$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: GvYHdOAbYYHUNBRVDUingxcJItzBcXFdPu4Bps/jb4g= Subject key identifier: 31:E7:65:CD:C8:1F:E6:65:A9:8A:1A:C6:47:3F:F6:8A:8C:5F:E8:1C Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 5C1367009AF0C6C33687391E69E25BB3FF32B8BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:32:20 +0000 Manifest this update: Fri 24 Jul 2026 02:27:20 +0000 Manifest next update: Sat 25 Jul 2026 05:41:20 +0000 Files and hashes: 1: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: K7V8iZJDGw3f/3sk1VKPBzt7MmAzsvae7W+zPtHeqmo=) 2: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:13:67:00:9a:f0:c6:c3:36:87:39:1e:69:e2:5b:b3:ff:32:b8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Jul 24 02:27:20 2026 GMT Not After : Jul 25 05:41:20 2026 GMT Subject: CN=31E765CDC81FE665A98A1AC6473FF68A8C5FE81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:93:66:3d:8c:5a:a6:ce:9d:4a:44:1c:51: e7:ad:7e:2b:49:5c:af:a1:9e:e4:7a:08:b4:ce:84: da:0f:0c:6a:e3:61:10:64:b5:d5:06:3a:8f:07:bc: 3d:20:d2:b5:0b:e6:24:49:0e:b0:54:6b:66:18:9a: 49:09:17:09:a8:ae:10:75:cf:b9:e1:16:4e:3d:69: 63:95:c7:36:d3:49:9f:b2:a9:1e:69:a3:5d:3b:e6: 92:ef:3c:fa:73:dd:66:f8:f6:4e:40:e6:54:3f:1e: 68:57:58:23:ab:04:4b:ee:b3:09:57:91:7c:80:38: 4a:b1:a0:e6:48:60:a0:9a:d0:5d:e3:33:07:70:7f: c1:14:a6:79:90:3c:ed:69:ea:19:a6:8f:2a:1f:7f: 0e:95:ab:e4:d0:47:d0:69:32:b7:b1:b7:26:bd:8f: 9c:18:bc:03:8c:b1:88:4b:f0:5a:d3:19:3d:64:84: 67:57:dc:0b:ab:1b:56:9c:da:4f:82:12:0c:38:53: 33:22:ed:95:d0:a0:8b:26:d1:06:71:77:57:2c:ce: 57:eb:ea:b3:bd:13:f6:e2:5d:3a:d6:9d:03:28:80: c1:77:9b:1a:ef:58:19:38:23:20:06:fb:e1:a0:5d: 18:e7:ea:ac:5f:12:36:06:57:3c:25:d6:a8:15:9d: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:65:CD:C8:1F:E6:65:A9:8A:1A:C6:47:3F:F6:8A:8C:5F:E8:1C X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:06:28:77:83:67:04:f0:e2:2c:c9:26:aa:ca:13:11:16:60: 91:80:62:20:34:26:7f:af:0c:41:e9:e3:ac:be:b7:e3:0c:79: 4a:44:ae:d0:86:e9:c0:e4:f7:42:7b:a7:16:a7:73:37:a8:d1: a1:78:75:ca:9f:ff:f7:b5:9c:f0:7e:d8:9e:3a:39:7b:ac:bc: dd:68:42:27:28:2b:9e:1c:bc:97:33:98:62:73:ba:10:71:4c: 7c:0b:2b:72:03:93:b3:1f:76:01:b7:1e:f7:85:bd:80:f9:bd: b5:9d:03:4e:98:bb:d1:00:14:c9:47:bf:71:30:c8:1c:b0:df: 16:4b:3d:96:59:84:ca:27:3d:59:4d:74:be:12:24:74:ee:98: 5a:60:58:bc:e4:0e:db:bd:98:79:f0:2c:38:96:39:3d:78:7f: 5b:7f:9a:cb:c0:a2:4a:83:f1:27:59:3e:b0:6e:96:f2:2e:d3: 27:81:0c:06:d1:81:ad:9c:b8:06:dc:2e:f3:b6:51:7f:5a:26: d8:47:bb:b5:1c:14:c3:17:4b:b8:cf:0f:3a:e7:56:32:7f:df: 0f:09:94:fc:b1:9a:d1:d0:94:48:6e:83:d3:82:01:f3:e8:27: 93:49:00:63:bf:80:f8:c7:02:1b:06:2f:c9:d4:6b:29:6e:cf: e5:dd:1e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBNnAJrwxsM2hzkeaeJbs/8yuLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA3MjQwMjI3MjBaFw0yNjA3MjUwNTQxMjBaMDMxMTAvBgNV BAMTKDMxRTc2NUNEQzgxRkU2NjVBOThBMUFDNjQ3M0ZGNjhBOEM1RkU4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyb5NmPYxaps6dSkQcUeetfitJ XK+hnuR6CLTOhNoPDGrjYRBktdUGOo8HvD0g0rUL5iRJDrBUa2YYmkkJFwmorhB1 z7nhFk49aWOVxzbTSZ+yqR5po1075pLvPPpz3Wb49k5A5lQ/HmhXWCOrBEvuswlX kXyAOEqxoOZIYKCa0F3jMwdwf8EUpnmQPO1p6hmmjyoffw6Vq+TQR9BpMrextya9 j5wYvAOMsYhL8FrTGT1khGdX3AurG1ac2k+CEgw4UzMi7ZXQoIsm0QZxd1cszlfr 6rO9E/biXTrWnQMogMF3mxrvWBk4IyAG++GgXRjn6qxfEjYGVzwl1qgVnfl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMedlzcgf5mWpihrGRz/2ioxf6BwwHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAGKHeDZwTw4izJJqrKExEWYJGAYiA0Jn+v DEHp46y+t+MMeUpErtCG6cDk90J7pxanczeo0aF4dcqf//e1nPB+2J46OXusvN1o QicoK54cvJczmGJzuhBxTHwLK3IDk7MfdgG3HveFvYD5vbWdA06Yu9EAFMlHv3Ew yByw3xZLPZZZhMonPVlNdL4SJHTumFpgWLzkDtu9mHnwLDiWOT14f1t/msvAokqD 8SdZPrBulvIu0yeBDAbRga2cuAbcLvO2UX9aJthHu7UcFMMXS7jPDzrnVjJ/3w8J lPyxmtHQlEhug9OCAfPoJ5NJAGO/gPjHAhsGL8nUayluz+XdHsw= -----END CERTIFICATE-----Generated at Fri Jul 24 05:12:32 2026 by rpki-client