$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: aZaE1fnkDSYiQ3I1ZK8nLWVO1VLT2svGtgdP3MJUmiU= Subject key identifier: FF:82:3A:BF:94:F6:FA:37:3B:EC:05:CA:16:FD:E9:56:42:36:91:E3 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 66513FD01823BCADF3AB52D519BD2879896740AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:06:47 +0000 Manifest this update: Fri 24 Jul 2026 02:01:47 +0000 Manifest next update: Sat 25 Jul 2026 03:43:47 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 3: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: uFnb4tVOvgwm5besRqSxAg8l0DaQeBRzDwZUhwXhcJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:51:3f:d0:18:23:bc:ad:f3:ab:52:d5:19:bd:28:79:89:67:40:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Jul 24 02:01:47 2026 GMT Not After : Jul 25 03:43:47 2026 GMT Subject: CN=FF823ABF94F6FA373BEC05CA16FDE956423691E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:c7:d9:d4:32:e2:90:06:ef:3d:7e:d6:72: d8:de:f2:9f:42:85:e4:a4:50:85:5a:74:cd:f3:b6: 82:47:a5:25:fb:29:c1:68:2c:86:ff:3f:cc:ea:d3: bf:26:45:32:67:e2:ea:8e:d1:fa:c7:f0:1b:13:c2: 13:2b:eb:7b:9e:e3:69:4f:c5:f1:f2:91:52:8b:e2: 5d:75:c0:c3:64:c4:ad:46:ec:51:80:c0:d9:e2:e4: ff:88:3c:2c:38:16:1f:9b:93:fc:ee:8c:a3:be:8c: c2:5f:90:70:5f:bd:73:04:03:c1:3a:3d:56:f8:b1: 0e:a9:c2:51:df:d7:6f:2a:68:83:67:f4:55:7f:04: d7:bf:ae:ec:7f:1d:a9:51:25:1a:27:15:97:55:63: 41:50:8b:18:ea:b4:ea:9b:2a:b4:2a:43:52:5c:55: ae:82:78:87:75:f9:79:a3:11:1a:42:43:16:3e:73: 80:d3:01:25:0d:83:9c:8e:3c:3d:18:4d:0e:e7:31: af:71:84:ed:fc:c7:41:f8:59:68:4d:54:64:23:f4: 31:16:f0:94:39:f6:e6:29:b5:cb:66:8e:56:ee:29: ca:5d:5f:10:cc:18:c2:6d:de:3e:1e:88:ab:f1:52: ff:60:75:fc:44:bf:0f:02:5c:08:b3:26:d4:ed:ce: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:3A:BF:94:F6:FA:37:3B:EC:05:CA:16:FD:E9:56:42:36:91:E3 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8e:b3:f7:82:b8:b7:9d:de:eb:41:c6:eb:e9:c1:0e:00:e3: 75:b7:b7:2d:0a:a1:f7:01:76:4b:da:f2:59:d5:ee:b7:2c:e0: 8f:c9:a5:96:36:9f:37:14:c2:14:8f:c6:84:70:3c:53:8e:a6: 6a:c6:46:8f:41:fc:57:7d:0a:be:5d:be:4c:39:f7:57:74:36: 74:8f:50:b9:f3:c5:cc:61:13:a2:f3:8e:19:1c:47:13:29:b1: 3c:17:cf:0c:2b:99:db:33:3e:c2:55:a6:e8:52:e8:99:5a:6f: ab:60:77:52:aa:f2:bc:d6:2a:bb:9f:da:80:f1:3d:f7:c7:50: da:f4:1e:0d:10:fb:81:3e:c5:c7:6b:08:9f:a9:b5:59:f1:e2: 7d:60:28:32:1a:3b:f6:c9:51:83:15:ed:3d:e5:41:42:1d:be: 11:b0:e5:8f:a5:9e:95:01:71:c2:2b:d9:4a:e7:98:62:e9:b8: e7:ec:38:8f:f6:ea:38:a9:e0:87:2b:53:d5:a5:ca:c7:18:ed: 6e:e3:d8:6d:6d:aa:a5:aa:54:4e:c5:24:35:08:0b:39:b5:57: 8a:7f:9f:8c:45:34:25:19:86:03:56:92:c3:78:f3:d3:89:76: c7:f5:8f:0a:3f:55:bf:6d:35:35:06:c8:d4:27:92:16:a5:df: 7c:14:7d:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlE/0BgjvK3zq1LVGb0oeYlnQKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA3MjQwMjAxNDdaFw0yNjA3MjUwMzQzNDdaMDMxMTAvBgNV BAMTKEZGODIzQUJGOTRGNkZBMzczQkVDMDVDQTE2RkRFOTU2NDIzNjkxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC968fZ1DLikAbvPX7Wctje8p9C heSkUIVadM3ztoJHpSX7KcFoLIb/P8zq078mRTJn4uqO0frH8BsTwhMr63ue42lP xfHykVKL4l11wMNkxK1G7FGAwNni5P+IPCw4Fh+bk/zujKO+jMJfkHBfvXMEA8E6 PVb4sQ6pwlHf128qaINn9FV/BNe/rux/HalRJRonFZdVY0FQixjqtOqbKrQqQ1Jc Va6CeId1+XmjERpCQxY+c4DTASUNg5yOPD0YTQ7nMa9xhO38x0H4WWhNVGQj9DEW 8JQ59uYptctmjlbuKcpdXxDMGMJt3j4eiKvxUv9gdfxEvw8CXAizJtTtzo1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4I6v5T2+jc77AXKFv3pVkI2keMwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKOs/eCuLed3utBxuvpwQ4A43W3ty0KofcB dkva8lnV7rcs4I/JpZY2nzcUwhSPxoRwPFOOpmrGRo9B/Fd9Cr5dvkw591d0NnSP ULnzxcxhE6LzjhkcRxMpsTwXzwwrmdszPsJVpuhS6Jlab6tgd1Kq8rzWKruf2oDx PffHUNr0Hg0Q+4E+xcdrCJ+ptVnx4n1gKDIaO/bJUYMV7T3lQUIdvhGw5Y+lnpUB ccIr2UrnmGLpuOfsOI/26jip4IcrU9WlyscY7W7j2G1tqqWqVE7FJDUICzm1V4p/ n4xFNCUZhgNWksN489OJdsf1jwo/Vb9tNTUGyNQnkhal33wUfac= -----END CERTIFICATE-----Generated at Fri Jul 24 14:28:07 2026 by rpki-client