$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: r0jh2rTViXvdkUvtV14tUd2gMA+m/kwc0JR2E0czucQ= Subject key identifier: 6E:8F:D6:9B:89:CC:13:D7:B9:12:B4:F8:9E:AD:22:BA:B4:E3:74:53 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 7A8CEC0508B9AB8C834A42BAE4B6921735847060 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:32:45 +0000 Manifest this update: Thu 23 Jul 2026 18:27:45 +0000 Manifest next update: Fri 24 Jul 2026 22:02:45 +0000 Files and hashes: 1: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 2: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: ov7ygYyVHfBw5s0GpONJUmYvMC2IZrjIq08vwQRmKA0=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8c:ec:05:08:b9:ab:8c:83:4a:42:ba:e4:b6:92:17:35:84:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Jul 23 18:27:45 2026 GMT Not After : Jul 24 22:02:45 2026 GMT Subject: CN=6E8FD69B89CC13D7B912B4F89EAD22BAB4E37453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:8f:fa:fc:87:d6:8b:97:7e:04:c5:4a:35: 21:63:4d:15:7c:b5:68:58:ce:42:28:d1:14:e0:b8: 13:77:c5:9d:14:f4:ab:3d:8c:1a:50:e2:0c:fa:7e: c7:e8:3a:4b:4d:67:ff:f9:26:b0:15:0a:1a:cb:26: 0d:70:0d:9a:48:a2:f8:15:10:c8:4f:a3:ff:6c:62: ff:b0:c0:cc:99:22:e0:fc:25:ea:82:5e:10:c6:44: db:20:61:6a:9a:27:fa:c2:ac:80:80:6a:ec:7c:99: 88:1c:a1:55:9f:1d:36:b5:e0:b1:6b:5f:75:1d:84: 7e:ea:33:31:1b:b8:e8:0e:46:e9:09:7c:88:fb:c9: fa:ee:eb:9f:0e:50:05:46:a4:bd:59:87:41:85:96: 70:70:07:dd:37:7b:e3:c3:44:5b:eb:a1:79:04:ea: 61:bd:0c:7c:6e:13:75:1d:42:37:d7:5f:bf:9b:f8: 71:68:10:a3:02:49:f7:3b:d9:36:aa:a0:9b:78:98: 35:47:b4:5a:28:6b:8f:d9:fe:be:e0:4e:ef:1d:0a: af:a4:39:ee:b5:73:e4:86:88:a9:d6:2e:5b:a1:b6: 14:35:00:8a:45:3f:2e:61:67:41:d0:c9:af:e0:30: 32:22:66:37:1a:2f:30:32:da:39:de:69:be:7c:46: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:D6:9B:89:CC:13:D7:B9:12:B4:F8:9E:AD:22:BA:B4:E3:74:53 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2b:1d:4f:48:55:67:0b:24:21:75:6e:e4:7a:ad:a6:b1:76: 70:f6:41:df:77:cd:9c:9a:dc:a0:5d:8e:f1:87:86:01:3d:0b: bd:b3:b5:da:af:77:54:bb:f1:24:f8:b9:1d:94:a0:d6:6d:db: 51:b1:fb:9b:44:f0:bf:1d:f5:ae:4b:d8:a4:a3:74:ee:9f:84: 71:05:ce:d8:12:98:3b:2c:26:d7:4f:4e:c8:84:f9:1a:19:c9: 7f:fd:1d:9c:e5:66:35:8f:07:35:a4:e1:59:a3:27:e3:63:50: 90:74:05:dd:60:4b:64:32:72:10:32:8b:0a:3b:05:f6:d5:ba: 65:ea:8c:a6:ad:92:05:c4:fc:f0:20:5f:98:00:36:ab:5c:9f: bf:f5:88:0e:ab:be:49:94:8f:da:04:21:cf:08:ce:59:9b:5c: 43:af:1b:74:00:48:f9:b3:7e:dd:d7:32:17:b6:06:7d:16:fb: a3:18:00:89:99:c0:7a:0b:60:ec:82:02:95:81:34:ac:24:3d: 06:44:75:79:ab:e9:fa:82:36:e7:a8:02:a9:19:d0:15:63:8b: 6d:3f:02:98:1d:0a:ef:7c:38:3c:7e:7d:c6:81:ca:0a:b6:2b: 7f:fc:88:c3:29:f6:5e:75:7b:15:af:a8:fc:0a:bb:87:76:ed: 84:49:d7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeozsBQi5q4yDSkK65LaSFzWEcGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA3MjMxODI3NDVaFw0yNjA3MjQyMjAyNDVaMDMxMTAvBgNV BAMTKDZFOEZENjlCODlDQzEzRDdCOTEyQjRGODlFQUQyMkJBQjRFMzc0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw4/6/IfWi5d+BMVKNSFjTRV8 tWhYzkIo0RTguBN3xZ0U9Ks9jBpQ4gz6fsfoOktNZ//5JrAVChrLJg1wDZpIovgV EMhPo/9sYv+wwMyZIuD8JeqCXhDGRNsgYWqaJ/rCrICAaux8mYgcoVWfHTa14LFr X3UdhH7qMzEbuOgORukJfIj7yfru658OUAVGpL1Zh0GFlnBwB903e+PDRFvroXkE 6mG9DHxuE3UdQjfXX7+b+HFoEKMCSfc72TaqoJt4mDVHtFooa4/Z/r7gTu8dCq+k Oe61c+SGiKnWLluhthQ1AIpFPy5hZ0HQya/gMDIiZjcaLzAy2jneab58Rhr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbo/Wm4nME9e5ErT4nq0iurTjdFMwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGorHU9IVWcLJCF1buR6raaxdnD2Qd93zZya 3KBdjvGHhgE9C72ztdqvd1S78ST4uR2UoNZt21Gx+5tE8L8d9a5L2KSjdO6fhHEF ztgSmDssJtdPTsiE+RoZyX/9HZzlZjWPBzWk4VmjJ+NjUJB0Bd1gS2QychAyiwo7 BfbVumXqjKatkgXE/PAgX5gANqtcn7/1iA6rvkmUj9oEIc8IzlmbXEOvG3QASPmz ft3XMhe2Bn0W+6MYAImZwHoLYOyCApWBNKwkPQZEdXmr6fqCNueoAqkZ0BVji20/ ApgdCu98ODx+fcaBygq2K3/8iMMp9l51exWvqPwKu4d27YRJ15Q= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:50 2026 by rpki-client