$ rpki-client -vvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: whCfEP8VJDE+22goXgspruNTBohtV7Yf2AgCxceuFhc= Subject key identifier: 2B:DE:E4:C4:BF:40:53:67:66:81:10:A3:4B:A9:37:A7:92:4C:6C:E3 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 67BFB1048886E5A14309CCCE2C657F4FFD9DBD3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:40:15 +0000 Manifest this update: Fri 24 Jul 2026 04:35:15 +0000 Manifest next update: Sat 25 Jul 2026 04:40:15 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: 1z5bckvGzONxm0buDr+NV/eP8ItRkUnDpZBrk3lFlik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bf:b1:04:88:86:e5:a1:43:09:cc:ce:2c:65:7f:4f:fd:9d:bd:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Jul 24 04:35:15 2026 GMT Not After : Jul 25 04:40:15 2026 GMT Subject: CN=2BDEE4C4BF405367668110A34BA937A7924C6CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:9c:0a:b8:23:81:00:2b:fe:45:83:69:f9: 73:fb:8b:0b:27:a8:ac:59:3a:3b:9e:90:4b:cc:bc: 8c:ba:97:b7:25:cd:fd:0d:a9:5d:1b:1a:f3:6b:04: c2:c6:cc:56:03:b8:70:68:63:58:3d:22:aa:ff:63: d6:fd:24:4c:24:06:53:91:5d:0d:2c:83:7c:c9:0e: 53:bd:95:21:93:82:9e:da:d6:72:54:23:4e:b3:5d: 32:6c:e2:63:cf:f7:6e:ca:b9:d4:93:a1:a3:1f:06: 4d:8a:2c:e1:f9:f4:ed:a3:79:be:18:45:c1:7f:0d: c2:6e:0e:0c:28:14:53:bb:ea:3b:45:29:95:4c:30: 8f:5b:f4:e7:05:4a:43:cd:55:cb:d3:6f:85:11:83: 5e:b6:5c:27:43:f5:15:2d:9e:fb:53:b9:7f:82:7c: 58:54:ae:20:a2:5e:d9:23:ef:15:24:2f:5d:db:fe: 91:17:a7:08:0b:a0:96:06:c4:3c:b4:2e:3a:b7:89: 43:f0:ae:f6:8f:43:52:75:9a:22:55:d0:b1:72:0e: 9c:6e:78:3b:86:e5:e2:0f:f6:c4:31:ad:5e:f5:9b: e4:3a:39:3d:33:60:c0:d9:79:d4:d1:a8:72:27:76: 35:0c:59:3d:c8:e4:4c:33:9e:76:0b:f4:6e:32:50: fa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:E4:C4:BF:40:53:67:66:81:10:A3:4B:A9:37:A7:92:4C:6C:E3 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:19:a2:0d:9b:6c:91:d5:55:36:82:c6:81:7f:f4:cd:36:a2: d4:98:ae:d9:38:ec:ba:4e:be:81:0c:57:78:df:92:83:3c:37: 3e:b4:5d:6a:81:1f:16:14:2c:0f:e3:56:8d:9d:2d:ae:1c:77: d0:ab:6d:92:d4:ab:c8:8c:83:79:f4:f4:90:53:4c:65:7f:98: 97:59:f9:c8:04:f5:3e:b2:1e:82:a8:a9:cf:61:b4:99:69:35: ab:6a:4d:54:67:d2:c4:66:a6:e1:b0:6c:37:50:c0:3d:7d:3d: 2e:7b:b2:ff:7d:38:f1:1e:f5:17:ef:13:47:64:8d:77:ee:b1: 25:22:35:ce:ce:e3:53:7d:f4:2a:dd:b1:f1:a2:10:0a:9c:66: 66:58:f0:d8:ae:6c:f0:85:b0:d0:2e:61:32:46:36:b4:b6:64: 22:53:92:89:96:2e:66:b0:5e:48:5a:db:d3:51:35:90:9c:7b: 0f:b7:84:76:14:f3:33:be:00:8e:d0:f5:18:c6:5a:f9:f8:f8: 21:25:9f:8f:ed:66:1d:19:95:56:78:5e:40:7e:80:a7:77:58: 3f:62:2c:46:6b:8f:4c:8c:11:44:50:c2:08:1f:38:da:9a:40: 54:d0:a6:03:53:0e:a6:6b:1d:6a:e5:f9:6d:4f:b1:09:59:50: 4d:44:a5:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7+xBIiG5aFDCczOLGV/T/2dvT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA3MjQwNDM1MTVaFw0yNjA3MjUwNDQwMTVaMDMxMTAvBgNV BAMTKDJCREVFNEM0QkY0MDUzNjc2NjgxMTBBMzRCQTkzN0E3OTI0QzZDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImJwKuCOBACv+RYNp+XP7iwsn qKxZOjuekEvMvIy6l7clzf0NqV0bGvNrBMLGzFYDuHBoY1g9Iqr/Y9b9JEwkBlOR XQ0sg3zJDlO9lSGTgp7a1nJUI06zXTJs4mPP927KudSToaMfBk2KLOH59O2jeb4Y RcF/DcJuDgwoFFO76jtFKZVMMI9b9OcFSkPNVcvTb4URg162XCdD9RUtnvtTuX+C fFhUriCiXtkj7xUkL13b/pEXpwgLoJYGxDy0Ljq3iUPwrvaPQ1J1miJV0LFyDpxu eDuG5eIP9sQxrV71m+Q6OT0zYMDZedTRqHIndjUMWT3I5EwznnYL9G4yUPqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK97kxL9AU2dmgRCjS6k3p5JMbOMwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgZog2bbJHVVTaCxoF/9M02otSYrtk47LpO voEMV3jfkoM8Nz60XWqBHxYULA/jVo2dLa4cd9CrbZLUq8iMg3n09JBTTGV/mJdZ +cgE9T6yHoKoqc9htJlpNatqTVRn0sRmpuGwbDdQwD19PS57sv99OPEe9RfvE0dk jXfusSUiNc7O41N99CrdsfGiEAqcZmZY8NiubPCFsNAuYTJGNrS2ZCJTkomWLmaw Xkha29NRNZCcew+3hHYU8zO+AI7Q9RjGWvn4+CEln4/tZh0ZlVZ4XkB+gKd3WD9i LEZrj0yMEURQwggfONqaQFTQpgNTDqZrHWrl+W1PsQlZUE1EpYQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:01 2026 by rpki-client