$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: 4Fnlt9abXNu09HEAtEmp5ZsmOOuooQPHaM/Pkk/On4U= Subject key identifier: E5:1D:DF:69:C7:FC:C3:F2:48:60:DE:98:10:8E:0E:42:67:FF:8A:B5 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 6941AB6299CA3EE3BFFCE4FC54E50FC619654986 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:18:49 +0000 Manifest this update: Thu 23 Jul 2026 19:13:49 +0000 Manifest next update: Fri 24 Jul 2026 22:47:49 +0000 Files and hashes: 1: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 2: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: rI7D/ImyHQqou23mgYvT5d+fi14PmjNbjjtjuK05gGU=) 3: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 5: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:41:ab:62:99:ca:3e:e3:bf:fc:e4:fc:54:e5:0f:c6:19:65:49:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Jul 23 19:13:49 2026 GMT Not After : Jul 24 22:47:49 2026 GMT Subject: CN=E51DDF69C7FCC3F24860DE98108E0E4267FF8AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:62:15:13:e6:61:ff:2f:92:97:cd:39:75: 26:55:59:31:31:cb:17:bc:77:05:ef:04:db:ad:d6: 5d:f5:3f:3d:a7:b1:cb:d5:93:55:c5:77:70:2f:c3: 92:7b:78:33:54:39:32:2d:13:15:9c:cb:19:67:bc: cb:3a:98:c1:39:f7:00:f5:0c:5c:fd:b5:14:40:99: 20:99:46:fa:77:9d:b3:88:09:e4:69:67:ab:d7:2c: 52:1c:b3:9b:c8:bf:b2:7f:e7:35:01:31:b7:af:23: 64:a8:4d:26:39:44:df:a3:f5:98:1e:4d:59:bc:73: 7e:81:d4:86:4b:e0:9f:34:3e:ab:0f:90:be:92:2b: 6a:6e:64:82:01:de:52:6c:b4:a2:54:35:4a:3f:99: 75:eb:2e:05:84:cd:4f:be:14:00:95:bc:09:f4:3a: 12:97:25:6d:e7:c9:4a:2d:1a:67:80:5d:b9:df:11: e8:36:9b:b8:98:53:36:56:d2:d9:d3:14:4c:cf:ee: 8e:48:64:9a:64:5a:8e:a4:46:69:ed:24:9c:e0:d5: c1:a6:d8:31:88:07:42:42:32:89:b9:4f:ff:c5:c8: bb:89:c1:d6:f3:66:3f:ea:49:0d:b0:29:54:ef:dc: e9:7b:22:25:ca:55:27:6d:a8:98:b2:cd:3a:bc:ce: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:DF:69:C7:FC:C3:F2:48:60:DE:98:10:8E:0E:42:67:FF:8A:B5 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5a:3a:25:6d:90:f2:98:5e:b4:c5:4f:0f:49:d7:8e:c3:3b: dc:84:34:92:f8:8a:fe:b9:76:4f:02:4c:9d:f9:6a:08:0b:53: 5d:b2:e7:3f:46:ac:2c:58:ab:a3:9d:e3:f1:96:a7:e9:e5:9a: 6d:e6:34:06:5e:6d:97:92:78:3a:e9:63:13:e8:e0:02:58:e4: 0d:35:bd:95:5f:37:ec:fd:af:26:47:2f:24:cc:04:48:f6:ce: 8e:29:fd:21:10:26:8f:f2:7e:88:70:6e:fb:90:9e:e4:01:17: 1c:7e:4a:75:e5:ca:bc:6c:ec:82:61:86:6f:90:4c:38:4d:b6: 9c:2e:01:12:c9:65:c6:6f:75:75:04:6c:71:13:65:0d:e6:4b: d4:6b:66:40:a7:c1:8e:f5:5d:d3:27:b8:58:3e:cd:1d:ec:bb: e1:9b:f1:09:75:0d:88:fe:d3:5c:3d:99:c9:a8:dd:af:da:ab: d0:88:93:77:8d:08:59:e7:42:43:51:75:cc:6e:78:2e:e6:57: 69:29:fe:5c:c2:1f:68:4b:20:b0:81:73:73:96:a5:24:29:93: 74:f0:b4:7f:c4:67:c3:13:56:b1:d5:47:ff:7c:e9:2b:64:89: b9:19:04:89:ed:51:62:a0:30:ac:c2:46:1a:fa:79:49:07:64: 31:b2:6f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUGrYpnKPuO//OT8VOUPxhllSYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA3MjMxOTEzNDlaFw0yNjA3MjQyMjQ3NDlaMDMxMTAvBgNV BAMTKEU1MURERjY5QzdGQ0MzRjI0ODYwREU5ODEwOEUwRTQyNjdGRjhBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5GIVE+Zh/y+Sl805dSZVWTEx yxe8dwXvBNut1l31Pz2nscvVk1XFd3Avw5J7eDNUOTItExWcyxlnvMs6mME59wD1 DFz9tRRAmSCZRvp3nbOICeRpZ6vXLFIcs5vIv7J/5zUBMbevI2SoTSY5RN+j9Zge TVm8c36B1IZL4J80PqsPkL6SK2puZIIB3lJstKJUNUo/mXXrLgWEzU++FACVvAn0 OhKXJW3nyUotGmeAXbnfEeg2m7iYUzZW0tnTFEzP7o5IZJpkWo6kRmntJJzg1cGm 2DGIB0JCMom5T//FyLuJwdbzZj/qSQ2wKVTv3Ol7IiXKVSdtqJiyzTq8zrZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5R3facf8w/JIYN6YEI4OQmf/irUwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFaOiVtkPKYXrTFTw9J147DO9yENJL4iv65 dk8CTJ35aggLU12y5z9GrCxYq6Od4/GWp+nlmm3mNAZebZeSeDrpYxPo4AJY5A01 vZVfN+z9ryZHLyTMBEj2zo4p/SEQJo/yfohwbvuQnuQBFxx+SnXlyrxs7IJhhm+Q TDhNtpwuARLJZcZvdXUEbHETZQ3mS9RrZkCnwY71XdMnuFg+zR3su+Gb8Ql1DYj+ 01w9mcmo3a/aq9CIk3eNCFnnQkNRdcxueC7mV2kp/lzCH2hLILCBc3OWpSQpk3Tw tH/EZ8MTVrHVR/986StkibkZBIntUWKgMKzCRhr6eUkHZDGyb3Y= -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:39 2026 by rpki-client