$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: 3TC7fDFox6ST9juPp+Be3G0VbWOxgE+hG/MJaKyd/Es= Subject key identifier: 12:BA:19:4A:CF:08:AC:AE:7A:07:A8:E3:B0:5D:34:84:72:64:9F:3B Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 4A50CAD445515DF9A178D13E61F028CBC7E3E294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:22:09 +0000 Manifest this update: Fri 24 Jul 2026 10:17:09 +0000 Manifest next update: Sat 25 Jul 2026 13:28:09 +0000 Files and hashes: 1: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: Re7iyG4ssJaaZ4AG7+SusNnLTS21RKmheOWH1wOZOoM=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:50:ca:d4:45:51:5d:f9:a1:78:d1:3e:61:f0:28:cb:c7:e3:e2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Jul 24 10:17:09 2026 GMT Not After : Jul 25 13:28:09 2026 GMT Subject: CN=12BA194ACF08ACAE7A07A8E3B05D348472649F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:1d:b0:90:2d:75:48:65:e7:44:b2:fe:47: 59:59:00:e7:b1:ee:1d:49:6b:f1:b4:bb:85:eb:42: 64:df:6b:32:10:b0:f4:40:53:86:53:36:11:77:6d: e3:73:b7:55:05:dc:f2:a7:eb:28:3a:68:63:e3:9e: 72:fd:ed:9a:63:57:d6:42:3f:f9:17:7a:b6:d9:9d: 6b:9f:52:ef:f4:1e:71:a1:37:70:ce:22:cb:8c:6e: c9:a6:0b:1a:85:f7:bd:a6:a8:33:bc:1a:f7:07:ad: cf:c9:ac:3f:1d:51:e5:cf:3c:27:7b:16:13:91:da: 70:fc:a4:bd:61:54:bd:d9:2b:ad:b6:43:8e:ec:06: 8e:b5:73:17:39:27:14:3b:90:fc:0a:f3:42:76:0c: 9e:32:b0:ce:34:66:fa:72:df:26:e9:3b:49:5b:e2: ac:4c:04:e2:13:95:3c:1d:e4:42:13:df:c2:86:fa: ee:87:f1:f4:87:30:9e:c7:0d:3d:8e:6f:91:ce:7c: dc:a1:1c:6d:b2:d4:8a:0f:18:5f:c4:a3:9d:0b:4e: 2a:92:7b:70:e3:c8:81:a4:bd:63:d5:00:97:91:1a: ee:97:d3:8b:6e:7f:b6:96:ba:96:dd:75:a0:6f:34: b1:cd:a5:5f:b8:54:cb:ea:d8:c8:c6:5f:a5:f7:10: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:19:4A:CF:08:AC:AE:7A:07:A8:E3:B0:5D:34:84:72:64:9F:3B X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:50:4d:07:34:5e:58:d0:ec:8e:33:1e:4c:4c:63:e2:91:a4: a3:6a:96:20:d1:08:59:5a:06:e7:50:69:d5:86:a3:44:fa:82: 95:f2:1e:f1:99:b8:68:24:15:c2:c0:b1:fe:f8:31:84:ed:bc: 51:45:0f:68:f5:59:69:db:89:08:96:6f:0c:a8:f8:e4:d6:a0: a3:1f:12:99:7a:3f:a5:60:70:ba:e6:58:13:aa:c3:c5:fa:83: 69:3f:ee:aa:bd:82:d6:96:f8:a5:e4:3f:f9:6a:3a:6e:4c:41: 1d:d3:d3:7b:e6:08:4d:14:34:16:86:c5:f7:69:13:cd:23:08: 9c:a3:69:57:3b:cc:f9:bb:02:14:08:5b:9e:18:7f:44:80:ca: d3:49:f5:11:ba:a8:ee:41:88:fd:33:30:ba:a0:d8:00:d3:41: 31:8d:6f:0e:d5:98:87:df:31:f4:71:77:74:6b:e1:55:dc:90: 26:af:e4:fe:36:20:c0:dd:c2:78:75:13:99:d4:f5:4f:da:d7: 4e:0c:e6:26:88:e6:02:92:37:12:3f:fc:93:70:ae:95:4e:b7: 86:a9:aa:3e:77:24:35:60:b4:68:b0:1d:24:00:7e:cd:d9:f4: dc:af:de:e9:3b:31:b5:a5:37:36:b6:a1:c1:30:90:10:09:e0: 87:41:48:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlDK1EVRXfmheNE+YfAoy8fj4pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjA3MjQxMDE3MDlaFw0yNjA3MjUxMzI4MDlaMDMxMTAvBgNV BAMTKDEyQkExOTRBQ0YwOEFDQUU3QTA3QThFM0IwNUQzNDg0NzI2NDlGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCth2wkC11SGXnRLL+R1lZAOex 7h1Ja/G0u4XrQmTfazIQsPRAU4ZTNhF3beNzt1UF3PKn6yg6aGPjnnL97ZpjV9ZC P/kXerbZnWufUu/0HnGhN3DOIsuMbsmmCxqF972mqDO8GvcHrc/JrD8dUeXPPCd7 FhOR2nD8pL1hVL3ZK622Q47sBo61cxc5JxQ7kPwK80J2DJ4ysM40Zvpy3ybpO0lb 4qxMBOITlTwd5EIT38KG+u6H8fSHMJ7HDT2Ob5HOfNyhHG2y1IoPGF/Eo50LTiqS e3DjyIGkvWPVAJeRGu6X04tuf7aWupbddaBvNLHNpV+4VMvq2MjGX6X3ENQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEroZSs8IrK56B6jjsF00hHJknzswHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFQTQc0XljQ7I4zHkxMY+KRpKNqliDRCFla BudQadWGo0T6gpXyHvGZuGgkFcLAsf74MYTtvFFFD2j1WWnbiQiWbwyo+OTWoKMf Epl6P6VgcLrmWBOqw8X6g2k/7qq9gtaW+KXkP/lqOm5MQR3T03vmCE0UNBaGxfdp E80jCJyjaVc7zPm7AhQIW54Yf0SAytNJ9RG6qO5BiP0zMLqg2ADTQTGNbw7VmIff MfRxd3Rr4VXckCav5P42IMDdwnh1E5nU9U/a104M5iaI5gKSNxI//JNwrpVOt4ap qj53JDVgtGiwHSQAfs3Z9Nyv3uk7MbWlNza2ocEwkBAJ4IdBSGQ= -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:38 2026 by rpki-client