$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: sClzNbD9CLOBXQWpZw/iL/0RITeLtahl/X2NzljAKAU= Subject key identifier: DE:D5:7B:94:1B:12:1E:62:A0:24:C8:16:8F:55:80:D0:90:01:2D:72 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 155D211630A8BD0B71DFFEAFC99EDA5B8026C08E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 11:13:48 +0000 Manifest this update: Thu 23 Jul 2026 11:08:48 +0000 Manifest next update: Fri 24 Jul 2026 14:48:48 +0000 Files and hashes: 1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 2: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: oIH+xi6XOnigAkMQzLeQ24TENjqvExjTgAxY82Bl2U4=) 3: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5d:21:16:30:a8:bd:0b:71:df:fe:af:c9:9e:da:5b:80:26:c0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Jul 23 11:08:48 2026 GMT Not After : Jul 24 14:48:48 2026 GMT Subject: CN=DED57B941B121E62A024C8168F5580D090012D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:f4:13:0d:84:bd:c2:bb:00:92:85:b9:ab: 4b:75:13:8b:6a:49:a6:84:b3:e4:d7:f9:f1:4c:f9: bd:83:47:aa:20:d5:f5:8e:c8:37:67:48:fd:d4:e2: da:3d:ac:ef:8d:11:0a:cd:7c:ae:ce:3b:81:f6:c2: c2:c6:68:37:f9:3f:ce:e9:ce:ec:8f:52:54:fd:f9: e9:10:28:8f:3f:10:37:ad:a4:32:a8:90:33:6b:7b: 05:f2:1d:a8:88:11:97:a5:ba:58:b3:61:a2:59:40: 55:64:1c:42:be:06:10:12:4f:fa:2c:00:15:8d:a8: 42:45:ec:92:c2:51:4f:e0:f4:4f:7b:c8:2d:ec:7b: 46:59:ed:fe:20:0b:22:1c:ba:34:b9:1d:d3:86:42: 2a:09:4e:c2:88:03:c6:fc:01:70:7f:0b:77:85:b8: 31:7b:db:df:02:41:e1:ee:57:98:0c:93:56:dc:08: a4:cc:e5:69:8d:19:e0:74:e6:98:70:36:bb:ed:91: 5b:41:2d:7e:eb:39:bc:0d:1f:71:1f:26:31:0b:89: d7:ed:be:51:bc:a1:64:17:35:c0:37:89:e0:48:1e: 70:3c:7f:51:61:6b:94:3e:9f:e0:fe:f5:f5:c2:76: c3:c0:2e:a5:4d:6e:f8:5a:b7:47:7f:b1:4b:02:a1: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D5:7B:94:1B:12:1E:62:A0:24:C8:16:8F:55:80:D0:90:01:2D:72 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:05:ff:ac:3d:9c:d0:45:98:15:2a:6d:a6:ab:9a:98:67:27: 13:88:47:1a:35:4a:21:db:61:2d:0e:e4:05:6e:bd:43:22:1f: a3:84:c4:08:0e:b9:ee:5d:d5:4e:3c:c7:2b:4b:2d:71:09:21: 94:f0:62:3d:c5:39:b8:35:64:1c:e9:d6:3d:1c:de:0a:b8:03: 7a:75:74:be:64:07:07:c2:e0:4b:1f:bd:bd:ee:e8:04:18:ed: 5c:0c:0f:9f:99:42:c3:06:18:37:20:3b:e6:74:15:e5:36:35: f9:f0:e3:e9:c3:0e:c2:ae:78:2a:3a:ae:b3:d9:5a:58:09:eb: 47:a5:b9:c1:2f:83:a7:f7:71:12:dd:1a:e3:94:d5:7e:bd:62: 16:0e:d3:2f:65:73:a8:6a:8e:5e:4d:e5:4a:0d:a0:3e:99:73: 67:c7:37:20:b5:07:1c:4e:ed:04:8a:47:ff:2a:cd:dd:f3:1e: ac:18:23:d8:96:ba:25:ed:35:aa:7c:29:fc:a9:28:1b:d7:fe: 3b:a3:24:a9:7a:d1:bf:09:55:73:35:42:79:07:b1:06:88:85: 20:79:71:82:e1:94:69:07:ea:f2:de:04:2e:af:2b:c7:c8:a0: be:b8:e1:b4:86:d2:d5:04:06:cf:4f:78:a2:2d:45:09:2e:51: da:26:d7:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFV0hFjCovQtx3/6vyZ7aW4AmwI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA3MjMxMTA4NDhaFw0yNjA3MjQxNDQ4NDhaMDMxMTAvBgNV BAMTKERFRDU3Qjk0MUIxMjFFNjJBMDI0QzgxNjhGNTU4MEQwOTAwMTJENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7/QTDYS9wrsAkoW5q0t1E4tq SaaEs+TX+fFM+b2DR6og1fWOyDdnSP3U4to9rO+NEQrNfK7OO4H2wsLGaDf5P87p zuyPUlT9+ekQKI8/EDetpDKokDNrewXyHaiIEZelulizYaJZQFVkHEK+BhAST/os ABWNqEJF7JLCUU/g9E97yC3se0ZZ7f4gCyIcujS5HdOGQioJTsKIA8b8AXB/C3eF uDF7298CQeHuV5gMk1bcCKTM5WmNGeB05phwNrvtkVtBLX7rObwNH3EfJjELidft vlG8oWQXNcA3ieBIHnA8f1Fha5Q+n+D+9fXCdsPALqVNbvhat0d/sUsCodEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tV7lBsSHmKgJMgWj1WA0JABLXIwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAF/6w9nNBFmBUqbaarmphnJxOIRxo1SiHb YS0O5AVuvUMiH6OExAgOue5d1U48xytLLXEJIZTwYj3FObg1ZBzp1j0c3gq4A3p1 dL5kBwfC4Esfvb3u6AQY7VwMD5+ZQsMGGDcgO+Z0FeU2Nfnw4+nDDsKueCo6rrPZ WlgJ60elucEvg6f3cRLdGuOU1X69YhYO0y9lc6hqjl5N5UoNoD6Zc2fHNyC1BxxO 7QSKR/8qzd3zHqwYI9iWuiXtNap8KfypKBvX/jujJKl60b8JVXM1QnkHsQaIhSB5 cYLhlGkH6vLeBC6vK8fIoL644bSG0tUEBs9PeKItRQkuUdom1wg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:15 2026 by rpki-client