$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: QmC6VANVQMPc2aqX6SWppX9Jun8XVZta+cBToooQPgU= Subject key identifier: 72:3B:DC:5E:F0:66:E7:A8:83:35:DD:57:DC:B7:E4:6D:31:64:3B:88 Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 477E5D456AB86FAD2B355B4DE00D52A8991E72D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:42:13 +0000 Manifest this update: Fri 19 Jun 2026 17:37:13 +0000 Manifest next update: Sat 20 Jun 2026 17:58:13 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: bVfUAvV5fwzyC9iw9Or4wMtX7xstXzNB+aOBoCbR/P8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7e:5d:45:6a:b8:6f:ad:2b:35:5b:4d:e0:0d:52:a8:99:1e:72:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Jun 19 17:37:13 2026 GMT Not After : Jun 20 17:58:13 2026 GMT Subject: CN=723BDC5EF066E7A88335DD57DCB7E46D31643B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:1c:09:8f:e8:e6:b7:8e:2a:82:0d:99:94: 40:ea:5f:cd:6e:a6:be:14:7c:01:d5:24:98:09:cb: 83:0d:96:60:73:ce:ee:31:7d:27:62:c6:fe:ac:ec: 65:9b:c5:29:46:c2:81:1d:de:f1:09:ca:90:6a:00: 93:d9:1b:50:85:b5:a5:27:de:7c:49:18:53:22:d9: 26:cb:33:31:68:bf:09:09:dd:d6:b0:56:40:bd:28: 2b:2b:f4:af:a4:0e:e2:b6:8f:da:fd:71:fd:59:a8: 30:91:64:b0:dc:09:62:46:8c:36:eb:9c:04:00:7d: e2:9c:f3:4a:4f:6b:d5:68:0b:d1:9f:37:a6:ec:e4: 06:c9:d9:61:25:43:7d:d7:b6:31:c0:c8:50:aa:73: d1:cd:bb:92:e1:bc:86:95:ec:1c:9d:46:bf:17:ea: 8f:8f:91:69:5a:a3:fd:ab:3d:10:6c:0b:ea:3c:c9: fd:c2:e7:2e:dc:de:e1:fb:d5:52:31:29:18:aa:1c: 34:48:69:ca:28:99:ec:0b:15:42:d7:3e:ff:98:84: 42:1d:05:b7:11:13:fd:3f:f7:9b:1c:fe:ad:f0:25: dc:b7:27:8d:5a:0d:40:8d:b0:3b:64:a8:e6:a0:66: 50:2d:24:cd:19:9f:81:04:1e:0e:f7:15:16:63:dc: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:DC:5E:F0:66:E7:A8:83:35:DD:57:DC:B7:E4:6D:31:64:3B:88 X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:2d:28:f9:04:91:d3:fb:a2:36:ba:d1:5f:ea:5a:b6:4e: 83:35:f7:df:ff:93:3b:13:3a:9c:ed:5f:ec:ec:39:75:70:a4: c7:cb:9a:21:4f:68:06:6e:2a:c5:28:9b:09:ec:07:e2:49:26: cb:b1:6e:a1:d3:23:86:3b:de:b4:c7:ba:14:53:f5:a8:05:84: 47:64:2b:d8:00:22:53:f9:02:4d:80:4e:30:6d:49:4f:de:75: 47:cc:1c:87:93:9a:f5:3b:bf:7e:d8:9f:50:45:e9:e6:da:74: 4a:3e:7d:f2:a7:51:ff:a7:b8:34:e6:19:49:8b:cd:6f:27:39: ed:76:6c:43:67:7c:fd:95:16:a1:66:7b:ed:fa:32:4f:93:52: 19:e0:88:31:4b:16:c0:69:33:57:c3:e4:0d:62:82:43:74:2c: 2a:57:c6:d9:43:63:f0:8b:5f:3f:38:1f:0d:5e:d8:5f:57:af: 8b:52:a2:56:6f:79:ff:d1:d8:03:f8:5c:47:18:17:11:9f:b7: ec:a8:9f:51:bf:41:25:0d:b4:c5:05:61:d4:80:a4:0f:03:ee: f7:f6:8f:c0:5c:b6:f9:86:6d:69:6f:6d:66:8a:51:2e:c9:ff: 7e:30:6e:c0:88:45:3c:73:bd:81:9f:92:a1:dc:83:74:70:3b: 20:59:71:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR35dRWq4b60rNVtN4A1SqJkectUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA2MTkxNzM3MTNaFw0yNjA2MjAxNzU4MTNaMDMxMTAvBgNV BAMTKDcyM0JEQzVFRjA2NkU3QTg4MzM1REQ1N0RDQjdFNDZEMzE2NDNCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObhwJj+jmt44qgg2ZlEDqX81u pr4UfAHVJJgJy4MNlmBzzu4xfSdixv6s7GWbxSlGwoEd3vEJypBqAJPZG1CFtaUn 3nxJGFMi2SbLMzFovwkJ3dawVkC9KCsr9K+kDuK2j9r9cf1ZqDCRZLDcCWJGjDbr nAQAfeKc80pPa9VoC9GfN6bs5AbJ2WElQ33XtjHAyFCqc9HNu5LhvIaV7BydRr8X 6o+PkWlao/2rPRBsC+o8yf3C5y7c3uH71VIxKRiqHDRIacoomewLFULXPv+YhEId BbcRE/0/95sc/q3wJdy3J41aDUCNsDtkqOagZlAtJM0Zn4EEHg73FRZj3N0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjvcXvBm56iDNd1X3LfkbTFkO4gwHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+zLSj5BJHT+6I2utFf6lq2ToM199//kzsT OpztX+zsOXVwpMfLmiFPaAZuKsUomwnsB+JJJsuxbqHTI4Y73rTHuhRT9agFhEdk K9gAIlP5Ak2ATjBtSU/edUfMHIeTmvU7v37Yn1BF6ebadEo+ffKnUf+nuDTmGUmL zW8nOe12bENnfP2VFqFme+36Mk+TUhngiDFLFsBpM1fD5A1igkN0LCpXxtlDY/CL Xz84Hw1e2F9Xr4tSolZvef/R2AP4XEcYFxGft+yon1G/QSUNtMUFYdSApA8D7vf2 j8BctvmGbWlvbWaKUS7J/34wbsCIRTxzvYGfkqHcg3RwOyBZcWg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:16 2026 by rpki-client