$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: YEcGaRF71H6E6tG3KQ+BLPDHHUq9JEP/T2fYQPLRK6U= Subject key identifier: 21:71:EA:79:C0:DB:76:2D:39:10:96:2E:D7:D2:FA:A4:38:B8:AA:A2 Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 0FD09DFA0BC7A23867FDF52D9462BE23C48825CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:31:37 +0000 Manifest this update: Thu 23 Jul 2026 13:26:37 +0000 Manifest next update: Fri 24 Jul 2026 14:59:37 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 2: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 3: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 4: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) 5: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: xNyuLrbF2GXMnAN8ywATO5j4hf5tD4Snc+A1ST2PvTo=) 6: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:9d:fa:0b:c7:a2:38:67:fd:f5:2d:94:62:be:23:c4:88:25:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Jul 23 13:26:37 2026 GMT Not After : Jul 24 14:59:37 2026 GMT Subject: CN=2171EA79C0DB762D3910962ED7D2FAA438B8AAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:fd:07:4e:56:ef:ab:15:dd:14:f0:73:ee: 33:99:0c:0e:a4:52:dd:ae:5c:83:7f:01:33:b3:bc: a3:e5:a8:ab:fd:0f:c6:28:a5:b9:53:df:8c:c4:3c: 96:ef:3c:dd:07:48:e1:ef:dd:ca:8d:16:bb:0e:31: 0d:27:d6:fc:c3:13:49:14:fc:c8:61:ae:39:10:3d: 4e:8f:8b:84:7d:10:79:a1:41:a6:f8:eb:91:cb:ff: be:20:41:58:f0:57:06:bf:18:44:d3:8a:e2:96:18: 8b:3d:ce:71:7c:d5:ba:6f:93:93:ce:e7:25:59:44: 72:74:25:18:52:ad:ab:77:09:76:38:37:d9:a7:48: 8d:9e:ee:90:20:8f:86:a1:b0:19:44:e7:a8:f2:f0: 6e:17:34:83:25:92:62:dd:d8:ca:f3:f2:51:3b:d9: 67:6c:a7:9f:10:14:31:ce:c4:6a:95:5f:eb:ae:9b: de:51:7c:d6:ab:c6:c2:03:8b:57:53:a2:9b:ca:34: 6f:0b:8f:74:48:bb:d1:3c:fa:f9:af:a7:c4:75:90: 4f:6c:64:d2:ae:47:8c:3e:7a:79:13:66:93:1f:a0: e9:e5:54:97:a0:60:f2:d9:13:a1:3e:6d:13:bc:50: 90:32:dc:34:d3:52:aa:ae:e6:10:ea:60:6f:cc:84: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:71:EA:79:C0:DB:76:2D:39:10:96:2E:D7:D2:FA:A4:38:B8:AA:A2 X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:73:9e:62:0a:e7:8a:96:e4:0a:a7:dc:fc:0b:cc:2d:aa:9b: da:a7:a1:99:94:a0:ba:20:7c:7e:2c:ed:fd:93:ef:1a:e3:86: 02:b0:8c:4b:d8:41:78:88:9f:32:7c:5f:7f:24:be:d4:60:52: 3e:cc:f1:5e:e9:cf:48:ca:63:32:99:d1:30:c4:55:ee:43:8d: 92:8c:55:21:55:95:14:42:63:65:29:d6:7c:f6:39:fe:0d:35: 6d:02:c8:43:23:db:a0:ae:ea:ca:99:20:e5:62:3d:81:e7:41: 09:28:26:8f:bf:10:54:27:4e:b9:a4:73:29:61:2c:35:df:ce: 6b:11:91:79:1d:a7:1c:60:21:2d:55:19:9c:2c:f7:ca:30:64: 73:de:5a:f2:42:76:8e:d7:17:dc:ae:7e:5f:a5:49:1e:e0:ec: c7:d8:28:27:c1:a8:ec:c2:ab:5f:5e:e7:85:b0:93:98:af:79: 9d:10:61:51:38:a1:06:70:ae:66:14:39:0b:35:57:f5:2c:88: 9f:fb:a9:ae:63:60:0e:e5:32:bb:71:13:4f:e2:79:99:75:58: 4f:42:18:74:15:06:d5:9f:41:5f:94:2a:5c:22:24:c2:84:dd: 41:a3:05:84:db:99:03:62:09:38:6f:3a:8d:9d:ea:78:87:46: 74:a6:72:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9Cd+gvHojhn/fUtlGK+I8SIJcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA3MjMxMzI2MzdaFw0yNjA3MjQxNDU5MzdaMDMxMTAvBgNV BAMTKDIxNzFFQTc5QzBEQjc2MkQzOTEwOTYyRUQ3RDJGQUE0MzhCOEFBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTP0HTlbvqxXdFPBz7jOZDA6k Ut2uXIN/ATOzvKPlqKv9D8YopblT34zEPJbvPN0HSOHv3cqNFrsOMQ0n1vzDE0kU /MhhrjkQPU6Pi4R9EHmhQab465HL/74gQVjwVwa/GETTiuKWGIs9znF81bpvk5PO 5yVZRHJ0JRhSrat3CXY4N9mnSI2e7pAgj4ahsBlE56jy8G4XNIMlkmLd2Mrz8lE7 2Wdsp58QFDHOxGqVX+uum95RfNarxsIDi1dTopvKNG8Lj3RIu9E8+vmvp8R1kE9s ZNKuR4w+enkTZpMfoOnlVJegYPLZE6E+bRO8UJAy3DTTUqqu5hDqYG/MhGvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIXHqecDbdi05EJYu19L6pDi4qqIwHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVznmIK54qW5Aqn3PwLzC2qm9qnoZmUoLog fH4s7f2T7xrjhgKwjEvYQXiInzJ8X38kvtRgUj7M8V7pz0jKYzKZ0TDEVe5DjZKM VSFVlRRCY2Up1nz2Of4NNW0CyEMj26Cu6sqZIOViPYHnQQkoJo+/EFQnTrmkcylh LDXfzmsRkXkdpxxgIS1VGZws98owZHPeWvJCdo7XF9yufl+lSR7g7MfYKCfBqOzC q19e54Wwk5iveZ0QYVE4oQZwrmYUOQs1V/UsiJ/7qa5jYA7lMrtxE0/ieZl1WE9C GHQVBtWfQV+UKlwiJMKE3UGjBYTbmQNiCThvOo2d6niHRnSmckY= -----END CERTIFICATE-----Generated at Fri Jul 24 03:47:52 2026 by rpki-client