$ rpki-client -vvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: WXlAkRQsVdMqy0bFem9824aJqxTkURGXhHIqxyjyM2g= Subject key identifier: 7A:38:1C:82:42:6A:47:17:71:AD:F7:3B:BF:31:F8:EE:C7:49:87:52 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 2E40242B39629F1D5A01AE5C1E293573672B5556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:55:56 +0000 Manifest this update: Sat 20 Jun 2026 00:50:56 +0000 Manifest next update: Sun 21 Jun 2026 04:06:56 +0000 Files and hashes: 1: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: rBkLeRcskouW0KTussqUlgBrFGpuVhbVDBFDbcmO/co=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) 3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:40:24:2b:39:62:9f:1d:5a:01:ae:5c:1e:29:35:73:67:2b:55:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Jun 20 00:50:56 2026 GMT Not After : Jun 21 04:06:56 2026 GMT Subject: CN=7A381C82426A471771ADF73BBF31F8EEC7498752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:15:98:07:33:d3:a1:fe:72:fa:4e:9a:b5: ec:18:3b:da:db:7f:1b:2c:ce:70:2a:63:66:e1:07: f5:eb:4b:bd:6d:d8:f7:01:88:7e:81:26:a6:c3:97: de:24:0c:c2:11:92:8c:fa:d4:5f:52:0a:1b:a4:6c: 3e:e6:b8:12:cc:7c:71:09:df:08:36:fe:da:34:c8: 23:d7:20:05:3a:4d:5b:e5:f4:1b:51:a0:29:bf:38: 2b:ec:55:d9:69:85:50:26:fb:ba:90:b2:21:7e:6b: 7f:12:6f:18:bd:e3:87:61:69:ff:2d:38:7c:1b:a2: 6e:b3:0a:85:cc:f5:14:77:f9:6d:e3:b8:e9:2c:77: 53:2d:e0:99:65:ee:01:6b:b5:2f:c5:22:4d:94:c8: a5:f0:77:56:82:20:74:a8:93:26:49:85:51:cc:6e: d1:10:60:ff:77:aa:4d:77:ce:e5:2a:a4:da:48:69: 78:1a:18:0a:e1:2f:5c:ab:e4:51:94:17:76:b5:4a: 34:98:21:04:b1:83:ac:c8:3c:3b:3f:0a:13:3a:fc: bc:f4:6e:8d:44:3e:b1:93:77:23:9f:ce:34:df:36: 38:e9:63:d4:85:1d:4c:ea:71:cd:6c:1b:e8:5a:cb: 64:8e:73:10:ab:07:e4:4b:21:a7:8d:be:5b:cd:a6: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:1C:82:42:6A:47:17:71:AD:F7:3B:BF:31:F8:EE:C7:49:87:52 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e6:86:3f:12:2c:46:9b:09:17:72:71:21:e5:a4:da:6f:e4: b9:e7:43:7c:e4:a1:c1:5b:93:7e:cc:74:04:97:7a:0f:de:34: 90:54:2c:bc:3c:a5:a5:4f:26:dc:1e:6c:1d:87:54:26:3a:dd: 3a:5a:40:e9:b1:64:d8:e1:e0:b4:00:51:8b:a8:a6:ce:d5:82: d1:df:52:fd:c6:9b:21:5a:ce:57:d7:fb:e1:e3:b5:05:d1:26: fd:7c:48:a6:25:b1:9a:fc:7a:dd:fc:9e:f3:02:a5:e8:e1:c0: 98:8e:1d:05:9a:1c:dd:22:3a:d6:17:c9:83:83:d6:d3:9d:87: 31:58:45:6d:39:33:49:eb:2e:21:bf:50:d1:dc:91:d6:4b:cc: 03:16:20:ee:45:33:bf:a3:f9:86:26:3b:a3:bf:0f:49:00:32: 95:cf:4a:8f:c5:17:11:60:99:0a:75:ab:53:4c:76:ad:79:f5: 06:07:2a:2e:4f:8a:43:3d:df:bc:a1:cb:0d:b8:08:9c:c7:50: 55:9b:2d:9d:04:53:34:7a:c7:bc:2d:31:b5:43:86:88:c6:a7: 3f:e0:7e:11:9d:69:8f:5a:27:09:09:4a:f9:0b:5a:b2:1f:f7: c2:16:b8:8b:6b:bf:99:57:b9:8e:5e:ac:3f:69:e2:b3:c8:b6: 04:63:68:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkAkKzlinx1aAa5cHik1c2crVVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA2MjAwMDUwNTZaFw0yNjA2MjEwNDA2NTZaMDMxMTAvBgNV BAMTKDdBMzgxQzgyNDI2QTQ3MTc3MUFERjczQkJGMzFGOEVFQzc0OTg3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfBWYBzPTof5y+k6atewYO9rb fxssznAqY2bhB/XrS71t2PcBiH6BJqbDl94kDMIRkoz61F9SChukbD7muBLMfHEJ 3wg2/to0yCPXIAU6TVvl9BtRoCm/OCvsVdlphVAm+7qQsiF+a38Sbxi944dhaf8t OHwbom6zCoXM9RR3+W3juOksd1Mt4Jll7gFrtS/FIk2UyKXwd1aCIHSokyZJhVHM btEQYP93qk13zuUqpNpIaXgaGArhL1yr5FGUF3a1SjSYIQSxg6zIPDs/ChM6/Lz0 bo1EPrGTdyOfzjTfNjjpY9SFHUzqcc1sG+hay2SOcxCrB+RLIaeNvlvNpi2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejgcgkJqRxdxrfc7vzH47sdJh1IwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPmhj8SLEabCRdycSHlpNpv5LnnQ3zkocFb k37MdASXeg/eNJBULLw8paVPJtwebB2HVCY63TpaQOmxZNjh4LQAUYuops7VgtHf Uv3GmyFazlfX++HjtQXRJv18SKYlsZr8et38nvMCpejhwJiOHQWaHN0iOtYXyYOD 1tOdhzFYRW05M0nrLiG/UNHckdZLzAMWIO5FM7+j+YYmO6O/D0kAMpXPSo/FFxFg mQp1q1NMdq159QYHKi5PikM937yhyw24CJzHUFWbLZ0EUzR6x7wtMbVDhojGpz/g fhGdaY9aJwkJSvkLWrIf98IWuItrv5lXuY5erD9p4rPItgRjaFM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:36:39 2026 by rpki-client