$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft File: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft (raw, json) Hash identifier: kCSXvThEvReQEbiatYPe9jGfL6OrC1JxPgfxyHrRkDU= Subject key identifier: 05:4A:11:30:FC:5B:B5:D9:92:7E:C9:6F:8E:E0:F3:68:0A:CF:3E:C5 Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 0AE7CC4439D1DD2F16D6214B206C956696AFD00C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:54:40 +0000 Manifest this update: Thu 23 Jul 2026 11:49:40 +0000 Manifest next update: Fri 24 Jul 2026 14:06:40 +0000 Files and hashes: 1: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: 4WWBK+Xqi+9dfO6ReYcexqiP6BjY/M7vdE8KEBcG6ss=) 2: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: KJK22WdEptN4Z5tJMclzFpxJ7XT8hQKbX5zWOGXbC6s=) 3: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl (hash: QI1Z/gZvZuZ1W2yGL2glCkFBOe8hlvOgOC3fuBY7MR8=) 4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e7:cc:44:39:d1:dd:2f:16:d6:21:4b:20:6c:95:66:96:af:d0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: Jul 23 11:49:40 2026 GMT Not After : Jul 24 14:06:40 2026 GMT Subject: CN=054A1130FC5BB5D9927EC96F8EE0F3680ACF3EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:c7:9b:79:61:a3:82:d1:3e:e9:48:df:bf: cb:57:85:22:e6:99:1b:83:e0:63:32:af:4c:00:16: 2f:8d:3c:75:ce:9c:87:40:a9:fc:2a:0e:70:07:81: a8:1e:39:06:b9:13:42:8e:d4:03:c2:c9:8d:3f:85: 53:af:c7:0e:6d:c5:16:f6:6e:20:aa:86:0b:fa:54: b2:9c:60:8c:30:7b:29:07:f5:96:6f:e3:f2:51:9b: 6d:b6:f8:ae:0a:d6:5f:8c:b8:a0:9a:27:8d:a7:35: cc:33:8a:1d:f4:e3:3f:98:84:dc:3d:8f:35:a9:3b: e3:3e:63:8a:db:05:b1:37:f8:d8:2b:e1:0b:ee:0f: b5:ec:80:6a:31:0a:71:ba:85:c3:d6:ff:44:d6:2c: 45:62:27:37:1c:67:f0:eb:af:38:77:5d:51:f9:15: 53:1b:e0:69:e0:84:d0:45:61:d2:4a:4a:a7:83:b6: 3d:2e:52:c0:a2:77:3f:25:9f:3e:44:13:c8:b4:e8: 27:e7:b0:95:b7:36:c0:69:81:39:e1:42:fa:94:2d: e7:34:9e:82:e0:65:fd:b4:4f:93:23:e2:d5:64:0c: 36:7b:31:69:9c:15:79:c4:50:6a:f7:7d:f9:3e:8f: 79:58:24:b4:50:24:e1:8e:eb:c4:fb:41:e4:86:84: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:11:30:FC:5B:B5:D9:92:7E:C9:6F:8E:E0:F3:68:0A:CF:3E:C5 X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:43:25:09:01:28:db:59:5b:60:df:66:56:35:a2:4a:c7:cd: 12:19:54:bd:bd:d7:4f:a8:c2:de:da:14:9c:17:ae:9a:32:5a: b8:2c:e4:8d:30:0f:bd:fb:74:09:e5:48:f0:e7:93:85:23:e7: 8b:09:78:cb:56:6c:ef:4d:e4:10:97:01:8d:6e:3b:d1:5a:08: 33:fd:a0:7f:eb:af:26:8d:0a:b3:b6:1a:e6:af:33:ad:37:f0: 52:66:b6:19:c4:e4:a7:57:e3:21:dc:15:cd:8e:ef:8c:c3:63: d9:3b:04:dc:58:38:53:cd:e3:cb:ea:86:1f:cb:17:0f:16:5d: b2:4f:4d:9f:24:1b:46:67:4c:91:b3:17:19:30:09:36:db:91: 97:c7:ec:1f:6c:91:95:9c:e6:66:f1:e9:b1:b3:09:b4:c6:06: 1a:3a:99:86:d1:81:48:67:4a:48:2b:a1:06:cb:f3:94:da:d8: c3:2f:79:50:42:26:9a:f9:9f:2a:61:15:cf:c9:ff:85:1e:f0: b7:87:88:0d:82:05:fc:4a:88:e9:c5:0d:a4:ea:bf:6f:6c:b3: df:91:a4:ff:76:70:c3:51:63:20:65:60:a1:c6:da:62:37:d3: 2a:97:de:69:f3:0d:2a:d2:d1:65:f8:fb:32:d4:b1:ef:de:a1: 0a:1f:8e:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCufMRDnR3S8W1iFLIGyVZpav0AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA3MjMxMTQ5NDBaFw0yNjA3MjQxNDA2NDBaMDMxMTAvBgNV BAMTKDA1NEExMTMwRkM1QkI1RDk5MjdFQzk2RjhFRTBGMzY4MEFDRjNFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzB8ebeWGjgtE+6Ujfv8tXhSLm mRuD4GMyr0wAFi+NPHXOnIdAqfwqDnAHgageOQa5E0KO1APCyY0/hVOvxw5txRb2 biCqhgv6VLKcYIwweykH9ZZv4/JRm222+K4K1l+MuKCaJ42nNcwzih304z+YhNw9 jzWpO+M+Y4rbBbE3+Ngr4QvuD7XsgGoxCnG6hcPW/0TWLEViJzccZ/Drrzh3XVH5 FVMb4GnghNBFYdJKSqeDtj0uUsCidz8lnz5EE8i06CfnsJW3NsBpgTnhQvqULec0 noLgZf20T5Mj4tVkDDZ7MWmcFXnEUGr3ffk+j3lYJLRQJOGO68T7QeSGhMOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBUoRMPxbtdmSfslvjuDzaArPPsUwHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhE N0VERUU4MDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVDJQkBKNtZW2DfZlY1okrHzRIZVL2910+o wt7aFJwXrpoyWrgs5I0wD737dAnlSPDnk4Uj54sJeMtWbO9N5BCXAY1uO9FaCDP9 oH/rryaNCrO2GuavM6038FJmthnE5KdX4yHcFc2O74zDY9k7BNxYOFPN48vqhh/L Fw8WXbJPTZ8kG0ZnTJGzFxkwCTbbkZfH7B9skZWc5mbx6bGzCbTGBho6mYbRgUhn SkgroQbL85Ta2MMveVBCJpr5nyphFc/J/4Ue8LeHiA2CBfxKiOnFDaTqv29ss9+R pP92cMNRYyBlYKHG2mI30yqX3mnzDSrS0WX4+zLUse/eoQofjrY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:29:48 2026 by rpki-client