$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: ZKRKajO3ykDYGjrByQdGVJt4HacMxgPDr4bgCqnRhsY= Subject key identifier: EF:D6:1C:A6:56:15:99:5B:14:A7:13:76:01:99:E8:B7:69:6C:85:6B Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 7501C41F8EA2DFCC712CCBD5A4B5DD0DD0197D1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:23:31 +0000 Manifest this update: Fri 24 Jul 2026 07:18:31 +0000 Manifest next update: Sat 25 Jul 2026 10:09:31 +0000 Files and hashes: 1: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 2: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: ieiP6P2m+QQE3fRSwqZOPQ8s0judKBi3p7IypEu2arY=) 3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:01:c4:1f:8e:a2:df:cc:71:2c:cb:d5:a4:b5:dd:0d:d0:19:7d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Jul 24 07:18:31 2026 GMT Not After : Jul 25 10:09:31 2026 GMT Subject: CN=EFD61CA65615995B14A713760199E8B7696C856B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:4d:e5:2e:ce:ee:59:1f:f8:b4:c7:d6:9c: a5:15:86:2a:d1:2d:cf:4f:be:23:65:05:4e:05:97: ef:0c:5d:77:24:f4:12:e1:fa:fe:bf:21:21:55:72: e3:4e:4e:e7:9d:36:dc:6d:e4:c6:95:09:b0:b5:05: 44:75:98:8c:e1:4a:80:75:8a:20:14:f8:90:85:63: 3a:ad:bb:f6:fc:2c:e6:f5:f5:58:86:39:7d:da:d1: 15:d1:e7:a8:af:16:c4:82:34:34:e6:94:74:bb:2f: ac:d6:ee:5d:86:cd:82:66:0a:d0:f9:4c:12:ca:5e: 95:e0:8b:7d:56:1b:64:b7:77:ce:46:2e:e3:13:cf: 00:f2:3d:5f:b6:6c:a8:50:f2:1a:b2:a6:e0:b8:d1: db:39:4f:da:b1:6f:cc:13:9f:94:03:b8:fc:1f:21: 94:60:df:1b:1f:c6:43:6a:b0:ca:07:b6:73:6a:87: 49:f5:14:34:99:aa:62:60:75:06:88:83:5e:c8:42: be:f4:cb:5d:c6:b2:b7:3e:4c:4d:d0:e4:00:fd:92: 9d:82:16:f9:74:d9:14:c0:15:ce:64:4d:ae:74:e9: a6:a9:b3:03:9f:78:62:8e:2b:a6:3d:39:9c:86:ca: 7d:a2:e1:9f:0e:60:2f:32:ff:c6:8e:88:62:0d:a1: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:1C:A6:56:15:99:5B:14:A7:13:76:01:99:E8:B7:69:6C:85:6B X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c2:9e:8b:89:fe:a6:c7:c3:a4:ee:df:cc:04:f6:4e:5e:36: 44:3b:86:f3:a8:b9:ee:1b:ab:8a:bd:73:e2:40:88:27:5d:16: a6:71:76:0e:d1:a7:e8:04:9e:ea:cd:49:f1:1e:d1:2c:76:bd: cd:4a:5f:e1:56:a5:49:79:7f:39:1e:1f:45:83:a6:ee:8e:01: 53:af:d9:30:7d:9d:76:42:ce:b3:0e:40:40:3d:f5:56:7d:df: ab:6e:8c:cf:ab:e4:b9:aa:18:02:2f:11:91:ea:b3:80:36:42: 5e:42:5a:75:e3:6a:52:af:9e:b3:39:ec:13:c2:29:88:f3:05: 8a:f9:94:8a:aa:34:29:3a:26:b0:05:a1:cb:b1:b8:65:c2:ec: f6:b3:ef:6f:4a:44:50:17:d5:2f:df:3d:96:e3:69:35:26:2a: 37:ce:42:f9:a9:bf:cc:8b:bb:5c:35:dc:a4:85:63:b5:dc:7d: 38:7c:9e:8c:84:78:f9:65:81:e8:5f:23:58:7d:1c:3d:1e:2c: 53:f4:1e:e8:b2:5d:56:79:06:43:de:6e:ca:f4:13:9a:5a:33: 09:f1:f1:82:c6:db:dc:db:c5:af:63:12:6d:df:63:74:81:bb: 3c:be:04:8c:64:9e:4c:c0:36:6c:a7:3f:11:1e:ca:4b:d1:85: d8:e3:58:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQHEH46i38xxLMvVpLXdDdAZfR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA3MjQwNzE4MzFaFw0yNjA3MjUxMDA5MzFaMDMxMTAvBgNV BAMTKEVGRDYxQ0E2NTYxNTk5NUIxNEE3MTM3NjAxOTlFOEI3Njk2Qzg1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYk3lLs7uWR/4tMfWnKUVhirR Lc9PviNlBU4Fl+8MXXck9BLh+v6/ISFVcuNOTuedNtxt5MaVCbC1BUR1mIzhSoB1 iiAU+JCFYzqtu/b8LOb19ViGOX3a0RXR56ivFsSCNDTmlHS7L6zW7l2GzYJmCtD5 TBLKXpXgi31WG2S3d85GLuMTzwDyPV+2bKhQ8hqypuC40ds5T9qxb8wTn5QDuPwf IZRg3xsfxkNqsMoHtnNqh0n1FDSZqmJgdQaIg17IQr70y13Gsrc+TE3Q5AD9kp2C Fvl02RTAFc5kTa506aapswOfeGKOK6Y9OZyGyn2i4Z8OYC8y/8aOiGINoakRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79YcplYVmVsUpxN2AZnot2lshWswHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTCnouJ/qbHw6Tu38wE9k5eNkQ7hvOoue4b q4q9c+JAiCddFqZxdg7Rp+gEnurNSfEe0Sx2vc1KX+FWpUl5fzkeH0WDpu6OAVOv 2TB9nXZCzrMOQEA99VZ936tujM+r5LmqGAIvEZHqs4A2Ql5CWnXjalKvnrM57BPC KYjzBYr5lIqqNCk6JrAFocuxuGXC7Paz729KRFAX1S/fPZbjaTUmKjfOQvmpv8yL u1w13KSFY7XcfTh8noyEePllgehfI1h9HD0eLFP0HuiyXVZ5BkPebsr0E5paMwnx 8YLG29zbxa9jEm3fY3SBuzy+BIxknkzANmynPxEeykvRhdjjWJU= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:16 2026 by rpki-client