$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: OXvptSTppDCHJPt5miE1OBUXPlQ3keESbEo4TiJs0/w= Subject key identifier: D4:D6:B8:40:8F:DA:DA:8F:9F:B3:FB:08:59:FE:91:21:A9:FB:3D:A4 Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 63F6528AABCED136727BFF300BA8A3C71AC6EB69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:24:51 +0000 Manifest this update: Fri 24 Jul 2026 04:19:51 +0000 Manifest next update: Sat 25 Jul 2026 06:58:51 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) 2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: dhcIjazlILuNSbwkHBH9lXPtC7lYKRvmYt0brcdBNQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f6:52:8a:ab:ce:d1:36:72:7b:ff:30:0b:a8:a3:c7:1a:c6:eb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Jul 24 04:19:51 2026 GMT Not After : Jul 25 06:58:51 2026 GMT Subject: CN=D4D6B8408FDADA8F9FB3FB0859FE9121A9FB3DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d7:9e:dd:7c:18:3c:29:e3:5f:40:a8:22:b9: 09:51:5f:4a:a9:8a:fd:56:e4:bc:12:ea:50:30:b6: d6:51:69:78:6c:bf:e8:e4:96:a3:1f:2a:5d:59:a3: 52:ce:74:c8:43:cc:bb:e2:42:b3:f4:c3:b5:48:2e: c0:d8:f5:e2:f1:8a:a0:76:e8:3a:31:bf:83:e0:4d: 3b:3d:46:62:ef:30:a9:8f:8b:5e:70:9b:e0:8c:56: 7c:ac:5e:32:37:bd:b3:13:8a:79:95:9f:85:fa:f3: d4:ae:94:4d:58:35:d0:ba:21:65:2a:5c:5a:e8:6d: e8:3b:11:98:31:13:12:79:b9:0a:df:6c:f0:e7:40: ad:c8:68:62:85:fc:3f:79:92:ae:8a:c5:e0:19:63: d6:d6:79:4a:35:e9:62:a2:23:7d:27:61:04:30:ad: ef:9f:0e:71:8f:1c:a2:39:f3:04:17:58:53:d6:77: 78:98:46:dd:82:fc:d4:dc:d8:86:12:59:76:bb:c9: 2c:b3:e6:6e:20:bc:25:a5:63:5a:87:07:95:6e:1c: 7d:1d:bf:84:44:4c:cb:f9:1b:bc:1d:dd:b8:36:3b: 91:57:5e:94:08:16:44:a7:87:70:1a:92:09:3e:4e: 38:4b:32:0e:77:4d:f9:b1:9e:ad:cd:3d:67:8e:31: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D6:B8:40:8F:DA:DA:8F:9F:B3:FB:08:59:FE:91:21:A9:FB:3D:A4 X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:75:69:b2:d9:b6:ac:e0:1d:20:c4:53:e9:86:07:6a:ab: 27:64:5a:ce:e5:6a:ac:5d:1c:90:3e:ad:6a:e4:ec:64:3e:5b: 4d:6f:b4:a7:3c:8a:5f:75:8c:9d:1c:4f:cf:14:18:f0:af:7a: 51:27:cf:fc:e3:d1:66:30:22:16:c8:48:e9:f0:a9:c3:d4:f0: 99:c2:53:3b:2e:7d:92:0d:ad:8c:94:02:63:01:51:1c:5e:5f: 02:8b:8b:8f:7d:36:f2:97:8a:10:a8:9c:d6:b1:40:d8:90:87: bd:b4:6f:6f:fc:07:29:31:2c:97:d7:18:17:38:58:f9:7a:bf: 54:28:a5:5f:c4:49:c1:9e:4a:60:38:78:5a:d1:ac:c3:6b:02: 8d:1f:35:21:cb:83:21:25:76:81:2e:3c:e2:a1:f3:6f:fc:6b: da:fd:46:f8:46:2b:8b:3e:9b:d9:23:b4:28:3f:3f:fa:75:c3: 67:65:3f:47:82:06:db:f3:92:57:41:83:a7:a4:8d:d6:fc:e9: 89:e3:63:6c:9b:6f:d3:f6:43:4f:60:09:7b:19:7a:75:f9:0a: f5:ae:ff:32:6b:ce:0f:72:f5:1a:cc:6b:4b:28:ea:67:85:41: 2a:1c:ab:c7:59:cb:98:89:5f:2a:3e:e4:f7:81:16:c6:c5:6d: fe:f7:ca:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/ZSiqvO0TZye/8wC6ijxxrG62kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA3MjQwNDE5NTFaFw0yNjA3MjUwNjU4NTFaMDMxMTAvBgNV BAMTKEQ0RDZCODQwOEZEQURBOEY5RkIzRkIwODU5RkU5MTIxQTlGQjNEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1157dfBg8KeNfQKgiuQlRX0qp iv1W5LwS6lAwttZRaXhsv+jklqMfKl1Zo1LOdMhDzLviQrP0w7VILsDY9eLxiqB2 6Doxv4PgTTs9RmLvMKmPi15wm+CMVnysXjI3vbMTinmVn4X689SulE1YNdC6IWUq XFrobeg7EZgxExJ5uQrfbPDnQK3IaGKF/D95kq6KxeAZY9bWeUo16WKiI30nYQQw re+fDnGPHKI58wQXWFPWd3iYRt2C/NTc2IYSWXa7ySyz5m4gvCWlY1qHB5VuHH0d v4RETMv5G7wd3bg2O5FXXpQIFkSnh3Aakgk+TjhLMg53Tfmxnq3NPWeOMY9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Na4QI/a2o+fs/sIWf6RIan7PaQwHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1rdWmy2bas4B0gxFPphgdqqydkWs7laqxd HJA+rWrk7GQ+W01vtKc8il91jJ0cT88UGPCvelEnz/zj0WYwIhbISOnwqcPU8JnC UzsufZINrYyUAmMBURxeXwKLi499NvKXihConNaxQNiQh720b2/8BykxLJfXGBc4 WPl6v1QopV/EScGeSmA4eFrRrMNrAo0fNSHLgyEldoEuPOKh82/8a9r9RvhGK4s+ m9kjtCg/P/p1w2dlP0eCBtvzkldBg6ekjdb86YnjY2ybb9P2Q09gCXsZenX5CvWu /zJrzg9y9RrMa0so6meFQSocq8dZy5iJXyo+5PeBFsbFbf73ygE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:37:40 2026 by rpki-client