$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: uPCb78RYOXsO8LpJxEKFz5o7tbmdKca+Ip7lnxqGuvw= Subject key identifier: 08:33:35:9C:36:8F:A5:11:53:68:4E:A1:71:2C:A6:67:24:38:BB:CF Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 033EB813BE62CB0D9D490F4F647C9A12FDBE4212 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:24:09 +0000 Manifest this update: Tue 02 Jun 2026 11:19:09 +0000 Manifest next update: Wed 03 Jun 2026 11:55:09 +0000 Files and hashes: 1: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: v36bgmRrS88b8+u3rXP/NWbPAdT8Xhit8MrZ5cyQrUQ=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3e:b8:13:be:62:cb:0d:9d:49:0f:4f:64:7c:9a:12:fd:be:42:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Jun 2 11:19:09 2026 GMT Not After : Jun 3 11:55:09 2026 GMT Subject: CN=0833359C368FA51153684EA1712CA6672438BBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:26:7b:81:cc:3e:b1:4f:66:bd:32:7f:d5: 28:2f:92:23:fb:ee:97:85:62:74:d2:12:b7:19:0e: 4b:27:1f:6b:6d:15:5c:39:58:09:06:61:42:e0:43: 97:de:02:13:01:58:e7:db:2c:9c:33:1d:68:f9:85: eb:34:8b:ba:e8:6a:69:89:75:bf:6b:1b:91:71:ee: 0d:55:61:6c:aa:90:6e:e0:4e:e6:6e:ca:3c:42:c5: 76:b4:f6:8b:5e:13:0a:fc:01:2d:38:dc:3f:3d:6c: 6c:da:4e:91:07:68:4f:0c:7e:b7:3e:da:06:51:46: 6f:e8:c8:a9:78:cb:10:c7:40:0c:77:a8:2f:09:1a: 73:ad:c1:dd:3e:18:47:02:01:b5:51:ef:3b:9a:03: c8:41:56:85:47:9c:59:cd:d8:21:2c:81:da:7a:16: 63:ac:97:e1:11:95:15:1e:4e:fb:bd:14:75:88:66: e6:cf:fa:c1:85:9f:ef:a6:c7:ae:ab:d9:f0:c9:3c: 5d:34:7b:50:58:eb:41:00:e0:57:59:df:75:bc:54: 49:43:ca:8d:7d:39:5b:30:3a:38:10:12:c4:6f:28: c5:0c:e7:8c:c1:27:f4:9b:b7:24:71:af:1b:71:ab: de:54:a7:6e:d2:9d:6c:dd:cc:9a:73:1b:89:bd:b1: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:33:35:9C:36:8F:A5:11:53:68:4E:A1:71:2C:A6:67:24:38:BB:CF X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:38:3e:d4:a1:4d:be:c7:66:fc:fa:3a:b9:36:b7:7f:2a: 04:02:07:c5:df:eb:45:b5:19:f2:06:28:27:5d:f4:9b:28:d2: f5:d8:e3:72:56:2e:61:b0:92:28:fc:01:d0:c5:df:14:08:16: 6d:73:cf:b2:66:71:4b:d2:5f:9b:bb:d0:30:9b:0c:3b:c0:37: 40:b5:1e:03:ab:9f:42:45:85:e2:6b:01:d6:3b:6a:86:39:99: c8:e3:d7:c7:f5:06:ad:1d:28:61:54:71:3a:a5:b8:86:6b:cf: 55:e8:25:0d:e9:fb:a8:c5:51:8f:2b:93:ad:95:9b:e2:02:80: 76:8e:85:a8:8e:73:00:85:85:28:d8:bd:8a:67:7b:4d:5a:ae: b2:10:bd:17:1d:54:32:0b:59:1d:f5:2c:52:cb:04:ef:a6:08: 54:1f:d9:3a:4e:18:ad:5f:b4:d9:6d:63:c9:38:d3:ab:fc:29: cc:c0:b1:f4:03:1c:5f:db:77:2b:95:de:48:72:5a:48:af:bd: a4:7b:53:58:9b:58:5a:e6:51:38:b9:0a:3d:e5:7e:dd:9e:07: 15:48:f7:c5:7d:d3:90:41:0e:46:6a:4d:b3:c5:ed:3a:5d:38: b3:88:7f:ee:c3:3e:b4:9f:d0:fc:76:59:ff:7b:5c:f3:db:38: 6a:90:7a:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAz64E75iyw2dSQ9PZHyaEv2+QhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA2MDIxMTE5MDlaFw0yNjA2MDMxMTU1MDlaMDMxMTAvBgNV BAMTKDA4MzMzNTlDMzY4RkE1MTE1MzY4NEVBMTcxMkNBNjY3MjQzOEJCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4iZ7gcw+sU9mvTJ/1SgvkiP7 7peFYnTSErcZDksnH2ttFVw5WAkGYULgQ5feAhMBWOfbLJwzHWj5hes0i7roammJ db9rG5Fx7g1VYWyqkG7gTuZuyjxCxXa09oteEwr8AS043D89bGzaTpEHaE8Mfrc+ 2gZRRm/oyKl4yxDHQAx3qC8JGnOtwd0+GEcCAbVR7zuaA8hBVoVHnFnN2CEsgdp6 FmOsl+ERlRUeTvu9FHWIZubP+sGFn++mx66r2fDJPF00e1BY60EA4FdZ33W8VElD yo19OVswOjgQEsRvKMUM54zBJ/SbtyRxrxtxq95Up27SnWzdzJpzG4m9sTiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDM1nDaPpRFTaE6hcSymZyQ4u88wHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNhOD7UoU2+x2b8+jq5Nrd/KgQCB8Xf60W1 GfIGKCdd9Jso0vXY43JWLmGwkij8AdDF3xQIFm1zz7JmcUvSX5u70DCbDDvAN0C1 HgOrn0JFheJrAdY7aoY5mcjj18f1Bq0dKGFUcTqluIZrz1XoJQ3p+6jFUY8rk62V m+ICgHaOhaiOcwCFhSjYvYpne01arrIQvRcdVDILWR31LFLLBO+mCFQf2TpOGK1f tNltY8k406v8KczAsfQDHF/bdyuV3khyWkivvaR7U1ibWFrmUTi5Cj3lft2eBxVI 98V905BBDkZqTbPF7TpdOLOIf+7DPrSf0Px2Wf97XPPbOGqQeuQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:37 2026 by rpki-client