$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: hVGL610blEvE6MJIjygH9vmlN3VTXCrRW4u/dFaWwZw= Subject key identifier: 46:FE:DF:5A:CF:5E:C2:8F:21:F2:F7:8B:5D:60:A3:71:61:A4:4E:E9 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 29E3F7039543F6A28967B9420A23FB3ABCBE1126 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:31:38 +0000 Manifest this update: Tue 02 Jun 2026 13:26:38 +0000 Manifest next update: Wed 03 Jun 2026 15:55:38 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 2: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 3: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: mQjX1qKGr5A1x1xi5N1b7laHyqayOxGG4N1ZB4gCYto=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e3:f7:03:95:43:f6:a2:89:67:b9:42:0a:23:fb:3a:bc:be:11:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Jun 2 13:26:38 2026 GMT Not After : Jun 3 15:55:38 2026 GMT Subject: CN=46FEDF5ACF5EC28F21F2F78B5D60A37161A44EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:b1:47:74:7d:e1:ec:22:e4:e6:e1:e9:b2: 39:d0:21:00:2d:d8:87:81:da:7f:56:c3:09:37:bf: c0:4b:e3:7a:e5:10:fd:30:c7:a6:db:37:bb:9b:31: 98:76:70:72:da:95:5b:ab:a6:59:ec:d1:3d:ea:e3: ff:b2:25:13:4d:c9:09:7b:d5:46:fb:a1:22:d6:d4: ab:db:21:19:5e:c7:7e:94:58:fc:2f:6b:02:a4:38: 21:ff:8a:6f:39:e6:9a:ac:eb:fa:f6:28:f5:35:9a: d4:dc:0d:e1:70:b1:71:fb:f1:03:9c:8f:c2:b5:53: 9e:83:15:b3:47:4f:7d:27:fc:93:09:f1:72:11:85: 84:78:ce:1c:de:11:cd:f3:d0:a4:8b:40:54:4d:75: 06:26:7b:1c:b2:94:78:9e:2e:33:98:ac:56:a9:25: c2:0a:f6:82:e1:4a:40:5a:33:25:bc:aa:59:8e:e7: 38:2b:e3:9d:bb:eb:f3:73:d6:ea:1f:53:c1:05:8d: d6:dd:ba:8b:dd:f4:40:fe:18:1c:65:f1:e0:ab:74: e8:a0:76:76:b5:32:09:0f:35:b3:0d:fc:67:cc:ae: 68:19:48:8c:7c:0c:11:3e:27:9b:df:a2:a3:df:09: 06:55:3e:a3:52:f0:28:dd:d2:3b:cb:fe:b5:d9:a9: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:DF:5A:CF:5E:C2:8F:21:F2:F7:8B:5D:60:A3:71:61:A4:4E:E9 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ca:45:0e:e4:7a:19:a8:68:8f:68:78:33:80:0e:ce:ec:c8: 69:3c:08:b8:e9:be:7c:63:9a:aa:cb:96:e2:6b:d5:3e:8c:f3: f8:2e:bf:1c:6a:dc:49:b7:99:7b:7e:4d:80:10:42:9e:b6:26: c8:30:35:9c:db:fa:c6:58:d6:46:9c:cd:9a:bc:3b:9b:77:b8: ab:1e:c4:38:53:6e:e1:a8:81:6d:f6:97:8f:26:76:00:0d:b6: fa:98:32:64:fe:e0:e3:97:93:9b:cf:ee:85:ef:5c:bc:b5:5e: 58:5b:82:6e:ed:5a:a1:5a:55:91:52:d8:f8:5f:0f:21:2b:e6: cb:c4:41:3d:46:70:a7:db:cd:40:80:76:de:88:d2:69:4c:8b: cb:ce:21:c8:15:bd:0a:fa:5a:40:31:f8:c1:9b:83:f1:4d:da: a1:64:46:d5:1b:61:e5:0e:5b:b1:f1:2c:97:c5:8e:e7:54:35: cb:74:ee:48:1e:65:d7:c4:d6:2a:7c:8c:60:12:92:b2:49:8c: 2b:8f:c8:c4:6a:1f:3f:98:7b:87:3c:f8:aa:84:ff:4b:18:11: e0:ae:00:d8:bd:2c:b8:c5:87:e9:29:96:f9:b6:22:09:4a:eb: dd:33:f4:7e:51:23:5e:b2:0c:85:f7:ad:6a:f9:a0:e3:3e:c8: 50:66:2a:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeP3A5VD9qKJZ7lCCiP7Ory+ESYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA2MDIxMzI2MzhaFw0yNjA2MDMxNTU1MzhaMDMxMTAvBgNV BAMTKDQ2RkVERjVBQ0Y1RUMyOEYyMUYyRjc4QjVENjBBMzcxNjFBNDRFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjorFHdH3h7CLk5uHpsjnQIQAt 2IeB2n9Wwwk3v8BL43rlEP0wx6bbN7ubMZh2cHLalVurplns0T3q4/+yJRNNyQl7 1Ub7oSLW1KvbIRlex36UWPwvawKkOCH/im855pqs6/r2KPU1mtTcDeFwsXH78QOc j8K1U56DFbNHT30n/JMJ8XIRhYR4zhzeEc3z0KSLQFRNdQYmexyylHieLjOYrFap JcIK9oLhSkBaMyW8qlmO5zgr45276/Nz1uofU8EFjdbduovd9ED+GBxl8eCrdOig dna1MgkPNbMN/GfMrmgZSIx8DBE+J5vfoqPfCQZVPqNS8Cjd0jvL/rXZqb0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURv7fWs9ewo8h8veLXWCjcWGkTukwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/KRQ7kehmoaI9oeDOADs7syGk8CLjpvnxj mqrLluJr1T6M8/guvxxq3Em3mXt+TYAQQp62JsgwNZzb+sZY1kaczZq8O5t3uKse xDhTbuGogW32l48mdgANtvqYMmT+4OOXk5vP7oXvXLy1Xlhbgm7tWqFaVZFS2Phf DyEr5svEQT1GcKfbzUCAdt6I0mlMi8vOIcgVvQr6WkAx+MGbg/FN2qFkRtUbYeUO W7HxLJfFjudUNct07kgeZdfE1ip8jGASkrJJjCuPyMRqHz+Ye4c8+KqE/0sYEeCu ANi9LLjFh+kplvm2IglK690z9H5RI16yDIX3rWr5oOM+yFBmKs8= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:07 2026 by rpki-client