$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: Xs7iPBbDq5l/qf5zyU/A/VYuhgElMcjjEPnqvc67n0M= Subject key identifier: 5D:9F:FD:7E:50:BF:C6:44:1F:92:25:87:97:B7:2A:E7:2A:0B:EE:9C Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 78288450F70346CF8AD4C1C286D3AE3DA330A60C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:23:46 +0000 Manifest this update: Thu 23 Jul 2026 15:18:46 +0000 Manifest next update: Fri 24 Jul 2026 15:40:46 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: N4m5F0ZvEzqak8qoK+Ri0rody6q0WYBcliWraT3CNL8=) 4: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:28:84:50:f7:03:46:cf:8a:d4:c1:c2:86:d3:ae:3d:a3:30:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Jul 23 15:18:46 2026 GMT Not After : Jul 24 15:40:46 2026 GMT Subject: CN=5D9FFD7E50BFC6441F92258797B72AE72A0BEE9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:86:2d:7d:74:ec:43:82:27:f3:89:67:56: 33:93:80:bc:52:8d:87:74:91:e9:21:50:9b:b6:82: a9:12:f9:11:8a:14:5d:1b:1e:90:4d:61:bf:fd:b6: fd:17:54:0d:e5:25:c0:bd:50:14:ab:4c:7e:19:68: 60:79:0c:6f:d9:3a:ba:de:71:7a:87:5d:ac:74:91: 6b:7e:53:7a:3c:29:de:4d:6a:ee:e9:8e:f4:0d:11: 3f:be:1c:3c:1e:04:6f:07:43:83:12:7e:01:24:c9: ab:43:fc:1b:ab:e9:00:9d:bd:ca:52:98:ce:95:84: b2:d5:a7:ac:1d:1d:66:5f:3e:00:a3:1b:1a:4a:be: 00:a6:50:8e:34:d6:59:dc:a4:47:b3:da:7f:03:aa: 1f:0d:89:2a:ca:6a:23:43:b3:40:52:a1:67:bb:cc: 97:4f:5e:99:e4:61:33:66:ba:f0:8f:a6:d8:fc:7c: 78:96:e9:43:d5:fd:5e:4a:61:d2:90:24:93:83:f2: 42:ab:72:c3:e0:8e:78:5a:0b:52:c6:d7:8e:ed:91: 31:f5:35:69:bd:b2:0f:c0:d5:6f:06:b1:d8:c6:90: 23:8c:b9:c7:b4:54:fe:f4:e6:8e:76:07:84:fa:c4: 98:18:cf:88:75:fc:24:91:80:0f:47:ac:f6:a8:0c: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:FD:7E:50:BF:C6:44:1F:92:25:87:97:B7:2A:E7:2A:0B:EE:9C X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cc:75:a2:79:96:d8:05:21:22:30:ac:2b:e5:40:f6:1c:28: 31:6e:7d:9c:56:b5:66:2b:76:f8:cb:8d:cd:97:d1:28:f4:ce: 5d:07:fc:88:b4:40:77:ce:fa:ff:d6:8d:f5:b2:de:51:56:e0: e3:a9:82:27:7b:ad:74:55:65:89:c9:b3:2f:be:83:69:58:c1: ba:34:b7:01:a2:00:48:67:8b:67:f4:4a:3a:88:e4:db:3f:57: 4d:b9:1f:c3:65:2f:d9:80:ff:9e:c2:74:7e:62:57:d5:47:2b: 98:b1:a3:4a:55:3d:4e:e2:9a:ca:f2:6f:9c:ef:64:93:79:3c: 3c:d7:db:04:09:99:f6:8b:0c:f0:1e:04:76:94:d7:fa:80:03: 08:39:3d:ec:83:a8:74:b8:76:e3:1a:91:ca:14:e9:3a:84:8c: 79:4e:f6:ac:13:f6:46:c0:e7:bb:85:2b:80:ab:08:bd:75:29: 7b:b2:e3:07:bf:2d:18:ea:55:f5:48:93:13:28:3f:18:5b:f4: 69:dd:8a:91:22:3f:49:a5:78:17:1f:dd:58:fe:1c:ca:f4:d0: 60:41:7c:cb:3e:f7:03:88:ae:f0:52:3b:28:88:94:4a:f4:e8: 8e:94:c9:b6:fe:6d:5b:8a:63:b6:b8:22:c6:aa:cb:85:e7:a2: c8:92:2f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCiEUPcDRs+K1MHChtOuPaMwpgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA3MjMxNTE4NDZaFw0yNjA3MjQxNTQwNDZaMDMxMTAvBgNV BAMTKDVEOUZGRDdFNTBCRkM2NDQxRjkyMjU4Nzk3QjcyQUU3MkEwQkVFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuoYtfXTsQ4In84lnVjOTgLxS jYd0kekhUJu2gqkS+RGKFF0bHpBNYb/9tv0XVA3lJcC9UBSrTH4ZaGB5DG/ZOrre cXqHXax0kWt+U3o8Kd5Nau7pjvQNET++HDweBG8HQ4MSfgEkyatD/Bur6QCdvcpS mM6VhLLVp6wdHWZfPgCjGxpKvgCmUI401lncpEez2n8Dqh8NiSrKaiNDs0BSoWe7 zJdPXpnkYTNmuvCPptj8fHiW6UPV/V5KYdKQJJOD8kKrcsPgjnhaC1LG147tkTH1 NWm9sg/A1W8GsdjGkCOMuce0VP705o52B4T6xJgYz4h1/CSRgA9HrPaoDOdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZ/9flC/xkQfkiWHl7cq5yoL7pwwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfMdaJ5ltgFISIwrCvlQPYcKDFufZxWtWYr dvjLjc2X0Sj0zl0H/Ii0QHfO+v/WjfWy3lFW4OOpgid7rXRVZYnJsy++g2lYwbo0 twGiAEhni2f0SjqI5Ns/V025H8NlL9mA/57CdH5iV9VHK5ixo0pVPU7imsryb5zv ZJN5PDzX2wQJmfaLDPAeBHaU1/qAAwg5PeyDqHS4duMakcoU6TqEjHlO9qwT9kbA 57uFK4CrCL11KXuy4we/LRjqVfVIkxMoPxhb9GndipEiP0mleBcf3Vj+HMr00GBB fMs+9wOIrvBSOyiIlEr06I6Uybb+bVuKY7a4Isaqy4XnosiSL6s= -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:14 2026 by rpki-client