$ rpki-client -vvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: 8GiXR80fVUHKRqy+OzdiqHo/MhfeBl3FNeglHLHDy1M= Subject key identifier: 0E:30:2C:77:17:A3:9F:1E:F7:EF:CD:C1:AF:FB:EA:CA:DD:BB:C0:F1 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 6F0CD3B1BBD5E801005DFDC208EFDB1D1DAA85B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:19:22 +0000 Manifest this update: Fri 19 Jun 2026 19:14:22 +0000 Manifest next update: Sat 20 Jun 2026 19:37:22 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: Q1icb2t5m6GIs3yUtXzIwmc6E7zEfoHjJs8TzD1Ab7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0c:d3:b1:bb:d5:e8:01:00:5d:fd:c2:08:ef:db:1d:1d:aa:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Jun 19 19:14:22 2026 GMT Not After : Jun 20 19:37:22 2026 GMT Subject: CN=0E302C7717A39F1EF7EFCDC1AFFBEACADDBBC0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:34:a4:d8:59:ac:c1:9e:1b:30:f0:11:d7:b2: 3e:f3:e1:91:1d:d6:7c:fa:e2:56:4d:f4:4a:1d:52: f4:31:8a:a1:96:5a:0b:d0:d0:61:fa:35:13:bb:05: 9b:22:8d:d2:a5:1e:2c:0a:c5:37:54:75:0b:21:a7: 49:e0:35:6e:b5:65:e6:d8:3c:0d:8f:4f:6a:1b:aa: b4:28:bb:6e:9d:71:70:58:04:7c:c5:20:3d:7f:4f: 69:0c:f6:2d:01:42:36:ad:e6:c5:cf:48:0f:b9:d5: 69:8f:c2:d5:13:e7:ac:13:37:8e:6c:63:e4:d2:2d: c2:15:69:56:43:30:51:76:cf:92:be:a9:b5:96:9d: 27:1e:86:7d:52:b8:4e:58:57:2e:60:b2:ec:46:fb: 90:c2:97:6e:2a:9e:35:3f:25:6d:3b:d8:0d:52:f8: e4:86:ec:f3:1a:09:80:59:14:f5:1f:e2:a9:36:5d: 73:fd:9b:c9:8b:2a:46:d9:a3:41:a1:77:40:21:22: 2a:ce:57:5f:70:bf:d1:b9:41:05:a4:f9:4f:9b:bb: 93:fe:ca:4c:af:bb:16:5a:9a:0e:a0:e8:6e:b0:c3: ef:b3:00:cf:32:f7:97:96:09:54:34:f8:f4:46:1f: a2:0e:7d:63:78:ea:42:1d:28:2c:9d:5a:65:dd:c7: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:30:2C:77:17:A3:9F:1E:F7:EF:CD:C1:AF:FB:EA:CA:DD:BB:C0:F1 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ad:29:f6:fe:b7:5f:b5:79:ae:eb:e2:ab:8b:90:c0:4c:47: 01:39:7a:28:46:fe:2e:73:06:a2:8c:d2:3e:23:f5:d6:90:51: 5c:25:95:8b:9c:fc:3f:9b:ee:0a:1e:d7:94:f0:07:fb:ca:fe: 9d:2a:df:63:5f:a8:66:b3:a2:63:ae:0d:b2:d0:79:3b:84:5f: 1c:2f:a3:82:f7:3b:5f:d1:e2:02:04:dd:f7:31:3c:6c:dd:5e: 3a:5e:db:80:1c:ea:40:9e:24:72:9d:fb:3e:4d:aa:64:65:54: 67:87:23:45:93:cc:38:2e:f0:2f:2c:44:39:40:33:eb:56:f4: e5:f7:10:77:84:68:d3:a0:fd:28:37:f7:b4:dd:e9:df:26:95: 0a:d7:b3:07:7d:38:23:66:d2:3a:44:e6:49:ef:e5:cd:c6:2d: 58:a9:cc:92:21:16:bb:63:45:a1:3b:45:d9:66:47:61:03:4e: 0b:b7:85:76:43:d2:e5:21:c8:d4:2c:61:47:5d:57:87:ad:34: 9c:a8:72:bc:a4:25:97:45:54:bc:a3:d8:15:93:ad:41:ea:99: c3:18:1b:47:6e:92:b7:a8:ac:65:5c:4e:17:ae:01:6d:ab:d7: 95:8b:df:8c:49:b7:ed:65:29:92:fa:eb:bf:93:2b:45:7d:f2: de:11:1e:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwzTsbvV6AEAXf3CCO/bHR2qhbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA2MTkxOTE0MjJaFw0yNjA2MjAxOTM3MjJaMDMxMTAvBgNV BAMTKDBFMzAyQzc3MTdBMzlGMUVGN0VGQ0RDMUFGRkJFQUNBRERCQkMwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyNKTYWazBnhsw8BHXsj7z4ZEd 1nz64lZN9EodUvQxiqGWWgvQ0GH6NRO7BZsijdKlHiwKxTdUdQshp0ngNW61ZebY PA2PT2obqrQou26dcXBYBHzFID1/T2kM9i0BQjat5sXPSA+51WmPwtUT56wTN45s Y+TSLcIVaVZDMFF2z5K+qbWWnScehn1SuE5YVy5gsuxG+5DCl24qnjU/JW072A1S +OSG7PMaCYBZFPUf4qk2XXP9m8mLKkbZo0Ghd0AhIirOV19wv9G5QQWk+U+bu5P+ ykyvuxZamg6g6G6ww++zAM8y95eWCVQ0+PRGH6IOfWN46kIdKCydWmXdx+XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjAsdxejnx73783Br/vqyt27wPEwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHetKfb+t1+1ea7r4quLkMBMRwE5eihG/i5z BqKM0j4j9daQUVwllYuc/D+b7goe15TwB/vK/p0q32NfqGazomOuDbLQeTuEXxwv o4L3O1/R4gIE3fcxPGzdXjpe24Ac6kCeJHKd+z5NqmRlVGeHI0WTzDgu8C8sRDlA M+tW9OX3EHeEaNOg/Sg397Td6d8mlQrXswd9OCNm0jpE5knv5c3GLVipzJIhFrtj RaE7RdlmR2EDTgu3hXZD0uUhyNQsYUddV4etNJyocrykJZdFVLyj2BWTrUHqmcMY G0dukreorGVcTheuAW2r15WL34xJt+1lKZL667+TK0V98t4RHmw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:13 2026 by rpki-client