$ rpki-client -vvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: LLRpUxzo+WODWDeConKC+KcPXcTXZzutna2Cbbk1qj4= Subject key identifier: C0:98:5E:93:B7:B3:A2:DF:0C:35:D9:52:2D:8D:A9:21:99:D4:CF:0C Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 4D2B46E30A683539E35595649CE3422A2540061D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:23:54 +0000 Manifest this update: Thu 23 Jul 2026 19:18:54 +0000 Manifest next update: Fri 24 Jul 2026 22:12:54 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: PLYVQ/P4poyyUGNHd3AdY3mfvblILGLNeri+Ys4+NkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2b:46:e3:0a:68:35:39:e3:55:95:64:9c:e3:42:2a:25:40:06:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Jul 23 19:18:54 2026 GMT Not After : Jul 24 22:12:54 2026 GMT Subject: CN=C0985E93B7B3A2DF0C35D9522D8DA92199D4CF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:ad:bd:f3:5e:2d:ea:1b:94:74:5d:4c:90: 28:0e:b6:1d:73:ae:56:f1:a7:42:f1:7b:4b:c4:f8: 01:11:dc:3c:5e:4c:94:bd:8c:7c:46:48:ba:8c:85: e1:db:45:ed:4e:d3:fc:ec:f7:df:e5:b0:9a:cc:fe: cb:ac:0d:ef:d0:a2:19:63:f0:e5:37:76:bc:cd:72: 7d:c3:01:5e:66:5e:bc:69:2e:b6:63:35:33:a3:52: b1:b0:44:6c:58:81:c2:7f:b3:08:3f:e3:e4:5a:f1: dd:36:f9:30:22:26:e6:a0:73:8f:22:f5:bf:8f:5c: 0b:e0:cc:aa:6c:9b:e0:be:03:b5:e8:e2:ad:dd:98: ae:a1:68:5c:93:8a:8a:1d:41:85:18:8b:41:d8:2e: 3c:ba:50:cb:8c:e6:43:4f:99:40:f1:db:ec:34:4b: fc:4a:f8:59:0a:1e:87:bf:cf:70:49:b0:89:a4:df: 69:3b:b3:39:90:ea:d9:b0:fa:c0:6d:4c:55:7e:d5: 5a:48:b1:bc:9d:18:98:34:63:ed:de:aa:6a:70:c7: 58:f8:88:fe:6a:31:15:fb:6d:98:81:0b:09:d8:a7: 87:f1:29:be:2d:22:38:8b:b9:ec:73:6c:95:09:c5: 23:e1:55:30:53:e2:3b:20:78:e7:8f:6d:e5:57:ec: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:98:5E:93:B7:B3:A2:DF:0C:35:D9:52:2D:8D:A9:21:99:D4:CF:0C X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a9:4d:f7:8c:b7:f3:f1:f4:3b:d4:4a:fb:28:1b:2d:5b:88: 94:36:09:de:31:23:0b:80:d1:df:7a:46:93:0c:0f:e7:6b:c5: cb:87:b3:b6:78:ca:b4:21:a4:2d:02:7e:af:c3:78:3e:81:d9: bf:93:53:ec:8e:98:e0:23:40:45:ed:f3:74:cf:9c:25:2e:f7: 5a:25:1c:cf:7e:bc:4d:0d:a1:39:34:91:71:63:3b:6b:22:5f: 33:57:85:84:15:04:1e:e5:d9:25:5a:2f:d0:fc:8c:13:c2:47: 74:8e:00:bb:8f:a2:4e:da:64:6d:2c:16:e8:12:a4:a5:38:ac: 56:a2:ae:96:52:8e:1b:44:1c:e8:5b:47:07:3f:ea:d1:bd:55: 21:5e:d0:ff:a1:ef:ff:7a:e7:6e:92:29:27:f4:ed:ca:46:18: 54:c5:79:d3:5c:ec:8f:e2:4f:33:19:74:14:3a:cc:f9:48:a9: 89:18:01:7c:b4:d7:2e:b9:3c:7d:7f:9b:9b:41:9a:e6:6f:2e: 6e:2d:0c:6b:78:d9:f5:4d:94:1e:56:f8:c0:b2:b8:03:33:63: 11:5a:22:1b:87:32:54:1a:12:8d:20:60:82:c5:63:95:4f:17: 08:53:6a:f6:f3:7e:f8:04:8f:88:ef:43:1a:3f:bf:36:11:0a: bd:e3:be:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTStG4wpoNTnjVZVknONCKiVABh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA3MjMxOTE4NTRaFw0yNjA3MjQyMjEyNTRaMDMxMTAvBgNV BAMTKEMwOTg1RTkzQjdCM0EyREYwQzM1RDk1MjJEOERBOTIxOTlENENGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSB629814t6huUdF1MkCgOth1z rlbxp0Lxe0vE+AER3DxeTJS9jHxGSLqMheHbRe1O0/zs99/lsJrM/susDe/Qohlj 8OU3drzNcn3DAV5mXrxpLrZjNTOjUrGwRGxYgcJ/swg/4+Ra8d02+TAiJuagc48i 9b+PXAvgzKpsm+C+A7Xo4q3dmK6haFyTioodQYUYi0HYLjy6UMuM5kNPmUDx2+w0 S/xK+FkKHoe/z3BJsImk32k7szmQ6tmw+sBtTFV+1VpIsbydGJg0Y+3eqmpwx1j4 iP5qMRX7bZiBCwnYp4fxKb4tIjiLuexzbJUJxSPhVTBT4jsgeOePbeVX7APxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwJhek7ezot8MNdlSLY2pIZnUzwwwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKpTfeMt/Px9DvUSvsoGy1biJQ2Cd4xIwuA 0d96RpMMD+drxcuHs7Z4yrQhpC0Cfq/DeD6B2b+TU+yOmOAjQEXt83TPnCUu91ol HM9+vE0NoTk0kXFjO2siXzNXhYQVBB7l2SVaL9D8jBPCR3SOALuPok7aZG0sFugS pKU4rFairpZSjhtEHOhbRwc/6tG9VSFe0P+h7/96526SKSf07cpGGFTFedNc7I/i TzMZdBQ6zPlIqYkYAXy01y65PH1/m5tBmuZvLm4tDGt42fVNlB5W+MCyuAMzYxFa IhuHMlQaEo0gYILFY5VPFwhTavbzfvgEj4jvQxo/vzYRCr3jvrs= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:51 2026 by rpki-client