$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: 4Fi8JGqDFOJaoJTJ02JvTcCq0xgBCMIQmRy4eM4G6ro= Subject key identifier: 73:97:C3:76:5A:44:77:A7:30:91:0D:A2:C5:A7:8F:19:78:CD:AB:F3 Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 4220ADD4918A344029E6FA71F6DB88DFFB5357C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:46:53 +0000 Manifest this update: Thu 23 Jul 2026 09:41:53 +0000 Manifest next update: Fri 24 Jul 2026 12:59:53 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 2: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: Wm/rQLNfQz+TJ54+SxgsKMfPNvjeMVbAODyQenQWooo=) 3: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:20:ad:d4:91:8a:34:40:29:e6:fa:71:f6:db:88:df:fb:53:57:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Jul 23 09:41:53 2026 GMT Not After : Jul 24 12:59:53 2026 GMT Subject: CN=7397C3765A4477A730910DA2C5A78F1978CDABF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:ad:d5:62:c4:ce:d4:6a:4c:47:7f:d3:26: 82:8b:57:97:0e:42:ab:f7:a9:16:f1:76:3f:a8:bb: de:15:0a:cb:75:b8:64:98:2e:82:88:34:74:e6:c0: 73:27:3e:80:3e:ae:63:c4:1e:ee:05:ae:80:85:90: 68:99:00:53:eb:75:45:45:2b:d1:74:2b:66:d8:2d: 87:25:fd:59:43:32:50:1e:ec:a6:de:93:cf:36:6f: 6c:30:4d:07:b7:08:c2:73:dc:db:11:89:47:eb:08: 05:78:67:1c:d1:12:bb:66:bc:32:c3:1e:1a:61:08: 12:c9:b3:ea:91:32:34:de:b2:f4:6f:78:5b:5b:ae: 2f:74:0c:49:64:11:66:58:23:f6:c2:33:38:e0:e0: 21:c4:5c:6b:84:1e:d0:ce:a9:61:d0:b6:2a:34:70: 26:f2:67:a4:16:b7:bc:66:5b:7a:31:cf:17:80:92: f8:ba:51:88:c4:b4:b4:a3:2e:99:65:77:2e:db:f5: e5:a1:35:4b:91:04:60:d1:ea:8c:b9:2f:4f:5c:a6: 1f:2c:3f:cf:df:a0:fc:68:a2:b3:10:0e:60:e0:60: d5:a6:46:12:a7:73:ec:08:33:4f:24:e9:8b:27:3f: b8:85:df:cb:71:61:0c:2f:0b:84:ec:a9:77:bc:45: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:C3:76:5A:44:77:A7:30:91:0D:A2:C5:A7:8F:19:78:CD:AB:F3 X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:77:05:23:7d:39:e7:f7:44:81:7c:ed:6a:ba:12:cf:9b:7e: 95:c0:86:d7:a2:c2:c3:04:76:1f:d1:bc:99:48:92:c4:1c:c7: 88:7e:b3:7f:bf:01:22:d7:9d:d6:0b:3f:d7:c9:cb:c9:7f:32: 27:a0:c8:80:7a:9c:a8:05:80:c5:f9:e0:c9:f4:70:18:64:02: 61:1b:e3:96:55:2b:30:bc:e4:90:5c:8a:ef:fa:4a:be:ad:7a: f5:c4:05:0d:4a:03:7e:30:ab:01:08:6b:ed:6b:05:8b:69:b9: db:75:70:41:b8:38:46:62:8a:1f:c4:de:98:d4:3b:36:73:b2: a8:be:fb:08:71:ab:c7:77:96:88:99:d0:f6:59:4b:ff:77:cd: 93:6a:78:f6:6a:41:c3:f5:10:01:1e:a8:cd:f0:c8:df:56:17: 25:76:0d:e8:8a:9f:c0:77:de:85:46:ab:45:e3:1b:d2:a3:ce: e0:3a:b9:59:31:0d:54:cb:40:aa:db:c9:cd:99:0b:61:b3:e0: 23:88:79:49:e1:65:de:f7:ea:c5:42:93:fb:6d:08:d3:62:72: 7a:ca:0e:45:98:2f:2a:a4:ca:f1:dd:b4:82:1a:3e:f1:07:97: c7:0d:80:06:62:7e:c5:10:af:98:24:f2:74:0e:ad:28:8b:8c: 74:81:ac:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiCt1JGKNEAp5vpx9tuI3/tTV8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA3MjMwOTQxNTNaFw0yNjA3MjQxMjU5NTNaMDMxMTAvBgNV BAMTKDczOTdDMzc2NUE0NDc3QTczMDkxMERBMkM1QTc4RjE5NzhDREFCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMR63VYsTO1GpMR3/TJoKLV5cO Qqv3qRbxdj+ou94VCst1uGSYLoKINHTmwHMnPoA+rmPEHu4FroCFkGiZAFPrdUVF K9F0K2bYLYcl/VlDMlAe7Kbek882b2wwTQe3CMJz3NsRiUfrCAV4ZxzRErtmvDLD HhphCBLJs+qRMjTesvRveFtbri90DElkEWZYI/bCMzjg4CHEXGuEHtDOqWHQtio0 cCbyZ6QWt7xmW3oxzxeAkvi6UYjEtLSjLplldy7b9eWhNUuRBGDR6oy5L09cph8s P8/foPxoorMQDmDgYNWmRhKnc+wIM08k6YsnP7iF38txYQwvC4TsqXe8RcKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5fDdlpEd6cwkQ2ixaePGXjNq/MwHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR3BSN9Oef3RIF87Wq6Es+bfpXAhteiwsME dh/RvJlIksQcx4h+s3+/ASLXndYLP9fJy8l/MiegyIB6nKgFgMX54Mn0cBhkAmEb 45ZVKzC85JBciu/6Sr6tevXEBQ1KA34wqwEIa+1rBYtpudt1cEG4OEZiih/E3pjU OzZzsqi++whxq8d3loiZ0PZZS/93zZNqePZqQcP1EAEeqM3wyN9WFyV2DeiKn8B3 3oVGq0XjG9KjzuA6uVkxDVTLQKrbyc2ZC2Gz4COIeUnhZd736sVCk/ttCNNicnrK DkWYLyqkyvHdtIIaPvEHl8cNgAZifsUQr5gk8nQOrSiLjHSBrOQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:42:18 2026 by rpki-client