$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: h87s/NqjaOTPiVX0X+G0znkeINyaO7t73AN8U02qXu8= Subject key identifier: D5:02:33:41:8E:A5:93:A1:E3:FC:0A:CF:0D:00:E0:DB:2E:1E:06:6A Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 77A88A96B3BFF68B7A34D2CD4F4E7A7D5AC19DF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:44:15 +0000 Manifest this update: Thu 23 Jul 2026 19:39:15 +0000 Manifest next update: Fri 24 Jul 2026 22:37:15 +0000 Files and hashes: 1: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: xsx8r4pC48fMjfACAzSSUp3e3ZOJIiM7Cbmbz+fNbUM=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a8:8a:96:b3:bf:f6:8b:7a:34:d2:cd:4f:4e:7a:7d:5a:c1:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: Jul 23 19:39:15 2026 GMT Not After : Jul 24 22:37:15 2026 GMT Subject: CN=D50233418EA593A1E3FC0ACF0D00E0DB2E1E066A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:2b:dc:5c:4c:aa:42:81:f0:e5:48:60:ed: d7:4b:cd:52:83:10:97:db:77:06:64:69:45:1c:fc: 7a:df:cd:45:66:5d:98:65:d0:85:41:4c:27:6a:77: 87:24:0a:55:f8:48:6f:8b:77:d3:61:f5:e8:7e:c5: 39:4e:71:2d:2c:22:51:0a:c5:13:3b:e6:21:0d:3a: 09:4a:6b:90:fa:25:22:21:1a:9d:f6:c1:e5:0e:b9: a9:9e:f1:ba:47:4a:f5:b6:42:f9:6c:14:b5:91:58: cf:bd:d6:70:5f:6b:80:f0:e2:16:1d:42:c3:f3:10: 7a:07:90:c9:98:2a:d0:54:74:ef:7f:c6:3e:b8:cd: 40:04:5f:72:3b:5d:7f:02:e9:b8:f0:53:a5:a3:c7: 56:f5:58:59:38:f0:2c:3d:e1:40:ff:b0:7f:79:3d: d5:2b:33:02:8b:0c:2c:44:0d:e0:44:9a:e8:31:cb: 5f:8b:c1:d3:92:cc:ab:ee:86:30:a8:39:04:87:c1: d0:55:12:cb:f5:f5:66:be:cd:20:fa:02:3a:fd:63: a8:a8:39:c9:12:0f:07:7c:8d:5b:5a:05:79:05:ac: 2b:7f:cb:5d:50:dd:b5:e0:84:14:5a:73:cb:36:5e: 5d:53:e8:ae:4c:9c:bd:78:e0:31:ed:67:65:f3:96: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:33:41:8E:A5:93:A1:E3:FC:0A:CF:0D:00:E0:DB:2E:1E:06:6A X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:a6:5f:e8:e2:fc:88:bc:97:f5:83:47:8e:9c:34:cc:be: 6b:f1:1e:9c:62:4b:b0:fd:25:cc:bc:6a:69:cb:93:70:f2:56: b4:36:6d:2e:14:be:75:10:9e:98:4d:61:cd:50:86:b7:ce:ba: c6:17:0e:e5:9e:7c:9d:4b:4d:dd:4d:e9:2a:77:95:6c:02:be: 0d:da:5b:87:93:56:79:05:c2:57:73:70:e1:14:ae:9a:87:26: b0:77:2d:a9:a9:3d:f8:6c:3e:8f:78:38:4c:d7:c9:75:cf:9a: b1:e4:56:18:5a:e2:81:18:cc:c4:a8:5e:6e:20:6f:17:27:b8: 5e:a2:dc:6c:5d:86:32:e1:84:dd:49:cf:c7:b8:45:f1:2e:6a: 8e:64:9e:b3:23:4a:cd:bd:66:49:85:03:64:2f:59:97:b1:12: 61:1e:99:e6:53:fa:75:7c:14:48:66:31:6e:52:fd:0b:8c:fb: c3:9f:70:da:6d:b8:8f:60:f0:b6:3c:81:8e:15:86:83:72:e1: 22:f8:a5:63:0b:fe:30:55:43:13:72:8c:c9:1b:8d:df:5d:a7: 1c:92:02:af:d4:fa:9b:0e:83:d3:94:db:c0:82:51:7f:e9:22: ef:af:09:f5:11:43:06:f0:4b:2c:8f:d0:82:43:c1:d6:72:ff: b5:92:fb:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6iKlrO/9ot6NNLNT056fVrBnfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjA3MjMxOTM5MTVaFw0yNjA3MjQyMjM3MTVaMDMxMTAvBgNV BAMTKEQ1MDIzMzQxOEVBNTkzQTFFM0ZDMEFDRjBEMDBFMERCMkUxRTA2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kSvcXEyqQoHw5Uhg7ddLzVKD EJfbdwZkaUUc/HrfzUVmXZhl0IVBTCdqd4ckClX4SG+Ld9Nh9eh+xTlOcS0sIlEK xRM75iENOglKa5D6JSIhGp32weUOuame8bpHSvW2QvlsFLWRWM+91nBfa4Dw4hYd QsPzEHoHkMmYKtBUdO9/xj64zUAEX3I7XX8C6bjwU6Wjx1b1WFk48Cw94UD/sH95 PdUrMwKLDCxEDeBEmugxy1+LwdOSzKvuhjCoOQSHwdBVEsv19Wa+zSD6Ajr9Y6io OckSDwd8jVtaBXkFrCt/y11Q3bXghBRac8s2Xl1T6K5MnL144DHtZ2Xzlsd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1QIzQY6lk6Hj/ArPDQDg2y4eBmowHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKKpl/o4vyIvJf1g0eOnDTMvmvxHpxiS7D9 Jcy8amnLk3DyVrQ2bS4UvnUQnphNYc1QhrfOusYXDuWefJ1LTd1N6Sp3lWwCvg3a W4eTVnkFwldzcOEUrpqHJrB3LampPfhsPo94OEzXyXXPmrHkVhha4oEYzMSoXm4g bxcnuF6i3GxdhjLhhN1Jz8e4RfEuao5knrMjSs29ZkmFA2QvWZexEmEemeZT+nV8 FEhmMW5S/QuM+8OfcNptuI9g8LY8gY4VhoNy4SL4pWML/jBVQxNyjMkbjd9dpxyS Aq/U+psOg9OU28CCUX/pIu+vCfURQwbwSyyP0IJDwdZy/7WS+10= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:56 2026 by rpki-client