$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: 3Q1pc00maeubMxeoRl4l9kuvTv7iY38GU0hx4rC4sZw= Subject key identifier: 92:EA:0C:58:41:51:46:C9:ED:BB:30:ED:20:A4:B1:B6:5F:18:8B:BC Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 6CBFBBAF537F2EEB72E96F1A5E629D745BC8CF79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:04:53 +0000 Manifest this update: Thu 23 Jul 2026 11:59:53 +0000 Manifest next update: Fri 24 Jul 2026 12:20:53 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) 2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: lE56XNuQA8Tmy0fjCFZ9s/yHAWQMf4Xbl+lYEv1NDEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bf:bb:af:53:7f:2e:eb:72:e9:6f:1a:5e:62:9d:74:5b:c8:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Jul 23 11:59:53 2026 GMT Not After : Jul 24 12:20:53 2026 GMT Subject: CN=92EA0C58415146C9EDBB30ED20A4B1B65F188BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:78:af:cd:cf:3f:c6:fc:62:41:30:27:17: eb:7e:c8:56:22:6d:c2:c7:e8:98:c7:c9:0a:aa:0c: 04:8d:b3:86:42:b3:2d:1c:8d:a5:2c:0c:7f:af:31: 47:30:9c:aa:03:dc:bb:1c:12:ef:b2:8e:aa:f0:18: 97:29:61:91:cf:fc:80:81:15:5a:a7:8b:0c:d0:5b: b8:44:f8:b2:e2:9f:08:1f:c5:66:95:fa:fb:f5:6d: 78:f5:8f:59:9d:71:8c:49:74:ab:f7:27:c6:44:48: cd:e4:23:a5:e2:8b:d0:97:7e:7a:24:58:01:07:f2: 2f:ae:d9:7f:7d:f6:8a:08:84:d8:a2:89:31:74:66: fd:4e:bb:8d:e4:0d:e9:0e:71:a2:08:45:58:73:42: 41:03:2f:a6:70:07:8e:3c:d8:43:0f:a2:69:ac:34: 04:90:bf:21:f4:26:a1:19:a4:48:63:5e:fb:92:50: 88:65:71:10:f7:90:8e:0d:b8:4e:02:47:07:0f:55: 91:ea:a8:54:d4:e8:dd:ae:ab:5c:d8:40:e4:8e:1f: 82:74:d8:bf:94:09:e9:cf:7d:76:a7:ee:e7:60:b4: 84:f0:32:60:3f:d8:30:df:82:79:78:1c:d1:1b:eb: 3c:c7:1b:8e:4c:9c:4a:d5:80:0b:5f:b0:ed:83:d3: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EA:0C:58:41:51:46:C9:ED:BB:30:ED:20:A4:B1:B6:5F:18:8B:BC X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a2:5b:7d:76:99:f3:b5:89:26:f4:97:48:c8:aa:30:f4:ea: 32:45:2e:a9:aa:53:28:ba:f9:ba:65:98:c2:79:c2:54:a0:69: fc:6a:5e:3e:75:7c:32:ab:0d:0f:72:66:c7:e5:5a:f0:40:00: 40:6f:b6:bb:85:aa:9f:5f:20:64:c9:da:9f:e2:58:67:db:70: b5:55:2e:81:72:26:a5:8b:98:8f:a5:c2:8f:f7:e3:ff:14:20: ea:63:e3:83:96:ef:ca:3e:dc:8c:97:7c:e9:aa:5e:a2:4d:d5: b8:9a:c8:af:1b:79:8a:5f:cd:aa:f3:42:e6:89:ff:f0:7a:ac: fe:7b:5f:fe:63:93:f1:ab:44:37:d0:3f:5f:8a:44:69:bb:26: 1c:51:15:0e:5f:d2:f3:6a:e7:59:c2:88:f6:cd:58:b9:8f:ec: 03:f9:ab:9f:7f:5d:17:41:91:d2:52:0a:7d:dd:0f:26:ff:4d: b0:72:20:fa:ea:99:4f:5a:f0:16:47:69:69:f9:54:27:4a:cd: a5:51:aa:03:cb:9d:0d:91:c1:ae:ff:d2:2e:ff:f3:99:89:b7: f6:a3:7e:67:cb:74:cd:7a:7f:94:37:96:da:08:bc:f4:6b:ce: e8:ca:c6:06:6e:70:ee:ab:b5:b7:19:d2:4d:20:2a:99:c3:ee: 50:14:13:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbL+7r1N/Luty6W8aXmKddFvIz3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA3MjMxMTU5NTNaFw0yNjA3MjQxMjIwNTNaMDMxMTAvBgNV BAMTKDkyRUEwQzU4NDE1MTQ2QzlFREJCMzBFRDIwQTRCMUI2NUYxODhCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFnivzc8/xvxiQTAnF+t+yFYi bcLH6JjHyQqqDASNs4ZCsy0cjaUsDH+vMUcwnKoD3LscEu+yjqrwGJcpYZHP/ICB FVqniwzQW7hE+LLinwgfxWaV+vv1bXj1j1mdcYxJdKv3J8ZESM3kI6Xii9CXfnok WAEH8i+u2X999ooIhNiiiTF0Zv1Ou43kDekOcaIIRVhzQkEDL6ZwB4482EMPomms NASQvyH0JqEZpEhjXvuSUIhlcRD3kI4NuE4CRwcPVZHqqFTU6N2uq1zYQOSOH4J0 2L+UCenPfXan7udgtITwMmA/2DDfgnl4HNEb6zzHG45MnErVgAtfsO2D0xq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkuoMWEFRRsntuzDtIKSxtl8Yi7wwHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaiW312mfO1iSb0l0jIqjD06jJFLqmqUyi6 +bplmMJ5wlSgafxqXj51fDKrDQ9yZsflWvBAAEBvtruFqp9fIGTJ2p/iWGfbcLVV LoFyJqWLmI+lwo/34/8UIOpj44OW78o+3IyXfOmqXqJN1biayK8beYpfzarzQuaJ //B6rP57X/5jk/GrRDfQP1+KRGm7JhxRFQ5f0vNq51nCiPbNWLmP7AP5q59/XRdB kdJSCn3dDyb/TbByIPrqmU9a8BZHaWn5VCdKzaVRqgPLnQ2Rwa7/0i7/85mJt/aj fmfLdM16f5Q3ltoIvPRrzujKxgZucO6rtbcZ0k0gKpnD7lAUE/M= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:41 2026 by rpki-client