$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: rFVg2XuY0UrLAPQj5I75SPHHpbWIP9Dp38RSn/El51U= Subject key identifier: 6D:F3:6E:EF:53:C5:B5:9C:E3:92:B5:F0:9C:F2:54:77:E5:75:DB:82 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 2FEE2DAA1085D2187EB9A853341D3A94093886C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: 72 Signing time: Thu 23 Jul 2026 20:14:46 +0000 Manifest this update: Thu 23 Jul 2026 20:09:46 +0000 Manifest next update: Fri 24 Jul 2026 21:10:46 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 2: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 3: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 4: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: L5vUQViebDgBHdXiJW6LYwk+Qv5u0TMXdZMnvgY3m9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ee:2d:aa:10:85:d2:18:7e:b9:a8:53:34:1d:3a:94:09:38:86:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Jul 23 20:09:46 2026 GMT Not After : Jul 24 21:10:46 2026 GMT Subject: CN=6DF36EEF53C5B59CE392B5F09CF25477E575DB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:96:9f:bc:ff:be:ec:c8:51:8e:5e:70:e9: 2f:c5:f1:3d:30:02:84:7c:64:16:b7:9b:7c:0f:e3: ef:b6:8a:f2:03:7d:b7:c4:cb:bf:f7:76:bc:59:44: e0:b5:7f:e2:28:1b:e2:69:71:a4:4e:18:1a:4c:4e: 23:29:3d:a7:13:3c:e1:35:9d:fa:60:ba:b1:53:50: c6:88:e6:96:c2:95:47:dd:97:21:a1:2a:20:86:c2: ee:6c:f7:37:1e:09:b1:39:86:a8:2f:93:4a:2f:4e: ed:d5:04:84:e4:ab:d6:92:7f:a1:5f:2f:5d:09:3c: 57:52:01:cb:ba:dc:ab:7c:1b:db:90:5d:45:f0:85: ca:43:98:ce:6b:9b:b1:f2:45:62:8e:21:69:d9:d8: 57:40:cd:a7:d2:e5:27:51:a1:c1:b6:db:dc:67:9e: 7a:b0:6e:69:5f:a0:af:5e:d4:12:a0:73:b0:9b:27: c6:bb:37:61:6a:5b:c7:37:ea:ab:9b:71:30:22:a4: c4:d9:d7:fa:1e:f9:81:15:51:5a:56:ac:e2:ca:d2: 38:41:c4:f9:93:07:13:71:b7:99:a8:34:81:d5:97: f2:b9:07:28:6a:85:5c:f1:00:b6:23:6b:f3:46:56: 22:11:83:63:d8:65:a4:63:ed:36:90:49:56:a3:6a: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:6E:EF:53:C5:B5:9C:E3:92:B5:F0:9C:F2:54:77:E5:75:DB:82 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:de:2c:a1:f8:01:c4:68:5d:a5:a8:45:5d:ea:98:74:e6:30: d9:10:f9:3d:70:fc:a7:0c:b4:6e:c6:6e:bb:b6:6e:9e:20:11: b7:00:74:c8:51:9e:18:0e:81:4b:07:62:43:cf:9c:22:91:5c: f5:e4:99:09:9c:e3:1b:eb:bf:69:a4:9e:c1:7a:b8:78:fb:d0: 2d:c6:ed:51:1f:54:de:bb:bc:c1:95:39:83:4e:94:66:26:da: d4:32:a1:4f:90:95:e6:22:e2:96:85:a6:33:19:4a:6b:7c:c1: 13:d4:a1:45:ec:e2:df:db:42:77:cc:e6:66:c8:2e:07:71:34: 9a:ce:06:e7:ff:80:14:a4:36:78:41:ed:47:8c:81:a7:5d:50: 9b:d0:61:0f:08:3e:3f:f1:16:c6:64:5e:7f:d2:14:52:54:53: f9:03:8a:19:ed:85:06:a2:20:9b:74:da:9a:5d:c9:ce:ef:1a: da:e6:2e:83:6a:0c:46:7d:81:28:13:4f:09:f3:78:92:ba:ee: 32:c9:c9:d0:5f:d6:5b:63:42:3a:67:63:0e:53:e3:24:bc:28: a6:31:74:1d:35:9a:39:8d:8c:81:f5:4b:07:06:13:63:c8:02: cc:16:51:c3:6c:a5:58:08:b5:0d:5c:d9:c1:7d:75:61:f8:d7: 46:81:34:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+4tqhCF0hh+uahTNB06lAk4hsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA3MjMyMDA5NDZaFw0yNjA3MjQyMTEwNDZaMDMxMTAvBgNV BAMTKDZERjM2RUVGNTNDNUI1OUNFMzkyQjVGMDlDRjI1NDc3RTU3NURCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkA5afvP++7MhRjl5w6S/F8T0w AoR8ZBa3m3wP4++2ivIDfbfEy7/3drxZROC1f+IoG+JpcaROGBpMTiMpPacTPOE1 nfpgurFTUMaI5pbClUfdlyGhKiCGwu5s9zceCbE5hqgvk0ovTu3VBITkq9aSf6Ff L10JPFdSAcu63Kt8G9uQXUXwhcpDmM5rm7HyRWKOIWnZ2FdAzafS5SdRocG229xn nnqwbmlfoK9e1BKgc7CbJ8a7N2FqW8c36qubcTAipMTZ1/oe+YEVUVpWrOLK0jhB xPmTBxNxt5moNIHVl/K5ByhqhVzxALYja/NGViIRg2PYZaRj7TaQSVajaretAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfNu71PFtZzjkrXwnPJUd+V124IwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLeLKH4AcRoXaWoRV3qmHTmMNkQ+T1w/KcM tG7Gbru2bp4gEbcAdMhRnhgOgUsHYkPPnCKRXPXkmQmc4xvrv2mknsF6uHj70C3G 7VEfVN67vMGVOYNOlGYm2tQyoU+QleYi4paFpjMZSmt8wRPUoUXs4t/bQnfM5mbI LgdxNJrOBuf/gBSkNnhB7UeMgaddUJvQYQ8IPj/xFsZkXn/SFFJUU/kDihnthQai IJt02ppdyc7vGtrmLoNqDEZ9gSgTTwnzeJK67jLJydBf1ltjQjpnYw5T4yS8KKYx dB01mjmNjIH1SwcGE2PIAswWUcNspVgItQ1c2cF9dWH410aBND8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:38 2026 by rpki-client