$ rpki-client -vvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: AB1jIpxCTaMw111rBaaC9xWk0N37JyhgDaMcyQG8vNc= Subject key identifier: 63:ED:E7:29:B0:90:69:F9:AF:27:57:9D:9D:AF:47:DD:E4:95:0B:0C Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 525111A9CCD62FB5B41317E6FBB69B33B22CF737 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:10:17 +0000 Manifest this update: Mon 20 Jul 2026 15:05:17 +0000 Manifest next update: Tue 21 Jul 2026 17:00:17 +0000 Files and hashes: 1: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: 42/14YTcM85pISBKPLEICjbMdYaPZiu53guf217zrxQ=) 2: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:51:11:a9:cc:d6:2f:b5:b4:13:17:e6:fb:b6:9b:33:b2:2c:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Jul 20 15:05:17 2026 GMT Not After : Jul 21 17:00:17 2026 GMT Subject: CN=63EDE729B09069F9AF27579D9DAF47DDE4950B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:77:37:a6:73:c1:95:8e:ac:8f:e4:a0:7b: 5a:10:f4:a8:54:be:d0:e1:b8:e9:22:8c:2b:3d:79: 01:af:40:d2:f7:14:70:ae:d9:11:91:fd:34:d4:19: 6b:c4:79:d2:72:09:8c:08:11:98:45:06:db:ef:da: 95:6f:78:07:f6:9d:46:0c:1f:65:44:f0:24:db:cb: 36:f7:ef:db:19:4a:05:c9:67:06:56:b0:40:4e:4e: 22:c2:9e:fe:af:cc:b9:2e:03:f2:62:6e:39:bc:1f: 3e:89:4e:98:8a:1c:93:d5:11:a2:c5:da:89:41:4c: f3:ad:6f:22:b9:33:b6:66:bb:30:d6:97:67:78:5a: fb:d2:9b:dc:ac:52:c7:b5:e2:36:e7:02:fe:8f:12: 36:3c:4b:b1:c7:bc:e5:a1:88:57:05:5c:f5:a5:65: d3:4f:0e:ff:2d:92:d7:12:81:1e:bc:1e:99:d8:7b: aa:79:b6:52:8b:2e:e6:ec:85:e1:0a:55:21:15:09: 06:67:a3:76:88:13:d5:4c:fb:c5:51:b7:21:74:bf: 83:81:cd:84:71:f2:fd:11:f6:5e:c9:ae:5a:98:5c: 84:9f:0a:00:5e:41:58:f5:a3:ed:a2:e8:09:d6:79: 63:37:67:69:7b:3c:19:94:b9:a7:40:c0:57:c6:f5: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:E7:29:B0:90:69:F9:AF:27:57:9D:9D:AF:47:DD:E4:95:0B:0C X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ba:00:ec:80:85:ec:c1:6c:87:8f:d3:e0:4d:8a:d2:7c:0f: 4b:17:28:c4:ce:89:2d:e7:1d:d5:83:e2:f3:e7:3a:5d:6d:d9: d9:03:73:94:52:71:ac:89:9a:73:42:a3:71:98:54:01:ea:2d: 80:7d:5f:3b:04:c9:3d:42:86:af:db:89:b2:fd:08:fc:e2:87: 7b:b1:87:f1:e7:da:f5:24:50:12:d2:c6:a0:27:cb:16:a4:9d: 1c:ff:df:21:b7:59:c3:16:09:24:08:c9:6c:72:43:6e:80:51: 9a:83:28:3d:ed:b0:63:85:d6:22:7b:68:bf:8e:c8:22:6f:2e: 69:13:a7:b6:23:e7:6b:28:46:1b:b2:be:3d:20:2a:f6:18:cd: 39:12:c3:6c:ec:4a:ed:af:94:b9:de:10:e3:45:0c:e3:60:84: 21:1b:19:6b:de:97:f0:d8:8b:37:56:98:3c:f8:fb:00:cd:8a: d4:50:b7:a7:ad:cb:f5:b4:b0:e1:3d:42:e8:b3:bc:f8:80:54: bd:cb:d6:53:56:f2:37:3f:34:fe:3b:b7:63:03:74:28:af:f9: 2c:68:32:df:51:99:b8:8b:bc:55:12:77:99:64:71:a4:03:b9: bb:02:3e:af:0b:71:b6:49:a9:7c:ea:06:8f:70:c7:af:0e:be: 91:ef:22:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlERqczWL7W0Exfm+7abM7Is9zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA3MjAxNTA1MTdaFw0yNjA3MjExNzAwMTdaMDMxMTAvBgNV BAMTKDYzRURFNzI5QjA5MDY5RjlBRjI3NTc5RDlEQUY0N0RERTQ5NTBCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPXc3pnPBlY6sj+Sge1oQ9KhU vtDhuOkijCs9eQGvQNL3FHCu2RGR/TTUGWvEedJyCYwIEZhFBtvv2pVveAf2nUYM H2VE8CTbyzb379sZSgXJZwZWsEBOTiLCnv6vzLkuA/Jibjm8Hz6JTpiKHJPVEaLF 2olBTPOtbyK5M7ZmuzDWl2d4WvvSm9ysUse14jbnAv6PEjY8S7HHvOWhiFcFXPWl ZdNPDv8tktcSgR68HpnYe6p5tlKLLubsheEKVSEVCQZno3aIE9VM+8VRtyF0v4OB zYRx8v0R9l7JrlqYXISfCgBeQVj1o+2i6AnWeWM3Z2l7PBmUuadAwFfG9RH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+3nKbCQafmvJ1edna9H3eSVCwwwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+6AOyAhezBbIeP0+BNitJ8D0sXKMTOiS3n HdWD4vPnOl1t2dkDc5RScayJmnNCo3GYVAHqLYB9XzsEyT1Chq/bibL9CPzih3ux h/Hn2vUkUBLSxqAnyxaknRz/3yG3WcMWCSQIyWxyQ26AUZqDKD3tsGOF1iJ7aL+O yCJvLmkTp7Yj52soRhuyvj0gKvYYzTkSw2zsSu2vlLneEONFDONghCEbGWvel/DY izdWmDz4+wDNitRQt6ety/W0sOE9QuizvPiAVL3L1lNW8jc/NP47t2MDdCiv+Sxo Mt9RmbiLvFUSd5lkcaQDubsCPq8LcbZJqXzqBo9wx68OvpHvIic= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:21 2026 by rpki-client