$ rpki-client -vvf rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft File: 03B040ED202D246E438A73DEA26426FBECEBB10D.mft (raw, json) Hash identifier: uiqVLv/V+n5DhpxDgRp7PJTOoRVeckbUxolwGu1HQ2M= Subject key identifier: CE:1C:AB:28:E6:58:5B:C4:02:B6:17:C0:A3:95:95:24:61:B2:BC:31 Authority key identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D Certificate issuer: /CN=03B040ED202D246E438A73DEA26426FBECEBB10D Certificate serial: 3A281E1B5718D531423A41AD599D84E8C33C8A79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:49:01 +0000 Manifest this update: Fri 24 Jul 2026 03:44:01 +0000 Manifest next update: Sat 25 Jul 2026 06:29:01 +0000 Files and hashes: 1: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: C5jQrGNmSHPl6nz+o4/GVoDQQPjQAT8dJlkaOBni5mA=) 2: 03B040ED202D246E438A73DEA26426FBECEBB10D.crl (hash: yKy2M0ksOpmexI/QCvUiSuPZDUUBNGCIWWVDOw3K2vI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:28:1e:1b:57:18:d5:31:42:3a:41:ad:59:9d:84:e8:c3:3c:8a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03B040ED202D246E438A73DEA26426FBECEBB10D Validity Not Before: Jul 24 03:44:01 2026 GMT Not After : Jul 25 06:29:01 2026 GMT Subject: CN=CE1CAB28E6585BC402B617C0A395952461B2BC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:94:2f:46:96:b1:c6:85:75:87:5a:56:bb: 4b:6c:f0:f9:97:f1:4c:ff:08:98:ec:39:9b:11:21: 62:84:57:f9:44:d3:b1:1a:a1:82:53:06:21:fd:07: 1d:d4:0d:59:9d:2e:df:ed:7e:93:9a:b8:8e:9e:48: f3:bf:a2:e5:99:b1:ab:21:10:41:b1:1b:5b:c3:bf: 22:17:0c:3f:85:90:57:6c:50:d7:0e:63:28:74:f7: 15:32:09:29:c6:32:27:56:e9:b4:17:5b:40:7b:a4: 51:fc:07:72:38:a5:18:3b:f8:ab:35:13:23:27:ef: d5:49:bb:c1:5b:f4:9d:ee:b4:22:61:ca:a8:db:8d: 9f:d6:76:09:72:73:ac:75:fd:07:db:cb:9d:af:0f: 8d:b0:22:45:e6:e8:04:ca:e9:bc:ba:bc:c3:63:a7: c5:4b:77:04:44:b7:67:aa:a4:13:c4:0c:a7:a6:33: c3:85:db:e0:da:10:a2:92:6e:0a:2d:10:21:0c:68: 72:1c:0c:55:8d:79:85:f5:9b:a9:1e:38:18:47:8c: c2:92:c9:df:b7:c0:81:02:5b:5b:1a:14:5c:97:54: 9f:91:40:0a:16:7d:56:8e:c3:45:29:df:c9:e1:cb: f9:a2:41:97:84:68:89:e2:92:ef:2d:b4:a0:28:fa: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:AB:28:E6:58:5B:C4:02:B6:17:C0:A3:95:95:24:61:B2:BC:31 X509v3 Authority Key Identifier: keyid:03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cb:ca:f9:f5:01:23:e5:54:d5:3b:68:aa:22:fe:f4:02:ec: 07:61:4c:c1:7c:93:5c:91:b8:8a:25:da:ac:91:4d:7a:59:19: 0f:2d:12:96:55:0b:2b:79:52:03:68:92:b1:86:78:ac:52:e1: c7:e0:d5:67:3a:c9:49:63:43:1b:1f:74:a5:a6:6c:32:b9:f6: 67:ad:17:8f:c1:d8:19:19:80:11:13:8e:52:06:01:a5:c7:31: 51:9f:77:bb:81:4e:4e:36:3b:a0:6b:6a:c6:63:f5:1c:f1:a0: ec:4a:34:20:7a:92:d1:46:72:b2:46:46:49:59:2d:fa:5c:a4: ff:22:a1:c6:0d:f1:eb:28:6b:79:c4:13:16:ac:6c:18:33:9b: e2:ea:04:9c:21:29:ce:94:dc:29:3c:72:ee:4c:73:32:50:e4: de:12:75:ac:0b:c2:43:96:26:76:4d:35:b4:de:36:bc:dd:d0: 04:ec:84:c1:9e:d6:e5:76:0d:41:eb:64:25:03:90:8b:e5:f4: 13:8a:c7:0e:4a:25:b3:10:51:0e:ac:f8:30:de:34:d1:7c:e8: 29:27:88:c1:cd:5c:ae:39:1c:a2:f1:f0:47:a8:06:90:60:67: 34:c5:76:21:41:71:50:95:8b:a9:73:cf:07:41:ae:83:e9:f5: 4e:ad:be:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOigeG1cY1TFCOkGtWZ2E6MM8inkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJF Q0VCQjEwRDAeFw0yNjA3MjQwMzQ0MDFaFw0yNjA3MjUwNjI5MDFaMDMxMTAvBgNV BAMTKENFMUNBQjI4RTY1ODVCQzQwMkI2MTdDMEEzOTU5NTI0NjFCMkJDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA05QvRpaxxoV1h1pWu0ts8PmX 8Uz/CJjsOZsRIWKEV/lE07EaoYJTBiH9Bx3UDVmdLt/tfpOauI6eSPO/ouWZsash EEGxG1vDvyIXDD+FkFdsUNcOYyh09xUyCSnGMidW6bQXW0B7pFH8B3I4pRg7+Ks1 EyMn79VJu8Fb9J3utCJhyqjbjZ/Wdglyc6x1/Qfby52vD42wIkXm6ATK6by6vMNj p8VLdwREt2eqpBPEDKemM8OF2+DaEKKSbgotECEMaHIcDFWNeYX1m6keOBhHjMKS yd+3wIECW1saFFyXVJ+RQAoWfVaOw0Up38nhy/miQZeEaIniku8ttKAo+hKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhyrKOZYW8QCthfAo5WVJGGyvDEwHwYDVR0j BBgwFoAUA7BA7SAtJG5DinPeomQm++zrsQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3ZjhmNDQtMjc3ZC00NWUxLWIyMTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQy MDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJFQ0VCQjEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0IwNDBFRDIwMkQyNDZFNDM4QTczREVBMjY0MjZGQkVDRUJC MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2 RkJFQ0VCQjEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/Lyvn1ASPlVNU7aKoi/vQC7AdhTMF8k1yR uIol2qyRTXpZGQ8tEpZVCyt5UgNokrGGeKxS4cfg1Wc6yUljQxsfdKWmbDK59met F4/B2BkZgBETjlIGAaXHMVGfd7uBTk42O6BrasZj9RzxoOxKNCB6ktFGcrJGRklZ LfpcpP8iocYN8esoa3nEExasbBgzm+LqBJwhKc6U3Ck8cu5MczJQ5N4SdawLwkOW JnZNNbTeNrzd0ATshMGe1uV2DUHrZCUDkIvl9BOKxw5KJbMQUQ6s+DDeNNF86Ckn iMHNXK45HKLx8EeoBpBgZzTFdiFBcVCVi6lzzwdBroPp9U6tvhw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:19:35 2026 by rpki-client