$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: Kd5WjF33H85TymQaQ0OliWfIUBHmY8fFHXa41AJmunA= Subject key identifier: DD:24:07:18:5F:8F:65:62:52:A8:86:ED:8B:5B:6F:1A:F9:14:EF:F7 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 7F674C66833D89E23BCD1FCA8CDA3CA793AD8023 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:11:06 +0000 Manifest this update: Thu 23 Jul 2026 09:06:06 +0000 Manifest next update: Fri 24 Jul 2026 12:06:06 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 3: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: WwnGgMt7PVt1AAAmnTLBiFXPg++RMm7yPg1/ewlCGLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:67:4c:66:83:3d:89:e2:3b:cd:1f:ca:8c:da:3c:a7:93:ad:80:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Jul 23 09:06:06 2026 GMT Not After : Jul 24 12:06:06 2026 GMT Subject: CN=DD2407185F8F656252A886ED8B5B6F1AF914EFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:bd:3c:46:88:d7:18:76:a8:f0:75:cd:8c: 12:c8:f4:3b:d6:87:24:2c:e5:77:f1:60:28:e5:ce: b4:fb:fd:1a:14:bd:70:f5:b0:36:1d:4b:8e:54:c4: 0f:f6:10:8b:f3:fd:0e:81:b5:c2:47:2e:bb:ad:ad: f9:6e:de:59:16:04:99:63:0c:6d:95:9b:d2:b1:88: 61:06:64:1a:59:36:a0:52:7a:17:1e:37:cb:ae:11: 45:ab:aa:bf:9f:bd:bc:f3:f2:9a:da:2d:04:00:8e: 7b:b0:7e:e9:9f:c6:bb:c1:d2:a4:5b:bc:0a:65:4a: c7:99:c2:43:ee:0f:80:69:28:b9:91:9c:46:6a:c4: 78:81:fc:9c:00:22:19:96:c9:5f:f3:4e:b1:eb:99: 23:99:26:3b:3b:5e:d6:93:aa:0c:d6:e4:06:96:76: 4c:4d:98:d4:b8:18:5b:cd:2f:5f:05:33:1e:56:d1: bc:b7:31:f7:b7:27:fd:9e:c0:b9:2e:3e:68:57:23: 3d:21:86:2d:b4:45:73:4a:d6:ae:cf:69:65:77:c1: 9b:ae:85:02:b2:92:23:77:ba:f4:7f:1a:ff:0c:1e: a3:9c:83:73:83:c9:63:cd:44:ee:8c:5d:8d:a1:54: 8f:c6:b4:5a:91:27:4b:3b:f7:8d:8a:b7:cc:3a:f7: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:07:18:5F:8F:65:62:52:A8:86:ED:8B:5B:6F:1A:F9:14:EF:F7 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c5:cb:9c:4b:2e:da:0e:49:0b:7f:fb:7f:fa:f7:e8:ef:df: 18:f2:c3:c5:0c:1d:d7:86:9d:fc:db:58:81:51:bb:df:f4:71: 56:bf:ac:9c:e2:8d:a7:a7:bc:32:60:d1:ee:2d:f9:d2:57:92: 4e:94:eb:82:c3:42:8d:13:be:36:8f:86:53:2e:9f:fb:eb:4a: 64:74:47:8d:96:e2:7b:7e:5a:a4:6f:11:f3:c4:40:40:4e:f8: 0e:c5:ec:ed:a1:9f:19:70:35:18:7e:2f:ec:42:3e:92:49:8d: dd:0d:a4:57:b5:8c:7c:6c:fe:71:c7:4c:0a:84:96:80:40:80: 01:7e:80:3c:45:b0:9b:50:d7:48:75:08:03:1f:de:91:80:ad: e3:89:5e:7c:2e:b6:19:91:68:17:27:52:df:48:50:f8:f5:ba: 77:b0:76:0a:14:35:74:84:9b:6f:04:6f:e6:00:c7:a3:5e:49: 7b:74:02:76:15:27:b4:59:a4:6b:33:46:88:16:dd:49:49:77: 1c:c4:16:5d:0e:30:b6:91:c9:9e:7a:b0:18:9b:03:83:db:82: b6:17:cc:b7:88:6a:7d:20:72:22:28:dc:57:1c:6e:e5:9c:7d: 81:21:58:c5:bd:1e:1e:ca:63:5b:2a:0b:7d:d0:d7:dd:5c:71: a0:0e:6c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2dMZoM9ieI7zR/KjNo8p5OtgCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA3MjMwOTA2MDZaFw0yNjA3MjQxMjA2MDZaMDMxMTAvBgNV BAMTKEREMjQwNzE4NUY4RjY1NjI1MkE4ODZFRDhCNUI2RjFBRjkxNEVGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5b08RojXGHao8HXNjBLI9DvW hyQs5XfxYCjlzrT7/RoUvXD1sDYdS45UxA/2EIvz/Q6BtcJHLrutrflu3lkWBJlj DG2Vm9KxiGEGZBpZNqBSehceN8uuEUWrqr+fvbzz8praLQQAjnuwfumfxrvB0qRb vAplSseZwkPuD4BpKLmRnEZqxHiB/JwAIhmWyV/zTrHrmSOZJjs7XtaTqgzW5AaW dkxNmNS4GFvNL18FMx5W0by3Mfe3J/2ewLkuPmhXIz0hhi20RXNK1q7PaWV3wZuu hQKykiN3uvR/Gv8MHqOcg3ODyWPNRO6MXY2hVI/GtFqRJ0s7942Kt8w693QNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3SQHGF+PZWJSqIbti1tvGvkU7/cwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTFy5xLLtoOSQt/+3/69+jv3xjyw8UMHdeG nfzbWIFRu9/0cVa/rJzijaenvDJg0e4t+dJXkk6U64LDQo0TvjaPhlMun/vrSmR0 R42W4nt+WqRvEfPEQEBO+A7F7O2hnxlwNRh+L+xCPpJJjd0NpFe1jHxs/nHHTAqE loBAgAF+gDxFsJtQ10h1CAMf3pGAreOJXnwuthmRaBcnUt9IUPj1unewdgoUNXSE m28Eb+YAx6NeSXt0AnYVJ7RZpGszRogW3UlJdxzEFl0OMLaRyZ56sBibA4PbgrYX zLeIan0gciIo3FccbuWcfYEhWMW9Hh7KY1sqC33Q191ccaAObAo= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:14 2026 by rpki-client