$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: pnqXIhszwEII/XDVtEpZqU65qr79OtW8M0WjP2UBfwc= Subject key identifier: B2:39:2A:15:1B:44:DC:54:C3:9A:4F:6F:CE:66:4F:03:4E:FD:A0:73 Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 15208E1D078BCB9C06925FDCDBC71371A122DAB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 21:41:26 +0000 Manifest this update: Thu 23 Jul 2026 21:36:26 +0000 Manifest next update: Fri 24 Jul 2026 22:50:26 +0000 Files and hashes: 1: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: P5JztKh7iar7WzoI8vBFG4duyK9vZa3EwHM27/D7asI=) 2: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:8e:1d:07:8b:cb:9c:06:92:5f:dc:db:c7:13:71:a1:22:da:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Jul 23 21:36:26 2026 GMT Not After : Jul 24 22:50:26 2026 GMT Subject: CN=B2392A151B44DC54C39A4F6FCE664F034EFDA073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:89:c8:79:b0:04:ab:7e:45:76:fd:5b:12: 3e:d5:fa:e0:3e:d4:60:e6:85:0b:dc:25:05:9c:50: 47:69:1d:60:4f:93:32:45:78:56:0d:83:fa:ac:28: 2a:4a:c2:f7:94:9d:98:6e:4f:65:53:ff:af:71:05: 15:2a:72:e4:1e:4a:b7:c0:dc:67:62:97:d4:07:b4: 3d:86:2f:f4:8c:8a:38:33:69:af:6a:89:cc:8a:cf: f8:4d:78:14:e6:ce:76:c9:55:a2:73:b5:bc:7a:ca: e5:fb:6b:36:20:f1:bf:a7:2f:bf:ff:93:1f:50:2c: 7b:1f:9f:e6:7b:28:83:8c:29:86:f1:4c:af:ac:7a: 84:4f:dd:fc:d1:97:9c:b5:7e:69:6e:c3:5c:9a:4b: 62:54:c0:28:2d:07:55:0b:94:ef:51:20:7a:d3:69: b8:77:93:45:8b:81:40:13:cb:a0:d0:1b:c5:34:92: 9b:f2:c4:8a:02:59:32:a9:d3:d2:44:04:1b:89:63: fa:c3:e1:f9:d3:61:f3:8a:7c:23:c8:a6:a8:51:6e: 3b:92:1f:90:af:1a:97:a8:e3:6b:ce:4c:5d:0a:26: 0e:8c:72:fc:4b:61:bf:b4:2c:6d:68:73:e3:01:88: 49:4e:e5:ff:f8:ad:68:7b:59:d6:e8:de:11:92:a1: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:39:2A:15:1B:44:DC:54:C3:9A:4F:6F:CE:66:4F:03:4E:FD:A0:73 X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:97:96:41:a5:1f:17:6f:7a:e6:18:67:60:44:dc:7d:c7: 7a:bc:01:5c:fb:14:43:c3:fc:bf:45:5e:fe:3b:40:c3:35:be: 72:da:e0:ed:40:0f:fb:ec:6d:85:24:a3:f7:4a:40:1c:98:87: a9:e5:dd:db:91:4d:84:6d:19:43:79:0a:fd:53:9a:bd:2b:04: b3:88:78:5a:a8:1f:54:06:f3:d3:14:e8:3c:11:72:a8:f6:e3: 44:4d:d0:3c:1f:18:84:4b:b7:a9:0e:05:cf:e9:03:bb:ed:2c: f0:8d:0a:ef:37:41:04:3e:3a:7e:32:85:b1:db:6f:5e:5b:46: 85:cf:1d:28:13:a4:de:df:cc:07:d5:de:3e:33:57:eb:83:d4: 7f:7f:77:d6:85:86:f1:8c:35:04:f4:37:af:b1:89:1e:b4:76: f9:c7:c3:96:2c:aa:8b:14:29:6f:b4:46:36:14:08:3d:6e:51: e3:31:d5:b2:e2:6f:01:40:87:f1:06:23:25:cb:68:17:9f:40: 56:95:74:07:d9:f4:c1:8e:7a:62:e4:99:89:df:1c:d0:b6:86: 48:93:0c:e2:e7:33:95:70:8e:0e:3a:2a:8b:67:27:fc:58:9d: 5f:c2:ad:8a:6e:32:18:1a:8c:1a:71:17:73:57:d2:8c:18:10: 2c:d0:69:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSCOHQeLy5wGkl/c28cTcaEi2rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA3MjMyMTM2MjZaFw0yNjA3MjQyMjUwMjZaMDMxMTAvBgNV BAMTKEIyMzkyQTE1MUI0NERDNTRDMzlBNEY2RkNFNjY0RjAzNEVGREEwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjh4nIebAEq35Fdv1bEj7V+uA+ 1GDmhQvcJQWcUEdpHWBPkzJFeFYNg/qsKCpKwveUnZhuT2VT/69xBRUqcuQeSrfA 3Gdil9QHtD2GL/SMijgzaa9qicyKz/hNeBTmznbJVaJztbx6yuX7azYg8b+nL7// kx9QLHsfn+Z7KIOMKYbxTK+seoRP3fzRl5y1fmluw1yaS2JUwCgtB1ULlO9RIHrT abh3k0WLgUATy6DQG8U0kpvyxIoCWTKp09JEBBuJY/rD4fnTYfOKfCPIpqhRbjuS H5CvGpeo42vOTF0KJg6McvxLYb+0LG1oc+MBiElO5f/4rWh7Wdbo3hGSoYYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjkqFRtE3FTDmk9vzmZPA079oHMwHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw3l5ZBpR8Xb3rmGGdgRNx9x3q8AVz7FEPD /L9FXv47QMM1vnLa4O1AD/vsbYUko/dKQByYh6nl3duRTYRtGUN5Cv1Tmr0rBLOI eFqoH1QG89MU6DwRcqj240RN0DwfGIRLt6kOBc/pA7vtLPCNCu83QQQ+On4yhbHb b15bRoXPHSgTpN7fzAfV3j4zV+uD1H9/d9aFhvGMNQT0N6+xiR60dvnHw5YsqosU KW+0RjYUCD1uUeMx1bLibwFAh/EGIyXLaBefQFaVdAfZ9MGOemLkmYnfHNC2hkiT DOLnM5Vwjg46KotnJ/xYnV/CrYpuMhgajBpxF3NX0owYECzQaak= -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:09 2026 by rpki-client