$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json) Hash identifier: vaY0guvTnEXv8av7QvTDCRIERWoAlJhl1ZOkQvCFNj8= Subject key identifier: CE:C1:23:03:6B:7D:33:61:BF:E0:3B:AF:6D:06:90:92:55:6F:6F:7C Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 3E585E8738C8D5A340321519E38C2E45569D88AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 05:03:05 +0000 Manifest this update: Thu 18 Jun 2026 04:58:05 +0000 Manifest next update: Fri 19 Jun 2026 08:06:05 +0000 Files and hashes: 1: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: HwYFpxMCy1B0r82P7HJpA++AhEcqYnSTMp7Ntc5X9+Y=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:58:5e:87:38:c8:d5:a3:40:32:15:19:e3:8c:2e:45:56:9d:88:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: Jun 18 04:58:05 2026 GMT Not After : Jun 19 08:06:05 2026 GMT Subject: CN=CEC123036B7D3361BFE03BAF6D069092556F6F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:19:b9:77:ef:f5:cb:b0:68:e3:a7:ca:0b: ea:c9:ed:68:dc:32:a0:bb:85:8d:5c:2b:69:2d:6d: cc:35:fc:4e:73:67:72:94:dc:93:3c:11:f2:55:2d: d6:29:7b:8a:ee:44:e1:3b:d1:83:25:94:5b:32:f6: 06:c6:f2:d4:22:8c:33:a4:7d:af:db:ba:ee:a6:6c: 9d:a3:11:72:48:81:b9:d0:68:c3:7a:1c:56:cc:2b: 15:15:c0:d6:b7:4a:47:e3:59:0e:96:37:e5:a1:de: 38:e1:a7:95:d4:fc:6b:be:06:38:fd:f7:08:6e:d0: bc:95:06:e9:b9:17:13:65:f7:c6:c0:b2:42:96:1c: 1e:d8:b2:eb:11:8e:68:f6:8f:d8:19:27:4e:db:8d: a5:4e:09:00:18:2f:83:c4:d0:ad:9a:ec:4a:40:6b: 1e:41:c6:1d:a1:e1:84:dc:81:89:da:27:1d:04:fc: 49:6b:9d:32:62:15:e1:0f:43:0d:15:92:df:7c:81: 5c:1c:88:7c:5a:92:b8:4a:20:07:0f:93:e9:c1:c4: 13:ee:ae:3d:07:0b:8c:03:cd:9b:8c:83:9a:fb:f7: d4:e1:f3:b9:e0:b2:95:aa:16:1a:50:27:ea:bc:13: 23:b8:ad:ad:e6:ab:84:93:5c:6c:b6:d3:28:d8:2d: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C1:23:03:6B:7D:33:61:BF:E0:3B:AF:6D:06:90:92:55:6F:6F:7C X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:2c:96:70:75:d8:f6:dd:36:fd:b3:94:bf:c6:23:10:22: e8:9b:7b:d7:42:c3:e1:8c:d0:ad:ad:3e:09:9e:79:fd:fe:56: 43:bd:3f:77:7c:53:6a:46:07:cb:e0:60:82:79:56:2c:68:30: 87:49:1d:53:eb:15:a0:b5:d5:d4:75:be:fc:c7:11:ca:59:65: 8b:3b:72:cd:c0:47:86:df:f5:08:24:1b:d6:e1:bd:95:d8:14: 59:30:c2:f6:13:bc:b0:1b:a6:5a:26:6e:65:71:6c:24:27:18: fb:9c:11:54:c4:de:85:77:f0:9a:f2:6b:f7:74:47:a8:95:b1: a0:7e:85:16:42:69:6b:eb:2c:a9:d0:9d:3d:df:e1:dc:40:0e: 1f:8d:0a:7d:e7:27:03:82:8b:25:6a:44:6a:c7:5f:42:ab:67: d0:66:de:7b:3d:53:27:87:37:56:b8:09:6a:5e:04:ee:17:e0: 51:a7:e5:a7:26:9e:df:64:71:74:29:12:6e:8e:4b:c6:4f:39: cf:f6:2d:e6:7e:e5:28:fa:c9:72:df:2c:ae:44:6f:0e:2c:0c: 68:15:21:e0:10:0d:bd:74:c8:83:e3:46:71:43:eb:49:4a:22: 79:85:e0:c2:05:ea:16:e9:c8:f3:f2:0e:0c:18:ac:fa:91:73: 09:f2:df:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlhehzjI1aNAMhUZ44wuRVadiKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjA2MTgwNDU4MDVaFw0yNjA2MTkwODA2MDVaMDMxMTAvBgNV BAMTKENFQzEyMzAzNkI3RDMzNjFCRkUwM0JBRjZEMDY5MDkyNTU2RjZGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcRm5d+/1y7Bo46fKC+rJ7Wjc MqC7hY1cK2ktbcw1/E5zZ3KU3JM8EfJVLdYpe4ruROE70YMllFsy9gbG8tQijDOk fa/buu6mbJ2jEXJIgbnQaMN6HFbMKxUVwNa3SkfjWQ6WN+Wh3jjhp5XU/Gu+Bjj9 9whu0LyVBum5FxNl98bAskKWHB7YsusRjmj2j9gZJ07bjaVOCQAYL4PE0K2a7EpA ax5Bxh2h4YTcgYnaJx0E/ElrnTJiFeEPQw0Vkt98gVwciHxakrhKIAcPk+nBxBPu rj0HC4wDzZuMg5r799Th87ngspWqFhpQJ+q8EyO4ra3mq4STXGy20yjYLYOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsEjA2t9M2G/4DuvbQaQklVvb3wwHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVfLJZwddj23Tb9s5S/xiMQIuibe9dCw+GM 0K2tPgmeef3+VkO9P3d8U2pGB8vgYIJ5VixoMIdJHVPrFaC11dR1vvzHEcpZZYs7 cs3AR4bf9QgkG9bhvZXYFFkwwvYTvLAbplombmVxbCQnGPucEVTE3oV38Jrya/d0 R6iVsaB+hRZCaWvrLKnQnT3f4dxADh+NCn3nJwOCiyVqRGrHX0KrZ9Bm3ns9UyeH N1a4CWpeBO4X4FGn5acmnt9kcXQpEm6OS8ZPOc/2LeZ+5Sj6yXLfLK5Ebw4sDGgV IeAQDb10yIPjRnFD60lKInmF4MIF6hbpyPPyDgwYrPqRcwny39Y= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:25 2026 by rpki-client