$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: m5bh/ReGd7WdwiZXATKvaE0DVmQISf+I1SYnXR/jlhw= Subject key identifier: FD:FD:E2:10:6D:E5:B3:DB:7D:13:97:90:F1:BA:2B:03:96:64:93:30 Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 26286468743C14C4F99D2D4301715DA430A87336 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:12:17 +0000 Manifest this update: Thu 23 Jul 2026 18:07:17 +0000 Manifest next update: Fri 24 Jul 2026 18:45:17 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) 2: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: 9JDpnwdW9KsOXY5vE5mKwnrTWFsVsWT79CV2MxEFBSo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:28:64:68:74:3c:14:c4:f9:9d:2d:43:01:71:5d:a4:30:a8:73:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Jul 23 18:07:17 2026 GMT Not After : Jul 24 18:45:17 2026 GMT Subject: CN=FDFDE2106DE5B3DB7D139790F1BA2B0396649330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:1e:4c:1c:61:5e:9d:cb:d4:eb:91:65:0d: da:cf:ae:2a:b4:32:63:66:68:e7:04:8d:fc:be:c7: 46:7b:20:21:f9:e9:b4:70:79:a5:7c:86:40:b8:c2: b0:e8:d9:87:7e:a0:01:f1:82:6a:aa:ac:e1:14:5c: c7:3b:9a:46:2f:68:ba:76:9f:46:34:ee:c4:6c:eb: 12:93:fd:45:4f:c8:3b:3e:30:f8:c8:86:a2:de:db: a8:01:a7:0e:57:4a:2f:3a:4e:70:d5:1f:f2:a5:cc: 7b:2c:5c:38:74:e5:31:58:9e:8e:95:95:9e:92:85: 68:75:ce:0f:d8:c5:21:7d:bc:29:ea:6f:aa:b3:15: aa:28:72:42:f4:c5:d4:6c:1a:d8:e8:cd:cc:1f:35: b2:35:51:52:cd:ad:74:c6:82:ae:8b:14:7c:3c:6c: b8:dc:b0:42:5e:bf:80:70:d4:ac:5e:9a:89:e3:1e: 5c:d6:af:87:dc:4a:3d:22:31:58:78:e2:70:a4:cf: d7:65:39:61:da:45:41:7d:01:47:c9:db:29:c5:06: 25:c0:0f:01:13:9d:c9:9b:c1:95:09:a5:88:82:39: 2d:e0:3d:da:0e:7c:82:5f:8e:ec:35:5e:24:43:4c: 75:14:d5:3c:19:54:50:9c:0b:d1:0a:11:79:3f:b2: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:E2:10:6D:E5:B3:DB:7D:13:97:90:F1:BA:2B:03:96:64:93:30 X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f4:74:fd:30:83:62:e9:d1:90:ab:e0:01:c0:4b:e0:db:30: 39:70:18:26:06:96:9e:93:8f:95:05:6e:b6:70:28:bc:e9:2c: a5:99:e3:0b:6a:eb:20:a1:ee:6d:4f:54:29:77:d1:b3:9d:af: dd:7b:88:0b:34:f5:5f:0b:b2:e1:20:0e:2c:da:bf:92:bf:b6: 57:97:77:e1:dd:e7:09:67:d2:23:a7:5e:23:94:5e:01:5c:6d: a4:f5:a9:99:2e:fb:a6:23:b7:64:de:b4:2e:5d:e6:7a:ac:4c: ad:55:c3:33:92:ff:c2:94:6f:0a:06:3f:02:b8:d3:35:4c:bc: 2c:74:86:de:9d:c8:a0:c2:0d:16:a3:24:a7:6d:96:34:11:45: 08:2b:d1:97:50:0b:0f:4e:5d:23:6a:48:e1:ec:94:c7:a7:f0: 44:a9:0d:b0:76:94:ad:a4:e7:6d:71:49:4e:f5:3c:5b:50:6a: a0:93:df:2c:30:76:08:39:da:1a:ce:86:a2:22:ae:1e:9e:c8: 90:b0:6a:19:c1:9a:26:38:77:a3:bd:97:86:98:69:bc:a3:c3: 62:e5:79:70:44:5b:4b:54:3f:06:43:10:9b:45:2f:d4:43:98: f4:2b:7a:38:4b:d8:dd:3e:56:a9:49:6f:28:70:de:78:4b:b0: 04:a9:00:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJihkaHQ8FMT5nS1DAXFdpDCoczYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA3MjMxODA3MTdaFw0yNjA3MjQxODQ1MTdaMDMxMTAvBgNV BAMTKEZERkRFMjEwNkRFNUIzREI3RDEzOTc5MEYxQkEyQjAzOTY2NDkzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZh5MHGFencvU65FlDdrPriq0 MmNmaOcEjfy+x0Z7ICH56bRweaV8hkC4wrDo2Yd+oAHxgmqqrOEUXMc7mkYvaLp2 n0Y07sRs6xKT/UVPyDs+MPjIhqLe26gBpw5XSi86TnDVH/KlzHssXDh05TFYno6V lZ6ShWh1zg/YxSF9vCnqb6qzFaoockL0xdRsGtjozcwfNbI1UVLNrXTGgq6LFHw8 bLjcsEJev4Bw1KxemonjHlzWr4fcSj0iMVh44nCkz9dlOWHaRUF9AUfJ2ynFBiXA DwETncmbwZUJpYiCOS3gPdoOfIJfjuw1XiRDTHUU1TwZVFCcC9EKEXk/ssYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/f3iEG3ls9t9E5eQ8borA5ZkkzAwHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALf0dP0wg2Lp0ZCr4AHAS+DbMDlwGCYGlp6T j5UFbrZwKLzpLKWZ4wtq6yCh7m1PVCl30bOdr917iAs09V8LsuEgDizav5K/tleX d+Hd5wln0iOnXiOUXgFcbaT1qZku+6Yjt2TetC5d5nqsTK1VwzOS/8KUbwoGPwK4 0zVMvCx0ht6dyKDCDRajJKdtljQRRQgr0ZdQCw9OXSNqSOHslMen8ESpDbB2lK2k 521xSU71PFtQaqCT3ywwdgg52hrOhqIirh6eyJCwahnBmiY4d6O9l4aYabyjw2Ll eXBEW0tUPwZDEJtFL9RDmPQrejhL2N0+VqlJbyhw3nhLsASpADc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:25 2026 by rpki-client