$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: qc0CK/wwR2Ada1ogHi22MKaT1g/9eI1PuuLPjwDmlbE= Subject key identifier: D0:4C:9F:37:70:A6:54:DA:B1:49:A4:ED:2D:AB:CD:0A:44:0B:03:3E Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 7F59A4524CC36C4329E16399B77B0E469EFEB8A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 22:55:21 +0000 Manifest this update: Wed 17 Jun 2026 22:50:21 +0000 Manifest next update: Fri 19 Jun 2026 01:39:21 +0000 Files and hashes: 1: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: y5JrtIIo+hfo6z+vB2OFGjUqbWMqJGzCKeHI9rpFpGE=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 3: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:59:a4:52:4c:c3:6c:43:29:e1:63:99:b7:7b:0e:46:9e:fe:b8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Jun 17 22:50:21 2026 GMT Not After : Jun 19 01:39:21 2026 GMT Subject: CN=D04C9F3770A654DAB149A4ED2DABCD0A440B033E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:71:08:86:c8:1e:ea:2b:35:ed:27:19:ad: 51:24:6d:e7:33:2a:76:cd:8d:34:c0:f7:8d:cc:6a: 4f:9e:8f:9b:48:24:bd:e1:de:0b:b2:66:d7:32:14: 4c:94:3a:bc:9c:26:f5:df:95:f7:14:a6:aa:70:1e: 2c:ac:ca:cd:e2:71:25:66:de:bd:63:ec:33:c2:6d: ea:60:93:de:0d:76:e0:2d:fb:dc:2b:ca:d4:bb:b2: 04:37:f7:14:b3:33:d3:74:af:c6:07:b0:fc:e7:11: d4:56:a3:d1:e7:c2:82:c9:e3:f1:82:19:7b:ed:27: e5:ef:11:84:2e:49:4f:8a:51:1a:b3:32:07:6b:a9: 2a:77:de:5c:3e:60:93:e7:da:07:9d:b8:98:0b:3f: 35:ca:10:61:f2:f0:c1:dc:3c:6f:4b:9f:74:61:16: 92:99:d4:72:4d:43:ea:4c:bf:b4:87:c2:93:d2:b9: 79:27:fd:ce:9b:fe:28:ce:e5:5e:6f:1a:86:29:4a: ba:6c:97:f5:4f:a5:a1:9f:f1:8e:f5:ab:70:d3:d0: 63:b0:9b:74:42:3e:2a:85:83:46:3b:6a:fd:d5:a3: 7b:85:63:96:da:1b:24:dd:d3:6e:a9:e3:d2:18:02: a8:e1:48:9f:2e:d7:27:08:34:c7:44:8a:03:ae:4b: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4C:9F:37:70:A6:54:DA:B1:49:A4:ED:2D:AB:CD:0A:44:0B:03:3E X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:fc:21:83:b9:33:87:10:6a:18:ee:9a:40:18:a1:9d:5e: 13:48:ee:1d:40:e5:db:d5:0d:c3:fe:5a:a9:ad:01:6e:53:b5: eb:50:d1:7d:07:70:24:b8:a6:90:12:c0:89:f8:47:7d:8e:c4: c9:74:40:03:42:9c:1a:86:5d:8f:03:9a:ce:da:5c:d5:c6:96: 56:95:5a:ee:3a:3d:12:a6:d2:00:ad:a9:ef:7d:f1:4f:5a:ba: ea:76:1c:55:cb:43:40:d2:51:f8:bf:de:ab:d3:93:18:1a:82: fb:61:77:7a:cb:07:30:11:10:98:90:7d:f1:b7:29:1e:96:24: 46:01:83:3b:b9:c5:43:21:99:f3:d2:eb:96:f8:cf:a2:4f:9e: a7:86:03:5d:ec:f9:eb:1b:3b:da:27:db:b6:8b:d7:2b:2b:09: 69:89:f8:a2:fd:38:ae:fd:57:e9:34:cf:d1:d5:01:3b:4b:50: 10:1f:b7:82:c1:99:84:fa:bf:49:9e:5c:98:06:3b:b3:48:e4: 42:1d:08:ce:7a:eb:f1:d1:5c:c2:c3:56:44:fb:a6:68:97:8b: 6c:cc:42:e8:ac:84:97:32:14:5d:15:6e:61:fa:f2:ff:f7:e0: 39:43:af:34:c4:e6:fe:f9:5a:39:8b:60:7a:1d:30:cd:8c:21: 8b:9f:a4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1mkUkzDbEMp4WOZt3sORp7+uKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA2MTcyMjUwMjFaFw0yNjA2MTkwMTM5MjFaMDMxMTAvBgNV BAMTKEQwNEM5RjM3NzBBNjU0REFCMTQ5QTRFRDJEQUJDRDBBNDQwQjAzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0unEIhsge6is17ScZrVEkbecz KnbNjTTA943Mak+ej5tIJL3h3guyZtcyFEyUOrycJvXflfcUpqpwHiysys3icSVm 3r1j7DPCbepgk94NduAt+9wrytS7sgQ39xSzM9N0r8YHsPznEdRWo9HnwoLJ4/GC GXvtJ+XvEYQuSU+KURqzMgdrqSp33lw+YJPn2geduJgLPzXKEGHy8MHcPG9Ln3Rh FpKZ1HJNQ+pMv7SHwpPSuXkn/c6b/ijO5V5vGoYpSrpsl/VPpaGf8Y71q3DT0GOw m3RCPiqFg0Y7av3Vo3uFY5baGyTd026p49IYAqjhSJ8u1ycINMdEigOuSyHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EyfN3CmVNqxSaTtLavNCkQLAz4wHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfw/CGDuTOHEGoY7ppAGKGdXhNI7h1A5dvV DcP+WqmtAW5TtetQ0X0HcCS4ppASwIn4R32OxMl0QANCnBqGXY8Dms7aXNXGllaV Wu46PRKm0gCtqe998U9auup2HFXLQ0DSUfi/3qvTkxgagvthd3rLBzAREJiQffG3 KR6WJEYBgzu5xUMhmfPS65b4z6JPnqeGA13s+esbO9on27aL1ysrCWmJ+KL9OK79 V+k0z9HVATtLUBAft4LBmYT6v0meXJgGO7NI5EIdCM566/HRXMLDVkT7pmiXi2zM QuishJcyFF0VbmH68v/34DlDrzTE5v75WjmLYHodMM2MIYufpAs= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:37 2026 by rpki-client