$ rpki-client -vvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: npjIOQp4+nxvkGuc8V0iRaG8LSiDM90TTUdV53QorDk= Subject key identifier: F3:AA:6C:97:5E:31:3A:CB:5E:B0:6E:A4:67:58:F0:F4:70:79:91:E8 Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 3A5213C679801D4E2C63B3024098CF766C3BA5F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:14:30 +0000 Manifest this update: Fri 24 Jul 2026 12:09:30 +0000 Manifest next update: Sat 25 Jul 2026 13:44:30 +0000 Files and hashes: 1: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) 2: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) 3: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 4: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) 5: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: 1/vyzyTSvZLa56WOyLUWsSHPnqzkoo1jI54Tw1exgXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:52:13:c6:79:80:1d:4e:2c:63:b3:02:40:98:cf:76:6c:3b:a5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Jul 24 12:09:30 2026 GMT Not After : Jul 25 13:44:30 2026 GMT Subject: CN=F3AA6C975E313ACB5EB06EA46758F0F4707991E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:02:a3:39:3c:b1:2c:04:f9:b0:d2:de:7d: 5b:c2:4a:94:bf:62:b7:fa:c1:2f:d1:62:83:ce:2f: c2:99:4f:50:cb:44:ed:14:ca:0e:8b:a4:ca:66:28: cd:fa:71:4d:07:f4:18:c4:c8:7b:03:54:cd:16:cc: 84:72:07:81:a8:70:69:37:9c:e5:6f:76:02:f6:4c: f0:2a:8a:31:b2:53:29:50:d3:33:12:6f:57:df:14: aa:2e:cc:56:45:2b:9c:41:cc:9d:d0:ae:79:21:48: b7:0a:0e:58:78:44:f1:53:f1:7b:ca:cc:51:6d:d9: d1:f2:ab:c9:56:f0:cd:88:d6:56:f2:6d:fc:68:0b: b7:96:94:eb:f8:8d:d8:76:97:ce:57:6b:37:27:9d: ae:4d:11:3d:56:52:d9:52:2b:6e:38:98:98:dc:d8: e0:1b:56:16:0a:7e:84:11:6d:26:99:3b:96:0d:c0: 94:9a:59:7d:a3:60:7a:a7:84:d5:d9:5f:4b:a3:ea: 82:b9:e8:6a:21:b9:48:3a:77:f2:9f:f0:f8:af:4f: 90:b5:3a:34:dd:a5:9a:b4:71:7d:36:79:1a:51:82: eb:18:b7:67:85:26:83:42:c8:47:08:e1:94:a8:a2: 21:de:e7:16:9f:25:d4:24:bd:98:30:24:1e:f3:84: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AA:6C:97:5E:31:3A:CB:5E:B0:6E:A4:67:58:F0:F4:70:79:91:E8 X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ae:12:5c:fd:a1:2c:1f:04:ae:c7:c1:b0:1d:dc:1e:37:28: b0:11:57:ad:84:8f:fa:8d:ee:89:bb:9c:3d:d9:49:a8:13:91: a0:67:01:c6:c6:1f:bf:41:c5:fc:0a:2c:0c:ab:cd:21:fc:40: 69:83:9b:f6:51:ca:d8:05:98:b0:a6:08:7f:c5:87:6f:3f:be: a9:fd:83:36:5d:85:32:d4:f6:e4:18:7f:ea:b5:1b:b3:6c:44: 1a:f6:c2:84:04:6c:34:36:b9:bf:78:6b:b4:a3:67:e3:e2:88: 8a:83:97:32:34:de:24:ce:24:79:a6:6c:59:c9:17:46:57:68: 2c:29:bc:4d:bb:24:9f:b8:94:0b:4c:94:01:38:82:b0:5d:d1: 4d:0b:1b:9c:e9:83:4b:ab:54:8b:09:8a:d1:aa:92:2b:2c:2b: 43:fb:41:2b:9d:29:bd:47:63:83:0d:4f:ff:7c:a7:c4:a8:b8: 18:b8:04:61:07:1b:e2:49:8f:63:b6:dc:61:63:94:dc:e0:02: a4:86:b3:6f:10:c7:13:f6:fc:94:86:25:f4:05:67:5c:d3:69: d9:7a:1f:a0:d8:e0:72:97:13:73:d6:3b:76:83:da:49:37:53: 72:6d:df:ff:2b:e1:52:fe:8a:ac:fe:ac:e4:a9:77:8f:28:d3: 19:27:e4:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlITxnmAHU4sY7MCQJjPdmw7pfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA3MjQxMjA5MzBaFw0yNjA3MjUxMzQ0MzBaMDMxMTAvBgNV BAMTKEYzQUE2Qzk3NUUzMTNBQ0I1RUIwNkVBNDY3NThGMEY0NzA3OTkxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0AKjOTyxLAT5sNLefVvCSpS/ Yrf6wS/RYoPOL8KZT1DLRO0Uyg6LpMpmKM36cU0H9BjEyHsDVM0WzIRyB4GocGk3 nOVvdgL2TPAqijGyUylQ0zMSb1ffFKouzFZFK5xBzJ3QrnkhSLcKDlh4RPFT8XvK zFFt2dHyq8lW8M2I1lbybfxoC7eWlOv4jdh2l85Xazcnna5NET1WUtlSK244mJjc 2OAbVhYKfoQRbSaZO5YNwJSaWX2jYHqnhNXZX0uj6oK56GohuUg6d/Kf8PivT5C1 OjTdpZq0cX02eRpRgusYt2eFJoNCyEcI4ZSooiHe5xafJdQkvZgwJB7zhNLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86psl14xOstesG6kZ1jw9HB5kegwHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOuElz9oSwfBK7HwbAd3B43KLARV62Ej/qN 7om7nD3ZSagTkaBnAcbGH79BxfwKLAyrzSH8QGmDm/ZRytgFmLCmCH/Fh28/vqn9 gzZdhTLU9uQYf+q1G7NsRBr2woQEbDQ2ub94a7SjZ+PiiIqDlzI03iTOJHmmbFnJ F0ZXaCwpvE27JJ+4lAtMlAE4grBd0U0LG5zpg0urVIsJitGqkissK0P7QSudKb1H Y4MNT/98p8SouBi4BGEHG+JJj2O23GFjlNzgAqSGs28QxxP2/JSGJfQFZ1zTadl6 H6DY4HKXE3PWO3aD2kk3U3Jt3/8r4VL+iqz+rOSpd48o0xkn5AQ= -----END CERTIFICATE-----Generated at Fri Jul 24 18:32:16 2026 by rpki-client