$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: xpd2IMfo4Kij4K1P8LKAoIuMlBLAdA/KODYVXOFbyZo= Subject key identifier: 60:D6:FB:E8:3D:DF:A5:A8:5C:D1:6C:75:A0:CF:73:0E:64:B2:A4:5C Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 7FACF5432262059CDD2B2C2CEDF61BADE2CA7EC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:34:32 +0000 Manifest this update: Mon 20 Jul 2026 18:29:32 +0000 Manifest next update: Tue 21 Jul 2026 19:46:32 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: JBXFcETq4En5txyCN22IpMWlFLhY9prVldx/KUvn7lg=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ac:f5:43:22:62:05:9c:dd:2b:2c:2c:ed:f6:1b:ad:e2:ca:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Jul 20 18:29:32 2026 GMT Not After : Jul 21 19:46:32 2026 GMT Subject: CN=60D6FBE83DDFA5A85CD16C75A0CF730E64B2A45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:80:a1:fe:bd:ad:99:a1:3e:68:45:02:02: f7:6b:c0:5e:56:e5:9b:f9:73:c4:d4:fa:0a:9c:85: 7f:81:e2:64:b0:9b:29:91:75:c1:d1:66:4f:10:22: d3:d5:39:95:2b:13:7e:96:7d:8d:b1:18:ea:73:a2: 33:41:72:20:47:7c:53:76:cd:00:4f:a4:c8:5b:0f: c7:fe:5f:46:ca:50:65:d6:4d:93:53:ae:2e:15:8e: 4b:fc:a0:ef:0a:d0:86:0a:13:4b:08:08:48:9a:c1: ff:3d:33:e4:12:b0:cf:05:0d:39:45:14:f1:29:4b: b4:00:d2:38:a5:0d:c4:ea:12:8b:a4:ed:2d:c9:5f: 60:d7:7d:75:91:c5:32:fd:7b:47:12:17:17:fe:98: a2:11:dc:79:a1:3e:a7:2a:11:47:84:44:ad:10:8c: eb:02:4d:b2:60:76:bb:c5:d3:41:4f:63:9d:da:fa: 14:86:7e:73:7c:3a:ec:ee:90:59:fb:99:ff:2f:f3: 55:d7:7c:df:20:48:a7:71:45:d8:16:9a:9a:22:69: 0b:bc:5c:df:ca:ea:66:8c:3e:81:2f:4d:cb:e7:ea: 8a:c7:8e:26:16:39:42:dd:03:b9:86:8c:13:e5:ec: 14:41:e7:55:86:bb:d8:c9:8b:67:c1:cc:14:7b:b6: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D6:FB:E8:3D:DF:A5:A8:5C:D1:6C:75:A0:CF:73:0E:64:B2:A4:5C X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a7:95:86:1b:9f:84:6d:3c:91:d2:95:ea:94:d3:7d:bc:3e: 07:a9:54:4b:7c:7a:1f:04:cf:8f:d3:a2:1c:89:c0:80:bd:67: 1e:0e:c2:28:a9:c0:35:c7:c6:f2:4a:2f:8b:2e:83:b5:0d:af: e5:a9:82:c6:f3:11:14:f9:46:9c:d8:35:a0:5e:21:6a:c8:6f: 69:1a:05:80:f5:70:dc:fc:bf:2a:74:41:d0:49:b3:1c:ff:55: 4c:9b:b0:0a:a7:87:1e:31:0e:ee:18:e4:5a:05:62:33:dd:c3: d2:27:c7:25:43:b2:3f:16:03:77:50:db:7a:a3:f3:2c:07:ec: 8d:4b:c8:b3:77:89:28:d3:29:89:dc:d2:e1:25:27:28:7d:e1: 75:a2:35:a1:14:b3:43:9f:d7:37:0b:96:fc:3d:ea:fb:fe:2f: de:54:ac:db:0c:02:52:39:17:3e:76:40:cf:e7:4d:56:c8:7d: d7:df:46:36:21:b2:e3:de:99:b7:3c:b3:83:de:20:20:36:77: aa:2e:a1:1d:e6:20:e0:85:04:63:b7:c1:86:f2:87:a8:18:19: 89:5d:5a:79:f8:31:67:6a:83:67:b1:4b:1f:a6:5d:ab:7f:fc: 72:81:31:19:24:09:d9:1a:d1:b1:bc:6d:73:80:f1:6a:9f:7f: 38:5b:c8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6z1QyJiBZzdKyws7fYbreLKfsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA3MjAxODI5MzJaFw0yNjA3MjExOTQ2MzJaMDMxMTAvBgNV BAMTKDYwRDZGQkU4M0RERkE1QTg1Q0QxNkM3NUEwQ0Y3MzBFNjRCMkE0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuYCh/r2tmaE+aEUCAvdrwF5W 5Zv5c8TU+gqchX+B4mSwmymRdcHRZk8QItPVOZUrE36WfY2xGOpzojNBciBHfFN2 zQBPpMhbD8f+X0bKUGXWTZNTri4Vjkv8oO8K0IYKE0sICEiawf89M+QSsM8FDTlF FPEpS7QA0jilDcTqEouk7S3JX2DXfXWRxTL9e0cSFxf+mKIR3HmhPqcqEUeERK0Q jOsCTbJgdrvF00FPY53a+hSGfnN8OuzukFn7mf8v81XXfN8gSKdxRdgWmpoiaQu8 XN/K6maMPoEvTcvn6orHjiYWOULdA7mGjBPl7BRB51WGu9jJi2fBzBR7tukJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNb76D3fpahc0Wx1oM9zDmSypFwwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOnlYYbn4RtPJHSleqU0328PgepVEt8eh8E z4/TohyJwIC9Zx4OwiipwDXHxvJKL4sug7UNr+WpgsbzERT5RpzYNaBeIWrIb2ka BYD1cNz8vyp0QdBJsxz/VUybsAqnhx4xDu4Y5FoFYjPdw9InxyVDsj8WA3dQ23qj 8ywH7I1LyLN3iSjTKYnc0uElJyh94XWiNaEUs0Of1zcLlvw96vv+L95UrNsMAlI5 Fz52QM/nTVbIfdffRjYhsuPembc8s4PeICA2d6ouoR3mIOCFBGO3wYbyh6gYGYld Wnn4MWdqg2exSx+mXat//HKBMRkkCdka0bG8bXOA8WqffzhbyPQ= -----END CERTIFICATE-----Generated at Tue Jul 21 10:53:50 2026 by rpki-client