$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft File: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft (raw, json) Hash identifier: 9jQiZI2kqDEUB1gjHCykRguJh5Lfhzss99+fsIbGxiY= Subject key identifier: 8D:C4:9D:73:E1:03:3C:F4:F4:90:0E:39:77:BE:D9:32:05:F8:8B:79 Authority key identifier: 3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 Certificate issuer: /CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Certificate serial: 3073D14E511BB9F4FEA41E8A6A389C456A8FFD5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 07:56:47 +0000 Manifest this update: Thu 18 Jun 2026 07:51:47 +0000 Manifest next update: Fri 19 Jun 2026 09:34:47 +0000 Files and hashes: 1: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl (hash: MTM+FLUmFfmAJCwPGRon/HnMYOunGtxwXdFKNV+fmbk=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: ErPUUUg1dRZKVbJQVmVoH6jrv862m0Pddw1XMyfUrjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 09:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:73:d1:4e:51:1b:b9:f4:fe:a4:1e:8a:6a:38:9c:45:6a:8f:fd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Validity Not Before: Jun 18 07:51:47 2026 GMT Not After : Jun 19 09:34:47 2026 GMT Subject: CN=8DC49D73E1033CF4F4900E3977BED93205F88B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:52:57:9e:cd:29:32:48:de:6c:c6:4a:58: 82:93:f8:fe:aa:29:52:fe:ba:48:a0:38:64:f4:4f: 5c:da:d7:b9:7f:21:70:65:b2:69:19:1b:56:e8:ad: 8e:23:68:2d:e2:53:b7:bc:c6:ee:8d:89:23:21:dd: 94:cf:88:6d:b2:fe:e6:c5:02:ac:1f:5b:39:d7:75: 4e:4f:76:94:16:9d:04:7f:eb:f4:3d:af:3b:d7:58: c0:23:79:1c:d5:fc:ab:49:20:80:b6:48:0c:54:75: d5:de:ad:85:5c:3c:dd:56:79:a8:04:01:6f:f9:d8: 56:21:cc:19:4b:4f:53:56:7c:e0:68:20:5d:40:5a: a4:3e:d0:59:f0:2f:fe:aa:10:97:bc:fd:2e:cf:86: 5e:39:42:1e:06:15:50:d7:49:6e:9d:b9:d4:60:8d: 2f:66:46:eb:78:cc:6c:6c:6a:9d:5a:a5:da:f3:da: f0:06:a3:5e:e9:cf:8f:16:07:c7:41:e6:a8:ce:91: c9:47:ee:9d:12:53:14:43:26:8b:00:4a:57:70:82: 9d:51:8a:96:be:bd:48:13:a0:17:f8:50:ad:79:3d: 32:66:6a:10:3b:e1:c8:13:8f:92:e7:b4:9f:8b:66: a3:28:4d:15:d9:6e:83:28:48:f0:ff:df:0f:3d:68: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C4:9D:73:E1:03:3C:F4:F4:90:0E:39:77:BE:D9:32:05:F8:8B:79 X509v3 Authority Key Identifier: keyid:3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:09:c5:a8:04:2f:ae:bd:b0:dc:40:17:6f:22:3c:1d:62:9f: 73:97:a1:e6:90:1f:43:19:e6:b7:70:2a:90:fd:02:17:79:6a: ac:ee:01:a3:11:cf:5f:da:26:04:16:e1:7d:d9:dc:bf:f3:5a: 95:63:95:ee:68:e4:3c:7f:eb:ac:ca:b1:22:f7:ac:05:15:05: bc:96:55:e8:71:a7:7f:8a:a8:47:bf:db:01:41:09:f7:86:24: f2:42:f0:98:50:82:43:cd:88:b5:7b:71:7c:58:5f:59:7e:d1: 65:ac:57:72:67:2f:82:bc:4d:c3:4e:8f:7d:d2:ac:e6:f1:aa: 84:56:79:a8:a2:58:e0:32:84:17:02:5d:1c:27:55:56:f3:09: a3:b0:04:e4:7d:9f:04:4d:9f:fb:51:76:9a:df:4b:7f:10:0c: df:74:fd:d5:61:2b:68:d6:15:15:82:b7:a4:42:4c:f6:e3:72: 2e:8b:8a:9d:3c:81:e7:50:f1:a3:46:18:c5:b8:20:b6:fc:c5: dd:cf:46:c0:ef:99:e4:57:e3:53:13:6b:48:f3:76:ca:df:f6: db:f2:4b:0a:6e:fa:3c:0e:5b:82:f9:f7:7e:b9:81:6e:10:9d: 3e:6b:bc:11:3b:cf:a4:37:cd:c8:c8:ce:a4:0d:a4:7a:1f:d8: 43:3a:f1:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHPRTlEbufT+pB6KajicRWqP/V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJENjBC N0QyODVGODAeFw0yNjA2MTgwNzUxNDdaFw0yNjA2MTkwOTM0NDdaMDMxMTAvBgNV BAMTKDhEQzQ5RDczRTEwMzNDRjRGNDkwMEUzOTc3QkVEOTMyMDVGODhCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfFJXns0pMkjebMZKWIKT+P6q KVL+ukigOGT0T1za17l/IXBlsmkZG1borY4jaC3iU7e8xu6NiSMh3ZTPiG2y/ubF AqwfWznXdU5PdpQWnQR/6/Q9rzvXWMAjeRzV/KtJIIC2SAxUddXerYVcPN1WeagE AW/52FYhzBlLT1NWfOBoIF1AWqQ+0FnwL/6qEJe8/S7Phl45Qh4GFVDXSW6dudRg jS9mRut4zGxsap1apdrz2vAGo17pz48WB8dB5qjOkclH7p0SUxRDJosASldwgp1R ipa+vUgToBf4UK15PTJmahA74cgTj5LntJ+LZqMoTRXZboMoSPD/3w89aBYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjcSdc+EDPPT0kA45d77ZMgX4i3kwHwYDVR0j BBgwFoAUO9Q0nntVC84OfJV+A9YtYLfShfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExZjYyOTktYjE1NS00MjEyLWI1ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3 QjU1MEJDRTBFN0M5NTdFMDNENjJENjBCN0QyODVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQkQ0MzQ5RTdCNTUwQkNFMEU3Qzk1N0UwM0Q2MkQ2MEI3RDI4 NUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJE NjBCN0QyODVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0JxagEL669sNxAF28iPB1in3OXoeaQH0MZ 5rdwKpD9Ahd5aqzuAaMRz1/aJgQW4X3Z3L/zWpVjle5o5Dx/66zKsSL3rAUVBbyW Vehxp3+KqEe/2wFBCfeGJPJC8JhQgkPNiLV7cXxYX1l+0WWsV3JnL4K8TcNOj33S rObxqoRWeaiiWOAyhBcCXRwnVVbzCaOwBOR9nwRNn/tRdprfS38QDN90/dVhK2jW FRWCt6RCTPbjci6Lip08gedQ8aNGGMW4ILb8xd3PRsDvmeRX41MTa0jzdsrf9tvy Swpu+jwOW4L59365gW4QnT5rvBE7z6Q3zcjIzqQNpHof2EM68XY= -----END CERTIFICATE-----Generated at Thu Jun 18 19:13:12 2026 by rpki-client