$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: DJpU9842sJS9ZDNK0/UM/THqPA+wPV4m6KDyp7YC8No= Subject key identifier: 7A:F9:F4:4C:1F:06:A9:3B:2D:64:37:F3:74:85:2B:3F:E9:9A:69:99 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 6036DBF133F0DDA46B85B7A1D8C8CB9DF1719F50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:45:00 +0000 Manifest this update: Fri 24 Jul 2026 00:40:00 +0000 Manifest next update: Sat 25 Jul 2026 03:58:00 +0000 Files and hashes: 1: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: Vnedau/RRiZ098rnR9HYoWXu4rE+B0PdgCM3WIKofvA=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:36:db:f1:33:f0:dd:a4:6b:85:b7:a1:d8:c8:cb:9d:f1:71:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Jul 24 00:40:00 2026 GMT Not After : Jul 25 03:58:00 2026 GMT Subject: CN=7AF9F44C1F06A93B2D6437F374852B3FE99A6999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:93:e1:b1:1f:dd:da:75:15:ff:2f:88:bb: 21:8e:23:b6:f2:65:8e:13:76:89:34:77:6c:e1:d4: e4:8c:b1:de:03:be:6b:e9:41:68:02:98:d3:51:e7: 09:70:9d:f9:75:bc:ce:b8:1b:bc:10:06:ed:c1:e5: 65:1b:50:ea:d4:21:b7:e7:cb:22:56:04:0d:fe:ad: 5d:c9:84:5b:84:52:a7:5a:d0:42:ab:d4:9e:99:0c: b2:de:40:bd:9b:d6:b2:87:41:43:ab:63:1e:e5:eb: 85:87:7a:72:6e:05:11:61:b5:6b:be:7b:c1:86:71: 46:b3:48:df:2b:48:70:03:cc:45:00:be:16:45:ce: d3:96:0c:98:14:01:63:06:36:34:1e:12:af:0a:73: cd:55:4f:e5:62:0a:fc:90:ca:bb:f1:a9:29:8b:23: 35:ba:03:cf:29:ae:5e:cb:5f:05:68:96:67:27:e5: 47:a5:24:1d:19:1e:cb:a6:5a:ac:2a:74:b5:80:f3: a8:ce:74:53:16:70:19:34:58:e0:fa:94:c0:78:75: 47:6a:73:91:e5:2e:ee:dc:4f:99:ba:f5:be:19:88: 37:c4:1d:b7:d6:89:e2:79:69:46:3d:5c:84:06:b0: cc:63:8b:5c:11:9f:6a:2b:db:17:1b:11:ca:19:54: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:F4:4C:1F:06:A9:3B:2D:64:37:F3:74:85:2B:3F:E9:9A:69:99 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:67:76:d1:bd:dc:7e:6b:da:14:8c:e6:b7:b9:17:45:e1:4e: 48:30:38:ea:12:bd:7d:24:1c:6c:73:28:75:70:7f:70:d5:ce: e4:8f:8e:b0:f3:96:46:95:ae:69:57:dd:06:69:f2:6e:0b:13: 35:40:ee:f3:20:ce:dd:af:e0:6e:fc:07:bd:e3:95:35:83:0e: 12:09:8c:56:db:81:be:ab:04:61:a1:bb:9e:d2:6c:30:7c:77: 58:03:8d:da:9c:c0:20:c5:78:27:c9:6c:21:7c:a1:f5:f1:e7: 38:88:43:6d:6e:68:2e:f8:3f:3e:2f:99:ab:52:b7:20:d2:bf: 19:4b:1c:6d:d0:5b:08:0a:e7:ef:50:12:6e:37:5a:69:d3:49: 78:3d:07:8a:67:0b:36:f5:ee:0e:9e:26:48:5f:68:a6:ad:b8: 28:a3:0c:2e:28:fd:9c:b8:05:73:c1:54:bb:7d:ed:ac:fa:61: 77:c2:cd:03:ad:25:d2:a1:4e:4e:7e:91:48:62:e4:62:14:4d: d8:82:18:69:d3:72:cf:60:67:4a:cb:5d:5d:3b:58:38:0f:80: d3:8e:5c:11:65:48:e4:b4:f8:c2:12:69:96:8c:42:f0:d5:19: 32:15:73:74:17:65:39:41:7c:df:36:20:0a:3e:e0:71:38:93: 93:f8:f1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDbb8TPw3aRrhbeh2MjLnfFxn1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA3MjQwMDQwMDBaFw0yNjA3MjUwMzU4MDBaMDMxMTAvBgNV BAMTKDdBRjlGNDRDMUYwNkE5M0IyRDY0MzdGMzc0ODUyQjNGRTk5QTY5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGpPhsR/d2nUV/y+IuyGOI7by ZY4Tdok0d2zh1OSMsd4DvmvpQWgCmNNR5wlwnfl1vM64G7wQBu3B5WUbUOrUIbfn yyJWBA3+rV3JhFuEUqda0EKr1J6ZDLLeQL2b1rKHQUOrYx7l64WHenJuBRFhtWu+ e8GGcUazSN8rSHADzEUAvhZFztOWDJgUAWMGNjQeEq8Kc81VT+ViCvyQyrvxqSmL IzW6A88prl7LXwVolmcn5UelJB0ZHsumWqwqdLWA86jOdFMWcBk0WOD6lMB4dUdq c5HlLu7cT5m69b4ZiDfEHbfWieJ5aUY9XIQGsMxji1wRn2or2xcbEcoZVI+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevn0TB8GqTstZDfzdIUrP+maaZkwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxndtG93H5r2hSM5re5F0XhTkgwOOoSvX0k HGxzKHVwf3DVzuSPjrDzlkaVrmlX3QZp8m4LEzVA7vMgzt2v4G78B73jlTWDDhIJ jFbbgb6rBGGhu57SbDB8d1gDjdqcwCDFeCfJbCF8ofXx5ziIQ21uaC74Pz4vmatS tyDSvxlLHG3QWwgK5+9QEm43WmnTSXg9B4pnCzb17g6eJkhfaKatuCijDC4o/Zy4 BXPBVLt97az6YXfCzQOtJdKhTk5+kUhi5GIUTdiCGGnTcs9gZ0rLXV07WDgPgNOO XBFlSOS0+MISaZaMQvDVGTIVc3QXZTlBfN82IAo+4HE4k5P48Zc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:21 2026 by rpki-client