$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: o7pz8KXEzUZJ7kftMM0GaKmYyCJfB2LxIZI1Bgwmd/Y= Subject key identifier: 33:AE:F7:3E:5D:B1:82:A5:8D:32:4C:F7:A9:52:8F:7C:BC:AA:9E:C4 Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 629C6A59F4F186CB5541DDBD8EBDFD8AC75869AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 14:43:31 +0000 Manifest this update: Fri 19 Jun 2026 14:38:31 +0000 Manifest next update: Sat 20 Jun 2026 18:23:31 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) 2: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: rGq0kHthM+V8mfd9Xyl4pFlJzX4Oe5dMPHUo/tD43/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9c:6a:59:f4:f1:86:cb:55:41:dd:bd:8e:bd:fd:8a:c7:58:69:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Jun 19 14:38:31 2026 GMT Not After : Jun 20 18:23:31 2026 GMT Subject: CN=33AEF73E5DB182A58D324CF7A9528F7CBCAA9EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:3f:70:8a:a6:e6:dd:a3:66:b8:68:1d:21: 66:b9:4d:14:1d:67:3e:fc:ee:d0:9b:47:5a:24:37: c2:e0:a2:46:e2:6a:09:77:fb:3f:4b:37:36:b6:62: 54:92:35:f0:cf:12:bc:0f:20:dd:11:dc:5e:cd:e9: 51:69:c2:1b:55:ea:34:45:6d:66:90:36:0a:7e:c2: f6:7f:d3:07:3b:89:a2:db:c3:e9:69:1d:ea:6a:a7: 62:e7:68:e3:09:b1:c3:12:ec:28:08:37:83:e4:ec: 85:8a:0a:07:5e:39:6e:4e:ec:c6:3c:5f:ef:aa:d3: 73:c5:de:ef:80:cb:72:af:95:3f:2e:9c:aa:fe:8b: ba:d1:9f:3c:41:6e:8e:89:bb:ad:3d:39:27:36:45: 88:f8:27:f1:f6:52:32:a1:0c:d7:78:8d:7d:26:67: 3e:c4:52:d7:84:38:c4:5a:ec:95:7f:9e:f4:c0:e8: 02:80:09:74:05:1d:db:42:6a:43:c1:ef:e3:3e:53: 72:ea:f2:4b:37:f0:17:81:6e:3d:61:6e:fb:a3:05: 80:5b:a4:ed:41:1d:78:c4:6a:9f:5f:7d:5a:39:52: 68:0b:39:78:8b:21:39:4b:df:a1:f7:54:6a:d3:b2: 0a:09:3b:29:03:59:e9:f3:ba:1c:c1:57:86:e7:7a: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AE:F7:3E:5D:B1:82:A5:8D:32:4C:F7:A9:52:8F:7C:BC:AA:9E:C4 X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:49:26:6a:64:90:57:fe:a0:50:e3:76:00:49:89:69:b5:be: f7:9c:e0:05:e0:ec:24:af:b8:79:74:5e:ef:95:46:50:aa:49: e0:e4:6b:fe:86:88:ef:74:fd:0d:ff:f3:f9:21:61:75:37:e1: f6:27:85:db:91:c1:5e:a8:3f:69:05:5c:4b:8f:95:ef:c4:7a: f5:65:60:1d:17:c7:c8:85:76:90:1c:93:ad:61:cb:ad:77:b8: b5:bd:e3:98:2f:83:69:59:66:ef:3c:aa:cc:8d:c9:eb:20:d4: ee:e9:fd:d4:86:1c:2d:5d:c8:2f:92:f3:13:49:19:21:cd:6c: 73:4b:e1:5b:6e:8b:a4:af:07:b2:ac:fd:61:37:70:57:f1:bb: 0c:9f:ce:cd:2c:85:9f:95:48:99:1d:ee:90:0d:23:83:f3:45: 3b:87:ce:10:51:8e:a0:f7:b4:41:07:6d:91:2a:7a:45:ba:b3: 31:4e:5e:34:e1:3f:1c:23:7e:52:1f:35:f3:b4:cb:62:82:56: 20:b9:87:34:dd:19:9a:d2:ed:35:e9:3e:ea:8c:27:38:11:15: 97:b5:ea:86:36:0e:8d:94:2f:86:eb:4c:33:d0:6a:00:dd:db: 3f:2f:2a:5e:de:1c:30:c4:76:3b:a4:a1:2a:d7:2f:90:25:b2: f1:7d:26:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpxqWfTxhstVQd29jr39isdYaaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA2MTkxNDM4MzFaFw0yNjA2MjAxODIzMzFaMDMxMTAvBgNV BAMTKDMzQUVGNzNFNURCMTgyQTU4RDMyNENGN0E5NTI4RjdDQkNBQTlFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzj9wiqbm3aNmuGgdIWa5TRQd Zz787tCbR1okN8Lgokbiagl3+z9LNza2YlSSNfDPErwPIN0R3F7N6VFpwhtV6jRF bWaQNgp+wvZ/0wc7iaLbw+lpHepqp2LnaOMJscMS7CgIN4Pk7IWKCgdeOW5O7MY8 X++q03PF3u+Ay3KvlT8unKr+i7rRnzxBbo6Ju609OSc2RYj4J/H2UjKhDNd4jX0m Zz7EUteEOMRa7JV/nvTA6AKACXQFHdtCakPB7+M+U3Lq8ks38BeBbj1hbvujBYBb pO1BHXjEap9ffVo5UmgLOXiLITlL36H3VGrTsgoJOykDWenzuhzBV4bnetZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM673Pl2xgqWNMkz3qVKPfLyqnsQwHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxJJmpkkFf+oFDjdgBJiWm1vvec4AXg7CSv uHl0Xu+VRlCqSeDka/6GiO90/Q3/8/khYXU34fYnhduRwV6oP2kFXEuPle/EevVl YB0Xx8iFdpAck61hy613uLW945gvg2lZZu88qsyNyesg1O7p/dSGHC1dyC+S8xNJ GSHNbHNL4Vtui6SvB7Ks/WE3cFfxuwyfzs0shZ+VSJkd7pANI4PzRTuHzhBRjqD3 tEEHbZEqekW6szFOXjThPxwjflIfNfO0y2KCViC5hzTdGZrS7TXpPuqMJzgRFZe1 6oY2Do2UL4brTDPQagDd2z8vKl7eHDDEdjukoSrXL5AlsvF9Jrc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:11 2026 by rpki-client