$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: UtTM/MKYjE8ADGuoksUxTLnjUR0Alx1MoorJjDGDVSs= Subject key identifier: 63:88:B5:A2:B5:01:4F:38:05:F2:24:CC:C1:A3:7D:F4:66:AF:98:14 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 1F24EF6511E883D33770FDC2DAC0EF128A0B070B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 15:00:08 +0000 Manifest this update: Mon 20 Jul 2026 14:55:08 +0000 Manifest next update: Tue 21 Jul 2026 16:05:08 +0000 Files and hashes: 1: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) 2: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: K9AA3wxGFtTRB6ArC8zkIVoQeOHis7xtbieEix3mRVk=) 3: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:24:ef:65:11:e8:83:d3:37:70:fd:c2:da:c0:ef:12:8a:0b:07:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Jul 20 14:55:08 2026 GMT Not After : Jul 21 16:05:08 2026 GMT Subject: CN=6388B5A2B5014F3805F224CCC1A37DF466AF9814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:09:f2:fb:f0:2f:09:00:a2:bb:49:a0:b6: 49:f3:00:95:ad:8e:a4:f9:45:1a:98:d0:dd:04:0d: 4a:84:ac:d4:b2:d1:5f:a2:20:e4:d0:80:0d:36:fc: 09:2c:d9:c6:d3:0b:27:96:dd:3e:ca:af:b7:32:8c: f1:21:21:1d:26:b2:8e:b2:97:f6:c3:70:cb:e5:6c: df:58:62:a0:da:22:e1:b0:24:58:c2:6a:8d:d1:e7: df:2b:85:27:b3:ab:10:44:02:67:6b:5a:ae:55:40: 22:fa:35:7f:95:9e:c0:13:e7:52:93:52:90:b7:6d: 83:92:7d:d5:b0:ac:71:5a:45:d2:07:ca:c7:7e:1f: 5f:6c:98:69:d2:2c:09:ac:f5:2a:29:b9:9a:fd:e1: 55:1c:b0:6f:f3:af:fd:0d:9d:4f:f6:fa:de:a6:a3: 82:36:bc:86:4a:07:32:c6:c2:90:6e:7d:a9:25:de: f1:a6:96:31:8e:d6:52:41:e0:81:7e:52:b2:66:4d: ae:18:31:05:92:de:8b:fc:5d:8f:91:85:39:b2:9a: 27:ea:7c:04:28:a8:17:94:81:2f:00:92:69:90:79: dc:c0:1f:5e:e6:bd:6d:c0:72:47:35:22:d4:f7:b6: 13:55:f0:6a:40:3a:91:df:7b:a2:5d:c3:e6:18:08: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:B5:A2:B5:01:4F:38:05:F2:24:CC:C1:A3:7D:F4:66:AF:98:14 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c8:c3:85:3a:73:3e:6b:60:a9:95:7b:8f:e7:cb:ed:21:2b: bc:63:cb:ae:2a:00:7a:bb:2c:08:15:51:e3:f7:b2:1a:2d:a2: 3c:78:02:82:a9:e4:71:12:50:32:36:bc:75:be:aa:36:ce:ff: f7:42:69:18:74:95:85:f6:5d:50:a5:88:23:4b:89:07:a0:db: 21:0c:60:e6:cd:68:b5:69:25:85:8e:4e:e0:ef:1a:46:1f:56: 87:27:2c:39:ff:f5:f2:4b:21:51:0f:31:a4:73:4a:13:11:8e: b8:94:e1:42:c0:e1:36:73:10:5f:5d:5d:ae:ad:9b:d2:70:08: cb:4e:83:f8:4b:7d:6e:af:dd:2b:1e:50:e0:66:f1:6a:5f:4f: b1:84:c6:53:87:6f:3f:a8:65:a0:0c:87:df:36:ef:85:98:19: 98:e5:17:7c:49:0f:aa:90:17:45:bc:40:4f:29:5d:6d:90:2b: a8:22:df:35:3b:5b:f7:22:02:60:d1:1e:c0:1e:68:d4:fb:b0: d5:a3:66:81:93:87:2a:8b:4e:ee:9e:cb:79:4c:c2:f4:88:ec: b6:6b:09:2c:cb:be:a6:c2:c0:48:8b:ba:e4:56:0a:05:ab:a5: c4:19:46:5a:8d:95:fe:0b:4c:75:8f:3f:c2:75:9d:5e:57:74: d1:51:a8:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyTvZRHog9M3cP3C2sDvEooLBwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA3MjAxNDU1MDhaFw0yNjA3MjExNjA1MDhaMDMxMTAvBgNV BAMTKDYzODhCNUEyQjUwMTRGMzgwNUYyMjRDQ0MxQTM3REY0NjZBRjk4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4Any+/AvCQCiu0mgtknzAJWt jqT5RRqY0N0EDUqErNSy0V+iIOTQgA02/Aks2cbTCyeW3T7Kr7cyjPEhIR0mso6y l/bDcMvlbN9YYqDaIuGwJFjCao3R598rhSezqxBEAmdrWq5VQCL6NX+VnsAT51KT UpC3bYOSfdWwrHFaRdIHysd+H19smGnSLAms9SopuZr94VUcsG/zr/0NnU/2+t6m o4I2vIZKBzLGwpBufakl3vGmljGO1lJB4IF+UrJmTa4YMQWS3ov8XY+RhTmymifq fAQoqBeUgS8AkmmQedzAH17mvW3Ackc1ItT3thNV8GpAOpHfe6Jdw+YYCNitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4i1orUBTzgF8iTMwaN99GavmBQwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALIw4U6cz5rYKmVe4/ny+0hK7xjy64qAHq7 LAgVUeP3shotojx4AoKp5HESUDI2vHW+qjbO//dCaRh0lYX2XVCliCNLiQeg2yEM YObNaLVpJYWOTuDvGkYfVocnLDn/9fJLIVEPMaRzShMRjriU4ULA4TZzEF9dXa6t m9JwCMtOg/hLfW6v3SseUOBm8WpfT7GExlOHbz+oZaAMh98274WYGZjlF3xJD6qQ F0W8QE8pXW2QK6gi3zU7W/ciAmDRHsAeaNT7sNWjZoGThyqLTu6ey3lMwvSI7LZr CSzLvqbCwEiLuuRWCgWrpcQZRlqNlf4LTHWPP8J1nV5XdNFRqKM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:22 2026 by rpki-client