$ rpki-client -vvf rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft (raw, json) Hash identifier: 9cIoECbabgadNXjMnGi61eQXgB2DcpcFKAUVnR1v1x4= Subject key identifier: 03:31:7F:A6:40:4F:9C:24:22:25:83:F7:AE:AD:DF:A5:6D:35:99:4A Authority key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Certificate issuer: /CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Certificate serial: 3231B2573BB48CEE6746A6A20A21CEF7A65B2463 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:28:08 +0000 Manifest this update: Fri 19 Jun 2026 18:23:08 +0000 Manifest next update: Sat 20 Jun 2026 20:20:08 +0000 Files and hashes: 1: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl (hash: LNZL9xuvD4ejni47S2vxv0EIJGdd7caCZyyOspWHXxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:31:b2:57:3b:b4:8c:ee:67:46:a6:a2:0a:21:ce:f7:a6:5b:24:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Validity Not Before: Jun 19 18:23:08 2026 GMT Not After : Jun 20 20:20:08 2026 GMT Subject: CN=03317FA6404F9C24222583F7AEADDFA56D35994A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:c4:03:ce:93:3d:e0:e6:2c:38:2b:a0:db: 01:fe:b1:a8:59:d9:7b:cf:18:6a:1f:7e:b3:a1:1a: 0d:f1:d6:66:54:27:e1:97:f6:92:f2:cd:3f:5f:d2: 62:08:8e:20:11:0a:b1:9c:8b:51:f7:65:86:45:67: 97:f8:17:c2:8f:65:f8:b9:51:b2:72:a9:b4:f5:31: a1:01:3c:d0:9a:cd:bd:2d:a3:8b:bd:53:45:66:48: 4a:4e:e0:21:dd:d8:84:f8:b6:32:a7:22:6e:6c:9a: 03:8a:c2:10:e9:57:cc:cd:d0:d2:af:b0:22:94:aa: 19:33:03:42:f7:78:c9:7e:74:ef:67:e8:6f:ac:d1: 8c:ff:8e:e4:2a:90:f6:1e:ba:5c:95:37:ea:ff:c4: 85:8b:52:96:af:81:59:6d:52:94:f8:b8:9a:31:73: 34:05:08:14:ff:f6:c1:b8:d5:11:5c:b4:b3:48:40: f0:a5:90:98:d9:8d:4a:37:53:22:b7:3e:e2:46:59: e0:50:cd:36:d2:9f:bb:7c:4c:92:ca:65:0c:b5:76: 5e:72:fa:f9:f5:a2:42:2d:14:21:a9:53:0d:a6:3f: 96:a7:3f:50:4e:fc:fb:7c:8e:d6:82:8b:03:3d:1f: cc:bf:bd:65:92:8f:1b:d8:d6:a9:38:f4:eb:24:93: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:7F:A6:40:4F:9C:24:22:25:83:F7:AE:AD:DF:A5:6D:35:99:4A X509v3 Authority Key Identifier: keyid:3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e5:af:1d:0f:36:07:59:a0:26:1c:29:f7:5e:a9:44:78:4a: 75:5c:b0:15:88:4f:b8:b2:d2:40:d8:fa:3c:78:84:e9:86:03: d7:91:60:9e:81:d1:d0:56:b4:6a:02:a1:8e:5c:3a:ba:6b:af: e4:13:4f:fd:7c:6a:7f:d1:9c:ea:08:1b:85:45:22:1b:0e:11: f2:d7:bc:ee:0e:ca:c6:86:fe:84:78:3b:3e:42:58:e4:f4:35: 2b:a3:44:8e:88:37:0d:79:e9:46:c5:d9:6d:b1:2a:d2:ae:f4: d7:46:93:b4:12:e2:fe:fc:68:24:2d:ac:0c:f7:c6:03:18:9e: 44:30:97:7c:0e:c4:81:02:56:ba:b1:19:bd:3f:c5:08:d7:80: f8:20:61:8b:61:a8:4e:81:e6:8a:11:b6:2e:95:fc:33:6c:9b: 96:a0:22:93:26:91:78:2e:76:1c:95:4d:a9:56:7c:4b:e7:0e: e8:8a:f2:68:bf:8f:99:b3:34:b2:f3:87:69:e3:a2:25:4c:b8: 24:ec:57:ec:f3:ea:16:b2:f7:c4:8e:13:81:25:b6:42:6e:3f: d4:69:68:79:f4:28:f8:d5:ce:bc:94:57:c2:21:40:9a:05:2a: f7:e2:07:44:85:65:7f:ca:61:51:7f:90:f3:7f:ff:8a:9f:4d: 49:e3:19:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjGyVzu0jO5nRqaiCiHO96ZbJGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNC QzA4MUM5OTAeFw0yNjA2MTkxODIzMDhaFw0yNjA2MjAyMDIwMDhaMDMxMTAvBgNV BAMTKDAzMzE3RkE2NDA0RjlDMjQyMjI1ODNGN0FFQURERkE1NkQzNTk5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+sQDzpM94OYsOCug2wH+sahZ 2XvPGGoffrOhGg3x1mZUJ+GX9pLyzT9f0mIIjiARCrGci1H3ZYZFZ5f4F8KPZfi5 UbJyqbT1MaEBPNCazb0to4u9U0VmSEpO4CHd2IT4tjKnIm5smgOKwhDpV8zN0NKv sCKUqhkzA0L3eMl+dO9n6G+s0Yz/juQqkPYeulyVN+r/xIWLUpavgVltUpT4uJox czQFCBT/9sG41RFctLNIQPClkJjZjUo3UyK3PuJGWeBQzTbSn7t8TJLKZQy1dl5y +vn1okItFCGpUw2mP5anP1BO/Pt8jtaCiwM9H8y/vWWSjxvY1qk49Oskk3A9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzF/pkBPnCQiJYP3rq3fpW01mUowHwYDVR0j BBgwFoAUPwV8m+sWzndP8UgxGPz907wIHJkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJmMzljMTctNjcyNS00MmJlLWJlZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJF QjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNCQzA4MUM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjA1N0M5QkVCMTZDRTc3NEZGMTQ4MzExOEZDRkREM0JDMDgx Qzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZE RDNCQzA4MUM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXlrx0PNgdZoCYcKfdeqUR4SnVcsBWIT7iy 0kDY+jx4hOmGA9eRYJ6B0dBWtGoCoY5cOrprr+QTT/18an/RnOoIG4VFIhsOEfLX vO4OysaG/oR4Oz5CWOT0NSujRI6INw156UbF2W2xKtKu9NdGk7QS4v78aCQtrAz3 xgMYnkQwl3wOxIECVrqxGb0/xQjXgPggYYthqE6B5ooRti6V/DNsm5agIpMmkXgu dhyVTalWfEvnDuiK8mi/j5mzNLLzh2njoiVMuCTsV+zz6hay98SOE4EltkJuP9Rp aHn0KPjVzryUV8IhQJoFKvfiB0SFZX/KYVF/kPN//4qfTUnjGZk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:13 2026 by rpki-client