$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: 09IxwJu5c5IjwzzT6Wu1RM0e3p04tAKHn9IOspoImzw= Subject key identifier: A3:99:7F:67:45:94:3C:67:47:FF:C7:F8:38:91:0D:41:56:DC:C1:04 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 36F2337F9A33DB4C9C51D16EB79A0196A0F73A01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 19:56:47 +0000 Manifest this update: Wed 17 Jun 2026 19:51:47 +0000 Manifest next update: Thu 18 Jun 2026 23:03:47 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) 3: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: hlknNFzFiONfOiKpzI1OQC5zw0TXpBCVUkqK+nJ3bqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f2:33:7f:9a:33:db:4c:9c:51:d1:6e:b7:9a:01:96:a0:f7:3a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Jun 17 19:51:47 2026 GMT Not After : Jun 18 23:03:47 2026 GMT Subject: CN=A3997F6745943C6747FFC7F838910D4156DCC104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:95:dd:9e:d6:76:3d:fe:9a:9f:82:3e:46: 0b:f2:37:3b:85:98:d6:2b:70:48:3c:60:9d:16:dc: 5b:91:83:58:26:f6:f5:a2:f0:22:04:90:1f:50:c9: 1f:9b:76:09:4f:87:68:17:88:b6:d7:89:b1:2e:98: cc:f5:75:96:48:d9:54:db:fd:d6:15:b5:a9:c5:9f: 4d:e9:17:05:2f:1b:16:0d:2d:18:07:fa:de:f1:61: b6:9f:b3:96:96:da:be:41:d0:31:81:7e:49:33:cc: 8c:01:10:56:43:e4:d3:69:9e:38:eb:db:aa:b5:8e: ab:f6:64:e4:97:81:d3:b9:8c:a3:f2:0b:46:30:6e: 23:7c:ae:09:aa:10:bf:a0:ab:09:1b:ef:ed:82:fb: ed:7e:2c:a7:56:32:0a:73:8a:d8:af:37:83:65:08: 95:3a:4c:02:7f:7f:39:3e:e2:74:8a:7f:d9:26:00: 7e:fd:3c:2e:d2:30:e8:44:43:7f:27:43:e3:bb:e8: 35:f5:c5:f7:45:ec:23:ce:01:c1:8f:7f:84:2e:a8: 6a:4d:8b:a3:97:71:45:ce:2c:69:fd:7f:3b:cf:32: 3e:20:73:c3:96:ff:fb:26:3e:4a:7c:80:56:01:74: 84:68:23:33:1b:72:37:a7:c7:b6:02:8b:0c:2c:0b: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:7F:67:45:94:3C:67:47:FF:C7:F8:38:91:0D:41:56:DC:C1:04 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:21:dd:2e:c3:16:4a:43:00:9b:f8:ab:4e:fd:d0:45:aa:d3: c4:eb:0d:c3:00:9f:2b:b6:9a:d3:aa:b7:8d:3c:14:75:b0:2b: af:e3:6c:6d:3d:44:06:e5:ff:ed:98:74:1c:d8:cc:49:23:7e: 10:99:c3:25:d3:fb:4b:cc:04:95:a7:fb:3e:49:b2:84:67:4a: b8:82:44:ef:53:21:a0:18:02:71:06:12:b5:ea:a3:e0:fd:48: 63:1a:fb:cb:54:54:aa:4e:7a:8a:e4:48:01:7a:dc:6e:16:13: cd:32:b5:ec:93:ac:c5:20:1b:23:60:a0:6e:e5:59:8e:12:44: 4d:a7:09:84:6c:1b:f3:3b:6d:66:8e:bc:e9:c8:5b:59:97:ed: 45:71:c7:46:d5:ed:a3:7c:8a:11:02:e3:7b:a5:6d:08:15:28: 1e:78:c6:f7:c9:4a:54:6f:e4:f9:02:6c:5f:f4:de:6a:28:5a: dd:a2:98:a1:ca:34:47:bf:76:6e:bf:a9:c1:92:25:9b:9f:74: f0:aa:b3:4d:68:bf:8c:bd:b5:b5:05:36:4a:1f:1d:65:b7:a6: e6:a3:83:92:46:22:41:c5:26:be:e0:7c:8d:f0:34:e7:51:96: 68:25:5e:28:4b:94:1d:29:ee:0c:56:3d:a6:e9:cb:87:a4:90: bc:93:5f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvIzf5oz20ycUdFut5oBlqD3OgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA2MTcxOTUxNDdaFw0yNjA2MTgyMzAzNDdaMDMxMTAvBgNV BAMTKEEzOTk3RjY3NDU5NDNDNjc0N0ZGQzdGODM4OTEwRDQxNTZEQ0MxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCq5XdntZ2Pf6an4I+RgvyNzuF mNYrcEg8YJ0W3FuRg1gm9vWi8CIEkB9QyR+bdglPh2gXiLbXibEumMz1dZZI2VTb /dYVtanFn03pFwUvGxYNLRgH+t7xYbafs5aW2r5B0DGBfkkzzIwBEFZD5NNpnjjr 26q1jqv2ZOSXgdO5jKPyC0YwbiN8rgmqEL+gqwkb7+2C++1+LKdWMgpzitivN4Nl CJU6TAJ/fzk+4nSKf9kmAH79PC7SMOhEQ38nQ+O76DX1xfdF7CPOAcGPf4QuqGpN i6OXcUXOLGn9fzvPMj4gc8OW//smPkp8gFYBdIRoIzMbcjenx7YCiwwsC8hRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5l/Z0WUPGdH/8f4OJENQVbcwQQwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAh3S7DFkpDAJv4q0790EWq08TrDcMAnyu2 mtOqt408FHWwK6/jbG09RAbl/+2YdBzYzEkjfhCZwyXT+0vMBJWn+z5JsoRnSriC RO9TIaAYAnEGErXqo+D9SGMa+8tUVKpOeorkSAF63G4WE80yteyTrMUgGyNgoG7l WY4SRE2nCYRsG/M7bWaOvOnIW1mX7UVxx0bV7aN8ihEC43ulbQgVKB54xvfJSlRv 5PkCbF/03mooWt2imKHKNEe/dm6/qcGSJZufdPCqs01ov4y9tbUFNkofHWW3puaj g5JGIkHFJr7gfI3wNOdRlmglXihLlB0p7gxWPabpy4ekkLyTX/s= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:23 2026 by rpki-client