$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: SbPs56kHOFCUrlWn6PeHY2FhmT6Wrt1oHHNokGUwans= Subject key identifier: CD:04:8C:0A:08:8A:00:66:C5:4B:5F:11:69:3B:1B:DD:53:BF:9A:94 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 3BC9DEEF2E4D2689A449C6120E5BB86F1DC396FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 12:27:07 +0000 Manifest this update: Thu 18 Jun 2026 12:22:07 +0000 Manifest next update: Fri 19 Jun 2026 16:00:07 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) 2: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: Tjnmd3i0YQsTMaM1Zqfw6R6RgN6NwO3InPYNYy2JPq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c9:de:ef:2e:4d:26:89:a4:49:c6:12:0e:5b:b8:6f:1d:c3:96:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Jun 18 12:22:07 2026 GMT Not After : Jun 19 16:00:07 2026 GMT Subject: CN=CD048C0A088A0066C54B5F11693B1BDD53BF9A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:c1:4d:e8:bd:15:91:3d:77:97:67:57:aa: dd:4a:7f:96:b0:a3:25:b5:e8:a2:cb:3e:e8:f8:96: 43:13:94:63:0d:2e:8d:6f:9c:a5:95:cc:39:2b:43: e0:ba:bf:54:73:0f:d3:23:cb:2a:f9:7b:78:33:84: 4b:d4:9b:e3:2f:b5:b1:24:f6:20:27:e0:d0:a8:8c: 95:6f:e0:e6:93:a7:fd:ae:e1:e7:84:9d:3a:d0:09: 3d:2f:d3:9e:53:f0:dd:c7:42:db:a7:16:44:e1:64: d4:f5:52:24:aa:41:5c:76:39:78:1a:3f:2e:55:8a: f7:09:c6:53:67:99:d2:95:14:ed:59:7e:fb:2b:fd: 89:63:e2:19:ee:bc:d1:c0:99:d1:52:e7:63:c1:00: 96:4b:ac:b4:f4:e7:c3:0b:13:fd:7e:6b:f2:49:a4: 64:60:35:2e:1f:ac:6f:35:89:7f:40:c6:31:fe:85: dc:0e:28:72:03:19:a3:ea:dc:c0:dc:23:fc:99:56: 4a:52:c6:af:dd:c3:99:02:6d:a9:40:eb:1f:25:0b: 36:72:34:26:05:ce:28:f0:10:43:ff:79:68:60:24: 66:5b:dd:81:f7:23:90:da:ac:54:92:1d:50:e5:52: 4f:e8:b3:7b:1a:2b:d6:ff:a3:3d:34:36:81:ad:b3: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:8C:0A:08:8A:00:66:C5:4B:5F:11:69:3B:1B:DD:53:BF:9A:94 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:33:19:91:d3:ff:b2:fb:34:5e:c3:82:ca:53:a6:fe:df: 22:87:65:8c:c3:e5:14:56:8b:1e:6f:93:b1:f9:bf:38:af:f0: c2:09:19:63:f7:91:ce:13:30:38:4e:48:65:2b:95:d6:71:d8: ba:41:96:bd:43:59:b8:62:5a:4d:01:3c:6a:9f:47:7e:05:b7: 7d:c1:df:30:fb:be:40:e0:d9:8b:3d:2c:b6:1d:f7:5c:45:11: 8f:5e:77:80:1e:38:88:1d:f5:b1:9a:4a:04:d1:83:ae:70:3b: 80:76:5c:d0:c3:80:f2:78:eb:e8:69:f7:f4:08:77:85:39:9a: c7:d1:9b:7f:89:83:a5:63:cd:25:64:87:91:5c:97:a6:34:fc: 31:e9:c3:f8:84:88:f9:14:1c:64:8c:8d:08:e0:20:6b:35:1e: 4d:8a:49:fe:d2:0f:f5:72:29:d0:82:83:dd:dd:3c:e2:69:d8: 4f:c4:dc:3d:51:08:5f:3b:30:76:43:23:70:c0:5e:86:21:11: 7e:22:42:b8:64:46:06:7b:df:f8:d8:0b:a7:a9:01:79:fe:b8: 96:f2:7c:bc:d3:b5:bd:76:0f:94:73:50:eb:b3:11:2d:4b:18: 0f:99:10:43:b0:2f:c0:8f:5a:80:60:38:13:7f:d0:78:a2:f4: 70:39:64:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8ne7y5NJomkScYSDlu4bx3Dlv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA2MTgxMjIyMDdaFw0yNjA2MTkxNjAwMDdaMDMxMTAvBgNV BAMTKENEMDQ4QzBBMDg4QTAwNjZDNTRCNUYxMTY5M0IxQkRENTNCRjlBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlsFN6L0VkT13l2dXqt1Kf5aw oyW16KLLPuj4lkMTlGMNLo1vnKWVzDkrQ+C6v1RzD9Mjyyr5e3gzhEvUm+MvtbEk 9iAn4NCojJVv4OaTp/2u4eeEnTrQCT0v055T8N3HQtunFkThZNT1UiSqQVx2OXga Py5VivcJxlNnmdKVFO1Zfvsr/Ylj4hnuvNHAmdFS52PBAJZLrLT058MLE/1+a/JJ pGRgNS4frG81iX9AxjH+hdwOKHIDGaPq3MDcI/yZVkpSxq/dw5kCbalA6x8lCzZy NCYFzijwEEP/eWhgJGZb3YH3I5DarFSSHVDlUk/os3saK9b/oz00NoGts30/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQSMCgiKAGbFS18RaTsb3VO/mpQwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjcMxmR0/+y+zRew4LKU6b+3yKHZYzD5RRW ix5vk7H5vziv8MIJGWP3kc4TMDhOSGUrldZx2LpBlr1DWbhiWk0BPGqfR34Ft33B 3zD7vkDg2Ys9LLYd91xFEY9ed4AeOIgd9bGaSgTRg65wO4B2XNDDgPJ46+hp9/QI d4U5msfRm3+Jg6VjzSVkh5Fcl6Y0/DHpw/iEiPkUHGSMjQjgIGs1Hk2KSf7SD/Vy KdCCg93dPOJp2E/E3D1RCF87MHZDI3DAXoYhEX4iQrhkRgZ73/jYC6epAXn+uJby fLzTtb12D5RzUOuzES1LGA+ZEEOwL8CPWoBgOBN/0Hii9HA5ZBA= -----END CERTIFICATE-----Generated at Thu Jun 18 21:11:06 2026 by rpki-client