$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: p+umpBEsS6Hzb4etauB5AHUDczsQPPi3iyGPOXSEF2E= Subject key identifier: FF:B8:99:9B:D2:CC:C2:44:72:D0:43:90:57:FC:68:BD:D2:56:A4:E7 Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 5B897BDED717CF227E923B458118EE49224292E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:09:42 +0000 Manifest this update: Thu 23 Jul 2026 20:04:42 +0000 Manifest next update: Fri 24 Jul 2026 20:24:42 +0000 Files and hashes: 1: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 3: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: PbFb/b9WjAW0tUbo4mvgo1OdLkCZJJVW7wNUZPivR1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:89:7b:de:d7:17:cf:22:7e:92:3b:45:81:18:ee:49:22:42:92:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Jul 23 20:04:42 2026 GMT Not After : Jul 24 20:24:42 2026 GMT Subject: CN=FFB8999BD2CCC24472D0439057FC68BDD256A4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:db:5b:e5:18:47:7f:4e:6e:c8:04:5f:67: 3a:f8:f0:87:11:78:3b:1f:3d:e6:8e:57:b2:82:70: 20:a4:30:07:06:28:a8:89:24:4e:a5:68:fa:59:15: 30:84:19:c6:53:78:08:73:79:3a:fa:f9:28:79:a5: df:fb:1a:62:2b:85:61:b1:e0:68:d4:41:dc:8e:91: 6a:5c:e8:e1:67:83:10:bf:f8:8a:b5:b7:3e:98:23: 90:f7:21:8d:c5:b0:a7:e4:30:36:ca:6b:cc:a0:3e: 51:a0:86:5e:0c:bd:74:8a:8d:e5:00:b8:8d:3a:6c: 9d:0a:93:52:53:85:8e:cf:58:11:0a:9d:6a:23:74: 59:df:44:72:91:bf:a0:1b:81:9e:76:cf:9b:5b:74: 6e:00:fe:91:95:18:ac:48:89:0e:a5:13:b4:c8:73: a1:76:5a:09:02:54:1a:14:c3:ec:f4:29:6e:1f:d5: a7:38:66:2a:dd:fc:ec:d1:2b:13:a7:17:84:ba:bb: 0a:85:e3:b2:3e:77:c7:07:9e:92:c0:3e:a1:fb:e2: 67:43:cd:83:74:c8:79:37:63:db:a8:fa:fd:d4:76: 86:5f:42:5b:21:cd:f7:c3:76:26:cd:70:ed:7d:d8: 34:34:5b:33:e9:5d:c8:3d:68:83:dc:ef:d0:84:30: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B8:99:9B:D2:CC:C2:44:72:D0:43:90:57:FC:68:BD:D2:56:A4:E7 X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:3d:01:5f:d0:69:ca:15:ab:d4:12:7e:46:1a:05:9e:a9: cc:9b:06:30:0e:a9:09:07:2e:da:80:4b:81:2c:26:45:a8:bd: 18:bc:71:56:9d:5c:db:d9:1a:67:12:4a:6f:76:49:19:ee:62: 89:3d:30:89:cd:62:55:20:e5:f4:a9:57:7e:df:7a:14:25:2d: 46:97:86:b6:32:fb:c5:19:23:fc:bc:71:7e:7b:56:a8:99:0d: fc:4d:e8:19:e1:8b:c5:d5:65:6f:c1:de:1e:a5:18:32:77:49: 6e:45:00:0d:4c:28:fa:27:44:95:9b:60:f3:07:17:3e:dd:7b: f9:94:c6:22:f4:d1:9b:10:f1:c8:8f:49:ae:cd:3c:6a:49:07: 00:f6:70:dc:b4:6b:33:16:b2:4c:02:77:85:9f:64:95:ee:c7: 7e:8d:78:e7:c3:fd:b9:9f:4a:7b:95:f6:db:69:9b:11:85:cb: e8:bd:32:84:29:f5:e1:17:3a:42:0e:ae:20:be:8f:62:2c:c2: af:71:94:ec:63:25:6a:fc:d9:55:d0:e3:1a:d4:00:a2:83:ec: 7d:40:58:96:82:77:36:db:ef:6c:e3:d0:f4:69:af:68:b9:ce: 53:c7:85:41:6a:b2:f3:47:de:7f:6a:a9:ed:94:a8:00:fe:5d: c5:66:15:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4l73tcXzyJ+kjtFgRjuSSJCkuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA3MjMyMDA0NDJaFw0yNjA3MjQyMDI0NDJaMDMxMTAvBgNV BAMTKEZGQjg5OTlCRDJDQ0MyNDQ3MkQwNDM5MDU3RkM2OEJERDI1NkE0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpf9tb5RhHf05uyARfZzr48IcR eDsfPeaOV7KCcCCkMAcGKKiJJE6laPpZFTCEGcZTeAhzeTr6+Sh5pd/7GmIrhWGx 4GjUQdyOkWpc6OFngxC/+Iq1tz6YI5D3IY3FsKfkMDbKa8ygPlGghl4MvXSKjeUA uI06bJ0Kk1JThY7PWBEKnWojdFnfRHKRv6AbgZ52z5tbdG4A/pGVGKxIiQ6lE7TI c6F2WgkCVBoUw+z0KW4f1ac4Zird/OzRKxOnF4S6uwqF47I+d8cHnpLAPqH74mdD zYN0yHk3Y9uo+v3UdoZfQlshzffDdibNcO192DQ0WzPpXcg9aIPc79CEMM3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7iZm9LMwkRy0EOQV/xovdJWpOcwHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKJPQFf0GnKFavUEn5GGgWeqcybBjAOqQkH LtqAS4EsJkWovRi8cVadXNvZGmcSSm92SRnuYok9MInNYlUg5fSpV37fehQlLUaX hrYy+8UZI/y8cX57VqiZDfxN6Bnhi8XVZW/B3h6lGDJ3SW5FAA1MKPonRJWbYPMH Fz7de/mUxiL00ZsQ8ciPSa7NPGpJBwD2cNy0azMWskwCd4WfZJXux36NeOfD/bmf SnuV9ttpmxGFy+i9MoQp9eEXOkIOriC+j2Iswq9xlOxjJWr82VXQ4xrUAKKD7H1A WJaCdzbb72zj0PRpr2i5zlPHhUFqsvNH3n9qqe2UqAD+XcVmFY8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:34:26 2026 by rpki-client