$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft File: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft (raw, json) Hash identifier: IZy3pdYcitw2BOxFxcUmWR9F8Wl5j0E1XsJBl8FCHao= Subject key identifier: 35:3E:5F:AA:B9:38:BB:19:CB:C4:19:68:E2:E6:28:FA:BB:62:24:67 Authority key identifier: 3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 Certificate issuer: /CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Certificate serial: 66B4116B068581CF7AA5F3443FF30C2870FA93EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 19:59:33 +0000 Manifest this update: Thu 23 Jul 2026 19:54:33 +0000 Manifest next update: Fri 24 Jul 2026 23:09:33 +0000 Files and hashes: 1: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl (hash: v/oTzww3jgJRYNfxzt06vid0L1xmVnYH3Myf/R7UMXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b4:11:6b:06:85:81:cf:7a:a5:f3:44:3f:f3:0c:28:70:fa:93:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Validity Not Before: Jul 23 19:54:33 2026 GMT Not After : Jul 24 23:09:33 2026 GMT Subject: CN=353E5FAAB938BB19CBC41968E2E628FABB622467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:43:09:9f:e5:99:a7:55:cf:a0:6a:00:5b: f1:34:96:d5:f6:84:ce:27:42:ff:d6:97:af:49:3b: b4:e9:39:1e:3d:f1:fe:63:dc:9d:4d:ca:2e:95:6e: dc:3f:14:59:0d:90:2d:5f:b6:e7:96:d3:07:bb:3c: 2e:0b:5c:dc:dd:03:e3:bb:bd:1c:cf:7e:3e:cc:f7: fb:41:7d:43:87:b9:2b:26:62:6b:fe:33:d6:45:6b: 53:a7:c9:cb:93:23:dd:b8:c6:76:2b:eb:a0:fe:ad: 59:37:82:4e:d7:22:64:69:e9:90:73:68:09:3c:a8: 84:d9:67:94:8e:44:b8:7c:8c:e4:1e:2c:eb:71:82: fb:7e:62:17:aa:79:c3:fd:e8:23:0f:6f:01:de:0c: 56:17:a5:66:d5:ae:96:5a:de:22:08:31:62:a6:83: 3b:c8:a1:a9:33:8c:39:4d:75:9a:74:23:54:7c:b6: 2b:2c:7c:4d:c1:c9:a5:50:4a:78:a6:40:b6:2f:09: c1:56:ec:07:d5:f8:86:25:b7:16:cd:43:89:a2:32: 8f:af:e0:56:c1:e2:de:ea:c7:17:1a:f0:ec:d5:d6: ce:d3:7c:2e:9a:49:65:6d:12:2f:34:0f:c8:8a:a2: 65:b4:e8:a6:a9:31:ca:c8:6c:78:7d:9b:86:91:ea: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3E:5F:AA:B9:38:BB:19:CB:C4:19:68:E2:E6:28:FA:BB:62:24:67 X509v3 Authority Key Identifier: keyid:3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:81:9e:a8:5d:79:1e:67:59:56:ae:b6:37:14:8e:10:1d: 1a:5e:a2:62:38:15:05:71:86:52:5c:cd:4f:08:fe:9e:cc:88: f5:25:9c:60:f4:42:6d:57:24:7d:87:b0:2a:97:97:f6:17:a6: 8c:87:16:83:95:a8:c7:69:d2:85:af:e2:05:d9:cd:fc:5f:98: 21:b6:f3:d2:db:35:30:c5:1a:ff:2b:86:5c:39:27:a0:6e:32: 4f:0c:22:37:14:09:f9:65:3c:a5:36:0f:8f:12:a2:e2:1c:c4: 7b:06:f3:41:a6:51:f5:51:9f:9b:d8:05:ae:d4:d9:96:1c:4e: 29:40:f8:cf:2a:1b:2d:30:54:57:c6:65:82:5e:89:5e:24:94: 77:66:5f:72:74:ff:8b:05:5f:47:6e:61:e3:b7:da:24:e9:ed: 19:20:29:4b:94:47:e4:61:be:34:ed:48:8d:f6:d0:f1:af:40: 77:24:3e:5b:70:85:5f:a8:82:6f:43:0c:95:a7:69:9e:85:9a: 72:e9:e9:ff:13:f0:39:ad:fb:1d:d3:0b:f2:6c:f3:df:2f:b3: 14:db:8b:eb:c4:c6:02:37:1d:72:d6:4d:99:0e:25:74:2e:c9: ac:f0:ea:c1:a4:25:2d:bc:cf:ae:9f:13:4d:10:9b:10:bf:29: 28:e0:4d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrQRawaFgc96pfNEP/MMKHD6k+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0 NjFFQjlCNTAeFw0yNjA3MjMxOTU0MzNaFw0yNjA3MjQyMzA5MzNaMDMxMTAvBgNV BAMTKDM1M0U1RkFBQjkzOEJCMTlDQkM0MTk2OEUyRTYyOEZBQkI2MjI0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdkMJn+WZp1XPoGoAW/E0ltX2 hM4nQv/Wl69JO7TpOR498f5j3J1Nyi6Vbtw/FFkNkC1ftueW0we7PC4LXNzdA+O7 vRzPfj7M9/tBfUOHuSsmYmv+M9ZFa1OnycuTI924xnYr66D+rVk3gk7XImRp6ZBz aAk8qITZZ5SORLh8jOQeLOtxgvt+YheqecP96CMPbwHeDFYXpWbVrpZa3iIIMWKm gzvIoakzjDlNdZp0I1R8tissfE3ByaVQSnimQLYvCcFW7AfV+IYltxbNQ4miMo+v 4FbB4t7qxxca8OzV1s7TfC6aSWVtEi80D8iKomW06KapMcrIbHh9m4aR6rplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNT5fqrk4uxnLxBlo4uYo+rtiJGcwHwYDVR0j BBgwFoAUOnIM3Qni+XqRK5t98sM1KUYeubUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJhYzYxOWItMjFlNi00MWQ2LThlOTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQw OUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0NjFFQjlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTcyMENERDA5RTJGOTdBOTEyQjlCN0RGMkMzMzUyOTQ2MUVC OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1 Mjk0NjFFQjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4DgZ6oXXkeZ1lWrrY3FI4QHRpeomI4FQVx hlJczU8I/p7MiPUlnGD0Qm1XJH2HsCqXl/YXpoyHFoOVqMdp0oWv4gXZzfxfmCG2 89LbNTDFGv8rhlw5J6BuMk8MIjcUCfllPKU2D48SouIcxHsG80GmUfVRn5vYBa7U 2ZYcTilA+M8qGy0wVFfGZYJeiV4klHdmX3J0/4sFX0duYeO32iTp7RkgKUuUR+Rh vjTtSI320PGvQHckPltwhV+ogm9DDJWnaZ6FmnLp6f8T8Dmt+x3TC/Js898vsxTb i+vExgI3HXLWTZkOJXQuyazw6sGkJS28z66fE00QmxC/KSjgTSo= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:20 2026 by rpki-client