$ rpki-client -vvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: hwCJFZidvQnPvgtluOJzIWvqylP33J/IQnr5Bzn9e/Y= Subject key identifier: 4C:77:F8:E7:8F:94:D7:0A:60:57:03:91:1D:87:8C:F6:2B:6F:21:41 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 2F0E737C791934B49ED125DE722212B9506BFB96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:25:19 +0000 Manifest this update: Thu 23 Jul 2026 12:20:19 +0000 Manifest next update: Fri 24 Jul 2026 16:18:19 +0000 Files and hashes: 1: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: ApSRlt6xFU1v27hjHhE5XKxwY5Ml1J1fMDCXirBWNuM=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0e:73:7c:79:19:34:b4:9e:d1:25:de:72:22:12:b9:50:6b:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Jul 23 12:20:19 2026 GMT Not After : Jul 24 16:18:19 2026 GMT Subject: CN=4C77F8E78F94D70A605703911D878CF62B6F2141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:4b:37:57:16:b6:e6:60:22:24:32:2d:83: 67:10:b8:67:a2:97:df:52:2a:f4:6b:fe:04:f9:3e: e2:9a:18:af:ee:cb:45:4d:bf:e3:d7:ec:5f:d5:21: 97:20:0d:36:45:e6:46:8b:b8:09:49:ba:04:3e:55: 59:2b:ac:cb:e0:e9:1a:51:a4:25:77:e8:27:b3:7c: f5:cb:10:c9:ef:28:83:3f:00:79:c6:0a:91:72:8b: 7b:bb:a3:5e:55:1f:62:49:40:0a:b2:dc:08:2d:41: 4f:ab:74:af:35:ab:4a:19:2c:39:e0:14:ae:41:0a: 3a:b7:20:4d:5d:9f:cf:b7:53:38:fb:ef:a7:7e:02: ec:56:72:48:91:d4:55:04:24:5e:41:84:dc:42:af: 73:27:0a:d1:ea:b4:4b:e0:b3:5f:e8:a0:90:8b:45: 10:ef:a1:ca:cc:fa:03:80:93:3a:25:2c:4f:57:be: 58:65:22:1b:d1:a8:9f:96:41:07:87:64:0e:bd:43: ac:a7:0f:0c:30:ef:36:cd:a8:aa:e6:18:cc:66:02: 15:41:93:d3:59:85:b3:98:42:8c:c7:fe:6a:2e:cf: d5:8a:9e:7f:fe:4d:76:cd:72:ff:63:aa:8e:06:dc: 2b:64:60:4e:81:2f:3e:1e:d9:43:f7:e2:42:d9:d0: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:77:F8:E7:8F:94:D7:0A:60:57:03:91:1D:87:8C:F6:2B:6F:21:41 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c7:86:d7:9f:20:29:a4:6e:a6:5c:54:10:61:9c:0a:62:b9: 79:1d:2a:5f:b8:db:b5:50:70:2f:6a:10:25:64:d6:c5:74:2e: ea:0e:b5:45:2f:b6:34:b9:5a:8d:c8:a0:6e:7b:76:c4:23:a0: 1d:60:2e:46:76:4c:e4:9b:b0:8c:e0:eb:46:0a:cd:87:6d:5b: 3f:9a:a0:01:a6:7a:b1:c5:9d:c0:ec:38:38:02:c8:db:13:7d: 25:92:a9:8b:30:16:aa:ba:1d:21:19:93:6f:95:ce:3f:34:bc: 55:cc:ad:00:c4:7e:48:f0:af:b2:16:52:6e:ce:7d:eb:f2:35: 94:2f:b4:12:6b:c5:f2:35:62:5f:b2:9e:71:7a:c5:1e:15:9c: 74:2f:34:ac:41:19:c5:3c:94:b3:cb:72:67:b4:aa:e5:64:f8: 01:66:41:56:fd:33:6b:d1:0a:4b:88:9c:08:84:06:43:46:b7: df:0d:9a:c2:e4:d9:1d:a7:25:f3:70:47:13:70:34:f7:fa:52: ca:13:56:75:4b:06:cd:0a:be:28:85:da:62:6b:da:4c:01:29: a7:90:ba:dc:7d:dd:76:e2:32:97:fd:e3:7d:30:c8:d3:08:b6: 57:af:d9:24:b8:56:e6:1c:66:17:eb:55:fb:7e:a1:2f:af:75: 2a:b1:e5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULw5zfHkZNLSe0SXeciISuVBr+5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA3MjMxMjIwMTlaFw0yNjA3MjQxNjE4MTlaMDMxMTAvBgNV BAMTKDRDNzdGOEU3OEY5NEQ3MEE2MDU3MDM5MTFEODc4Q0Y2MkI2RjIxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqks3Vxa25mAiJDItg2cQuGei l99SKvRr/gT5PuKaGK/uy0VNv+PX7F/VIZcgDTZF5kaLuAlJugQ+VVkrrMvg6RpR pCV36CezfPXLEMnvKIM/AHnGCpFyi3u7o15VH2JJQAqy3AgtQU+rdK81q0oZLDng FK5BCjq3IE1dn8+3Uzj776d+AuxWckiR1FUEJF5BhNxCr3MnCtHqtEvgs1/ooJCL RRDvocrM+gOAkzolLE9XvlhlIhvRqJ+WQQeHZA69Q6ynDwww7zbNqKrmGMxmAhVB k9NZhbOYQozH/mouz9WKnn/+TXbNcv9jqo4G3CtkYE6BLz4e2UP34kLZ0DFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTHf454+U1wpgVwORHYeM9itvIUEwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPHhtefICmkbqZcVBBhnApiuXkdKl+427VQ cC9qECVk1sV0LuoOtUUvtjS5Wo3IoG57dsQjoB1gLkZ2TOSbsIzg60YKzYdtWz+a oAGmerHFncDsODgCyNsTfSWSqYswFqq6HSEZk2+Vzj80vFXMrQDEfkjwr7IWUm7O fevyNZQvtBJrxfI1Yl+ynnF6xR4VnHQvNKxBGcU8lLPLcme0quVk+AFmQVb9M2vR CkuInAiEBkNGt98NmsLk2R2nJfNwRxNwNPf6UsoTVnVLBs0KviiF2mJr2kwBKaeQ utx93XbiMpf9430wyNMItlev2SS4VuYcZhfrVft+oS+vdSqx5U4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:14:52 2026 by rpki-client