$ rpki-client -vvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: YTDjy2GJkXsPvVc5IC0Zk8hFXWCfB/p2VAYa7EDoBlI= Subject key identifier: 42:E7:A6:E0:4F:9C:5A:15:CA:45:C4:52:3C:2D:02:3A:AA:16:7B:AC Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 6FB38D06C4C857745747A4451236AADE9D4214F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 15:34:33 +0000 Manifest this update: Fri 19 Jun 2026 15:29:33 +0000 Manifest next update: Sat 20 Jun 2026 19:14:33 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: RKrTk8PsvLqUKn+l3xD70lpXB9SKmYJ1Bg4A5oyhVQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b3:8d:06:c4:c8:57:74:57:47:a4:45:12:36:aa:de:9d:42:14:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Jun 19 15:29:33 2026 GMT Not After : Jun 20 19:14:33 2026 GMT Subject: CN=42E7A6E04F9C5A15CA45C4523C2D023AAA167BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:45:22:22:8c:41:1d:c4:1c:7c:64:22:5a: 9e:2a:6c:e8:38:06:4b:51:52:f5:0f:1e:36:d1:fe: 0e:a8:a3:9e:bd:37:5c:1c:5f:bf:09:a5:1d:de:d8: bc:31:fa:6e:0b:b7:49:5a:41:df:45:53:91:04:6c: c5:b3:64:f7:4a:04:97:7d:4c:46:5e:77:27:41:a9: db:11:67:cc:fb:d0:a5:c4:6f:a7:26:64:44:28:4f: 36:04:84:bd:4c:92:7b:bb:0d:3e:4d:a0:3c:2a:59: 8c:f8:c0:9f:70:b4:94:05:5d:90:63:8d:01:f2:c8: cf:76:f9:e6:f9:99:05:75:c7:09:ba:45:c9:ec:b9: 2e:8d:4c:a3:0b:a7:c9:6f:e0:30:9e:7f:d3:36:47: f8:d0:19:c5:f6:6e:cf:7d:60:ca:73:0d:8c:e1:99: 0f:90:18:66:e0:05:d1:56:dd:ea:97:ec:53:2c:37: d8:98:01:af:51:44:9b:39:ce:87:1f:fd:25:d8:23: 3d:89:c5:b0:77:66:3d:06:ab:a8:45:e1:2a:81:f9: d0:e2:3b:99:92:3a:e7:8f:9d:71:9b:56:3c:d4:01: 89:a3:7b:9f:55:c9:16:80:bb:a8:c5:5b:78:8c:3d: 1f:5a:89:b8:bc:a5:01:06:d3:31:4c:28:8c:47:be: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:A6:E0:4F:9C:5A:15:CA:45:C4:52:3C:2D:02:3A:AA:16:7B:AC X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:48:d0:e6:4c:e1:39:3b:7d:66:9a:e0:1f:e5:8b:c6:b2:13: c3:f7:3c:4b:8c:bf:f6:22:dc:e9:40:22:ea:04:9f:a1:28:ba: fe:e7:03:fe:22:e4:3c:aa:34:76:93:6c:0b:41:46:12:22:03: 72:eb:dc:34:b0:2c:2b:f2:05:07:2f:2a:a7:ff:29:34:89:41: 36:ea:63:77:e1:01:30:66:e9:f5:34:97:c9:37:a0:b4:47:fe: 6c:b6:f4:24:07:17:4c:b9:7c:6f:30:5a:57:fd:56:60:42:d2: 64:a1:b7:38:4a:61:32:e1:a9:33:72:7d:b2:36:fc:31:fd:86: 43:00:9d:9c:70:b7:6e:71:2f:d1:c1:1c:97:e2:a9:5e:97:da: 77:26:9e:7d:3a:0d:9e:b2:67:67:82:d5:22:0b:47:5f:56:8f: d0:27:9a:b8:bb:51:28:3d:f2:a9:39:f1:2c:14:db:b9:f9:7a: d3:a8:06:ed:c6:e5:c7:cd:0f:d3:fc:19:c0:fa:58:48:4e:26: 60:49:17:52:74:32:1e:3f:aa:09:14:41:ae:6a:f9:39:b9:3e: b5:b7:d5:10:71:1c:09:4f:82:e4:cd:79:3a:08:a8:df:35:e1: c3:13:b0:e7:5c:cb:98:2a:dc:dd:d1:f5:78:90:89:67:d9:fc: fa:ae:53:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7ONBsTIV3RXR6RFEjaq3p1CFPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA2MTkxNTI5MzNaFw0yNjA2MjAxOTE0MzNaMDMxMTAvBgNV BAMTKDQyRTdBNkUwNEY5QzVBMTVDQTQ1QzQ1MjNDMkQwMjNBQUExNjdCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVkUiIoxBHcQcfGQiWp4qbOg4 BktRUvUPHjbR/g6oo569N1wcX78JpR3e2Lwx+m4Lt0laQd9FU5EEbMWzZPdKBJd9 TEZedydBqdsRZ8z70KXEb6cmZEQoTzYEhL1Mknu7DT5NoDwqWYz4wJ9wtJQFXZBj jQHyyM92+eb5mQV1xwm6RcnsuS6NTKMLp8lv4DCef9M2R/jQGcX2bs99YMpzDYzh mQ+QGGbgBdFW3eqX7FMsN9iYAa9RRJs5zocf/SXYIz2JxbB3Zj0Gq6hF4SqB+dDi O5mSOuePnXGbVjzUAYmje59VyRaAu6jFW3iMPR9aibi8pQEG0zFMKIxHvikDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQuem4E+cWhXKRcRSPC0COqoWe6wwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpI0OZM4Tk7fWaa4B/li8ayE8P3PEuMv/Yi 3OlAIuoEn6Eouv7nA/4i5DyqNHaTbAtBRhIiA3Lr3DSwLCvyBQcvKqf/KTSJQTbq Y3fhATBm6fU0l8k3oLRH/my29CQHF0y5fG8wWlf9VmBC0mShtzhKYTLhqTNyfbI2 /DH9hkMAnZxwt25xL9HBHJfiqV6X2ncmnn06DZ6yZ2eC1SILR19Wj9Anmri7USg9 8qk58SwU27n5etOoBu3G5cfND9P8GcD6WEhOJmBJF1J0Mh4/qgkUQa5q+Tm5PrW3 1RBxHAlPguTNeToIqN814cMTsOdcy5gq3N3R9XiQiWfZ/PquUx4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:17 2026 by rpki-client