$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: cmfHKzoKtctjjFzjKYufcre5GulLO29WGA226PqdktM= Subject key identifier: 3B:06:48:4B:DD:66:D2:12:D0:31:8F:0D:38:29:43:3F:54:8C:4A:89 Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 206014D2FBA7FB403AD70D2E6E39C83CEE6FA9DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:57:03 +0000 Manifest this update: Thu 23 Jul 2026 17:52:03 +0000 Manifest next update: Fri 24 Jul 2026 18:19:03 +0000 Files and hashes: 1: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: m3t1vzIb4P/1LA1dwuztSggBsp1k8L9g/gMjMaZhVhw=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:14:d2:fb:a7:fb:40:3a:d7:0d:2e:6e:39:c8:3c:ee:6f:a9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Jul 23 17:52:03 2026 GMT Not After : Jul 24 18:19:03 2026 GMT Subject: CN=3B06484BDD66D212D0318F0D3829433F548C4A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:d7:ce:62:45:38:cd:21:33:58:ff:27:20: f6:e8:9f:27:4a:1d:70:9d:a1:50:05:b3:0c:b1:d7: 0e:2c:e2:d6:36:ff:c1:49:ea:e7:80:11:ed:db:5a: 1d:b1:6f:17:34:d6:4c:4f:f5:db:72:f4:2b:01:a2: 3d:d2:dc:7b:32:a0:5a:5a:24:b1:21:04:d6:79:28: 35:ed:cd:43:16:50:4d:d6:ab:cc:d1:a4:9f:fd:85: 21:a7:41:b5:92:23:50:b8:ca:84:cb:df:17:78:71: a8:31:f4:a6:5e:11:1a:8b:b1:31:7f:cd:d4:bc:21: 69:a8:16:52:a8:0c:39:8e:fb:62:18:7f:dc:07:23: f8:28:f4:c9:54:0e:5d:7f:de:88:67:d8:ce:b6:b8: 07:e0:93:5b:fa:34:12:52:9f:6c:32:0d:36:3b:8d: e5:95:76:93:47:f6:37:09:15:ba:5e:ed:6d:d8:3d: 51:e8:08:a9:6c:d6:1d:73:61:37:3b:1b:1d:62:a4: 1d:c8:a9:98:00:34:ad:ae:66:f4:1e:15:d9:32:48: 83:70:eb:76:6f:96:eb:7c:be:9f:25:85:5a:6f:5b: e1:2d:df:3e:38:69:e1:fb:05:98:c7:7b:dd:7e:a3: c1:56:2f:c6:9d:df:84:43:9e:92:cf:21:c8:60:b9: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:06:48:4B:DD:66:D2:12:D0:31:8F:0D:38:29:43:3F:54:8C:4A:89 X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:f9:ea:cd:5d:6d:1a:54:8f:ef:97:d6:39:01:f1:26:d6: 04:58:cb:36:fc:b6:c8:5f:91:08:d9:15:70:1e:02:98:05:3c: 9b:02:20:67:47:2e:cb:79:e1:d6:77:98:44:28:c0:a5:74:06: 60:fd:15:24:df:47:fa:6e:be:af:ca:6a:32:40:10:3c:12:39: 17:52:18:0c:6d:ab:32:12:68:ac:71:e4:64:e2:56:46:7e:64: ff:81:f1:2b:af:19:4f:dc:92:32:44:b0:4b:e9:a7:ee:ed:f4: 2d:4d:89:be:17:27:0b:f1:01:01:ec:0e:a8:ce:ba:f1:3f:71: b8:44:f8:ea:0b:1b:66:31:79:b6:42:44:ca:48:53:64:c8:b1: 8c:36:f7:8b:7f:98:b6:cf:af:6c:97:a3:03:4d:71:3e:56:c2: c4:c7:30:7c:d7:d0:40:39:4d:f5:a0:25:c9:60:7e:71:44:55: 5b:e4:85:f4:9f:b9:eb:c0:ec:11:1a:74:13:27:dc:4e:d3:82: f4:c6:dd:c7:29:42:5f:f9:c6:d1:41:3c:ed:aa:71:c1:a8:cf: db:85:0b:83:f2:d6:11:8d:6c:d5:cb:ce:5f:76:c7:c8:89:5e: 4c:ee:88:17:63:ac:73:50:54:76:e6:bf:59:cc:ad:e0:f2:76: 63:8f:df:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGAU0vun+0A61w0ubjnIPO5vqdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjA3MjMxNzUyMDNaFw0yNjA3MjQxODE5MDNaMDMxMTAvBgNV BAMTKDNCMDY0ODRCREQ2NkQyMTJEMDMxOEYwRDM4Mjk0MzNGNTQ4QzRBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6NfOYkU4zSEzWP8nIPbonydK HXCdoVAFswyx1w4s4tY2/8FJ6ueAEe3bWh2xbxc01kxP9dty9CsBoj3S3HsyoFpa JLEhBNZ5KDXtzUMWUE3Wq8zRpJ/9hSGnQbWSI1C4yoTL3xd4cagx9KZeERqLsTF/ zdS8IWmoFlKoDDmO+2IYf9wHI/go9MlUDl1/3ohn2M62uAfgk1v6NBJSn2wyDTY7 jeWVdpNH9jcJFbpe7W3YPVHoCKls1h1zYTc7Gx1ipB3IqZgANK2uZvQeFdkySINw 63Zvlut8vp8lhVpvW+Et3z44aeH7BZjHe91+o8FWL8ad34RDnpLPIchguU4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwZIS91m0hLQMY8NOClDP1SMSokwHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW/+erNXW0aVI/vl9Y5AfEm1gRYyzb8tshf kQjZFXAeApgFPJsCIGdHLst54dZ3mEQowKV0BmD9FSTfR/puvq/KajJAEDwSORdS GAxtqzISaKxx5GTiVkZ+ZP+B8SuvGU/ckjJEsEvpp+7t9C1Nib4XJwvxAQHsDqjO uvE/cbhE+OoLG2YxebZCRMpIU2TIsYw294t/mLbPr2yXowNNcT5WwsTHMHzX0EA5 TfWgJclgfnFEVVvkhfSfuevA7BEadBMn3E7TgvTG3ccpQl/5xtFBPO2qccGoz9uF C4Py1hGNbNXLzl92x8iJXkzuiBdjrHNQVHbmv1nMreDydmOP34s= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:56 2026 by rpki-client