$ rpki-client -vvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: goUBQjb56SYI/9vlN1dxGkTRLsu6PBr6j+XsNmdorV0= Subject key identifier: 9D:20:48:3A:CA:8B:E2:71:B4:5C:7C:09:AE:76:AA:A4:78:45:B9:7D Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 454719B8ED33D5789621A0EEDB3B1A3CB68691BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:07:13 +0000 Manifest this update: Thu 23 Jul 2026 18:02:13 +0000 Manifest next update: Fri 24 Jul 2026 19:35:13 +0000 Files and hashes: 1: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: O+Vc8WNopmvJhy3ObABkqAYWJ3hygbo+G5bcmUVkzaU=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:47:19:b8:ed:33:d5:78:96:21:a0:ee:db:3b:1a:3c:b6:86:91:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Jul 23 18:02:13 2026 GMT Not After : Jul 24 19:35:13 2026 GMT Subject: CN=9D20483ACA8BE271B45C7C09AE76AAA47845B97D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:9b:d2:10:21:f7:9c:f6:03:39:9c:7a:3e: e9:7a:26:d0:21:a2:7a:a8:28:5e:2c:a6:0c:f2:b5: 02:52:bb:89:ef:07:7f:75:22:df:5d:2e:d1:c1:48: 3d:9e:45:b3:d8:f3:f7:f3:2a:c9:98:5d:5c:35:1c: ae:2e:6c:a1:98:27:4e:1a:cd:32:d7:78:2a:53:a1: 32:ec:d2:23:a8:fb:fe:32:09:ad:ad:13:cd:4c:41: 1b:23:5c:52:27:cc:bd:aa:48:79:95:07:12:ba:90: a5:3b:b8:8b:02:a8:b4:37:7e:c2:5e:e0:04:f1:6d: d0:b3:1f:6a:ce:5f:ba:6d:68:27:04:eb:4f:be:99: 31:ab:e4:a2:e0:68:8b:a7:b5:23:24:b6:cc:35:e9: 40:8d:1a:fe:89:15:bc:65:81:40:06:04:f9:4d:fe: 6d:7f:db:b3:19:a7:a0:2a:c4:b6:67:ca:0b:0e:af: 3f:2c:86:36:aa:ed:16:bb:a4:da:b6:ec:20:ed:2b: 14:ce:86:0d:fd:64:da:ab:79:29:20:99:db:c5:49: 1e:9b:af:61:fe:c9:34:b8:3c:bc:be:d8:1b:5f:56: 4e:c0:5a:98:21:e9:8f:ff:4d:14:3f:a4:d9:08:df: 22:72:f3:f8:56:7c:31:d8:03:a5:a5:7a:9c:bd:bc: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:48:3A:CA:8B:E2:71:B4:5C:7C:09:AE:76:AA:A4:78:45:B9:7D X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:56:12:4d:05:51:77:7d:a2:94:e8:f9:c4:70:8d:7a:0e:37: d6:5d:6d:be:c4:85:3b:47:79:ef:20:5a:24:40:ab:47:4a:5b: ca:29:6e:e6:b5:5b:4f:45:2a:8d:0e:58:4f:99:0b:29:90:74: 8e:0a:ae:d6:c4:de:2b:1f:44:88:4c:18:99:3e:c4:fc:f1:c2: a8:d0:6d:91:ca:24:5b:e6:b1:e8:e7:1e:88:c3:fa:b4:bb:51: cb:06:9a:13:8e:1f:ba:86:f0:79:8a:d6:24:30:74:16:2e:bc: 7f:45:75:d7:51:f1:45:e5:93:44:3e:c8:6a:57:ae:18:90:44: 78:90:94:d8:29:4d:4e:2c:62:10:2f:fe:c7:ed:f2:2d:12:fc: ce:24:5e:01:a0:b8:8b:0c:85:c7:1e:c1:d1:95:35:a0:67:f9: e2:c8:db:08:44:c6:38:6e:76:8b:e3:78:b3:a2:8e:b1:4e:98: b2:6b:02:be:d6:f5:9e:d9:b2:ba:12:3f:69:99:59:cd:4d:b6: 05:6e:87:56:75:da:64:12:bd:e4:5c:28:09:0b:83:66:e2:7d: ff:ef:05:44:3e:3c:e6:b9:40:84:a6:1b:18:c4:eb:8b:c4:e2: 48:8a:05:c7:f8:de:c0:26:91:49:09:c0:98:c8:62:84:48:d4: 92:7d:dd:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUcZuO0z1XiWIaDu2zsaPLaGkb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA3MjMxODAyMTNaFw0yNjA3MjQxOTM1MTNaMDMxMTAvBgNV BAMTKDlEMjA0ODNBQ0E4QkUyNzFCNDVDN0MwOUFFNzZBQUE0Nzg0NUI5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcf5vSECH3nPYDOZx6Pul6JtAh onqoKF4spgzytQJSu4nvB391It9dLtHBSD2eRbPY8/fzKsmYXVw1HK4ubKGYJ04a zTLXeCpToTLs0iOo+/4yCa2tE81MQRsjXFInzL2qSHmVBxK6kKU7uIsCqLQ3fsJe 4ATxbdCzH2rOX7ptaCcE60++mTGr5KLgaIuntSMktsw16UCNGv6JFbxlgUAGBPlN /m1/27MZp6AqxLZnygsOrz8shjaq7Ra7pNq27CDtKxTOhg39ZNqreSkgmdvFSR6b r2H+yTS4PLy+2BtfVk7AWpgh6Y//TRQ/pNkI3yJy8/hWfDHYA6Wlepy9vL2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnSBIOsqL4nG0XHwJrnaqpHhFuX0wHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJWEk0FUXd9opTo+cRwjXoON9Zdbb7EhTtH ee8gWiRAq0dKW8opbua1W09FKo0OWE+ZCymQdI4KrtbE3isfRIhMGJk+xPzxwqjQ bZHKJFvmsejnHojD+rS7UcsGmhOOH7qG8HmK1iQwdBYuvH9FdddR8UXlk0Q+yGpX rhiQRHiQlNgpTU4sYhAv/sft8i0S/M4kXgGguIsMhccewdGVNaBn+eLI2whExjhu dovjeLOijrFOmLJrAr7W9Z7ZsroSP2mZWc1NtgVuh1Z12mQSveRcKAkLg2biff/v BUQ+POa5QISmGxjE64vE4kiKBcf43sAmkUkJwJjIYoRI1JJ93Vs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:03:58 2026 by rpki-client