$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: 6I3vAvS7mOBNheplG6vqyM2lB720IiV89OvrFfao1BA= Subject key identifier: CF:98:5F:55:04:D9:B1:3A:E1:EF:2E:66:BD:20:41:3A:64:92:21:1E Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 0F4410A0CC0C4C6261BBCC33EFF2BF8FC0074609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 48 Signing time: Wed 24 Jun 2026 07:24:24 +0000 Manifest this update: Wed 24 Jun 2026 07:19:24 +0000 Manifest next update: Thu 25 Jun 2026 09:56:24 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 4: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 5: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: DYr3VJUzYlNuZf4eBj9UTMihUioXPsPxR8HuIrKNkQE=) 6: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:44:10:a0:cc:0c:4c:62:61:bb:cc:33:ef:f2:bf:8f:c0:07:46:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Jun 24 07:19:24 2026 GMT Not After : Jun 25 09:56:24 2026 GMT Subject: CN=CF985F5504D9B13AE1EF2E66BD20413A6492211E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:8b:fb:fc:cb:77:21:96:b0:09:88:98:7d: 01:93:8d:ff:d5:b3:20:e1:b8:5d:56:ca:28:cf:0e: 8d:de:21:66:e9:06:5d:a2:c7:4e:4b:09:d5:90:fe: b4:d9:8f:17:0b:eb:9a:22:ee:23:48:e8:89:96:c9: 0b:81:6e:e8:e8:88:0b:7a:38:e4:da:86:8a:ed:cf: 35:1c:38:1b:d2:d3:ce:58:43:1d:cb:bc:6c:c5:55: ad:f1:16:f9:9d:2a:49:51:16:78:1d:d1:e6:5d:93: 1c:67:08:3d:37:d9:8b:b0:a9:38:45:83:ad:b8:72: b8:3f:a0:f2:4f:fa:60:df:db:92:f3:a0:a0:11:9c: 59:ce:85:d8:4d:e2:87:07:fb:98:b8:58:4b:56:14: 03:ee:e0:4d:d9:20:c0:92:b1:ce:2b:36:73:19:fe: ad:63:9b:24:66:64:31:43:1f:6d:f5:eb:f9:05:08: 0c:bf:4c:ec:ed:fa:f3:13:13:ab:b3:64:3e:86:ff: 6e:a7:53:2c:d5:15:e3:47:02:c6:cd:c1:be:ca:b4: dc:45:b4:12:16:4d:4b:c4:39:1e:b4:4a:8a:79:61: 51:ee:00:6b:2e:6d:42:e0:7c:af:60:d4:6c:f7:bb: 41:79:67:b7:37:a7:84:77:9a:08:2b:ab:88:37:96: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:5F:55:04:D9:B1:3A:E1:EF:2E:66:BD:20:41:3A:64:92:21:1E X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1b:f3:44:ae:43:5a:38:c9:3e:82:ec:83:6a:a2:03:9a:5f: 20:1d:d5:90:ae:d5:ca:8a:e4:0c:7c:41:76:93:c8:02:54:d3: 8e:b3:93:14:c0:26:8f:df:fc:0e:8c:c3:bc:ed:28:5e:43:d6: 65:b0:a8:f9:c0:cd:ac:2f:6e:b9:3e:e1:d4:f5:e8:fb:d6:f4: e0:4b:02:d1:4c:b9:ad:43:81:c1:e8:18:fe:46:c1:f3:42:d5: 0a:fc:3f:f1:00:c3:66:98:b2:f5:4a:26:ed:db:be:92:3a:f9: de:06:23:da:a4:0a:76:3e:16:19:1c:55:c9:c9:de:1b:5d:94: a2:1b:b8:ef:05:1c:22:a7:95:c1:a8:c3:26:13:29:74:db:a9: b4:5f:51:3e:d6:07:ee:59:18:1e:44:d3:1e:38:b1:7b:94:d1: 1b:e0:09:1b:d2:97:a2:ea:fe:4c:70:db:ce:de:f3:8b:5a:80: b2:13:1b:d0:b0:e0:53:95:58:1b:2f:9b:63:cd:86:6e:00:c6: db:3f:25:ba:e9:7b:1d:56:d5:57:0c:ab:bc:dc:d1:c2:4a:be: f6:7a:83:3e:18:3f:e0:fb:0e:5f:a7:f4:17:3e:e8:d1:2e:af: cd:4c:38:1b:9d:ab:c3:ae:0c:b2:65:f1:09:23:f0:15:ea:a0: 69:b0:d2:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0QQoMwMTGJhu8wz7/K/j8AHRgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA2MjQwNzE5MjRaFw0yNjA2MjUwOTU2MjRaMDMxMTAvBgNV BAMTKENGOTg1RjU1MDREOUIxM0FFMUVGMkU2NkJEMjA0MTNBNjQ5MjIxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+Yv7/Mt3IZawCYiYfQGTjf/V syDhuF1WyijPDo3eIWbpBl2ix05LCdWQ/rTZjxcL65oi7iNI6ImWyQuBbujoiAt6 OOTahortzzUcOBvS085YQx3LvGzFVa3xFvmdKklRFngd0eZdkxxnCD032YuwqThF g624crg/oPJP+mDf25LzoKARnFnOhdhN4ocH+5i4WEtWFAPu4E3ZIMCSsc4rNnMZ /q1jmyRmZDFDH2316/kFCAy/TOzt+vMTE6uzZD6G/26nUyzVFeNHAsbNwb7KtNxF tBIWTUvEOR60Sop5YVHuAGsubULgfK9g1Gz3u0F5Z7c3p4R3mggrq4g3lpHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5hfVQTZsTrh7y5mvSBBOmSSIR4wHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEb80SuQ1o4yT6C7INqogOaXyAd1ZCu1cqK 5Ax8QXaTyAJU046zkxTAJo/f/A6Mw7ztKF5D1mWwqPnAzawvbrk+4dT16PvW9OBL AtFMua1DgcHoGP5GwfNC1Qr8P/EAw2aYsvVKJu3bvpI6+d4GI9qkCnY+FhkcVcnJ 3htdlKIbuO8FHCKnlcGowyYTKXTbqbRfUT7WB+5ZGB5E0x44sXuU0RvgCRvSl6Lq /kxw287e84tagLITG9Cw4FOVWBsvm2PNhm4Axts/Jbrpex1W1VcMq7zc0cJKvvZ6 gz4YP+D7Dl+n9Bc+6NEur81MOBudq8OuDLJl8Qkj8BXqoGmw0uk= -----END CERTIFICATE-----Generated at Wed Jun 24 09:57:15 2026 by rpki-client