$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: p52Y7epzU6egFPDPqq2qBGvasI8FUEL/ohz/ko5M1kc= Subject key identifier: 3F:F2:A9:5C:AB:06:E0:F0:86:47:95:FB:33:4F:C9:B9:A5:95:58:A3 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 0F9F33052E45AF49B10AA771AC2BEBCD8644D85C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:07:09 +0000 Manifest this update: Thu 23 Jul 2026 18:02:09 +0000 Manifest next update: Fri 24 Jul 2026 21:47:09 +0000 Files and hashes: 1: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: M6JfRWseh36c6neNciV5ZjBHkd2nKrw9jl7ESt4v2Ec=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9f:33:05:2e:45:af:49:b1:0a:a7:71:ac:2b:eb:cd:86:44:d8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Jul 23 18:02:09 2026 GMT Not After : Jul 24 21:47:09 2026 GMT Subject: CN=3FF2A95CAB06E0F0864795FB334FC9B9A59558A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:b1:b9:46:c8:c2:e5:6d:83:cd:b7:18:a7: f3:ce:4c:3b:9c:6f:ac:de:2c:e2:ce:ac:50:fd:02: bb:19:8a:b0:45:0e:ba:d3:35:8c:2c:86:b7:7c:fa: 84:d7:c0:9a:f1:47:dc:28:c8:36:84:94:f2:7a:60: 50:40:80:9c:b2:ac:ae:a4:24:7e:8a:d9:9f:c7:2d: ff:8f:ac:1b:9e:dd:57:c0:95:0e:f3:7d:9d:1c:89: d8:43:11:34:5b:94:7f:44:6c:49:58:21:a9:63:6b: 46:0f:26:52:29:23:45:61:f5:48:6d:f6:ec:8d:f0: ec:dd:04:a2:83:94:97:f6:82:1e:a9:d8:2d:3e:f9: 8a:e4:99:a7:f8:af:d6:48:46:c1:7a:61:7b:80:04: dc:ce:7b:17:b3:8f:69:b6:17:e3:6f:58:9c:65:4e: 57:73:a3:9e:13:27:ec:d9:b8:b8:19:22:b7:4a:0e: 74:ec:dd:7b:c7:e7:5c:35:9c:a9:80:b4:23:e1:3c: 29:49:1d:2f:72:40:d1:d9:22:d2:d4:14:d2:9c:a1: eb:b8:ac:81:a3:9b:0d:95:48:e7:98:44:79:ef:47: 4e:e8:20:f1:d3:6d:34:12:39:7c:b3:65:d5:6a:a3: 5d:9a:5d:d6:49:8b:bb:9d:5e:92:4c:91:d9:30:fb: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:A9:5C:AB:06:E0:F0:86:47:95:FB:33:4F:C9:B9:A5:95:58:A3 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:49:76:68:1a:60:6b:ef:c2:07:d3:a6:a3:89:ba:d3:5f: 4a:03:cf:47:ef:2c:05:29:13:14:bf:9a:bb:e1:c3:44:5c:14: a1:91:ab:a4:98:b0:0c:5c:88:2d:11:e7:7c:53:a2:bf:41:05: f1:2f:8d:d6:8c:b7:a9:77:2d:20:23:3f:d0:7e:7d:a6:d4:83: b6:93:eb:b1:70:ae:d0:30:fc:5f:01:3e:17:2c:c8:70:29:30: 73:8a:0d:d9:dd:d5:f0:2c:73:da:3a:c9:b7:ea:a9:b5:50:ec: 3f:f6:f4:f0:c2:a7:33:45:9c:75:24:76:a9:13:73:a5:ad:ef: 73:43:99:17:56:f7:81:8b:16:51:03:7c:69:fc:5e:a7:9f:0f: 0f:80:ad:8d:3f:28:ee:35:76:c2:f3:06:c4:95:69:92:47:2b: ca:20:d2:7e:84:60:b2:2d:52:5f:86:d2:9f:20:6f:d1:22:c8: ee:59:f7:ef:06:d7:31:9c:92:dc:c7:d6:59:1e:0d:48:ac:44: 7e:92:b9:17:ab:06:7e:8f:31:bc:88:ef:cf:3a:3d:ee:80:e8: 85:3c:e8:15:58:3e:9a:75:6f:04:b5:52:aa:c7:28:85:c8:82: b7:65:4b:08:c1:89:7a:81:b3:a3:8b:30:8b:54:bf:2a:8b:4e: f1:05:93:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD58zBS5Fr0mxCqdxrCvrzYZE2FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA3MjMxODAyMDlaFw0yNjA3MjQyMTQ3MDlaMDMxMTAvBgNV BAMTKDNGRjJBOTVDQUIwNkUwRjA4NjQ3OTVGQjMzNEZDOUI5QTU5NTU4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD67G5RsjC5W2DzbcYp/POTDuc b6zeLOLOrFD9ArsZirBFDrrTNYwshrd8+oTXwJrxR9woyDaElPJ6YFBAgJyyrK6k JH6K2Z/HLf+PrBue3VfAlQ7zfZ0cidhDETRblH9EbElYIalja0YPJlIpI0Vh9Uht 9uyN8OzdBKKDlJf2gh6p2C0++Yrkmaf4r9ZIRsF6YXuABNzOexezj2m2F+NvWJxl Tldzo54TJ+zZuLgZIrdKDnTs3XvH51w1nKmAtCPhPClJHS9yQNHZItLUFNKcoeu4 rIGjmw2VSOeYRHnvR07oIPHTbTQSOXyzZdVqo12aXdZJi7udXpJMkdkw+wpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP/KpXKsG4PCGR5X7M0/JuaWVWKMwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJwSXZoGmBr78IH06ajibrTX0oDz0fvLAUp ExS/mrvhw0RcFKGRq6SYsAxciC0R53xTor9BBfEvjdaMt6l3LSAjP9B+fabUg7aT 67FwrtAw/F8BPhcsyHApMHOKDdnd1fAsc9o6ybfqqbVQ7D/29PDCpzNFnHUkdqkT c6Wt73NDmRdW94GLFlEDfGn8XqefDw+ArY0/KO41dsLzBsSVaZJHK8og0n6EYLIt Ul+G0p8gb9EiyO5Z9+8G1zGcktzH1lkeDUisRH6SuRerBn6PMbyI7886Pe6A6IU8 6BVYPpp1bwS1UqrHKIXIgrdlSwjBiXqBs6OLMItUvyqLTvEFk1Y= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:29 2026 by rpki-client