$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: HZBq9pWb9oa6oPAHRqqapZi42Qsl6szP+R8MIIilk5U= Subject key identifier: A2:5E:E7:8B:7A:6A:ED:12:05:3F:42:EE:E3:56:33:1C:CC:C0:9C:6A Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 3A70BC100724B9095C5E7E9A11CF29A8BBB2844A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:38:47 +0000 Manifest this update: Fri 24 Jul 2026 07:33:47 +0000 Manifest next update: Sat 25 Jul 2026 10:38:47 +0000 Files and hashes: 1: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: 9BWuMA9cYeFzqD0tEy4U7HKtM20xWJf+nIPMAw8H05g=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:70:bc:10:07:24:b9:09:5c:5e:7e:9a:11:cf:29:a8:bb:b2:84:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Jul 24 07:33:47 2026 GMT Not After : Jul 25 10:38:47 2026 GMT Subject: CN=A25EE78B7A6AED12053F42EEE356331CCCC09C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:10:d3:be:6a:2d:62:dd:4d:c3:06:7b:85: 1c:57:c2:df:ec:a6:51:29:6b:50:84:da:af:21:50: f8:e8:a5:87:1e:31:36:26:72:9c:d8:28:b7:b4:0f: fd:f4:2e:a2:b8:cf:cd:74:36:1b:06:47:e2:6a:cf: 50:31:d2:c8:23:f5:1d:15:b5:b4:b4:2a:29:fe:09: 60:dc:3c:ae:86:b2:bc:7c:ac:b3:a1:67:f5:1a:aa: cf:e0:5c:55:06:28:59:92:46:5b:15:e0:97:bf:92: 2d:2a:be:09:0e:c4:ef:4d:13:b6:ee:62:ea:b9:9f: 98:e5:2b:6e:d4:42:96:b6:ba:e3:d9:d5:0b:c3:ef: 5a:54:36:29:14:41:0d:8e:bb:51:5f:21:ca:d2:ca: 85:81:f6:cf:f2:0a:62:c3:f9:a3:48:58:41:e9:5e: fb:3f:61:ec:38:e0:78:23:7f:83:16:15:e2:7b:fc: 90:f5:bf:c8:b8:e6:ce:0e:45:a8:4c:cf:7b:8d:29: b1:f2:08:10:cf:a9:45:aa:0d:30:23:17:ec:30:47: 17:26:bf:c3:b1:99:f2:0d:d2:ea:4c:b0:40:e2:2b: 54:39:e6:fb:58:5f:4c:ce:4a:98:62:1b:61:2d:4d: c7:11:98:36:48:30:e9:a5:eb:0d:1f:ed:4f:0f:54: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:E7:8B:7A:6A:ED:12:05:3F:42:EE:E3:56:33:1C:CC:C0:9C:6A X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2d:66:a5:31:75:b0:c4:95:94:2a:94:7d:88:ed:33:1d:51: 3d:ce:6e:67:1e:6d:5a:4e:4d:7e:c3:4b:d0:3d:68:08:36:bd: 38:8d:d6:b3:0c:9b:3c:38:fa:a6:af:b6:5e:04:d8:af:8b:a9: 58:52:3b:66:06:c6:52:f2:83:61:2f:29:c2:62:4e:28:d0:21: 52:c5:52:57:42:df:37:7f:5f:2d:72:dd:5d:46:6e:c3:bf:f3: b3:be:85:f4:ba:52:25:c9:58:04:91:5a:d0:d8:47:bb:0c:95: 67:33:5c:aa:63:c5:fb:d6:9a:bb:e6:d5:24:73:f2:e2:0a:48: d4:43:01:70:88:6c:7c:70:a6:dd:04:88:2c:ea:42:96:a5:14: 70:49:08:da:14:87:f4:56:82:3c:fd:cb:20:ab:de:a1:5b:4c: 3c:7c:9e:2b:b3:97:90:b4:67:c3:2f:20:55:c8:9e:cd:b8:f7: c9:7d:7f:82:c7:ea:d3:28:d0:69:39:83:60:23:e0:46:d8:75: fb:d2:19:69:4b:9a:d8:35:56:1a:f7:f1:0d:62:d9:96:55:c5: 7e:b3:d5:db:3f:fe:e9:67:10:fd:cf:06:3c:6f:0b:2e:c3:7a: f7:17:a3:46:56:5b:e9:bc:ac:49:a6:81:9e:86:bc:cf:80:e1: 9e:22:6a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnC8EAckuQlcXn6aEc8pqLuyhEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA3MjQwNzMzNDdaFw0yNjA3MjUxMDM4NDdaMDMxMTAvBgNV BAMTKEEyNUVFNzhCN0E2QUVEMTIwNTNGNDJFRUUzNTYzMzFDQ0NDMDlDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDixDTvmotYt1NwwZ7hRxXwt/s plEpa1CE2q8hUPjopYceMTYmcpzYKLe0D/30LqK4z810NhsGR+Jqz1Ax0sgj9R0V tbS0Kin+CWDcPK6Gsrx8rLOhZ/Uaqs/gXFUGKFmSRlsV4Je/ki0qvgkOxO9NE7bu Yuq5n5jlK27UQpa2uuPZ1QvD71pUNikUQQ2Ou1FfIcrSyoWB9s/yCmLD+aNIWEHp Xvs/Yew44Hgjf4MWFeJ7/JD1v8i45s4ORahMz3uNKbHyCBDPqUWqDTAjF+wwRxcm v8OxmfIN0upMsEDiK1Q55vtYX0zOSphiG2EtTccRmDZIMOml6w0f7U8PVK9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUol7ni3pq7RIFP0Lu41YzHMzAnGowHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABItZqUxdbDElZQqlH2I7TMdUT3ObmcebVpO TX7DS9A9aAg2vTiN1rMMmzw4+qavtl4E2K+LqVhSO2YGxlLyg2EvKcJiTijQIVLF UldC3zd/Xy1y3V1GbsO/87O+hfS6UiXJWASRWtDYR7sMlWczXKpjxfvWmrvm1SRz 8uIKSNRDAXCIbHxwpt0EiCzqQpalFHBJCNoUh/RWgjz9yyCr3qFbTDx8niuzl5C0 Z8MvIFXIns2498l9f4LH6tMo0Gk5g2Aj4EbYdfvSGWlLmtg1Vhr38Q1i2ZZVxX6z 1ds//ulnEP3PBjxvCy7DevcXo0ZWW+m8rEmmgZ6GvM+A4Z4iaqw= -----END CERTIFICATE-----Generated at Fri Jul 24 13:04:34 2026 by rpki-client