$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: OezIF0gIXGAH6pKJ8J0TuV9hWacJGAO2mGOIcMQ5wPM= Subject key identifier: A5:00:CC:B9:0E:F7:D5:33:35:B9:13:2F:D7:4B:A1:75:46:3F:7C:C7 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 475120CB63F40690E85BBC1FD2F9CB2106996531 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:12:18 +0000 Manifest this update: Thu 23 Jul 2026 18:07:18 +0000 Manifest next update: Fri 24 Jul 2026 19:36:18 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) 2: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: ge9A3yD8nK4TK+y4RyFOKaQ5HczMJ92kvG7P/syyANI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:51:20:cb:63:f4:06:90:e8:5b:bc:1f:d2:f9:cb:21:06:99:65:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Jul 23 18:07:18 2026 GMT Not After : Jul 24 19:36:18 2026 GMT Subject: CN=A500CCB90EF7D53335B9132FD74BA175463F7CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:67:9b:e6:a7:0b:45:b0:33:3f:31:0e:25: 04:ec:c3:67:11:66:4f:7e:65:3a:69:e0:b9:de:d4: ff:0b:73:89:ce:29:40:0e:7f:72:b3:3d:8b:a1:ad: 54:d8:ba:8a:18:da:4d:01:5d:3a:d1:41:99:01:49: b6:61:62:55:87:8b:b2:8c:fc:61:e7:d1:0c:35:01: c3:c1:f1:39:ce:80:a6:28:79:33:80:f7:0a:37:92: 31:01:dd:0c:8c:3a:bb:45:0a:c0:74:45:6d:71:ad: 77:71:1a:b4:f0:31:a9:01:5b:b1:b9:c7:21:8f:61: 8b:66:fe:4f:63:6f:05:ae:01:a1:5b:ef:14:07:0f: c1:25:fe:98:f3:24:ec:c7:f9:f2:a2:91:c0:d3:22: 06:6d:35:aa:fd:f9:c3:67:40:1a:5a:0a:1d:e9:13: 04:da:f6:eb:00:66:3b:87:b4:ff:64:18:25:39:e7: 02:4f:f5:ca:ec:53:b9:b6:d8:6b:83:94:de:1a:b8: 1d:8c:ae:43:76:e9:4f:ec:09:ac:e2:98:d8:b8:49: 09:fc:e6:27:57:e0:fd:d7:ab:31:90:10:bd:7d:9b: 59:39:bf:59:58:e7:b4:2f:82:10:54:80:e5:c6:be: 07:ed:ab:3c:3a:da:99:5f:fa:67:f6:6c:62:e8:7e: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:CC:B9:0E:F7:D5:33:35:B9:13:2F:D7:4B:A1:75:46:3F:7C:C7 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0b:c9:73:9b:91:4c:a2:93:f6:de:44:fd:40:04:4b:ef:16: 72:55:83:24:61:db:c5:49:ef:52:15:60:f7:1f:34:b3:79:e6: cb:00:2b:ad:23:17:ba:c1:74:f2:98:0e:3c:17:2e:70:5e:de: 84:e4:71:f6:2f:ee:a9:dd:07:b8:c1:b6:df:b2:12:bd:5f:58: b7:d5:74:1c:5f:d7:57:cc:09:de:84:35:1b:19:ad:50:2e:d8: 17:e7:c6:62:7f:58:f1:57:c3:9a:66:ac:31:96:31:2f:e2:07: c8:20:73:d1:13:30:ad:53:4a:10:1e:b1:42:91:0e:b8:a1:cd: e2:31:a0:68:60:f9:71:dc:88:20:21:68:9f:42:de:01:d2:fe: 8c:c8:54:e0:85:15:7f:75:c2:69:64:7d:87:53:2a:75:c6:f3: 26:4c:0d:81:22:cc:67:8f:48:17:97:d5:1d:3c:52:ce:f9:05: 7b:0a:b9:c6:c1:ff:ba:f3:f3:26:db:5e:02:e9:0d:5a:fe:14: 3e:c1:ce:12:52:b8:04:1b:c2:74:1d:ff:f4:7c:8a:55:c8:33: a6:61:d3:eb:b7:ec:8c:33:1c:e5:cf:e0:76:28:44:5e:89:10: 73:cd:a6:a7:26:69:a0:93:31:35:53:a9:fa:05:d0:6c:28:48: f5:2d:1a:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1Egy2P0BpDoW7wf0vnLIQaZZTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA3MjMxODA3MThaFw0yNjA3MjQxOTM2MThaMDMxMTAvBgNV BAMTKEE1MDBDQ0I5MEVGN0Q1MzMzNUI5MTMyRkQ3NEJBMTc1NDYzRjdDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpmeb5qcLRbAzPzEOJQTsw2cR Zk9+ZTpp4Lne1P8Lc4nOKUAOf3KzPYuhrVTYuooY2k0BXTrRQZkBSbZhYlWHi7KM /GHn0Qw1AcPB8TnOgKYoeTOA9wo3kjEB3QyMOrtFCsB0RW1xrXdxGrTwMakBW7G5 xyGPYYtm/k9jbwWuAaFb7xQHD8El/pjzJOzH+fKikcDTIgZtNar9+cNnQBpaCh3p EwTa9usAZjuHtP9kGCU55wJP9crsU7m22GuDlN4auB2MrkN26U/sCazimNi4SQn8 5idX4P3XqzGQEL19m1k5v1lY57QvghBUgOXGvgftqzw62plf+mf2bGLofvBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQDMuQ731TM1uRMv10uhdUY/fMcwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMLyXObkUyik/beRP1ABEvvFnJVgyRh28VJ 71IVYPcfNLN55ssAK60jF7rBdPKYDjwXLnBe3oTkcfYv7qndB7jBtt+yEr1fWLfV dBxf11fMCd6ENRsZrVAu2BfnxmJ/WPFXw5pmrDGWMS/iB8ggc9ETMK1TShAesUKR DrihzeIxoGhg+XHciCAhaJ9C3gHS/ozIVOCFFX91wmlkfYdTKnXG8yZMDYEizGeP SBeX1R08Us75BXsKucbB/7rz8ybbXgLpDVr+FD7BzhJSuAQbwnQd//R8ilXIM6Zh 0+u37IwzHOXP4HYoRF6JEHPNpqcmaaCTMTVTqfoF0GwoSPUtGks= -----END CERTIFICATE-----Generated at Fri Jul 24 05:02:48 2026 by rpki-client