$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: ErEADy1B4kONK1DcUNt5ugeVpXHeAl60WI2x9BCqcFU= Subject key identifier: 54:CD:C4:ED:13:4A:3A:F8:20:45:09:F8:6F:82:28:56:C9:3F:83:4E Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 1E724748041CC0407DDF7B9C05CEEF2492014878 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:21:03 +0000 Manifest this update: Thu 23 Jul 2026 21:16:03 +0000 Manifest next update: Fri 24 Jul 2026 22:01:03 +0000 Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 2: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: NyOiq2EAU3wlYdB5hBu9Q8daI0qE13AQu15bLYfrVYY=) 3: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 5: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) 6: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:72:47:48:04:1c:c0:40:7d:df:7b:9c:05:ce:ef:24:92:01:48:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Jul 23 21:16:03 2026 GMT Not After : Jul 24 22:01:03 2026 GMT Subject: CN=54CDC4ED134A3AF8204509F86F822856C93F834E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:3c:f9:f1:8d:1c:a9:aa:90:ed:7a:4c:f3: 93:41:fe:4c:d1:51:75:5b:e9:c7:a6:d9:ae:39:4a: c4:cc:32:16:04:81:95:e1:d3:c0:2c:4f:09:42:9a: f8:0a:b3:ed:9c:61:ef:7c:31:cf:e2:03:8c:ec:78: a4:f8:96:6d:df:e9:fd:89:dd:31:08:4e:4a:4e:83: cc:e6:76:b5:00:ea:c0:8d:77:bb:ee:93:fa:1d:92: de:e8:dd:e8:0e:c3:dc:a7:fa:fd:24:38:5c:36:2b: 9a:43:5d:dd:f8:e0:c1:05:fd:a5:6f:a6:07:14:1c: 50:ed:10:54:01:80:dd:45:95:fd:43:56:27:cb:80: 0a:0a:2d:98:32:5c:29:59:95:82:fb:6e:a4:a1:b0: 50:0d:57:8e:c8:cf:66:5e:e4:07:d5:4a:54:5b:01: 56:f8:41:b2:da:a8:99:c1:4b:11:82:4e:64:f9:e7: 75:51:8c:2a:72:02:d1:86:09:98:4a:08:83:90:42: d2:87:87:18:0d:02:ce:e4:5e:4b:81:05:53:b5:3f: 18:2f:d0:5f:49:2e:bb:98:88:73:4e:18:c4:eb:cd: fe:37:29:dc:79:5c:98:cf:de:29:f6:db:93:84:d0: af:38:4b:0c:2b:49:83:9c:2b:0d:01:a1:54:38:61: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:C4:ED:13:4A:3A:F8:20:45:09:F8:6F:82:28:56:C9:3F:83:4E X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bb:90:5d:00:04:b3:5b:ea:0b:f8:ae:fe:85:7b:48:9a:06: 49:31:f8:df:2f:9c:0f:26:b9:d5:c5:ad:de:23:a4:d7:98:8a: 21:02:e1:15:7a:14:b2:0f:cb:f7:88:9f:f8:6f:a7:0e:65:cf: aa:ad:29:4b:d4:02:4b:a7:0b:c3:98:a9:00:1b:c4:ec:95:6a: 78:e7:ac:5b:4d:58:0a:7e:fd:55:d0:bb:06:5e:f1:30:ce:b0: 05:91:56:fa:d2:fa:4c:9b:07:48:3c:b7:74:68:ee:1d:31:c9: a9:27:3d:aa:67:8f:6a:63:dd:b5:50:32:f1:3c:97:7f:c2:9a: 38:b7:cd:9b:35:4e:49:3e:c5:d4:69:c0:96:81:b2:7a:00:b6: 18:bc:22:46:ab:ed:7e:d7:60:7b:a0:57:ec:ef:57:15:93:8e: d2:de:8b:9a:e9:cb:2a:86:dc:fa:8a:fe:03:c2:7c:e7:50:79: 67:9b:6d:b7:e0:8f:13:a9:6f:9f:1a:63:5d:ed:87:24:e2:65: 3e:d4:2a:78:a9:3d:64:48:90:07:fe:76:aa:23:1f:91:aa:6b: be:a2:28:93:d7:e4:ce:59:f3:9e:dd:23:71:12:72:7c:e4:ed: f6:8d:5d:39:08:b6:ee:c1:94:f7:1c:4a:b5:02:49:08:42:9c: aa:4f:fc:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnJHSAQcwEB933ucBc7vJJIBSHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA3MjMyMTE2MDNaFw0yNjA3MjQyMjAxMDNaMDMxMTAvBgNV BAMTKDU0Q0RDNEVEMTM0QTNBRjgyMDQ1MDlGODZGODIyODU2QzkzRjgzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4zz58Y0cqaqQ7XpM85NB/kzR UXVb6cem2a45SsTMMhYEgZXh08AsTwlCmvgKs+2cYe98Mc/iA4zseKT4lm3f6f2J 3TEITkpOg8zmdrUA6sCNd7vuk/odkt7o3egOw9yn+v0kOFw2K5pDXd344MEF/aVv pgcUHFDtEFQBgN1Flf1DVifLgAoKLZgyXClZlYL7bqShsFANV47Iz2Ze5AfVSlRb AVb4QbLaqJnBSxGCTmT553VRjCpyAtGGCZhKCIOQQtKHhxgNAs7kXkuBBVO1Pxgv 0F9JLruYiHNOGMTrzf43Kdx5XJjP3in225OE0K84SwwrSYOcKw0BoVQ4YVfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVM3E7RNKOvggRQn4b4IoVsk/g04wHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa7kF0ABLNb6gv4rv6Fe0iaBkkx+N8vnA8m udXFrd4jpNeYiiEC4RV6FLIPy/eIn/hvpw5lz6qtKUvUAkunC8OYqQAbxOyVanjn rFtNWAp+/VXQuwZe8TDOsAWRVvrS+kybB0g8t3Ro7h0xyaknPapnj2pj3bVQMvE8 l3/Cmji3zZs1Tkk+xdRpwJaBsnoAthi8Ikar7X7XYHugV+zvVxWTjtLei5rpyyqG 3PqK/gPCfOdQeWebbbfgjxOpb58aY13thyTiZT7UKnipPWRIkAf+dqojH5Gqa76i KJPX5M5Z857dI3EScnzk7faNXTkItu7BlPccSrUCSQhCnKpP/N4= -----END CERTIFICATE-----Generated at Fri Jul 24 11:50:58 2026 by rpki-client