$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: SChmFqioFnMkwGU4O7ZcTE2652X/PhWCDDoKWNGBu10= Subject key identifier: D1:58:7E:20:E6:62:C8:2A:1E:81:C2:59:CD:FC:F4:31:D7:BE:C4:05 Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 198B32AB6B44EE3050DB7993380E8217D4E6266D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:08:34 +0000 Manifest this update: Thu 23 Jul 2026 19:03:34 +0000 Manifest next update: Fri 24 Jul 2026 21:12:34 +0000 Files and hashes: 1: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: YI983bzCsOOmOlYpDrKpwaKieG385RtQ/wfkD9R0TeM=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8b:32:ab:6b:44:ee:30:50:db:79:93:38:0e:82:17:d4:e6:26:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: Jul 23 19:03:34 2026 GMT Not After : Jul 24 21:12:34 2026 GMT Subject: CN=D1587E20E662C82A1E81C259CDFCF431D7BEC405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:3d:7d:a6:b3:eb:bf:68:46:b4:82:aa:21: 4b:72:7f:63:5b:40:9c:6b:ad:79:22:d4:c9:80:7a: 8f:51:d5:6b:93:9d:e1:24:93:60:a6:59:9a:16:0f: 5f:2c:21:90:8f:a1:5e:13:9d:aa:40:a8:6e:68:da: 10:ee:80:d4:23:c4:aa:69:27:a4:99:a8:75:30:e5: 69:d8:98:79:b7:75:a6:1b:c1:96:7c:99:71:8b:cf: 00:6a:4d:fd:fb:b0:44:5d:e5:03:0c:e2:31:a5:79: 77:00:19:85:55:a3:92:37:89:94:4d:2d:9b:c0:d1: da:46:03:35:8d:8c:40:23:39:df:44:35:c5:ce:7c: 05:c4:ef:e2:9a:a0:d1:b1:f4:bc:fa:77:e5:3c:87: 4a:4c:c7:ad:2e:34:7a:b7:3b:00:03:69:a3:fa:a5: b9:19:87:2c:d3:48:15:73:ee:2c:ee:46:58:b7:77: 77:33:34:90:48:75:a4:b7:8b:88:bf:bc:83:aa:19: 83:24:6a:bf:e5:a0:a0:31:ff:03:4d:9a:66:0d:4a: 96:54:9e:3b:76:bb:56:2a:bc:25:a4:ec:80:c3:7a: 59:72:39:9e:5a:b5:b3:66:3d:47:6b:b5:65:09:1a: 16:45:db:82:24:08:11:09:ca:36:43:b4:4b:a4:e6: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:7E:20:E6:62:C8:2A:1E:81:C2:59:CD:FC:F4:31:D7:BE:C4:05 X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:11:15:0d:c0:10:c8:c4:86:25:fa:70:f0:ea:01:a2:17: e1:61:29:5f:23:4f:4c:db:05:62:98:c4:02:35:c5:e5:f7:4e: e0:c3:49:66:4e:6b:6c:bd:62:42:4d:da:de:ac:4b:0e:11:ad: 5a:be:b4:6a:ce:65:80:06:0e:04:b1:59:3d:8f:08:01:58:d7: 79:84:fd:59:cc:fe:50:74:be:8f:f7:ab:b3:50:8c:dd:40:b2: 64:12:d2:51:1d:0c:44:e2:d8:be:c1:38:8f:b3:32:02:c8:c0: 6b:b6:b3:ad:1a:20:ca:54:80:4c:bc:5a:92:9d:57:d6:b2:73: aa:fd:a3:79:f1:a5:f2:f8:d3:dc:31:bb:74:e1:31:e8:63:e7: fb:73:2f:5e:56:fc:a3:d2:93:67:d4:fa:d8:35:2d:df:d6:8b: a8:a1:70:98:3c:3e:b1:89:17:19:ec:8e:0c:93:8d:00:bd:f4: 4c:cc:63:d5:7f:37:d5:2c:9b:51:c1:8b:b9:3e:8f:01:d5:6c: b2:ed:f7:53:32:a2:da:52:dc:e9:90:15:f1:3d:61:65:25:d7: d4:01:8b:ab:af:94:3a:e9:ea:a8:8b:dd:95:b4:c6:02:c8:6d: db:d1:a4:50:3a:fd:42:9b:23:47:2e:fe:b8:40:65:a7:fd:fc: 63:e2:b8:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYsyq2tE7jBQ23mTOA6CF9TmJm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjA3MjMxOTAzMzRaFw0yNjA3MjQyMTEyMzRaMDMxMTAvBgNV BAMTKEQxNTg3RTIwRTY2MkM4MkExRTgxQzI1OUNERkNGNDMxRDdCRUM0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrj19prPrv2hGtIKqIUtyf2Nb QJxrrXki1MmAeo9R1WuTneEkk2CmWZoWD18sIZCPoV4TnapAqG5o2hDugNQjxKpp J6SZqHUw5WnYmHm3daYbwZZ8mXGLzwBqTf37sERd5QMM4jGleXcAGYVVo5I3iZRN LZvA0dpGAzWNjEAjOd9ENcXOfAXE7+KaoNGx9Lz6d+U8h0pMx60uNHq3OwADaaP6 pbkZhyzTSBVz7izuRli3d3czNJBIdaS3i4i/vIOqGYMkar/loKAx/wNNmmYNSpZU njt2u1YqvCWk7IDDellyOZ5atbNmPUdrtWUJGhZF24IkCBEJyjZDtEuk5tGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Vh+IOZiyCoegcJZzfz0Mde+xAUwHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP0ERUNwBDIxIYl+nDw6gGiF+FhKV8jT0zb BWKYxAI1xeX3TuDDSWZOa2y9YkJN2t6sSw4RrVq+tGrOZYAGDgSxWT2PCAFY13mE /VnM/lB0vo/3q7NQjN1AsmQS0lEdDETi2L7BOI+zMgLIwGu2s60aIMpUgEy8WpKd V9ayc6r9o3nxpfL409wxu3ThMehj5/tzL15W/KPSk2fU+tg1Ld/Wi6ihcJg8PrGJ FxnsjgyTjQC99EzMY9V/N9Usm1HBi7k+jwHVbLLt91MyotpS3OmQFfE9YWUl19QB i6uvlDrp6qiL3ZW0xgLIbdvRpFA6/UKbI0cu/rhAZaf9/GPiuJY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:59 2026 by rpki-client