$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: XUN5vGz2GG+rwjayMVQnJf9TMJByjhac8txgu7068iQ= Subject key identifier: E0:E1:9B:69:D4:DE:EF:EF:39:DD:2A:13:C3:58:3F:DB:D4:6A:D5:F6 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 27321C0007AD1AE5D2387F14BE8A698DDD7D5597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:41:28 +0000 Manifest this update: Thu 23 Jul 2026 21:36:28 +0000 Manifest next update: Fri 24 Jul 2026 21:46:28 +0000 Files and hashes: 1: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: Bs0T0c0OEbch++KBKw95Uj0yZ8Zr6n3Fn3F33dB2DYg=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:32:1c:00:07:ad:1a:e5:d2:38:7f:14:be:8a:69:8d:dd:7d:55:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Jul 23 21:36:28 2026 GMT Not After : Jul 24 21:46:28 2026 GMT Subject: CN=E0E19B69D4DEEFEF39DD2A13C3583FDBD46AD5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:0c:7c:31:00:44:bf:e0:aa:f5:02:e2:e8: 66:64:9b:3e:31:c5:97:10:0d:7d:d9:d3:e8:3d:95: fd:89:4a:aa:ab:f4:a6:a7:cf:43:60:3c:c3:58:26: 16:3e:9f:e5:03:1c:b0:6b:1a:13:b4:9b:da:eb:b6: 2c:1c:e6:c0:e4:e4:2b:1e:03:15:23:c5:72:df:3e: 5f:91:fe:ec:ce:ee:44:08:d3:ac:a4:dd:c6:5f:f0: e5:95:27:ac:c9:15:6a:cb:b1:a9:86:0e:1c:12:de: 1b:7d:35:8e:73:a0:4c:60:b7:44:16:6d:6a:00:28: 7b:f6:a7:c1:ad:2b:c6:3f:05:f9:0e:1b:d9:e2:0a: ea:06:58:8d:bb:90:a3:56:48:a3:3f:c3:0b:f7:cc: ad:6e:97:84:0d:2b:7d:d6:01:ef:de:62:02:5f:cf: af:d6:7a:44:b7:c2:60:1a:61:1b:d2:d5:45:d8:7b: 1d:06:6d:16:5a:50:43:46:15:b3:0a:3d:7f:53:9d: 9e:89:71:94:7b:ec:dd:e1:96:5e:58:5f:95:24:a9: 99:63:70:64:8d:8f:12:8c:f1:17:16:74:49:5c:c9: dd:ad:15:f4:da:86:aa:3b:5b:3f:f5:00:ca:21:68: fc:14:a7:a2:95:7b:81:2f:f3:ba:40:a4:a0:5b:15: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:9B:69:D4:DE:EF:EF:39:DD:2A:13:C3:58:3F:DB:D4:6A:D5:F6 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a6:e5:96:12:73:f8:29:a5:00:da:be:bc:b6:ed:97:03:1d: 64:a4:b3:a7:fe:0e:1a:1c:86:86:b2:c0:3c:43:db:a7:d4:98: c7:07:de:33:3b:36:11:7f:5b:06:27:54:5d:23:f5:1f:cb:91: 7a:60:50:74:bd:c2:21:46:70:74:7a:77:af:bf:4e:ed:34:97: d9:13:c5:e8:7f:d5:19:f6:6c:b1:08:8a:5c:bb:47:c4:f8:6d: fb:8f:a4:4e:53:7c:64:60:a2:5c:c1:ee:6b:cf:42:e9:e6:cf: d4:7b:a4:69:28:cd:b2:b9:b6:1a:0d:ea:8e:6a:49:e0:e3:20: d5:d2:66:16:4f:65:6d:7a:32:dd:a8:77:67:08:df:29:74:6e: 88:ac:36:2f:00:d7:c9:b2:45:3c:81:b3:ae:7f:8d:9e:d7:24: af:95:dc:0a:15:4c:f6:b6:53:74:db:59:40:6d:bc:38:aa:37: 8b:ac:05:fe:13:1d:82:01:69:da:c0:ca:19:50:de:7b:c4:b3: f0:23:51:56:f0:fb:81:51:3d:4b:f5:39:81:4b:db:24:0a:d5: c9:a4:1e:0e:59:f3:bf:cd:1a:2e:99:34:e3:25:f2:ec:56:ae: 32:ba:10:20:db:9f:c6:1f:77:fe:c4:ad:20:17:df:2a:c0:de: 8e:d6:fa:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzIcAAetGuXSOH8Uvoppjd19VZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA3MjMyMTM2MjhaFw0yNjA3MjQyMTQ2MjhaMDMxMTAvBgNV BAMTKEUwRTE5QjY5RDRERUVGRUYzOUREMkExM0MzNTgzRkRCRDQ2QUQ1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFwx8MQBEv+Cq9QLi6GZkmz4x xZcQDX3Z0+g9lf2JSqqr9Kanz0NgPMNYJhY+n+UDHLBrGhO0m9rrtiwc5sDk5Cse AxUjxXLfPl+R/uzO7kQI06yk3cZf8OWVJ6zJFWrLsamGDhwS3ht9NY5zoExgt0QW bWoAKHv2p8GtK8Y/BfkOG9niCuoGWI27kKNWSKM/wwv3zK1ul4QNK33WAe/eYgJf z6/WekS3wmAaYRvS1UXYex0GbRZaUENGFbMKPX9TnZ6JcZR77N3hll5YX5UkqZlj cGSNjxKM8RcWdElcyd2tFfTahqo7Wz/1AMohaPwUp6KVe4Ev87pApKBbFdAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OGbadTe7+853SoTw1g/29Rq1fYwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJem5ZYSc/gppQDavry27ZcDHWSks6f+Dhoc hoaywDxD26fUmMcH3jM7NhF/WwYnVF0j9R/LkXpgUHS9wiFGcHR6d6+/Tu00l9kT xeh/1Rn2bLEIily7R8T4bfuPpE5TfGRgolzB7mvPQunmz9R7pGkozbK5thoN6o5q SeDjINXSZhZPZW16Mt2od2cI3yl0boisNi8A18myRTyBs65/jZ7XJK+V3AoVTPa2 U3TbWUBtvDiqN4usBf4THYIBadrAyhlQ3nvEs/AjUVbw+4FRPUv1OYFL2yQK1cmk Hg5Z87/NGi6ZNOMl8uxWrjK6ECDbn8Yfd/7ErSAX3yrA3o7W+nE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:29 2026 by rpki-client