$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: 5XgA7WNe/vSMpDI4O8JDQKv4ZdxLBGjGZlj7JlwET14= Subject key identifier: 4F:D6:CF:B5:D4:12:3F:F5:97:D5:FA:95:D8:67:6C:17:08:00:C4:FD Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 1C54F1AAA5C255BBEFFA50AB2EE3AD47EF3302A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:29:43 +0000 Manifest this update: Fri 24 Jul 2026 00:24:43 +0000 Manifest next update: Sat 25 Jul 2026 01:02:43 +0000 Files and hashes: 1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: 8tX8QAYhTkxxvrdNFypNgkoRWAkJOHBYX+PxW3Ildsg=) 2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:54:f1:aa:a5:c2:55:bb:ef:fa:50:ab:2e:e3:ad:47:ef:33:02:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Jul 24 00:24:43 2026 GMT Not After : Jul 25 01:02:43 2026 GMT Subject: CN=4FD6CFB5D4123FF597D5FA95D8676C170800C4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:21:a9:35:6a:41:20:fa:a1:b1:47:fe:66: 12:ad:33:4b:8c:fe:66:99:74:06:91:d7:b8:cf:01: 41:d9:55:d2:27:0f:e4:3f:b6:4f:e8:bb:10:f6:35: cf:0d:d5:fa:65:bd:30:d1:b5:88:0c:1a:37:d7:d9: 07:5d:c6:16:d6:4a:4c:a7:e1:51:cc:e5:95:56:ab: 41:c4:42:8f:c8:87:15:b0:a4:c9:66:ee:8f:95:3a: 5f:64:e4:03:fa:6b:70:9f:97:de:1e:4f:3a:18:52: 8f:84:c1:a5:c3:bf:44:01:74:34:e8:e1:f5:16:f7: 75:d9:ea:01:fa:17:ad:6b:1a:72:b3:b7:c0:e4:da: 66:83:31:c7:2a:c6:d3:37:a2:c4:ff:10:c9:c6:09: 24:88:95:96:98:47:87:34:83:41:38:23:22:00:c5: 12:fb:81:0b:fd:98:57:57:a5:95:7a:96:b9:95:fd: c5:0d:ba:22:ea:ae:bf:6b:0a:29:d0:9f:43:4e:a9: bd:2a:fd:5f:d1:d5:64:19:f8:bc:a3:2c:bd:da:de: 73:7d:61:82:e2:ec:81:6e:50:95:9a:7e:68:fc:8d: e4:e5:e2:76:b2:21:33:22:b1:c4:61:7d:f3:cf:e8: 17:3d:92:fd:bc:c3:27:d9:01:ae:5a:8d:a6:ef:61: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:CF:B5:D4:12:3F:F5:97:D5:FA:95:D8:67:6C:17:08:00:C4:FD X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:97:a2:8d:76:d7:ed:81:c2:10:29:be:d2:10:a1:d8:25:2b: 72:49:77:7e:5f:1b:78:c3:35:5e:2c:59:f7:1b:37:6a:16:30: 29:99:1e:aa:1f:32:2e:72:99:48:f3:45:5f:0f:46:e5:c5:f6: 56:fe:09:dc:1e:5d:92:7a:c6:b4:36:4c:ed:94:b1:09:89:dc: 59:39:d7:cb:49:5e:58:eb:3b:01:92:92:78:df:e8:1d:f7:57: 7f:28:7b:58:bf:4f:36:09:98:e4:40:a5:8f:32:80:3b:1c:aa: 1b:84:dd:1a:33:bd:f5:42:87:c9:5d:ca:d7:ba:47:5f:a2:21: 45:79:bc:1c:86:df:b4:07:2b:88:ef:a5:7f:b7:cc:3b:30:b3: 83:a8:b3:5a:2a:a6:52:f5:93:40:8f:88:c0:42:09:eb:1e:97: 33:6c:7b:9a:87:4e:de:46:b1:ee:59:3f:12:8a:4f:8d:7a:5a: ac:5f:66:10:0d:db:58:76:d0:71:20:44:1c:20:77:71:99:d4: 9d:41:00:88:99:ce:4d:ae:68:62:0e:61:c1:5e:89:21:87:dd: 7f:0a:b8:ab:17:8a:55:8b:3e:da:a6:7b:ce:17:f0:9c:8a:25: 9b:74:7e:b3:64:12:28:81:4e:89:19:3d:45:86:1a:84:6f:01: 0e:96:a5:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFTxqqXCVbvv+lCrLuOtR+8zAqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA3MjQwMDI0NDNaFw0yNjA3MjUwMTAyNDNaMDMxMTAvBgNV BAMTKDRGRDZDRkI1RDQxMjNGRjU5N0Q1RkE5NUQ4Njc2QzE3MDgwMEM0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrayGpNWpBIPqhsUf+ZhKtM0uM /maZdAaR17jPAUHZVdInD+Q/tk/ouxD2Nc8N1fplvTDRtYgMGjfX2QddxhbWSkyn 4VHM5ZVWq0HEQo/IhxWwpMlm7o+VOl9k5AP6a3Cfl94eTzoYUo+EwaXDv0QBdDTo 4fUW93XZ6gH6F61rGnKzt8Dk2maDMccqxtM3osT/EMnGCSSIlZaYR4c0g0E4IyIA xRL7gQv9mFdXpZV6lrmV/cUNuiLqrr9rCinQn0NOqb0q/V/R1WQZ+LyjLL3a3nN9 YYLi7IFuUJWafmj8jeTl4nayITMiscRhffPP6Bc9kv28wyfZAa5ajabvYYgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9bPtdQSP/WX1fqV2GdsFwgAxP0wHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSXoo121+2BwhApvtIQodglK3JJd35fG3jD NV4sWfcbN2oWMCmZHqofMi5ymUjzRV8PRuXF9lb+CdweXZJ6xrQ2TO2UsQmJ3Fk5 18tJXljrOwGSknjf6B33V38oe1i/TzYJmORApY8ygDscqhuE3RozvfVCh8ldyte6 R1+iIUV5vByG37QHK4jvpX+3zDsws4Oos1oqplL1k0CPiMBCCeselzNse5qHTt5G se5ZPxKKT416WqxfZhAN21h20HEgRBwgd3GZ1J1BAIiZzk2uaGIOYcFeiSGH3X8K uKsXilWLPtqme84X8JyKJZt0frNkEiiBTokZPUWGGoRvAQ6Wpf4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:30:49 2026 by rpki-client