:BD:3C:5C:86:EE:CE:0D:74:F2:B7:33:D2:48:C5:DB:F9 X509v3 Authority Key Identifier: keyid:3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:32:36:c2:46:67:6f:3a:f7:2d:aa:11:81:98:4c:08:03:7b: 95:46:7c:e4:c1:c5:73:0c:fe:da:da:cf:45:54:88:7f:77:37: 06:40:72:2d:60:11:3d:a2:30:08:4f:f8:eb:6a:e5:c3:de:b9: e3:18:97:a1:1f:38:a3:d5:bc:f5:a9:f1:cc:d4:99:2f:0f:87: f8:17:86:ce:bb:5c:39:c4:4d:0e:4f:11:b6:96:0d:3e:11:a2: 7c:79:f7:18:24:2f:22:d1:33:8e:a2:f5:12:4d:d3:1e:2c:29: 39:d5:54:9a:f5:b5:2b:20:d8:dc:ab:48:96:d6:41:8d:c7:00: 74:13:8c:f7:86:8b:3d:18:71:97:d7:b4:6f:23:68:39:33:73: 7e:01:b1:88:d0:4d:c4:2f:b0:2b:f3:6e:7e:d8:a0:e8:83:dc: 0e:9e:02:09:90:b9:dc:d8:a7:b7:91:d7:d8:2d:ca:f4:8b:48: 80:53:c4:b3:cd:e4:62:1a:51:09:f2:ea:00:8b:92:21:7e:e4: 51:d6:d9:fc:55:ac:49:b1:57:43:e2:7f:28:7a:6b:85:e1:9b: 39:c1:ce:e6:1c:d3:e4:98:e0:af:67:3b:d5:16:c7:fa:97:76: 72:bd:15:df:4f:d4:69:db:d7:09:3c:d1:38:c7:32:4b:30:ee: ac:3e:c4:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKQ20ejJFrxZB6bq4EEwO9A8NL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4 ODM3NzcxMTAeFw0yNjA2MDIxMzQxNTVaFw0yNjA2MDMxNjMwNTVaMDMxMTAvBgNV BAMTKDlEMEVGMUJGQkQzQzVDODZFRUNFMEQ3NEYyQjczM0QyNDhDNURCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTQkllN0Pui+ATr4qc6PZM4+EG wXO9zPDG7JpuL9w2IRx2u9MkfHP5XvXHtLLYM1ozq0u7LpYGBJl7qMDSxPoyUMyy IvIjVyAl09Zd8f8V8v+gbxM3xcnL+RKeiOz1cAhYuleOYt2tuRtMhlJE3TxbPZKS zVMuAfXHm0G942//jdtoZ+KWqoOA1+K8ssNhfs3FZp7RKjt2sVDiAGOProKvPGu0 nhG54obtCERxyi8nyuJnjIprLhCjgDlxVxqNRYB3fj/Xop8Y+WT353BpTFfhVy7A Dy7niaL2A/f257bNm6VPU8116FH9b+zUS9EH0RmvUkkMVb/XGBZHQWh+5foXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQ7xv708XIbuzg108rcz0kjF2/kwHwYDVR0j BBgwFoAUOxW6ZW0msbfof8aAm13JiIg3dxEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDUzZTRhZjUtYWFmNS00NmNlLWIxMTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2 RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4ODM3NzcxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjE1QkE2NTZEMjZCMUI3RTg3RkM2ODA5QjVEQzk4ODg4Mzc3 NzExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5 ODg4ODM3NzcxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQyNsJGZ2869y2qEYGYTAgDe5VGfOTBxXMM /traz0VUiH93NwZAci1gET2iMAhP+Otq5cPeueMYl6EfOKPVvPWp8czUmS8Ph/gX hs67XDnETQ5PEbaWDT4Ronx59xgkLyLRM46i9RJN0x4sKTnVVJr1tSsg2NyrSJbW QY3HAHQTjPeGiz0YcZfXtG8jaDkzc34BsYjQTcQvsCvzbn7YoOiD3A6eAgmQudzY p7eR19gtyvSLSIBTxLPN5GIaUQny6gCLkiF+5FHW2fxVrEmxV0Pifyh6a4XhmznB zuYc0+SY4K9nO9UWx/qXdnK9Fd9P1Gnb1wk80TjHMksw7qw+xGE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:18 2026 by rpki-client