$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: ISMC76m6qjAfubunxBVTMaeiz9t/0c+zMUvzrP+bL5w= Subject key identifier: DD:AB:2C:93:EC:F1:54:D1:81:D9:65:EB:FD:27:A2:83:33:6D:39:A3 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 71B1F62EF1DE94ACD69DCFBE0A63161916D3C82C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:00:32 +0000 Manifest this update: Thu 18 Jun 2026 02:55:32 +0000 Manifest next update: Fri 19 Jun 2026 05:11:32 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: 8rtOaWgMpyk8TVXYMJbIf+d5At/ZzNfWoi37BkoH5CA=) 4: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:f6:2e:f1:de:94:ac:d6:9d:cf:be:0a:63:16:19:16:d3:c8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Jun 18 02:55:32 2026 GMT Not After : Jun 19 05:11:32 2026 GMT Subject: CN=DDAB2C93ECF154D181D965EBFD27A283336D39A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:a1:bc:52:1f:c4:70:b6:9d:59:43:ec:c5: 3f:53:70:d3:32:9e:23:a2:11:8f:06:87:b7:5e:ee: 67:7c:af:ee:69:79:fc:01:a1:b4:61:8d:84:eb:71: fc:54:62:8c:1c:c5:c8:87:fb:9d:b4:aa:27:14:47: 70:c1:c8:2d:1e:9f:c3:e1:57:fe:4b:61:14:d7:99: 35:57:c3:6b:3d:40:ec:2d:83:e4:34:2a:6e:38:a8: 96:95:fe:f5:24:ad:fb:51:48:0f:0c:87:e3:8b:39: 95:18:29:5e:20:74:b4:07:44:d9:c2:43:4a:db:f8: 65:54:ba:23:c3:bb:b6:a2:13:47:62:33:54:a5:cf: b2:6d:c3:b2:54:af:74:70:36:37:56:eb:26:b6:28: 47:e7:e3:ca:66:ca:10:18:43:ab:2d:91:8d:b9:09: f4:83:56:cd:86:cc:b6:04:c1:f2:89:36:54:e0:cc: 5f:c1:08:85:45:58:02:ed:43:03:b6:24:77:80:dc: 5c:f6:e5:8c:d8:c4:a8:62:91:9b:c5:7b:ab:36:43: c3:92:e3:77:11:d1:b2:e4:68:09:14:ed:44:4c:db: 78:02:39:a9:3c:24:fe:60:07:59:d6:55:69:0f:7d: 2e:c3:34:c6:dc:fc:82:6d:e9:ba:eb:b5:46:7a:2a: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:2C:93:EC:F1:54:D1:81:D9:65:EB:FD:27:A2:83:33:6D:39:A3 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b9:b6:df:91:4b:30:c9:5e:79:d2:ab:85:e1:be:d1:fe:b8: bf:52:3d:04:da:6f:51:87:83:46:f5:17:4a:af:07:ee:c1:18: 68:71:28:4d:be:7c:a4:90:96:e8:3a:8e:7d:33:e1:c8:21:a1: 15:ce:29:03:8e:9b:db:c6:af:8d:f6:e0:b6:3d:99:e7:9e:d8: e0:f6:dd:fa:fb:e9:ab:db:67:b7:e8:3a:27:fa:84:cd:5f:94: 48:87:9c:88:49:b3:7e:62:46:d1:a5:7a:23:d7:35:58:9a:3e: 3d:57:78:f1:06:b2:1d:8d:5b:f2:58:d7:7e:76:57:c7:78:45: 44:35:bd:25:5a:92:48:7e:b4:98:ad:5c:de:46:c7:a8:73:b8: bc:56:fa:a3:ee:5f:b2:11:56:b3:15:21:58:f9:47:af:e6:ee: 7d:27:0b:49:1a:0f:14:86:a9:6a:92:e7:44:8b:29:f7:15:cd: 0e:b2:fa:68:0e:d9:c8:1e:8d:44:fa:c0:79:6e:39:ec:39:6b: 31:a9:ac:5e:88:90:1d:93:ab:2f:42:91:d0:08:f0:7a:15:3b: 9d:aa:73:98:20:d7:b6:1c:16:19:df:b0:5a:22:57:12:1b:74: 64:da:af:74:31:8a:c4:ce:60:b6:63:d3:c6:4f:f4:58:0c:a2: b1:3f:5f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbH2LvHelKzWnc++CmMWGRbTyCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA2MTgwMjU1MzJaFw0yNjA2MTkwNTExMzJaMDMxMTAvBgNV BAMTKEREQUIyQzkzRUNGMTU0RDE4MUQ5NjVFQkZEMjdBMjgzMzM2RDM5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXN6G8Uh/EcLadWUPsxT9TcNMy niOiEY8Gh7de7md8r+5pefwBobRhjYTrcfxUYowcxciH+520qicUR3DByC0en8Ph V/5LYRTXmTVXw2s9QOwtg+Q0Km44qJaV/vUkrftRSA8Mh+OLOZUYKV4gdLQHRNnC Q0rb+GVUuiPDu7aiE0diM1Slz7Jtw7JUr3RwNjdW6ya2KEfn48pmyhAYQ6stkY25 CfSDVs2GzLYEwfKJNlTgzF/BCIVFWALtQwO2JHeA3Fz25YzYxKhikZvFe6s2Q8OS 43cR0bLkaAkU7URM23gCOak8JP5gB1nWVWkPfS7DNMbc/IJt6brrtUZ6Kr5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3assk+zxVNGB2WXr/SeigzNtOaMwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS5tt+RSzDJXnnSq4XhvtH+uL9SPQTab1GH g0b1F0qvB+7BGGhxKE2+fKSQlug6jn0z4cghoRXOKQOOm9vGr4324LY9meee2OD2 3fr76avbZ7foOif6hM1flEiHnIhJs35iRtGleiPXNViaPj1XePEGsh2NW/JY1352 V8d4RUQ1vSVakkh+tJitXN5Gx6hzuLxW+qPuX7IRVrMVIVj5R6/m7n0nC0kaDxSG qWqS50SLKfcVzQ6y+mgO2cgejUT6wHluOew5azGprF6IkB2Tqy9CkdAI8HoVO52q c5gg17YcFhnfsFoiVxIbdGTar3QxisTOYLZj08ZP9FgMorE/X2g= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:35 2026 by rpki-client