$ rpki-client -vvf rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft (raw, json) Hash identifier: XpGt9UjKCZ+J2neVOKUksn5AAUGytYR77drPF3X9RRg= Subject key identifier: 9D:74:95:B9:FF:B6:96:8D:77:04:2E:FA:56:B9:37:74:29:A1:75:38 Authority key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Certificate issuer: /CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Certificate serial: 1B8F034E0BB2455BCC21B62322A5D7BBF476DFD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:58:28 +0000 Manifest this update: Thu 23 Jul 2026 10:53:28 +0000 Manifest next update: Fri 24 Jul 2026 12:30:28 +0000 Files and hashes: 1: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl (hash: Qsyr+6VetzOI0PGUkae2HBwuW/9iAG0bvZp9/Q+PWuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8f:03:4e:0b:b2:45:5b:cc:21:b6:23:22:a5:d7:bb:f4:76:df:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Validity Not Before: Jul 23 10:53:28 2026 GMT Not After : Jul 24 12:30:28 2026 GMT Subject: CN=9D7495B9FFB6968D77042EFA56B9377429A17538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:5d:e2:89:e5:de:84:cb:cf:a8:52:42:40: 2d:20:11:34:d3:5b:f5:f8:2d:eb:a7:c4:91:fa:d4: 80:db:55:4d:1b:9a:3b:41:95:3e:41:67:85:fb:d9: 45:b3:d7:c0:96:d2:c8:48:dc:48:c8:5c:8d:36:70: 7e:21:55:bc:e6:ec:e9:b2:fe:e7:87:0d:cb:58:19: e9:4b:01:c4:49:18:d9:c2:53:38:ce:53:b5:82:de: 10:c4:36:5a:9b:58:f2:83:34:f2:9c:a7:f6:0a:d2: 24:43:32:f2:99:ea:02:b8:bb:5f:05:8b:96:dd:e1: 40:81:b4:e4:da:92:09:93:f0:d4:a8:34:5c:f6:fb: c5:7b:6b:8a:25:cf:96:05:93:ca:1a:f6:49:57:9d: 00:12:12:5c:aa:6b:74:48:e8:30:78:e6:21:13:0c: 10:34:f1:b9:d2:bb:47:bd:22:0a:79:39:c8:8f:da: 2a:e5:dc:8c:aa:f0:17:67:4b:05:6d:c2:a1:12:1a: 79:3e:97:e8:9b:41:a6:e5:0f:e1:fc:af:3a:21:23: 10:ac:c1:bd:60:21:6e:3b:ff:c3:7f:6b:dc:51:9b: 2b:60:96:29:86:0a:0a:9a:9f:58:68:10:7e:ad:ef: 2a:6f:df:aa:d7:ee:93:f9:ac:06:36:18:62:a5:d9: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:74:95:B9:FF:B6:96:8D:77:04:2E:FA:56:B9:37:74:29:A1:75:38 X509v3 Authority Key Identifier: keyid:3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:41:45:e9:18:01:f6:a1:47:fa:52:d6:08:e1:5f:34:26:ea: a6:e3:88:c2:ae:83:6e:6e:99:bf:04:e0:8c:34:9b:e8:3a:cd: e0:df:a0:7d:a7:29:19:f2:48:4f:da:c1:59:3a:ae:c3:29:8a: e8:a0:21:cf:90:17:e4:7d:29:6f:f7:71:7b:56:5f:4e:e4:e8: a6:a9:81:31:24:9d:d7:58:ef:39:25:fd:df:e3:59:79:b1:d6: 34:9a:71:7d:67:03:c3:64:12:17:8f:a8:0d:34:c0:5c:24:c0: 26:62:e2:5c:52:a0:93:5f:5d:ca:8f:22:cd:aa:dc:39:14:65: ba:3f:dd:3a:06:f7:84:6b:09:c1:cf:3e:56:b2:5b:9d:2f:3d: 6c:90:11:e8:e5:2b:72:47:2f:c0:05:4e:82:12:7a:4a:89:bd: 4b:a6:83:2a:1b:53:00:76:0d:cf:da:25:bc:ff:2b:ff:95:c7: 3e:aa:64:1d:b1:86:26:ce:40:3f:15:5b:15:8d:3b:66:51:d6: 09:a7:e1:b9:19:9e:19:72:56:ef:71:c8:54:c0:ae:f3:a7:d9: 11:29:7e:9c:55:d4:b4:bd:20:62:b0:84:49:51:4c:12:67:c5: 12:62:4b:be:0f:d0:69:05:c0:df:29:76:d8:28:d7:e6:f0:21: 2e:fa:fd:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG48DTguyRVvMIbYjIqXXu/R239kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNC QzA4MUM5OTAeFw0yNjA3MjMxMDUzMjhaFw0yNjA3MjQxMjMwMjhaMDMxMTAvBgNV BAMTKDlENzQ5NUI5RkZCNjk2OEQ3NzA0MkVGQTU2QjkzNzc0MjlBMTc1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG213iieXehMvPqFJCQC0gETTT W/X4LeunxJH61IDbVU0bmjtBlT5BZ4X72UWz18CW0shI3EjIXI02cH4hVbzm7Omy /ueHDctYGelLAcRJGNnCUzjOU7WC3hDENlqbWPKDNPKcp/YK0iRDMvKZ6gK4u18F i5bd4UCBtOTakgmT8NSoNFz2+8V7a4olz5YFk8oa9klXnQASElyqa3RI6DB45iET DBA08bnSu0e9Igp5OciP2irl3Iyq8BdnSwVtwqESGnk+l+ibQablD+H8rzohIxCs wb1gIW47/8N/a9xRmytglimGCgqan1hoEH6t7ypv36rX7pP5rAY2GGKl2XkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnXSVuf+2lo13BC76Vrk3dCmhdTgwHwYDVR0j BBgwFoAUPwV8m+sWzndP8UgxGPz907wIHJkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJmMzljMTctNjcyNS00MmJlLWJlZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJF QjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNCQzA4MUM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjA1N0M5QkVCMTZDRTc3NEZGMTQ4MzExOEZDRkREM0JDMDgx Qzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZE RDNCQzA4MUM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJBRekYAfahR/pS1gjhXzQm6qbjiMKug25u mb8E4Iw0m+g6zeDfoH2nKRnySE/awVk6rsMpiuigIc+QF+R9KW/3cXtWX07k6Kap gTEknddY7zkl/d/jWXmx1jSacX1nA8NkEhePqA00wFwkwCZi4lxSoJNfXcqPIs2q 3DkUZbo/3ToG94RrCcHPPlayW50vPWyQEejlK3JHL8AFToISekqJvUumgyobUwB2 Dc/aJbz/K/+Vxz6qZB2xhibOQD8VWxWNO2ZR1gmn4bkZnhlyVu9xyFTArvOn2REp fpxV1LS9IGKwhElRTBJnxRJiS74P0GkFwN8pdtgo1+bwIS76/Vs= -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:08 2026 by rpki-client