$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: BK6PXQxAqpxErKCQYoeXeKIs2SKdz7U9XfenpDOjCxo= Subject key identifier: D0:9D:0F:29:64:58:01:42:C3:3C:59:45:50:DE:4D:BA:74:09:E7:0E Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 465ADF957279531FE955FD4C4BA16AF85DB0B15D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 05:49:18 +0000 Manifest this update: Thu 18 Jun 2026 05:44:18 +0000 Manifest next update: Fri 19 Jun 2026 06:26:18 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: ZUQQiEhpyRuMzthAOvqvyz/lYVSfc2PWWNZMAJBvRBU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5a:df:95:72:79:53:1f:e9:55:fd:4c:4b:a1:6a:f8:5d:b0:b1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Jun 18 05:44:18 2026 GMT Not After : Jun 19 06:26:18 2026 GMT Subject: CN=D09D0F2964580142C33C594550DE4DBA7409E70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:2b:a6:77:df:15:65:c8:67:15:d8:07:15: b1:9b:9b:22:2c:37:44:a2:77:ea:0d:c2:bb:e8:a2: e5:be:49:e9:95:43:4a:1a:2f:05:51:14:8b:84:ea: 76:21:f3:98:8d:ed:b4:21:3c:10:5b:74:b0:e3:6c: 3b:19:61:6a:2d:f0:95:5f:bd:6f:8e:ad:67:26:d5: 57:bb:43:7a:e9:a6:c7:9d:ef:3a:d9:a2:5f:5b:5a: dc:b7:ca:b7:1f:be:3d:b3:f0:96:73:06:0e:9f:d2: 1a:70:79:3a:db:44:d4:08:c0:fb:48:55:e4:63:f6: f8:cf:cc:b2:66:ef:4c:e1:a9:d0:41:6c:3a:13:6d: a4:73:f1:df:39:99:aa:80:98:d4:d8:43:fd:53:7a: fa:e8:ec:bb:02:30:da:68:9c:dc:94:71:a6:a4:fe: 02:93:54:d2:a9:31:60:21:72:fa:e1:f0:97:46:93: 5e:14:40:1c:f8:38:a5:98:20:19:11:86:82:50:92: eb:6d:72:49:e8:24:0f:8d:a2:04:7f:cb:ca:d0:98: f3:f3:f1:be:b4:74:49:2e:2a:8e:53:01:0b:48:a3: c5:95:9e:cc:f2:06:4a:82:de:de:6c:0d:cc:88:f9: 1b:3d:9d:31:b8:44:be:03:38:ef:64:67:10:09:0d: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:0F:29:64:58:01:42:C3:3C:59:45:50:DE:4D:BA:74:09:E7:0E X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a9:57:3b:49:37:31:c0:95:86:01:43:e4:a7:8e:bb:44:c1: 8f:1a:6f:32:07:6d:d1:d1:48:00:dd:b9:e3:f2:0c:39:78:35: 89:0c:9b:de:8e:66:d9:31:c5:a1:de:ca:d4:0b:e4:ed:26:ef: a0:86:cb:53:25:da:fd:fd:f8:d2:68:55:82:6f:9a:7b:e1:05: d3:61:54:24:6e:1f:73:35:ff:ce:c5:28:a9:1b:42:6a:93:af: b0:78:dc:8e:b4:80:9d:a9:0d:d8:c3:02:95:e8:fa:e1:d8:6e: fe:17:e5:e3:d5:dd:f1:54:e6:16:b1:a6:50:79:0d:e8:b0:4d: 85:54:8b:d3:2f:33:1b:0d:83:35:af:08:4a:3f:41:c2:e3:d5: cc:51:b0:c7:9e:a9:09:d6:70:40:1d:97:2c:15:7f:d2:f6:f6: 3a:3e:b1:8b:45:49:59:dc:71:92:c2:59:77:65:47:95:74:73: c5:5d:9c:e0:ef:2f:9e:b4:f5:ef:27:2f:18:27:ca:9e:46:dd: 9a:de:ff:12:3d:bf:e9:fa:a7:b0:58:c8:b4:69:3f:c1:d5:64: d2:59:ef:13:c4:b3:7a:ab:d5:5f:84:e1:40:48:e9:58:f6:92: 20:19:64:8c:21:73:c2:be:a1:8a:45:d2:9a:5d:eb:80:93:47: 43:4c:a8:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlrflXJ5Ux/pVf1MS6Fq+F2wsV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA2MTgwNTQ0MThaFw0yNjA2MTkwNjI2MThaMDMxMTAvBgNV BAMTKEQwOUQwRjI5NjQ1ODAxNDJDMzNDNTk0NTUwREU0REJBNzQwOUU3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDCumd98VZchnFdgHFbGbmyIs N0Sid+oNwrvoouW+SemVQ0oaLwVRFIuE6nYh85iN7bQhPBBbdLDjbDsZYWot8JVf vW+OrWcm1Ve7Q3rppsed7zrZol9bWty3yrcfvj2z8JZzBg6f0hpweTrbRNQIwPtI VeRj9vjPzLJm70zhqdBBbDoTbaRz8d85maqAmNTYQ/1Tevro7LsCMNponNyUcaak /gKTVNKpMWAhcvrh8JdGk14UQBz4OKWYIBkRhoJQkuttcknoJA+NogR/y8rQmPPz 8b60dEkuKo5TAQtIo8WVnszyBkqC3t5sDcyI+Rs9nTG4RL4DOO9kZxAJDbWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0J0PKWRYAULDPFlFUN5NunQJ5w4wHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJupVztJNzHAlYYBQ+SnjrtEwY8abzIHbdHR SADduePyDDl4NYkMm96OZtkxxaHeytQL5O0m76CGy1Ml2v39+NJoVYJvmnvhBdNh VCRuH3M1/87FKKkbQmqTr7B43I60gJ2pDdjDApXo+uHYbv4X5ePV3fFU5haxplB5 DeiwTYVUi9MvMxsNgzWvCEo/QcLj1cxRsMeeqQnWcEAdlywVf9L29jo+sYtFSVnc cZLCWXdlR5V0c8VdnODvL5609e8nLxgnyp5G3Zre/xI9v+n6p7BYyLRpP8HVZNJZ 7xPEs3qr1V+E4UBI6Vj2kiAZZIwhc8K+oYpF0ppd64CTR0NMqPc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:06 2026 by rpki-client