$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: +pJ+PkLTh7aK39ydv53AkaF1MLhzThDsLbALpOrWCQc= Subject key identifier: 21:E6:7D:8D:13:54:C3:A3:C0:F0:5D:12:37:AB:2D:40:5D:D3:2E:06 Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 5410845A4EC61F5AEBFEE342FEA294852DD32FA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:57:54 +0000 Manifest this update: Fri 24 Jul 2026 10:52:54 +0000 Manifest next update: Sat 25 Jul 2026 10:59:54 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) 3: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: +d3Y/OoxBR9CN9OwaNdfWgxaP73i6dNf0DUlCFkSOaA=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:10:84:5a:4e:c6:1f:5a:eb:fe:e3:42:fe:a2:94:85:2d:d3:2f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Jul 24 10:52:54 2026 GMT Not After : Jul 25 10:59:54 2026 GMT Subject: CN=21E67D8D1354C3A3C0F05D1237AB2D405DD32E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:0d:61:1c:22:0f:1b:a6:a9:ca:04:f7:15: 88:eb:39:1d:17:d6:d8:9a:89:29:17:6e:0a:a3:7a: c7:15:f7:2d:ce:ba:db:ab:e3:78:18:d8:2f:30:ed: 57:a6:eb:fe:ad:e6:cc:76:6b:2a:c3:1e:0f:d9:f0: ef:50:2c:4a:83:3e:47:d0:98:4a:34:c9:d2:5a:70: 6d:0f:7a:fd:71:1f:87:d8:23:c0:ba:94:8a:d5:84: 9f:98:d3:b8:10:a9:72:7d:7f:8f:2b:8a:0b:2a:66: ad:13:fb:fd:d8:55:73:8f:8d:4f:d1:87:ef:32:a8: 91:77:3f:b9:3b:70:3f:1d:e7:c8:19:ae:da:ae:0e: 6e:c8:9d:6e:ad:a5:1f:e2:6b:2b:95:8d:36:22:52: c8:b8:19:06:e4:5a:ea:6c:70:b7:95:b6:58:69:dc: 86:8c:51:93:2e:aa:3b:a8:f5:fe:6d:7d:fb:95:28: 6f:fe:d8:a1:c5:ec:b2:14:85:63:3f:8b:29:75:24: 77:11:36:96:17:b5:73:43:24:20:51:59:4d:56:1c: 06:82:97:de:4f:9b:97:ad:60:04:1d:a4:67:0a:7e: 6a:b6:16:f2:0d:ac:db:b4:8a:1c:81:d2:22:57:f7: b6:3d:e3:44:e1:f4:f9:9f:40:3c:30:92:32:a7:36: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:7D:8D:13:54:C3:A3:C0:F0:5D:12:37:AB:2D:40:5D:D3:2E:06 X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b5:b3:67:71:50:5a:2b:e3:d8:26:3c:14:05:39:0b:7f:27: b3:01:a3:31:b8:e7:65:be:3c:db:cc:d8:d0:46:2a:51:5e:ca: 9c:a1:bb:10:1f:0c:df:1f:b1:c6:17:2f:a0:50:42:28:ad:96: bc:59:b4:4b:5c:40:72:58:e3:a4:a9:f3:58:95:ae:a5:4b:34: bf:9a:b3:18:48:80:ba:b8:20:95:03:66:f4:0c:ce:a2:b4:07: 8f:9f:06:04:e8:89:56:ef:56:a3:f6:20:bb:8b:6d:e2:e7:7a: 01:b7:b1:5e:a4:4d:c4:27:ec:19:aa:ca:78:ea:93:2e:65:2f: a4:06:0c:96:20:60:04:d8:6d:a3:fe:e4:19:d4:3b:ec:88:d4: 07:b0:bb:96:a2:72:48:52:76:07:a0:f8:1c:bb:7d:6f:2c:d4: 18:30:13:70:26:89:cc:9f:ba:e9:8c:84:bf:cc:7c:06:05:0b: ac:ae:95:f7:ac:30:e4:46:0c:e0:f3:41:9e:37:e8:27:e6:12: 1c:f1:74:f9:5c:f5:72:84:7b:35:01:98:e2:e5:7d:3f:ec:db: a5:16:73:65:a9:71:cd:f5:e6:55:fb:28:c8:6f:f7:52:67:45: a9:d5:52:12:ae:a4:90:fb:0d:87:91:a7:ea:0e:bc:11:ee:a4: 82:5d:f2:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBCEWk7GH1rr/uNC/qKUhS3TL6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA3MjQxMDUyNTRaFw0yNjA3MjUxMDU5NTRaMDMxMTAvBgNV BAMTKDIxRTY3RDhEMTM1NEMzQTNDMEYwNUQxMjM3QUIyRDQwNUREMzJFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJRg1hHCIPG6apygT3FYjrOR0X 1tiaiSkXbgqjescV9y3Outur43gY2C8w7Vem6/6t5sx2ayrDHg/Z8O9QLEqDPkfQ mEo0ydJacG0Pev1xH4fYI8C6lIrVhJ+Y07gQqXJ9f48rigsqZq0T+/3YVXOPjU/R h+8yqJF3P7k7cD8d58gZrtquDm7InW6tpR/iayuVjTYiUsi4GQbkWupscLeVtlhp 3IaMUZMuqjuo9f5tffuVKG/+2KHF7LIUhWM/iyl1JHcRNpYXtXNDJCBRWU1WHAaC l95Pm5etYAQdpGcKfmq2FvINrNu0ihyB0iJX97Y940Th9PmfQDwwkjKnNq2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeZ9jRNUw6PA8F0SN6stQF3TLgYwHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa1s2dxUFor49gmPBQFOQt/J7MBozG452W+ PNvM2NBGKlFeypyhuxAfDN8fscYXL6BQQiitlrxZtEtcQHJY46Sp81iVrqVLNL+a sxhIgLq4IJUDZvQMzqK0B4+fBgToiVbvVqP2ILuLbeLnegG3sV6kTcQn7Bmqynjq ky5lL6QGDJYgYATYbaP+5BnUO+yI1Aewu5aickhSdgeg+By7fW8s1BgwE3Amicyf uumMhL/MfAYFC6yulfesMORGDODzQZ436CfmEhzxdPlc9XKEezUBmOLlfT/s26UW c2Wpcc315lX7KMhv91JnRanVUhKupJD7DYeRp+oOvBHupIJd8v4= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:37 2026 by rpki-client