$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: fwIa+mmWrWvtejb6oCXSFyRXayqjmYWv2VEJrOTRXCQ= Subject key identifier: 71:3C:7B:F2:F2:BD:23:78:FA:B7:8A:EC:44:CD:15:9C:66:17:D4:85 Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 277DBC6F6B31B524A0C66DEE65073228256ECA17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 41 Signing time: Thu 18 Jun 2026 13:17:57 +0000 Manifest this update: Thu 18 Jun 2026 13:12:57 +0000 Manifest next update: Fri 19 Jun 2026 16:55:57 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: o0bhY1lcFLUAxEASfhPSu0tym2M9Z0Sr4hzuPpq319Y=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7d:bc:6f:6b:31:b5:24:a0:c6:6d:ee:65:07:32:28:25:6e:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Jun 18 13:12:57 2026 GMT Not After : Jun 19 16:55:57 2026 GMT Subject: CN=713C7BF2F2BD2378FAB78AEC44CD159C6617D485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:45:8f:04:5d:a8:14:36:04:db:20:f3:03: 81:68:46:d1:6f:84:be:02:45:0c:99:a8:69:df:54: f8:7d:66:73:96:23:a0:51:e5:f4:98:ce:12:8a:ab: bb:dd:50:d9:57:76:73:75:aa:64:9d:64:5d:ff:9a: a1:0a:0d:46:cf:82:0d:c0:7d:e4:aa:ba:2c:15:f4: d1:88:8d:e4:cc:e9:8a:11:c7:ee:8d:f8:fb:5a:4b: 01:38:c1:19:35:1f:c1:a9:dd:72:30:f1:33:bf:87: ed:3c:8b:6b:08:d7:48:38:5a:33:d1:1a:c6:59:2d: b6:b1:0a:fb:25:d7:cd:83:35:a9:e6:00:32:c5:06: 98:75:e2:7c:f6:10:c3:ca:e6:55:88:cd:3e:79:28: d6:2b:d9:14:49:c4:e6:ca:92:5b:ce:21:8a:75:d3: fd:f4:95:df:0b:f5:1d:47:3c:0a:ac:92:82:c4:8a: 54:fc:ff:fc:95:b4:b3:e3:8f:2d:68:10:65:51:64: e3:65:29:c7:6c:34:09:6b:b8:7d:34:c4:11:de:95: 8d:47:43:0f:10:08:74:0e:7b:75:a0:70:6f:d8:65: a7:14:8e:4a:47:e8:c7:d0:27:95:5e:93:81:cb:06: 44:ce:57:45:d2:6d:47:8b:a7:c9:a1:4e:50:f3:70: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:7B:F2:F2:BD:23:78:FA:B7:8A:EC:44:CD:15:9C:66:17:D4:85 X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bf:79:f9:db:b6:dc:ca:40:c1:1c:0d:78:98:93:42:46:36: a0:c2:82:33:1b:4d:53:ac:52:fe:67:9b:d8:c2:62:6e:c7:b9: 98:6e:34:0d:4d:f1:1a:24:08:61:e3:03:15:8c:aa:ea:83:5f: 72:c6:14:aa:91:f6:24:d0:a7:89:2f:15:fc:2d:08:37:de:a0: 02:1d:e0:08:33:ba:3a:36:08:c0:65:81:c2:bd:5d:52:64:22: ff:49:cd:70:d9:1e:7e:f1:f0:76:51:8d:1a:08:27:2a:f9:be: 76:ac:cb:c7:59:49:69:31:24:ff:41:70:5f:d5:36:33:f0:1e: 2b:43:ae:59:70:9e:84:5f:59:14:27:f1:e5:e5:f5:ff:81:dd: a6:b5:8a:f6:77:18:94:6b:a1:64:cf:62:2d:2d:29:87:2b:e7: 42:90:d0:58:48:a3:07:c4:9a:53:4e:dc:aa:bd:5e:7c:17:4e: 43:d8:da:f9:36:d1:93:ec:ff:de:66:9b:0e:bc:59:0c:59:4a: 44:83:0c:3c:98:fb:0d:15:1b:e5:bc:f3:4e:30:ce:6c:da:41: 87:0a:e3:ff:b1:89:1a:72:5c:71:40:45:b5:e1:84:de:08:a0: 49:21:11:a3:26:b7:f2:43:56:73:fa:7f:74:63:c1:ff:10:ae: 13:f9:a0:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ328b2sxtSSgxm3uZQcyKCVuyhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA2MTgxMzEyNTdaFw0yNjA2MTkxNjU1NTdaMDMxMTAvBgNV BAMTKDcxM0M3QkYyRjJCRDIzNzhGQUI3OEFFQzQ0Q0QxNTlDNjYxN0Q0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk0WPBF2oFDYE2yDzA4FoRtFv hL4CRQyZqGnfVPh9ZnOWI6BR5fSYzhKKq7vdUNlXdnN1qmSdZF3/mqEKDUbPgg3A feSquiwV9NGIjeTM6YoRx+6N+PtaSwE4wRk1H8Gp3XIw8TO/h+08i2sI10g4WjPR GsZZLbaxCvsl182DNanmADLFBph14nz2EMPK5lWIzT55KNYr2RRJxObKklvOIYp1 0/30ld8L9R1HPAqskoLEilT8//yVtLPjjy1oEGVRZONlKcdsNAlruH00xBHelY1H Qw8QCHQOe3WgcG/YZacUjkpH6MfQJ5Vek4HLBkTOV0XSbUeLp8mhTlDzcAnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTx78vK9I3j6t4rsRM0VnGYX1IUwHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm/efnbttzKQMEcDXiYk0JGNqDCgjMbTVOs Uv5nm9jCYm7HuZhuNA1N8RokCGHjAxWMquqDX3LGFKqR9iTQp4kvFfwtCDfeoAId 4Agzujo2CMBlgcK9XVJkIv9JzXDZHn7x8HZRjRoIJyr5vnasy8dZSWkxJP9BcF/V NjPwHitDrllwnoRfWRQn8eXl9f+B3aa1ivZ3GJRroWTPYi0tKYcr50KQ0FhIowfE mlNO3Kq9XnwXTkPY2vk20ZPs/95mmw68WQxZSkSDDDyY+w0VG+W8804wzmzaQYcK 4/+xiRpyXHFARbXhhN4IoEkhEaMmt/JDVnP6f3Rjwf8QrhP5oHE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:56 2026 by rpki-client