$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: 6ctnPuWkVEAYpw7ACeI350DHg7fcbvyf6aZXMar9P94= Subject key identifier: B3:AF:6F:CE:D0:DD:8B:82:D6:78:A3:AE:01:B6:2C:D2:67:E0:E2:33 Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 0274618073087A0C8BEEFE071B3EF2CB11AB830D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:37:50 +0000 Manifest this update: Thu 23 Jul 2026 18:32:50 +0000 Manifest next update: Fri 24 Jul 2026 21:52:50 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: 5gb00E2HbnRJqCf3JqxnJ6spPIDeXnaf3AqQ2JluuDc=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:74:61:80:73:08:7a:0c:8b:ee:fe:07:1b:3e:f2:cb:11:ab:83:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Jul 23 18:32:50 2026 GMT Not After : Jul 24 21:52:50 2026 GMT Subject: CN=B3AF6FCED0DD8B82D678A3AE01B62CD267E0E233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:c3:d7:5a:65:b8:8e:cb:85:70:9e:09:1b: 7d:dc:e9:a6:26:95:2a:b5:b4:ba:2d:2c:35:3a:fa: 85:83:41:e7:f6:81:12:fb:40:bb:c5:6c:be:e1:93: f6:41:a3:1a:28:89:52:50:0f:4c:16:9a:c9:65:63: ea:56:91:9f:d1:54:52:a6:ce:ac:25:7c:96:a7:08: 9a:5c:f4:de:09:5a:4f:23:3b:ae:67:b4:82:73:c7: f2:06:26:ad:58:bc:9d:b8:be:d8:e8:d8:94:60:cf: 6e:27:7d:d7:bb:4b:ed:88:af:e3:29:9c:65:cd:67: e6:01:f9:1f:ca:b3:04:de:91:65:d6:44:c7:bf:f8: c3:28:66:1d:4d:28:7e:5b:88:52:d1:6a:21:db:ed: ca:9d:27:41:6f:a3:21:e7:3d:7d:09:04:f0:5d:b2: 4a:5a:8f:57:f4:69:06:eb:09:77:c9:d3:53:cf:c8: 32:d9:f1:c8:c7:3c:cc:9a:26:65:10:01:0b:cb:62: ad:ed:f3:40:2e:b0:65:37:62:63:79:6a:d1:dd:0e: 37:ce:0f:46:b4:20:04:08:fa:42:7e:ea:a2:9b:80: 0a:64:83:8e:11:51:5a:3d:58:22:5c:a7:39:4e:a9: 36:68:10:35:00:cd:b5:72:ac:42:ad:b8:d5:48:2c: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:6F:CE:D0:DD:8B:82:D6:78:A3:AE:01:B6:2C:D2:67:E0:E2:33 X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:15:e8:ac:f9:99:e0:cb:b8:2e:ed:ab:aa:d8:22:1d:ab:1d: 5a:1a:44:87:37:da:77:65:51:fd:00:28:c0:62:e9:9a:db:e8: 30:df:a6:03:d7:de:ef:6d:18:45:8f:23:d3:28:9e:33:f3:25: 7f:a3:46:59:2b:6b:70:f0:4d:c0:21:dc:ef:62:d3:06:c9:74: b8:a6:16:cf:d6:74:69:02:ed:f8:dc:4d:b7:b8:74:9f:2a:9e: a0:86:30:07:89:e4:a4:c6:34:2e:eb:03:3c:2c:d0:84:21:d3: 20:f5:0e:47:e0:d8:16:64:06:2e:92:19:fc:4d:08:2b:3c:69: f0:20:19:53:f0:55:45:cb:2d:9a:85:a0:a0:bd:74:4d:3a:b6: 07:06:71:41:f2:01:51:b8:c9:25:bf:1d:cf:76:55:e0:74:33: 68:db:84:93:8f:10:90:7d:6d:96:10:b4:f1:dd:50:4a:a2:4e: e4:98:83:56:3e:62:51:10:ff:77:5a:98:fd:a1:68:92:c7:3c: 9a:c6:a6:c4:50:bd:e7:71:73:7a:04:90:bb:24:93:81:02:e8: 8a:12:e1:73:ad:2d:8e:d7:e9:52:1d:86:8a:cc:e0:a4:ee:9a: 8e:8f:a8:4e:a0:d0:89:0d:d8:d0:29:cc:84:07:7d:54:c8:50: 43:2d:95:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnRhgHMIegyL7v4HGz7yyxGrgw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA3MjMxODMyNTBaFw0yNjA3MjQyMTUyNTBaMDMxMTAvBgNV BAMTKEIzQUY2RkNFRDBERDhCODJENjc4QTNBRTAxQjYyQ0QyNjdFMEUyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuMPXWmW4jsuFcJ4JG33c6aYm lSq1tLotLDU6+oWDQef2gRL7QLvFbL7hk/ZBoxooiVJQD0wWmsllY+pWkZ/RVFKm zqwlfJanCJpc9N4JWk8jO65ntIJzx/IGJq1YvJ24vtjo2JRgz24nfde7S+2Ir+Mp nGXNZ+YB+R/KswTekWXWRMe/+MMoZh1NKH5biFLRaiHb7cqdJ0FvoyHnPX0JBPBd skpaj1f0aQbrCXfJ01PPyDLZ8cjHPMyaJmUQAQvLYq3t80AusGU3YmN5atHdDjfO D0a0IAQI+kJ+6qKbgApkg44RUVo9WCJcpzlOqTZoEDUAzbVyrEKtuNVILOU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs69vztDdi4LWeKOuAbYs0mfg4jMwHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwV6Kz5meDLuC7tq6rYIh2rHVoaRIc32ndl Uf0AKMBi6Zrb6DDfpgPX3u9tGEWPI9MonjPzJX+jRlkra3DwTcAh3O9i0wbJdLim Fs/WdGkC7fjcTbe4dJ8qnqCGMAeJ5KTGNC7rAzws0IQh0yD1Dkfg2BZkBi6SGfxN CCs8afAgGVPwVUXLLZqFoKC9dE06tgcGcUHyAVG4ySW/Hc92VeB0M2jbhJOPEJB9 bZYQtPHdUEqiTuSYg1Y+YlEQ/3damP2haJLHPJrGpsRQvedxc3oEkLskk4EC6IoS 4XOtLY7X6VIdhorM4KTumo6PqE6g0IkN2NApzIQHfVTIUEMtlR0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:09 2026 by rpki-client