$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: yRgWaaMdcZ+H4fDU1/+TukX41rP/sKHhbPfa5tHLxZI= Subject key identifier: 9F:11:D1:FE:31:E0:39:99:78:57:0D:9A:FB:65:CD:5C:DF:C6:E1:94 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 57703D99D6B3AE3B40DC9891EBDABC1C09E70EB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 07:44:00 +0000 Manifest this update: Fri 24 Jul 2026 07:39:00 +0000 Manifest next update: Sat 25 Jul 2026 08:35:00 +0000 Files and hashes: 1: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 2: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 3: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) 4: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: 6aZXj2G1PVHM9x7yqOlznlZW/ITb/HQs5kPhKVPpaD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:70:3d:99:d6:b3:ae:3b:40:dc:98:91:eb:da:bc:1c:09:e7:0e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Jul 24 07:39:00 2026 GMT Not After : Jul 25 08:35:00 2026 GMT Subject: CN=9F11D1FE31E0399978570D9AFB65CD5CDFC6E194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:36:cb:7c:fb:33:aa:e2:c5:64:60:35:12:eb: 58:6c:e7:10:43:a5:17:b8:6f:99:1a:1f:a5:4c:df: 6a:8f:b0:47:88:f2:b1:d4:fa:c5:d2:8b:6a:1f:f7: f6:38:6c:1d:7d:3e:e4:70:ba:de:3a:9e:58:a2:0e: b6:9e:a6:31:e8:73:e8:05:49:28:cf:43:14:01:51: 28:6c:12:42:49:cd:41:b6:40:0c:5a:d8:16:16:f5: dc:42:78:3d:9b:ec:a7:c3:56:98:8f:94:7d:84:db: f7:fe:af:0d:ff:e3:be:fc:ca:ff:56:51:1e:30:a0: cc:73:37:67:b6:53:b0:76:97:1b:2d:88:66:88:7d: ef:fa:be:fd:55:49:ec:b2:a9:a3:97:10:e1:16:15: 69:c6:ac:25:6a:22:69:ad:15:c5:e8:0e:b7:db:0e: 57:f0:f0:63:21:24:a3:32:b3:92:6f:d2:55:d7:d1: a6:ac:50:81:f8:d8:a5:f2:cc:d1:2e:e7:1a:19:75: c8:3b:32:6c:69:a7:67:0b:aa:06:a7:9a:37:25:c7: b6:3b:48:d3:55:40:a5:16:e7:63:30:59:29:17:e0: cf:f2:7d:5d:06:f0:cb:0b:05:15:78:ad:ad:59:6a: ba:ab:b9:99:23:f7:b7:15:27:9b:9e:9c:d5:aa:38: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:D1:FE:31:E0:39:99:78:57:0D:9A:FB:65:CD:5C:DF:C6:E1:94 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bb:20:4c:db:ff:4e:ee:69:30:86:7c:e1:ef:dd:78:c7:80: 0d:10:2b:b3:08:a6:ac:f4:a1:2f:f9:48:32:59:3c:16:9c:14: 08:c4:0f:0f:cb:f4:17:4e:c2:51:4f:84:30:1d:c0:3a:75:f7: d9:fd:bb:19:14:ad:93:5c:5c:58:3c:fe:5a:0e:af:7a:a3:43: 83:5d:f8:9b:56:82:89:10:ca:44:38:16:d7:c2:0c:bb:9b:47: 25:ca:b5:ac:eb:4e:29:39:a5:27:95:51:c8:80:1b:90:17:dd: a5:6b:db:91:41:c4:24:d8:ee:9d:3e:4e:8f:de:09:be:6d:7f: 17:27:ce:81:91:84:52:53:9c:c3:c3:74:a2:1e:3b:b2:59:b2: 92:92:a9:d2:4c:d9:0a:b6:01:ad:3f:09:46:2b:23:67:b5:4e: b0:ee:bb:d5:67:3a:f9:f7:fd:75:0e:66:c5:aa:e0:e0:93:ed: 84:f1:c6:71:20:7a:5e:e7:98:d4:98:04:d2:6d:96:93:77:d5: 53:ef:c5:37:33:85:58:89:5e:70:5e:89:93:1f:b2:54:37:d6: 76:01:3d:fc:0e:d9:c6:de:31:fc:51:65:0d:0f:2e:25:28:a2: cf:54:18:32:fa:20:57:56:51:5b:c8:0e:29:56:a6:19:c4:58: d5:54:7d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3A9mdazrjtA3JiR69q8HAnnDrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA3MjQwNzM5MDBaFw0yNjA3MjUwODM1MDBaMDMxMTAvBgNV BAMTKDlGMTFEMUZFMzFFMDM5OTk3ODU3MEQ5QUZCNjVDRDVDREZDNkUxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNst8+zOq4sVkYDUS61hs5xBD pRe4b5kaH6VM32qPsEeI8rHU+sXSi2of9/Y4bB19PuRwut46nliiDraepjHoc+gF SSjPQxQBUShsEkJJzUG2QAxa2BYW9dxCeD2b7KfDVpiPlH2E2/f+rw3/4778yv9W UR4woMxzN2e2U7B2lxstiGaIfe/6vv1VSeyyqaOXEOEWFWnGrCVqImmtFcXoDrfb Dlfw8GMhJKMys5Jv0lXX0aasUIH42KXyzNEu5xoZdcg7Mmxpp2cLqganmjclx7Y7 SNNVQKUW52MwWSkX4M/yfV0G8MsLBRV4ra1ZarqruZkj97cVJ5uenNWqOHknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxHR/jHgOZl4Vw2a+2XNXN/G4ZQwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH27IEzb/07uaTCGfOHv3XjHgA0QK7MIpqz0 oS/5SDJZPBacFAjEDw/L9BdOwlFPhDAdwDp199n9uxkUrZNcXFg8/loOr3qjQ4Nd +JtWgokQykQ4FtfCDLubRyXKtazrTik5pSeVUciAG5AX3aVr25FBxCTY7p0+To/e Cb5tfxcnzoGRhFJTnMPDdKIeO7JZspKSqdJM2Qq2Aa0/CUYrI2e1TrDuu9VnOvn3 /XUOZsWq4OCT7YTxxnEgel7nmNSYBNJtlpN31VPvxTczhViJXnBeiZMfslQ31nYB PfwO2cbeMfxRZQ0PLiUoos9UGDL6IFdWUVvIDilWphnEWNVUfXs= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:47 2026 by rpki-client