$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: B6LDCNPbRgTx8MnHiKFwDjbFFUcktosbI+FnDtAfWnU= Subject key identifier: 12:50:84:C9:FF:70:49:31:2F:AF:80:C0:0C:24:65:53:1A:33:F7:AE Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 28680B825B138F922E23A40E3937D3B793F70A54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: 41 Signing time: Thu 18 Jun 2026 10:40:03 +0000 Manifest this update: Thu 18 Jun 2026 10:35:03 +0000 Manifest next update: Fri 19 Jun 2026 11:43:03 +0000 Files and hashes: 1: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: 2vNG0GpxBD4RTWeE9dfYPl1Ff7EXPhlU+6FigDmsi9o=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 11:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:68:0b:82:5b:13:8f:92:2e:23:a4:0e:39:37:d3:b7:93:f7:0a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: Jun 18 10:35:03 2026 GMT Not After : Jun 19 11:43:03 2026 GMT Subject: CN=125084C9FF7049312FAF80C00C2465531A33F7AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:02:05:ba:11:1d:de:8d:3d:d0:cd:ec:6a: bd:3a:a6:a3:2e:49:dc:9d:30:2f:e7:97:8b:41:da: aa:bf:b0:9c:d5:8f:e9:6c:da:3e:4e:6e:3a:c4:6a: bd:b5:d8:83:98:7f:39:05:01:9b:60:1a:fc:04:9b: 26:f0:33:97:aa:f9:6c:a2:8e:2f:92:38:6b:af:b3: d4:7a:50:24:57:f6:fb:59:93:f0:79:98:ac:d8:02: 9c:f8:33:2d:f0:e9:fa:b5:23:62:5a:54:c4:b1:8b: e8:07:2d:c0:2d:14:0a:a4:55:6e:e7:ff:50:05:5e: 32:5f:6a:fc:95:12:0a:d6:d2:a9:c1:65:5b:22:59: af:f7:50:f2:1d:b7:e6:99:f0:1d:7e:23:f1:c2:a6: a8:78:92:fd:d3:46:16:f6:2a:74:8c:8b:c9:42:8f: da:c3:88:93:a9:38:d1:9e:ad:d3:07:cd:37:74:92: 3f:63:7a:02:c0:e7:57:c3:96:ae:f8:61:51:71:d9: bb:d9:bc:ec:67:7f:7f:d1:59:fd:66:5e:cb:2d:ae: b2:40:6d:fb:e3:cb:90:cb:ff:0d:f0:45:45:b9:7e: 74:37:e6:04:3b:00:04:f2:1d:8e:24:10:53:45:d4: a2:e0:a7:08:5f:a2:85:bf:28:c9:3e:71:69:a4:14: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:84:C9:FF:70:49:31:2F:AF:80:C0:0C:24:65:53:1A:33:F7:AE X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:11:c3:a1:0d:f7:e1:2a:37:dc:5c:2b:3e:51:3a:4f:4e:a8: 8a:58:03:68:86:c4:a8:64:b1:48:ba:12:1f:cd:23:e6:2e:48: 91:95:ee:36:ec:33:72:55:a8:07:fd:4a:01:12:99:42:63:96: 36:9a:e2:72:e4:94:28:ab:bd:8c:62:56:ac:c5:54:a5:39:28: 3d:ed:c2:17:d4:fe:ea:46:41:d5:bc:d6:c3:84:7f:47:d2:9d: 98:d9:30:b2:d6:9b:81:36:8e:af:15:1f:24:bb:66:8b:de:92: 43:51:69:6c:00:56:aa:16:bd:ba:38:9d:1c:a5:68:53:36:54: 3d:7b:e8:c2:25:12:9f:83:1a:b9:99:e1:9c:50:a0:56:c4:89: e3:8d:d5:41:1b:b2:8e:c7:f7:2f:9f:23:b8:28:80:be:e6:aa: f2:48:05:a7:72:74:77:9d:cf:bf:27:32:30:2a:4d:39:9e:d2: 72:98:53:41:d1:ca:1e:73:9f:4b:74:e7:df:a6:3e:82:25:17: 0b:22:4e:ae:e8:78:00:41:bf:c5:32:e9:4d:6c:34:16:93:65: 9c:4e:a2:4d:13:6e:15:10:5f:3a:0b:ca:7e:13:10:e1:61:2e: c9:80:d9:50:0e:ea:00:74:80:66:2e:39:4b:07:04:48:a7:e0: 03:2c:87:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGgLglsTj5IuI6QOOTfTt5P3ClQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjA2MTgxMDM1MDNaFw0yNjA2MTkxMTQzMDNaMDMxMTAvBgNV BAMTKDEyNTA4NEM5RkY3MDQ5MzEyRkFGODBDMDBDMjQ2NTUzMUEzM0Y3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/wIFuhEd3o090M3sar06pqMu SdydMC/nl4tB2qq/sJzVj+ls2j5ObjrEar212IOYfzkFAZtgGvwEmybwM5eq+Wyi ji+SOGuvs9R6UCRX9vtZk/B5mKzYApz4My3w6fq1I2JaVMSxi+gHLcAtFAqkVW7n /1AFXjJfavyVEgrW0qnBZVsiWa/3UPIdt+aZ8B1+I/HCpqh4kv3TRhb2KnSMi8lC j9rDiJOpONGerdMHzTd0kj9jegLA51fDlq74YVFx2bvZvOxnf3/RWf1mXsstrrJA bfvjy5DL/w3wRUW5fnQ35gQ7AATyHY4kEFNF1KLgpwhfooW/KMk+cWmkFHn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElCEyf9wSTEvr4DADCRlUxoz964wHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHERw6EN9+EqN9xcKz5ROk9OqIpYA2iGxKhk sUi6Eh/NI+YuSJGV7jbsM3JVqAf9SgESmUJjljaa4nLklCirvYxiVqzFVKU5KD3t whfU/upGQdW81sOEf0fSnZjZMLLWm4E2jq8VHyS7ZovekkNRaWwAVqoWvbo4nRyl aFM2VD176MIlEp+DGrmZ4ZxQoFbEieON1UEbso7H9y+fI7gogL7mqvJIBadydHed z78nMjAqTTme0nKYU0HRyh5zn0t059+mPoIlFwsiTq7oeABBv8Uy6U1sNBaTZZxO ok0TbhUQXzoLyn4TEOFhLsmA2VAO6gB0gGYuOUsHBEin4AMsh1o= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:17 2026 by rpki-client