$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: b447SY+pLS2EtvkMrN75dn+vSI5GGQyzlz+ZHq63+ro= Subject key identifier: B7:73:37:1C:00:D6:B3:7A:3D:22:A3:15:ED:98:82:46:86:5D:0A:99 Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 70F07050AA67523BF89682E7761B81C605EA1B69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:26:49 +0000 Manifest this update: Mon 20 Jul 2026 12:21:49 +0000 Manifest next update: Tue 21 Jul 2026 15:26:49 +0000 Files and hashes: 1: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) 2: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: Cj1BAGmBvpZM5ejAWq3QifWt4/bCLkExqMDBu4gR4ts=) 3: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 4: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 5: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 6: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f0:70:50:aa:67:52:3b:f8:96:82:e7:76:1b:81:c6:05:ea:1b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Jul 20 12:21:49 2026 GMT Not After : Jul 21 15:26:49 2026 GMT Subject: CN=B773371C00D6B37A3D22A315ED988246865D0A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:ca:0e:e0:c4:ff:53:21:27:cc:71:38:b6: 30:2a:6e:33:cd:04:b9:be:a6:c2:4e:ce:f4:94:96: b1:ef:f9:c3:2c:b9:64:27:ab:73:3a:41:55:58:c8: 92:b4:97:d5:53:76:25:42:3f:db:74:0b:c8:e8:d3: 3e:af:88:4e:4c:1b:c8:e3:23:fb:f0:80:7e:79:d6: 46:95:2f:d6:1a:f8:57:55:84:62:68:e9:b9:ad:36: 2e:a0:19:38:b6:bd:e8:7b:1f:8d:91:88:59:f6:e5: 18:8d:16:6d:c7:5f:5b:93:4d:b1:a3:f0:7f:fa:42: e0:97:85:7e:df:9c:9f:42:f8:f3:41:7b:58:a8:7a: 21:ad:fd:39:d8:f1:81:1a:99:2b:42:25:ef:e0:7e: 7e:aa:7f:4f:31:ce:c8:6c:1c:59:f8:ba:f1:67:af: e3:29:5d:8e:25:9e:4c:d2:c8:b9:d9:8c:d1:69:4a: 2d:3d:0a:06:99:b2:0f:5f:3a:09:15:4b:2d:f1:47: c0:df:a0:59:3a:91:98:d1:27:ec:db:33:77:c2:f7: ca:92:dc:c0:58:06:94:16:9d:86:b3:79:63:fe:8a: fd:ca:7c:3d:9e:7a:ab:db:54:34:5a:cb:65:be:40: 03:42:60:f1:a0:51:d9:97:e1:f3:90:bf:b6:7a:82: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:37:1C:00:D6:B3:7A:3D:22:A3:15:ED:98:82:46:86:5D:0A:99 X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f5:ee:7f:62:8f:26:21:fa:ec:6a:bc:95:e5:85:8c:2a:53: 20:38:14:ff:df:5a:0f:17:29:75:7f:af:ed:b1:3c:3e:2c:7b: e7:34:b0:95:4f:a7:63:e3:2b:4e:7d:3d:8f:cb:20:b4:c9:85: 2b:de:97:0d:30:b5:c4:23:dd:4e:c9:1e:2f:74:e8:15:bb:cf: 35:d2:f6:6d:10:ef:ec:79:b1:44:0a:e1:48:b0:5b:f5:4c:41: 52:32:2b:84:35:4f:9c:cd:4d:bd:96:d5:56:a6:84:84:1b:ba: ee:89:49:91:0a:3c:a8:25:88:52:84:fb:b2:85:71:be:a0:8a: ac:e7:d2:6a:db:ae:0d:57:04:db:84:51:04:91:0c:87:c1:a7: 9d:83:fe:d5:99:9f:4b:dc:da:41:91:a1:0d:90:9c:24:7f:1e: 69:7e:ce:d5:ad:3b:16:64:35:8d:80:f4:8c:d2:e1:c3:a2:a2: 99:85:f7:99:dd:20:45:f5:9b:ff:d4:d6:4e:b3:d0:d0:a8:e6: 3f:fb:5b:cb:e5:c2:84:78:2d:f9:da:38:81:0b:fe:87:ca:43: 74:42:db:ea:ab:7f:77:c7:83:f1:8e:f6:68:5f:5c:a6:95:07: ef:a4:46:09:4e:5a:15:42:6f:5b:bf:38:50:43:02:73:f1:1f: f8:56:32:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPBwUKpnUjv4loLndhuBxgXqG2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA3MjAxMjIxNDlaFw0yNjA3MjExNTI2NDlaMDMxMTAvBgNV BAMTKEI3NzMzNzFDMDBENkIzN0EzRDIyQTMxNUVEOTg4MjQ2ODY1RDBBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZsoO4MT/UyEnzHE4tjAqbjPN BLm+psJOzvSUlrHv+cMsuWQnq3M6QVVYyJK0l9VTdiVCP9t0C8jo0z6viE5MG8jj I/vwgH551kaVL9Ya+FdVhGJo6bmtNi6gGTi2veh7H42RiFn25RiNFm3HX1uTTbGj 8H/6QuCXhX7fnJ9C+PNBe1ioeiGt/TnY8YEamStCJe/gfn6qf08xzshsHFn4uvFn r+MpXY4lnkzSyLnZjNFpSi09CgaZsg9fOgkVSy3xR8DfoFk6kZjRJ+zbM3fC98qS 3MBYBpQWnYazeWP+iv3KfD2eeqvbVDRay2W+QANCYPGgUdmX4fOQv7Z6grubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3M3HADWs3o9IqMV7ZiCRoZdCpkwHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb17n9ijyYh+uxqvJXlhYwqUyA4FP/fWg8X KXV/r+2xPD4se+c0sJVPp2PjK059PY/LILTJhSvelw0wtcQj3U7JHi906BW7zzXS 9m0Q7+x5sUQK4UiwW/VMQVIyK4Q1T5zNTb2W1VamhIQbuu6JSZEKPKgliFKE+7KF cb6giqzn0mrbrg1XBNuEUQSRDIfBp52D/tWZn0vc2kGRoQ2QnCR/Hml+ztWtOxZk NY2A9IzS4cOiopmF95ndIEX1m//U1k6z0NCo5j/7W8vlwoR4LfnaOIEL/ofKQ3RC 2+qrf3fHg/GO9mhfXKaVB++kRglOWhVCb1u/OFBDAnPxH/hWMrE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:09:38 2026 by rpki-client