$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: OoOYcVg8uTCpD29PM22Ll8SyPD0842nxknJGIVrmaUw= Subject key identifier: A5:54:29:23:B1:30:59:02:F8:1C:0D:CF:48:83:44:36:D3:8B:60:8B Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 75D8FFC663B6968EC083FB82B290D3D9CB5726E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 09:52:05 +0000 Manifest this update: Thu 23 Jul 2026 09:47:05 +0000 Manifest next update: Fri 24 Jul 2026 11:29:05 +0000 Files and hashes: 1: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: VxXVApbHYCWo14OSlDvWgsCcXMpOf57k197OdtuBCpM=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d8:ff:c6:63:b6:96:8e:c0:83:fb:82:b2:90:d3:d9:cb:57:26:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Jul 23 09:47:05 2026 GMT Not After : Jul 24 11:29:05 2026 GMT Subject: CN=A5542923B1305902F81C0DCF48834436D38B608B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:af:57:e0:0a:29:e2:54:56:a9:90:a8:06: 7d:fd:00:09:62:62:b3:8a:41:40:b0:72:da:29:2c: aa:80:4f:ad:b3:33:20:c6:5b:01:6b:11:8c:b3:14: ae:74:de:e5:bc:ff:dc:ec:1e:e2:17:29:e6:ef:59: 66:64:94:32:63:b8:bb:41:40:ad:84:0c:fd:27:4a: 43:36:a4:d1:15:7f:12:af:73:b4:af:b0:c0:2d:11: 06:c9:11:e1:45:08:dd:c0:50:2c:c7:c1:8b:64:c4: d9:1f:74:c1:2f:b8:00:d3:de:29:dc:3d:dc:c5:05: 24:61:4a:96:f3:d4:7b:75:77:55:28:65:ec:ab:72: 34:a5:e1:4d:c5:5f:13:a2:dc:1c:35:5a:3d:81:30: b5:72:aa:8a:bc:d9:e7:af:bb:6c:d5:dd:3c:de:f0: e7:cb:b9:ab:70:b2:57:95:1e:d2:7f:b8:b2:8d:56: 67:6f:6c:9b:a5:f1:ca:d8:29:75:31:b3:36:fe:42: 34:c4:90:f2:12:d3:46:d8:c7:2b:27:62:e6:e7:ba: ee:4c:a4:2c:3c:19:ac:71:58:cc:c3:48:e5:94:73: 20:cb:12:6c:cb:2b:d6:70:4d:12:53:76:36:da:9f: 44:83:a5:0f:e8:e8:9f:cb:f3:3c:9a:6b:62:3c:14: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:54:29:23:B1:30:59:02:F8:1C:0D:CF:48:83:44:36:D3:8B:60:8B X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ab:c2:b0:21:2e:e2:ab:8c:b0:05:80:64:f2:46:e9:b8:f6: 39:16:1a:ac:ea:ee:c3:e9:0a:26:77:3d:db:63:01:2d:96:0c: 33:4c:f4:0e:1b:78:91:71:78:13:37:d4:fb:39:b4:2b:15:ce: b0:1b:31:39:20:87:ff:15:14:20:d0:5b:a6:2b:de:7d:ee:f4: 79:64:d9:9c:d7:bd:d6:60:58:59:bb:86:88:c1:32:6f:d4:22: 28:0d:a9:fd:6d:3a:7f:09:c2:d2:19:a2:e2:12:86:26:2e:8f: 6d:80:dd:74:e4:12:72:d8:3f:3b:0b:7d:91:f0:ee:ea:cd:56: 41:59:11:3c:24:27:32:18:35:58:32:ae:f3:77:cc:a2:eb:10: 5e:28:25:5a:5e:5c:cc:cf:8f:04:1a:15:be:1e:50:4a:5f:08: 29:2a:83:6a:8a:f8:5d:68:a7:9b:bb:dc:63:c9:06:35:17:dd: 67:86:31:d4:34:be:69:35:0d:7b:15:fe:1b:75:6d:f1:2d:32: e0:0f:d0:d1:6a:ee:ae:8f:d1:c0:d4:d1:e0:39:82:ac:b5:96: f8:09:b2:27:d8:85:cf:15:d4:e9:c5:81:23:e3:72:55:9d:e1: b0:34:32:d8:b9:f5:67:28:c1:a0:8e:7d:ed:c0:94:6c:27:0f: b1:41:7a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddj/xmO2lo7Ag/uCspDT2ctXJuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA3MjMwOTQ3MDVaFw0yNjA3MjQxMTI5MDVaMDMxMTAvBgNV BAMTKEE1NTQyOTIzQjEzMDU5MDJGODFDMERDRjQ4ODM0NDM2RDM4QjYwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/i69X4Aop4lRWqZCoBn39AAli YrOKQUCwctopLKqAT62zMyDGWwFrEYyzFK503uW8/9zsHuIXKebvWWZklDJjuLtB QK2EDP0nSkM2pNEVfxKvc7SvsMAtEQbJEeFFCN3AUCzHwYtkxNkfdMEvuADT3inc PdzFBSRhSpbz1Ht1d1UoZeyrcjSl4U3FXxOi3Bw1Wj2BMLVyqoq82eevu2zV3Tze 8OfLuatwsleVHtJ/uLKNVmdvbJul8crYKXUxszb+QjTEkPIS00bYxysnYubnuu5M pCw8GaxxWMzDSOWUcyDLEmzLK9ZwTRJTdjban0SDpQ/o6J/L8zyaa2I8FH0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpVQpI7EwWQL4HA3PSINENtOLYIswHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGarwrAhLuKrjLAFgGTyRum49jkWGqzq7sPp CiZ3PdtjAS2WDDNM9A4beJFxeBM31Ps5tCsVzrAbMTkgh/8VFCDQW6Yr3n3u9Hlk 2ZzXvdZgWFm7hojBMm/UIigNqf1tOn8JwtIZouIShiYuj22A3XTkEnLYPzsLfZHw 7urNVkFZETwkJzIYNVgyrvN3zKLrEF4oJVpeXMzPjwQaFb4eUEpfCCkqg2qK+F1o p5u73GPJBjUX3WeGMdQ0vmk1DXsV/ht1bfEtMuAP0NFq7q6P0cDU0eA5gqy1lvgJ sifYhc8V1OnFgSPjclWd4bA0Mti59WcowaCOfe3AlGwnD7FBesg= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:55 2026 by rpki-client