$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: xblUvwHwI1cDfWFAfgc1Ud0Sfvy/0wZzxXEiGGsdVBE= Subject key identifier: B7:F3:E4:39:C2:DF:73:8D:E5:26:D9:1E:F9:C0:36:03:45:B8:5A:C9 Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 0242257FB2665936F3D2DA9BF3E74E3D79A327DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:35 +0000 Manifest this update: Thu 23 Jul 2026 17:26:35 +0000 Manifest next update: Fri 24 Jul 2026 19:40:35 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: V34n2GJ2XKIbCrAtukDSR1CXcqL4ANMVqr8GP1iOmYE=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:42:25:7f:b2:66:59:36:f3:d2:da:9b:f3:e7:4e:3d:79:a3:27:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Jul 23 17:26:35 2026 GMT Not After : Jul 24 19:40:35 2026 GMT Subject: CN=B7F3E439C2DF738DE526D91EF9C0360345B85AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:b2:ba:14:16:13:74:3e:29:5e:9d:58:95: 4f:af:2a:9b:02:69:25:d1:96:92:d3:3f:5c:70:6d: 23:02:54:18:55:eb:cd:b0:e4:ab:d4:e2:90:4b:86: 6a:e5:72:41:a0:e4:55:ff:da:7b:67:a0:2e:a0:9f: e5:a4:71:70:d1:d8:ba:23:4d:f9:6c:92:3b:33:9e: 13:02:02:f5:41:b2:33:4a:c7:69:d7:fb:ea:9a:82: 82:19:45:4c:09:4a:14:be:5f:8d:90:46:e5:0c:47: e5:43:78:bf:a2:df:17:f9:1f:37:08:62:46:b5:d9: 4c:e5:10:59:d8:9c:41:1f:60:d7:6a:3e:f4:6f:02: 66:be:41:21:da:31:52:5f:24:a1:a9:4b:83:24:12: 09:23:fa:99:44:fa:ab:e0:e0:95:f2:cf:9d:9f:3c: c5:50:14:51:c0:d9:ac:6b:ce:fe:b0:6c:72:df:45: 92:60:0e:53:89:20:25:10:19:27:97:34:52:f4:f4: b0:4f:1b:32:74:bd:db:0d:8d:19:ca:2d:73:ff:30: 4b:ee:7e:29:47:5a:08:61:a3:5e:19:f3:04:5f:a3: e0:dd:c5:5b:07:bc:07:4e:4c:7f:5d:a0:ab:51:ab: ce:6c:b5:09:41:05:33:2d:0e:da:72:19:c0:88:c3: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F3:E4:39:C2:DF:73:8D:E5:26:D9:1E:F9:C0:36:03:45:B8:5A:C9 X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:f3:48:66:de:75:56:65:f3:39:ce:17:05:a5:f4:f8:f6: 1c:19:80:c4:f2:b6:ee:f8:2c:57:49:ee:a3:0d:25:15:75:c1: b7:36:e6:eb:4a:4a:dd:81:2d:7f:19:86:1d:c8:1f:77:12:fc: ce:5b:5d:ab:73:8c:cb:3c:d0:ec:ba:70:dc:32:25:4b:fb:e8: ab:ed:8e:da:f0:b6:f8:6c:c0:f1:7e:27:05:64:e3:b6:e0:3d: 61:f2:a6:dc:b0:8c:a5:5e:7c:9e:8a:db:1a:ba:80:57:70:41: 2e:b4:fe:3f:a6:dd:12:6d:60:b5:0b:02:88:66:df:8b:d4:a6: 01:ec:00:8d:6f:14:23:71:46:0f:66:c0:43:87:f8:56:63:5b: 11:b5:db:d0:62:cb:e3:43:ba:b1:08:1a:27:35:fd:1b:1a:5d: 30:d2:52:3d:b8:bc:ec:a0:51:73:62:cb:c4:f7:84:f8:41:0a: 78:2c:8d:e6:c9:d5:dd:30:91:f9:fc:3b:9b:86:1e:1c:26:84: 50:3f:82:fa:e1:db:24:e5:03:58:34:b5:a5:05:87:40:bf:b9: d3:5a:af:cb:d7:a6:70:eb:50:b5:29:17:79:4d:e1:80:be:18: fd:b7:3a:c6:41:5e:8a:20:ba:d1:55:25:c8:8d:5f:28:f0:ad: d5:03:eb:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkIlf7JmWTbz0tqb8+dOPXmjJ9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA3MjMxNzI2MzVaFw0yNjA3MjQxOTQwMzVaMDMxMTAvBgNV BAMTKEI3RjNFNDM5QzJERjczOERFNTI2RDkxRUY5QzAzNjAzNDVCODVBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yLK6FBYTdD4pXp1YlU+vKpsC aSXRlpLTP1xwbSMCVBhV682w5KvU4pBLhmrlckGg5FX/2ntnoC6gn+WkcXDR2Loj TflskjsznhMCAvVBsjNKx2nX++qagoIZRUwJShS+X42QRuUMR+VDeL+i3xf5HzcI Yka12UzlEFnYnEEfYNdqPvRvAma+QSHaMVJfJKGpS4MkEgkj+plE+qvg4JXyz52f PMVQFFHA2axrzv6wbHLfRZJgDlOJICUQGSeXNFL09LBPGzJ0vdsNjRnKLXP/MEvu filHWghho14Z8wRfo+DdxVsHvAdOTH9doKtRq85stQlBBTMtDtpyGcCIw/ftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/PkOcLfc43lJtke+cA2A0W4WskwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfy80hm3nVWZfM5zhcFpfT49hwZgMTytu74 LFdJ7qMNJRV1wbc25utKSt2BLX8Zhh3IH3cS/M5bXatzjMs80Oy6cNwyJUv76Kvt jtrwtvhswPF+JwVk47bgPWHyptywjKVefJ6K2xq6gFdwQS60/j+m3RJtYLULAohm 34vUpgHsAI1vFCNxRg9mwEOH+FZjWxG129Biy+NDurEIGic1/RsaXTDSUj24vOyg UXNiy8T3hPhBCngsjebJ1d0wkfn8O5uGHhwmhFA/gvrh2yTlA1g0taUFh0C/udNa r8vXpnDrULUpF3lN4YC+GP23OsZBXoogutFVJciNXyjwrdUD6y8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:18:18 2026 by rpki-client