$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: Oxlp0/tBrKrflU57k8Xb/JoBweyqfZKsdPy+tapFRQM= Subject key identifier: 6C:0B:1D:A6:15:13:0F:A5:30:6F:59:AD:CA:E9:F5:42:3E:FE:3B:8A Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 7B29E49E24E598D083BF454C0ABB506F8DA33E41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:25:23 +0000 Manifest this update: Sat 20 Jun 2026 00:20:23 +0000 Manifest next update: Sun 21 Jun 2026 02:23:23 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 2: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: ndMVJrqZcBe9Yyv8QCstMGaUK2j6DsCyBJt7C9VtaH8=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:29:e4:9e:24:e5:98:d0:83:bf:45:4c:0a:bb:50:6f:8d:a3:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Jun 20 00:20:23 2026 GMT Not After : Jun 21 02:23:23 2026 GMT Subject: CN=6C0B1DA615130FA5306F59ADCAE9F5423EFE3B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:ca:40:64:62:d8:e2:5b:25:d3:e6:5b:e0: a7:90:64:5d:5c:7c:a5:13:c7:3f:4d:89:bc:15:10: c7:99:a4:31:f4:d5:b7:40:30:2f:61:38:45:3e:88: 46:27:8a:41:b2:26:cf:a7:b9:36:8b:e1:81:1a:54: 3e:d4:55:1d:bd:32:ff:d2:c2:8e:e8:dd:b3:03:7e: 9c:ae:39:6b:50:6e:94:ec:ad:5e:1b:8f:a2:40:43: 45:cc:6a:29:57:9d:cf:1d:b3:8a:e7:b2:9d:35:a4: a3:9c:21:83:1d:b8:1a:de:e1:b3:25:4b:3e:50:36: b9:9e:5a:b0:42:c8:30:64:8a:8b:d1:92:99:f0:4e: 41:50:97:8d:e0:e3:d6:19:b4:5b:b8:a0:0b:67:bd: 97:da:4e:7d:c2:f9:34:c3:49:76:6d:52:bb:12:f3: ec:05:25:41:55:0e:e0:d1:89:ae:aa:13:44:00:4b: a7:0c:4b:87:39:c4:69:86:f2:f2:18:3e:56:28:5b: 38:78:13:11:80:49:5a:c5:96:c6:5b:b3:be:e0:62: 0c:fb:f7:9a:6e:97:10:a0:46:f3:77:ee:2c:8e:1a: d8:21:aa:f6:87:47:5d:4c:e8:32:b5:c7:4c:d0:51: 88:a1:b8:36:42:76:c9:24:d5:1c:2e:d4:3b:00:bc: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0B:1D:A6:15:13:0F:A5:30:6F:59:AD:CA:E9:F5:42:3E:FE:3B:8A X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:40:99:ef:d3:f0:6d:86:32:16:b2:74:7b:df:47:7d:50:dc: 95:14:aa:8e:36:88:64:d1:67:4d:02:51:4a:66:2b:94:56:dd: 50:d9:27:93:91:d3:a5:19:46:76:3f:cd:7d:55:aa:e2:64:ba: d7:95:71:81:a8:74:e2:c8:6b:63:75:d8:43:97:3d:87:fa:8a: 50:07:f8:3a:1c:1f:dd:4d:e1:d7:43:be:a6:3b:94:19:fa:bf: 0a:83:72:1c:fa:20:5f:e5:ba:65:cb:c1:98:8a:cc:41:18:7f: 52:49:b9:db:38:8a:e8:57:c8:6a:b0:2a:ba:c0:c0:54:54:b4: 27:f9:04:b7:ac:20:10:ec:e5:4b:d2:ce:e8:1c:62:1b:73:ca: ba:78:8a:19:f1:d5:10:82:84:38:82:3b:35:0a:0c:73:2e:28: c6:d3:72:71:ac:f5:20:fb:3d:93:e6:74:f9:e3:a3:a8:01:d1: be:a1:3b:d3:84:75:d0:46:26:04:4e:a2:c0:87:ca:6d:fe:05: 6b:69:63:b6:2a:ba:14:c2:0c:24:0b:75:b7:34:99:ab:fa:24: 39:96:4c:a4:9f:0b:53:f8:fc:25:38:6b:fe:0f:a9:f6:83:06: a3:66:4c:ad:04:53:39:6d:11:88:55:fd:da:a2:b4:6f:27:13: f6:f7:93:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeynkniTlmNCDv0VMCrtQb42jPkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA2MjAwMDIwMjNaFw0yNjA2MjEwMjIzMjNaMDMxMTAvBgNV BAMTKDZDMEIxREE2MTUxMzBGQTUzMDZGNTlBRENBRTlGNTQyM0VGRTNCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOMpAZGLY4lsl0+Zb4KeQZF1c fKUTxz9NibwVEMeZpDH01bdAMC9hOEU+iEYnikGyJs+nuTaL4YEaVD7UVR29Mv/S wo7o3bMDfpyuOWtQbpTsrV4bj6JAQ0XMailXnc8ds4rnsp01pKOcIYMduBre4bMl Sz5QNrmeWrBCyDBkiovRkpnwTkFQl43g49YZtFu4oAtnvZfaTn3C+TTDSXZtUrsS 8+wFJUFVDuDRia6qE0QAS6cMS4c5xGmG8vIYPlYoWzh4ExGASVrFlsZbs77gYgz7 95pulxCgRvN37iyOGtghqvaHR11M6DK1x0zQUYihuDZCdskk1Rwu1DsAvHjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAsdphUTD6Uwb1mtyun1Qj7+O4owHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxAme/T8G2GMhaydHvfR31Q3JUUqo42iGTR Z00CUUpmK5RW3VDZJ5OR06UZRnY/zX1VquJkuteVcYGodOLIa2N12EOXPYf6ilAH +DocH91N4ddDvqY7lBn6vwqDchz6IF/lumXLwZiKzEEYf1JJuds4iuhXyGqwKrrA wFRUtCf5BLesIBDs5UvSzugcYhtzyrp4ihnx1RCChDiCOzUKDHMuKMbTcnGs9SD7 PZPmdPnjo6gB0b6hO9OEddBGJgROosCHym3+BWtpY7YquhTCDCQLdbc0mav6JDmW TKSfC1P4/CU4a/4PqfaDBqNmTK0EUzltEYhV/dqitG8nE/b3kzY= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:28 2026 by rpki-client