$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft File: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft (raw, json) Hash identifier: 5qLibE4BjX6ZQjRrBmfgR82PG+gE6mczKQxlWJRg7gQ= Subject key identifier: 1C:4D:03:D7:B8:8C:31:F9:5A:59:FA:9A:24:50:97:D1:9B:CA:8C:88 Authority key identifier: 3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 Certificate issuer: /CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Certificate serial: 45CF4AEE6DFB168C52BBD635F661518EEFBB6A16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:42:33 +0000 Manifest this update: Fri 24 Jul 2026 06:37:33 +0000 Manifest next update: Sat 25 Jul 2026 08:37:33 +0000 Files and hashes: 1: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl (hash: lM5SHIXaPXS0nc0+hSvhcxfWf8CQqT9sR0WVj5X1poU=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: ErPUUUg1dRZKVbJQVmVoH6jrv862m0Pddw1XMyfUrjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cf:4a:ee:6d:fb:16:8c:52:bb:d6:35:f6:61:51:8e:ef:bb:6a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Validity Not Before: Jul 24 06:37:33 2026 GMT Not After : Jul 25 08:37:33 2026 GMT Subject: CN=1C4D03D7B88C31F95A59FA9A245097D19BCA8C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:17:31:77:f5:3a:4f:bd:9f:b4:e6:da:04: 35:c1:66:93:a5:5b:2e:f5:2f:f3:d2:1c:ce:f4:97: 28:00:8a:15:96:69:48:81:d2:84:2d:51:d4:61:96: 21:de:00:88:05:d7:d1:53:6b:a7:fe:08:24:ba:b9: ac:4b:a9:f0:06:d6:ff:08:c8:e7:b0:93:cc:51:83: 1f:d7:68:7b:9c:52:90:79:1d:13:b2:ae:36:aa:d2: 0d:29:e5:38:8e:fb:ef:72:bc:6e:4f:aa:29:59:14: 93:24:22:cf:8b:85:a8:cd:ba:c3:dc:6f:ab:ea:95: d3:f6:39:9a:53:69:c2:f8:35:5a:4a:4c:6d:06:b9: b6:06:91:01:fa:1c:2f:84:2a:f5:6a:52:47:7e:fc: 96:1e:42:9c:82:19:e8:cc:6c:02:b5:ca:fd:65:ab: f0:73:57:18:12:53:dd:85:bb:bc:e7:47:98:51:b2: 5a:f2:a6:43:a8:0d:b6:bd:09:08:65:4f:e7:f0:97: 3b:76:7a:40:46:c7:8e:6b:b5:ef:76:f2:06:6f:b0: 4a:31:bd:3b:43:05:c6:84:7f:b3:fd:9f:a3:85:06: 78:43:00:6d:e3:74:91:05:50:c2:77:bd:13:05:45: 30:3e:f2:04:66:c7:93:cb:cb:9b:e3:7f:28:4e:14: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4D:03:D7:B8:8C:31:F9:5A:59:FA:9A:24:50:97:D1:9B:CA:8C:88 X509v3 Authority Key Identifier: keyid:3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:dc:a7:2d:28:e8:7b:b0:70:33:55:e2:40:f4:82:19:92:12: 52:4c:ba:74:22:02:b4:64:cc:a1:33:19:90:d3:cf:bf:34:ad: b7:85:20:e1:22:03:89:2c:5c:fc:ef:29:c5:7f:30:bd:2e:65: c4:34:21:4d:d0:7c:3c:d3:42:03:7a:32:6d:e7:24:86:e9:c9: e5:e3:25:a0:30:3b:06:40:52:a8:ec:b1:0c:e2:5a:45:34:af: c4:49:2b:ac:a6:42:0c:fd:34:b4:17:06:5d:08:23:c8:18:0c: ab:c6:85:9d:49:b1:9c:a6:ba:b2:c7:d2:c1:82:91:14:f5:dd: fe:29:1c:d9:13:0d:41:2a:c5:b4:95:a1:1c:47:3a:03:09:0a: 57:68:02:d5:cb:67:8c:7a:2f:63:9d:a1:c3:43:3d:69:0b:5b: bc:a9:80:ad:81:90:b7:c5:31:3e:01:11:2f:69:20:73:ae:8f: 13:5f:a8:d9:e2:08:75:85:86:03:a0:52:3e:84:ab:5b:3f:ee: 48:cb:96:1f:49:09:23:45:d5:2d:34:b1:54:69:4f:83:23:3d: 10:a0:e6:6d:93:0f:66:9f:02:f7:2a:4c:1d:2b:92:0a:41:05: e7:46:b1:98:5a:5d:8d:00:e6:aa:b3:e0:9a:b0:8b:e4:9d:34: c5:76:01:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURc9K7m37FoxSu9Y19mFRju+7ahYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJENjBC N0QyODVGODAeFw0yNjA3MjQwNjM3MzNaFw0yNjA3MjUwODM3MzNaMDMxMTAvBgNV BAMTKDFDNEQwM0Q3Qjg4QzMxRjk1QTU5RkE5QTI0NTA5N0QxOUJDQThDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vhcxd/U6T72ftObaBDXBZpOl Wy71L/PSHM70lygAihWWaUiB0oQtUdRhliHeAIgF19FTa6f+CCS6uaxLqfAG1v8I yOewk8xRgx/XaHucUpB5HROyrjaq0g0p5TiO++9yvG5PqilZFJMkIs+LhajNusPc b6vqldP2OZpTacL4NVpKTG0GubYGkQH6HC+EKvVqUkd+/JYeQpyCGejMbAK1yv1l q/BzVxgSU92Fu7znR5hRslrypkOoDba9CQhlT+fwlzt2ekBGx45rte928gZvsEox vTtDBcaEf7P9n6OFBnhDAG3jdJEFUMJ3vRMFRTA+8gRmx5PLy5vjfyhOFHRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHE0D17iMMflaWfqaJFCX0ZvKjIgwHwYDVR0j BBgwFoAUO9Q0nntVC84OfJV+A9YtYLfShfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExZjYyOTktYjE1NS00MjEyLWI1ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3 QjU1MEJDRTBFN0M5NTdFMDNENjJENjBCN0QyODVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQkQ0MzQ5RTdCNTUwQkNFMEU3Qzk1N0UwM0Q2MkQ2MEI3RDI4 NUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJE NjBCN0QyODVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLcpy0o6HuwcDNV4kD0ghmSElJMunQiArRk zKEzGZDTz780rbeFIOEiA4ksXPzvKcV/ML0uZcQ0IU3QfDzTQgN6Mm3nJIbpyeXj JaAwOwZAUqjssQziWkU0r8RJK6ymQgz9NLQXBl0II8gYDKvGhZ1JsZymurLH0sGC kRT13f4pHNkTDUEqxbSVoRxHOgMJCldoAtXLZ4x6L2OdocNDPWkLW7ypgK2BkLfF MT4BES9pIHOujxNfqNniCHWFhgOgUj6Eq1s/7kjLlh9JCSNF1S00sVRpT4MjPRCg 5m2TD2afAvcqTB0rkgpBBedGsZhaXY0A5qqz4Jqwi+SdNMV2Ado= -----END CERTIFICATE-----Generated at Fri Jul 24 17:05:55 2026 by rpki-client