$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: pzsOkMQeBugd6XaepdZpPeuvHx753Tkn4hUlw6LGG6A= Subject key identifier: 8C:96:9F:6F:D8:F5:D4:FB:2B:21:35:58:23:5D:25:B1:AC:90:CA:3C Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 22CD6597C604060F8C2C334E0F8F4311CD66CF46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:56:36 +0000 Manifest this update: Fri 24 Jul 2026 01:51:36 +0000 Manifest next update: Sat 25 Jul 2026 05:14:36 +0000 Files and hashes: 1: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: LHHSjN+ysXjMTAC1PJ98t+N0hltDCQU8/sepoO/u5gY=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cd:65:97:c6:04:06:0f:8c:2c:33:4e:0f:8f:43:11:cd:66:cf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Jul 24 01:51:36 2026 GMT Not After : Jul 25 05:14:36 2026 GMT Subject: CN=8C969F6FD8F5D4FB2B213558235D25B1AC90CA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:ae:a8:5c:fc:95:8e:1a:9d:8d:5b:1b:e8: dd:bc:39:03:a1:6b:06:d1:9f:57:a9:b2:3e:30:34: 84:64:f2:1d:c8:56:9e:8a:f3:26:2d:4d:d0:26:c9: fd:c8:b9:82:a9:e7:71:ed:3e:8f:c9:3c:f8:c7:9c: 82:7e:81:12:30:a9:e0:f0:9f:67:bb:88:f4:19:2f: 00:09:18:3b:da:af:18:24:1d:ab:dd:3e:21:d9:b7: 7e:8e:1e:df:76:4f:0e:fd:a5:a6:66:60:e3:b8:e8: 2a:e8:57:57:38:f6:c2:36:60:0f:7f:0b:d2:37:f9: 5f:a6:20:88:23:f9:9d:87:90:12:0a:02:d8:2b:99: b2:4f:d7:42:c2:21:ff:b7:e9:c2:85:29:29:f1:de: a7:a4:3e:f9:46:68:fc:78:c8:85:42:d1:dd:02:80: f0:49:d2:25:4d:b3:32:0a:7f:8d:e2:4b:82:51:61: 08:04:f3:cc:4b:73:24:97:26:f4:5e:2d:86:7a:3d: 2f:59:04:2f:94:4b:cc:98:32:2a:18:6a:91:98:c3: ca:48:39:b3:5f:11:55:51:93:7a:7e:dc:8c:ab:4e: f4:eb:10:36:af:9b:22:12:63:78:96:a5:9b:a6:9b: ee:dd:c0:44:14:ba:38:ea:99:89:a5:eb:9b:83:f2: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:9F:6F:D8:F5:D4:FB:2B:21:35:58:23:5D:25:B1:AC:90:CA:3C X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e8:e3:e7:00:52:35:20:d8:6f:84:f2:b1:f2:a0:4e:d3:4d: 90:e8:e1:cf:b0:56:a1:b3:67:8f:b6:f0:c4:f7:d5:bf:31:82: b9:bf:2c:e8:72:e6:aa:bc:50:4e:eb:cb:96:fd:e7:81:cf:6b: 3b:27:1f:9f:15:4e:3d:7c:2e:b0:96:2c:c4:6d:04:d1:c8:bd: 0e:3b:b8:1f:d7:32:c9:23:bf:3e:b3:48:16:38:ba:14:18:a7: 55:b8:06:03:ee:2e:6c:d4:7f:77:b2:3d:3b:a6:2a:8c:6f:0a: 0a:d2:53:10:f7:c8:7e:9f:52:24:58:b9:76:ee:f0:95:c5:d6: a0:eb:35:54:02:fe:55:09:50:c9:b8:f7:6c:55:fc:11:fe:d3: 4d:07:40:b5:be:51:06:b1:e3:3a:d7:54:2d:87:ed:0c:5b:2d: 0a:f7:0d:9e:17:06:7f:5f:e7:24:a8:dd:a3:b8:4b:8e:26:f3: cd:40:3e:a4:fa:d9:b4:0f:e3:3e:6b:ac:fe:f6:e7:52:f2:c5: b0:bf:ed:4c:7a:00:b2:86:62:30:a1:e0:ea:32:df:ff:27:49: a5:0d:27:68:73:79:1f:6f:86:02:31:9b:b6:49:da:6f:68:5a: e2:9a:bf:7d:1e:30:63:ae:21:53:30:aa:cd:4b:d6:3b:f0:31: 08:cf:39:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIs1ll8YEBg+MLDNOD49DEc1mz0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA3MjQwMTUxMzZaFw0yNjA3MjUwNTE0MzZaMDMxMTAvBgNV BAMTKDhDOTY5RjZGRDhGNUQ0RkIyQjIxMzU1ODIzNUQyNUIxQUM5MENBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkJK6oXPyVjhqdjVsb6N28OQOh awbRn1epsj4wNIRk8h3IVp6K8yYtTdAmyf3IuYKp53HtPo/JPPjHnIJ+gRIwqeDw n2e7iPQZLwAJGDvarxgkHavdPiHZt36OHt92Tw79paZmYOO46CroV1c49sI2YA9/ C9I3+V+mIIgj+Z2HkBIKAtgrmbJP10LCIf+36cKFKSnx3qekPvlGaPx4yIVC0d0C gPBJ0iVNszIKf43iS4JRYQgE88xLcySXJvReLYZ6PS9ZBC+US8yYMioYapGYw8pI ObNfEVVRk3p+3IyrTvTrEDavmyISY3iWpZumm+7dwEQUujjqmYml65uD8jlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJafb9j11PsrITVYI10lsayQyjwwHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADo4+cAUjUg2G+E8rHyoE7TTZDo4c+wVqGz Z4+28MT31b8xgrm/LOhy5qq8UE7ry5b954HPazsnH58VTj18LrCWLMRtBNHIvQ47 uB/XMskjvz6zSBY4uhQYp1W4BgPuLmzUf3eyPTumKoxvCgrSUxD3yH6fUiRYuXbu 8JXF1qDrNVQC/lUJUMm492xV/BH+000HQLW+UQax4zrXVC2H7QxbLQr3DZ4XBn9f 5ySo3aO4S44m881APqT62bQP4z5rrP7251LyxbC/7Ux6ALKGYjCh4Ooy3/8nSaUN J2hzeR9vhgIxm7ZJ2m9oWuKav30eMGOuIVMwqs1L1jvwMQjPOew= -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:38 2026 by rpki-client