$ rpki-client -vvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: XSn+xQlADP0Vu2OiLMUxMEY4l08Jp0ZRxEZNMd2D/kE= Subject key identifier: 45:52:31:3E:A3:15:A2:2B:16:41:A6:74:91:46:67:99:CA:A9:9D:04 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 29B7954957C1562F1C2EACA00DF48F975E1B4972 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:09:37 +0000 Manifest this update: Thu 23 Jul 2026 16:04:37 +0000 Manifest next update: Fri 24 Jul 2026 18:51:37 +0000 Files and hashes: 1: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: bPnjuZLRwmCXaAZ63jRZWXpem/82i8o3B50oaS+4saQ=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b7:95:49:57:c1:56:2f:1c:2e:ac:a0:0d:f4:8f:97:5e:1b:49:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Jul 23 16:04:37 2026 GMT Not After : Jul 24 18:51:37 2026 GMT Subject: CN=4552313EA315A22B1641A67491466799CAA99D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:7f:b0:2b:5a:0e:11:03:97:6e:c3:a1:16: 37:ef:61:22:0d:6e:9d:33:18:ec:9d:ee:3c:2f:b1: a6:d3:42:32:94:1e:8d:d3:a2:f6:28:ea:9a:5b:ef: 2b:a8:4c:93:55:11:6b:00:bb:79:e3:32:cf:4a:97: 34:ec:b2:ac:41:c1:7c:37:f6:71:21:8a:2c:34:41: c0:ff:58:1b:6e:31:48:c5:0f:fa:ef:b2:bc:46:3e: a7:f4:26:49:e2:f7:fc:1c:15:a5:5d:8a:7b:d8:40: 95:16:98:5d:96:c8:87:9b:56:d0:92:9e:4b:63:17: 33:ee:29:f5:7c:af:24:04:66:3e:0a:d4:93:17:f8: ff:e1:6e:c7:e3:8e:8c:f0:c1:1e:f0:b7:cf:b7:7c: 80:c5:6c:a8:84:93:cd:9c:17:bf:e4:63:2c:75:25: 8c:fe:4f:c6:4d:d5:4e:8d:9d:19:14:f9:6a:b0:04: 6c:68:38:17:39:ca:c7:f2:df:9f:0f:d0:0a:0f:f2: eb:68:d8:71:64:85:36:24:8d:fa:4d:82:c7:34:72: ba:e3:2d:f0:cf:de:32:9b:a3:e0:d0:76:52:b9:e7: c2:10:16:62:b4:ac:50:21:36:cc:d7:3e:05:40:59: ca:ad:c0:33:1b:7d:2a:b9:e4:f5:cd:19:57:5d:f4: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:31:3E:A3:15:A2:2B:16:41:A6:74:91:46:67:99:CA:A9:9D:04 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:17:01:96:d4:17:9c:7e:e2:10:6a:b8:1a:e1:7e:b3:fb:0b: 97:f4:4a:f7:0a:e0:8a:13:4a:fe:2b:34:3e:45:30:04:58:45: 8e:3e:07:e1:24:dc:e1:7d:f7:a0:22:17:a3:1b:23:b2:c4:b0: ba:02:1f:ef:7f:cf:8d:aa:50:fc:c5:49:10:9c:fa:00:3e:13: b0:81:f3:24:c4:fb:ab:a5:86:ab:a3:d1:88:76:13:05:39:97: fb:c3:d3:16:cb:39:68:70:f2:43:f9:ea:be:e6:a6:99:55:a7: c1:e6:1d:55:01:11:f8:60:a4:0d:be:a0:6b:1f:8d:5c:1d:47: 84:93:b4:84:d5:e3:97:02:f0:7d:ba:f7:3f:57:07:e1:97:f2: 8b:c6:b9:30:97:81:c6:6b:fc:a7:c7:89:aa:7f:3d:ff:b6:c5: bc:7f:7f:a4:01:4e:9d:24:fc:07:85:d8:ff:a2:62:97:33:3b: 3f:c6:85:b2:59:70:01:f7:93:8e:1b:9b:a5:8a:81:a1:16:5a: 45:35:dc:61:34:df:cb:31:4b:19:d1:2f:54:ab:8d:80:e1:30: b2:fb:c3:8a:51:84:a2:fc:4c:a5:90:c6:92:5a:9e:9e:76:62: df:ca:77:62:1e:6c:bb:89:51:1f:86:d5:84:78:82:aa:d0:26: b2:17:68:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbeVSVfBVi8cLqygDfSPl14bSXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA3MjMxNjA0MzdaFw0yNjA3MjQxODUxMzdaMDMxMTAvBgNV BAMTKDQ1NTIzMTNFQTMxNUEyMkIxNjQxQTY3NDkxNDY2Nzk5Q0FBOTlEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9n+wK1oOEQOXbsOhFjfvYSIN bp0zGOyd7jwvsabTQjKUHo3TovYo6ppb7yuoTJNVEWsAu3njMs9KlzTssqxBwXw3 9nEhiiw0QcD/WBtuMUjFD/rvsrxGPqf0Jkni9/wcFaVdinvYQJUWmF2WyIebVtCS nktjFzPuKfV8ryQEZj4K1JMX+P/hbsfjjozwwR7wt8+3fIDFbKiEk82cF7/kYyx1 JYz+T8ZN1U6NnRkU+WqwBGxoOBc5ysfy358P0AoP8uto2HFkhTYkjfpNgsc0crrj LfDP3jKbo+DQdlK558IQFmK0rFAhNszXPgVAWcqtwDMbfSq55PXNGVdd9BEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVIxPqMVoisWQaZ0kUZnmcqpnQQwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcXAZbUF5x+4hBquBrhfrP7C5f0SvcK4IoT Sv4rND5FMARYRY4+B+Ek3OF996AiF6MbI7LEsLoCH+9/z42qUPzFSRCc+gA+E7CB 8yTE+6ulhquj0Yh2EwU5l/vD0xbLOWhw8kP56r7mpplVp8HmHVUBEfhgpA2+oGsf jVwdR4STtITV45cC8H269z9XB+GX8ovGuTCXgcZr/KfHiap/Pf+2xbx/f6QBTp0k /AeF2P+iYpczOz/GhbJZcAH3k44bm6WKgaEWWkU13GE038sxSxnRL1SrjYDhMLL7 w4pRhKL8TKWQxpJanp52Yt/Kd2IebLuJUR+G1YR4gqrQJrIXaOs= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:11 2026 by rpki-client