$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: WyD5PXPVg0YuY/GPVhI0Wa7xT3kMVY3zZ9FGKJQ6OKs= Subject key identifier: 4D:63:8F:86:20:E1:7E:8C:94:FA:87:04:EC:91:DA:B7:F0:AD:60:BF Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 7BD2ED37AB342A12397CE84947CB7F9766C8F748 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:24:53 +0000 Manifest this update: Mon 20 Jul 2026 23:19:53 +0000 Manifest next update: Wed 22 Jul 2026 02:18:53 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) 2: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 3: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: XdquFW0OBX58yQp0d41PlBGVb9uqb+JjBtxDBQ2Z7zI=) 4: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d2:ed:37:ab:34:2a:12:39:7c:e8:49:47:cb:7f:97:66:c8:f7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Jul 20 23:19:53 2026 GMT Not After : Jul 22 02:18:53 2026 GMT Subject: CN=4D638F8620E17E8C94FA8704EC91DAB7F0AD60BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:a1:10:04:c4:67:0d:7f:d2:da:53:38:3a: 1c:e1:ff:bf:6e:79:f1:3c:50:e6:f4:cc:ba:15:1d: 61:92:25:e0:71:8c:bc:52:10:2e:c5:3b:18:36:34: a3:76:48:82:ce:e9:45:8b:0f:f9:03:0f:52:80:14: bf:82:dc:58:42:20:64:3a:1a:39:1f:94:3f:d6:95: a1:7e:02:ca:41:9b:57:57:ea:fe:7d:4a:f2:7a:58: 79:34:f2:11:02:dc:ec:3c:f4:08:ad:a7:a2:ed:b0: 59:5d:74:3b:ee:2a:73:31:07:80:be:a8:ae:8d:cc: ed:27:b5:0a:26:02:0b:18:a1:ed:6d:f1:8e:96:33: d0:88:7e:73:1b:67:c1:85:1f:6d:9a:e0:31:cc:49: 59:3c:a6:28:9b:93:0f:e1:16:59:71:32:4e:8b:fa: ff:1f:da:7b:46:74:e1:99:48:61:37:01:18:b1:38: 55:68:75:96:76:82:11:b7:fb:b7:fd:7b:2c:6b:35: c6:bc:11:e4:9a:fc:8f:4b:db:34:53:3a:e1:5b:b5: 20:16:fc:cb:41:dd:1c:62:45:c9:2f:9d:67:4d:6d: 7a:73:e7:66:23:2e:8b:15:0e:d1:b0:fc:a8:ef:31: 57:fa:07:7b:f4:9d:a9:07:fb:72:1c:3b:09:bc:8f: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:8F:86:20:E1:7E:8C:94:FA:87:04:EC:91:DA:B7:F0:AD:60:BF X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:b8:25:47:1f:c8:28:3a:6f:d9:9e:02:85:af:75:7e:b4: ff:65:b0:aa:2b:cf:69:fa:9d:16:a4:f5:06:bc:93:ee:6e:5b: 8a:12:49:64:7a:07:9e:d7:20:a2:d1:eb:fa:81:4e:c0:0c:8d: 11:0c:22:db:2b:c9:f4:6a:92:59:f9:e6:e5:ce:a7:26:07:8e: 88:fe:41:ae:fa:65:22:6b:83:f4:4e:e2:33:a8:bc:e0:2a:13: 10:3a:66:2d:36:3c:58:aa:eb:14:c9:92:49:6c:67:91:1f:75: 0e:01:2b:31:06:6a:ac:c0:05:4a:2d:53:09:48:7b:82:76:26: ac:ee:12:a6:be:d7:31:01:81:fa:6f:b3:0f:6e:e5:44:d2:45: d1:c7:0c:1f:ed:35:1c:8e:cd:b6:48:d5:01:8b:55:ab:6a:58: 17:6c:04:d6:bc:0f:95:0d:24:4c:64:64:cf:64:af:c4:03:f8: 1e:c1:e8:c4:0b:c4:aa:c6:db:a0:bf:43:eb:f7:a2:e1:e1:03: 57:97:c5:f5:96:50:7e:68:dd:7b:21:24:df:85:ea:19:65:e8: 61:fc:ab:41:6e:f5:75:40:d9:0d:ec:21:0c:16:e8:81:5c:70: 75:2f:99:41:ff:67:d5:41:80:ad:71:5c:a2:fe:32:4d:2d:b5: 24:97:e9:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9LtN6s0KhI5fOhJR8t/l2bI90gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA3MjAyMzE5NTNaFw0yNjA3MjIwMjE4NTNaMDMxMTAvBgNV BAMTKDRENjM4Rjg2MjBFMTdFOEM5NEZBODcwNEVDOTFEQUI3RjBBRDYwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LKEQBMRnDX/S2lM4Ohzh/79u efE8UOb0zLoVHWGSJeBxjLxSEC7FOxg2NKN2SILO6UWLD/kDD1KAFL+C3FhCIGQ6 GjkflD/WlaF+AspBm1dX6v59SvJ6WHk08hEC3Ow89Aitp6LtsFlddDvuKnMxB4C+ qK6NzO0ntQomAgsYoe1t8Y6WM9CIfnMbZ8GFH22a4DHMSVk8piibkw/hFllxMk6L +v8f2ntGdOGZSGE3ARixOFVodZZ2ghG3+7f9eyxrNca8EeSa/I9L2zRTOuFbtSAW /MtB3RxiRckvnWdNbXpz52YjLosVDtGw/KjvMVf6B3v0nakH+3IcOwm8j9m3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWOPhiDhfoyU+ocE7JHat/CtYL8wHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4wuCVHH8goOm/ZngKFr3V+tP9lsKorz2n6 nRak9Qa8k+5uW4oSSWR6B57XIKLR6/qBTsAMjREMItsryfRqkln55uXOpyYHjoj+ Qa76ZSJrg/RO4jOovOAqExA6Zi02PFiq6xTJkklsZ5EfdQ4BKzEGaqzABUotUwlI e4J2JqzuEqa+1zEBgfpvsw9u5UTSRdHHDB/tNRyOzbZI1QGLVatqWBdsBNa8D5UN JExkZM9kr8QD+B7B6MQLxKrG26C/Q+v3ouHhA1eXxfWWUH5o3XshJN+F6hll6GH8 q0Fu9XVA2Q3sIQwW6IFccHUvmUH/Z9VBgK1xXKL+Mk0ttSSX6aI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:59 2026 by rpki-client