$ rpki-client -vvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json) Hash identifier: qE/5uBzH4PjKv73QgkBh/ija631bYT8wIpXBdjQgTVs= Subject key identifier: A8:FE:7F:46:00:B2:86:08:AA:F4:FF:0B:C3:2F:EE:63:B0:3C:04:DE Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Certificate serial: 3BD46C01842D3823FB45010CE33330A4E6612AC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 23:38:39 +0000 Manifest this update: Thu 23 Jul 2026 23:33:39 +0000 Manifest next update: Sat 25 Jul 2026 01:14:39 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=) 2: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: KjMH33bp9YbR1vWHFjbRBgTU/LGgMjdeJ/A1056oF2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d4:6c:01:84:2d:38:23:fb:45:01:0c:e3:33:30:a4:e6:61:2a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Validity Not Before: Jul 23 23:33:39 2026 GMT Not After : Jul 25 01:14:39 2026 GMT Subject: CN=A8FE7F4600B28608AAF4FF0BC32FEE63B03C04DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:9d:d7:e6:e0:b0:5b:86:f2:51:ff:ce:09: d8:c6:46:6d:06:3a:cb:b8:92:20:60:f4:40:01:32: 2b:ca:38:0d:58:4a:f7:5e:70:ac:23:10:94:bd:e7: 5b:3a:4d:f5:e9:fe:7c:8b:f6:69:f9:e0:a0:11:20: 62:5d:91:d2:4a:03:60:0d:1d:8a:fd:13:1a:70:cb: a7:59:ef:57:08:cc:45:45:59:f2:4a:75:4d:2f:18: 92:a4:fd:0f:3e:d7:1f:02:90:7d:19:53:75:b0:41: cc:97:1b:bd:b2:fa:0d:bf:53:95:80:dd:a2:66:4c: 0f:32:fe:f0:e1:04:ec:72:e6:44:12:43:96:7c:cc: 4b:aa:f9:5d:64:1a:ad:bd:a6:5c:52:a5:7a:85:3b: 62:2d:61:6b:aa:5d:6f:83:27:71:99:32:7e:75:6e: 94:8f:75:d7:6d:e6:2b:bd:9c:9f:74:8c:d7:2f:d4: a1:f4:82:de:36:24:b4:91:c2:17:ab:1d:e2:31:4d: 3f:a8:99:c3:53:ab:fb:f4:76:3f:7f:50:1d:3f:2e: 6f:3a:fe:1f:29:3b:30:29:5f:ab:95:9c:15:6b:6b: 83:01:b9:da:81:47:07:59:70:3a:9b:46:b0:c0:94: f0:6e:cb:93:3a:6a:b5:ec:f5:c2:25:60:33:bd:42: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:7F:46:00:B2:86:08:AA:F4:FF:0B:C3:2F:EE:63:B0:3C:04:DE X509v3 Authority Key Identifier: keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:93:3d:6c:20:09:46:ea:bf:65:ec:e5:9f:1b:78:8a:4e:37: 23:88:6a:e4:0a:ca:a2:7e:15:d7:c7:2e:65:c8:ef:eb:95:e0: a4:86:55:81:1d:b6:a0:92:ab:7a:d6:bb:12:7e:f1:4a:e5:7a: 26:2b:95:35:c6:d9:cd:32:35:90:6d:3e:ff:2d:11:20:be:6d: 85:d3:3e:93:97:9e:5b:56:ba:d2:81:5a:39:a6:f8:e9:95:ca: fb:e7:95:28:8b:47:23:66:84:2b:1f:85:8a:3f:e4:62:c0:b1: e1:a7:fe:9e:29:c9:87:8f:29:61:cf:70:72:a9:7a:60:7f:e3: 63:0f:c0:70:f2:c1:73:a3:98:7f:2e:f3:23:53:26:63:75:73: f8:56:33:73:59:b0:af:ce:9f:8a:a8:74:3f:0b:57:27:d9:ac: be:d3:cd:34:02:b5:fe:d7:f5:ae:dc:0e:f2:81:c9:2d:9e:d1: 75:62:a6:ad:68:79:b8:46:5f:1f:91:62:11:88:2c:79:c5:68: 69:66:c8:3a:19:18:17:4b:76:61:64:c5:37:94:81:5e:f2:d9: 57:48:4d:d5:5d:73:36:a4:7f:fe:ec:d1:12:db:03:3e:c5:e9: dd:4d:a9:ca:a7:6c:79:be:b3:6a:24:91:4f:a0:cc:36:b0:b6: a0:a6:98:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9RsAYQtOCP7RQEM4zMwpOZhKsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3 NjM4MjRBMTAeFw0yNjA3MjMyMzMzMzlaFw0yNjA3MjUwMTE0MzlaMDMxMTAvBgNV BAMTKEE4RkU3RjQ2MDBCMjg2MDhBQUY0RkYwQkMzMkZFRTYzQjAzQzA0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqfp3X5uCwW4byUf/OCdjGRm0G Osu4kiBg9EABMivKOA1YSvdecKwjEJS951s6TfXp/nyL9mn54KARIGJdkdJKA2AN HYr9Expwy6dZ71cIzEVFWfJKdU0vGJKk/Q8+1x8CkH0ZU3WwQcyXG72y+g2/U5WA 3aJmTA8y/vDhBOxy5kQSQ5Z8zEuq+V1kGq29plxSpXqFO2ItYWuqXW+DJ3GZMn51 bpSPdddt5iu9nJ90jNcv1KH0gt42JLSRwherHeIxTT+omcNTq/v0dj9/UB0/Lm86 /h8pOzApX6uVnBVra4MBudqBRwdZcDqbRrDAlPBuy5M6arXs9cIlYDO9QrdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqP5/RgCyhgiq9P8Lwy/uY7A8BN4wHwYDVR0j BBgwFoAUPr4udPDuWaY5XzJeaSgIS3Y4JKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThiNDI0MjAtNTZkMC00NTFhLWEyOWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRG MEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3NjM4MjRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRUJFMkU3NEYwRUU1OUE2Mzk1RjMyNUU2OTI4MDg0Qjc2Mzgy NEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4 NEI3NjM4MjRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMaTPWwgCUbqv2Xs5Z8beIpONyOIauQKyqJ+ FdfHLmXI7+uV4KSGVYEdtqCSq3rWuxJ+8UrleiYrlTXG2c0yNZBtPv8tESC+bYXT PpOXnltWutKBWjmm+OmVyvvnlSiLRyNmhCsfhYo/5GLAseGn/p4pyYePKWHPcHKp emB/42MPwHDywXOjmH8u8yNTJmN1c/hWM3NZsK/On4qodD8LVyfZrL7TzTQCtf7X 9a7cDvKByS2e0XVipq1oebhGXx+RYhGILHnFaGlmyDoZGBdLdmFkxTeUgV7y2VdI TdVdczakf/7s0RLbAz7F6d1NqcqnbHm+s2okkU+gzDawtqCmmGo= -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:37 2026 by rpki-client