$ rpki-client -vvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: FYTKbKM05ms5MZ2TLlfVmvq0w2uTZMkzNXAkWS/H2JE= Subject key identifier: E7:99:09:50:09:B6:8A:F4:77:AC:E3:B4:8C:80:D5:9E:71:AD:DE:93 Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 5C927C699D66AAD1E3E90A9BEF482E355DB832AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:36:50 +0000 Manifest this update: Mon 20 Jul 2026 20:31:50 +0000 Manifest next update: Tue 21 Jul 2026 20:46:50 +0000 Files and hashes: 1: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: SMLnNT+akpgC2pwJePgBi12/SGDaUB6MYPFckrmVAXA=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:92:7c:69:9d:66:aa:d1:e3:e9:0a:9b:ef:48:2e:35:5d:b8:32:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Jul 20 20:31:50 2026 GMT Not After : Jul 21 20:46:50 2026 GMT Subject: CN=E799095009B68AF477ACE3B48C80D59E71ADDE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:cd:e8:c3:f0:fe:4d:a4:4f:6a:8d:b6:e5: f3:86:38:ed:5c:fb:4b:60:22:9c:bb:f6:df:d4:ed: 2e:83:b5:c2:eb:92:41:9f:95:23:a5:08:80:ba:57: 77:ba:4b:1c:9f:5d:9f:ae:2c:a9:d2:85:df:4f:aa: e8:0c:e6:5f:aa:12:e4:af:78:3e:d6:00:07:0b:7f: 72:b6:37:05:c9:4f:c2:0e:79:79:8d:70:b1:01:1f: 22:35:ae:c0:c5:0e:4a:a4:69:42:a0:6f:b7:51:1c: e5:39:f4:0a:71:2d:3d:1f:ea:e1:45:e3:ce:d4:02: 7e:b1:91:f3:b6:c4:48:f6:fb:37:83:68:55:20:dc: 06:f6:96:0f:6e:74:c8:bb:8b:56:75:93:ea:a0:cd: 21:e9:50:64:61:40:8b:39:fe:e9:85:50:7f:24:42: 35:74:9c:db:46:67:eb:41:e7:f5:ac:0a:6c:00:58: f5:63:47:5f:bc:65:86:b9:92:73:f2:e5:c9:de:04: 60:1f:f7:00:bf:61:c4:b2:93:35:d3:53:d5:d2:d9: 55:cf:3b:c9:3d:b8:75:b6:ee:db:2c:89:c4:a0:c3: e1:d1:be:45:3c:e1:12:ed:74:0f:58:1c:e3:13:03: 6e:87:30:21:ac:33:04:18:fe:08:53:3f:2a:4b:6d: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:09:50:09:B6:8A:F4:77:AC:E3:B4:8C:80:D5:9E:71:AD:DE:93 X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:27:69:45:6b:42:2e:4c:10:a3:9b:0c:5f:fb:59:35:d5: ed:86:2d:0a:0c:6e:b5:a5:90:df:d3:ae:8e:a7:9b:68:40:e3: c0:76:3f:a5:6c:c9:87:57:0f:e0:10:5e:a0:b3:ff:2f:92:54: a6:3a:7c:23:69:66:1a:06:29:87:92:b4:ff:26:1d:0b:3d:ff: c3:ed:f5:24:1c:d7:25:12:1d:c8:61:a0:29:05:6d:63:ad:74: 7e:c7:6e:7b:72:dc:ad:cf:f5:41:db:51:89:7c:c9:ea:97:ca: 17:f7:7b:6b:e9:1b:48:60:ed:b1:41:81:83:c9:fb:74:dc:c4: f4:e8:c8:de:d6:18:34:8e:c6:e6:d2:ff:9c:5a:ad:86:ef:9f: 38:c2:84:cc:f0:e5:98:d3:dd:b2:01:d2:40:6c:34:c5:26:ad: f3:e2:93:d7:c5:0d:6d:9c:42:01:49:ca:51:71:2e:87:27:d5: bd:8b:88:a5:c6:87:38:7d:67:de:ca:8f:09:c5:78:fa:d4:97: 21:4b:cb:ea:0f:32:7d:08:cb:d6:86:e1:2f:84:85:92:1f:62: 22:55:64:23:34:ae:84:52:7e:fc:0a:80:e9:3b:2a:a6:80:24: c7:b1:e1:62:f3:ff:b7:29:f8:61:a3:37:d1:a2:df:07:92:7e: c2:0b:b0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJJ8aZ1mqtHj6Qqb70guNV24MqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA3MjAyMDMxNTBaFw0yNjA3MjEyMDQ2NTBaMDMxMTAvBgNV BAMTKEU3OTkwOTUwMDlCNjhBRjQ3N0FDRTNCNDhDODBENTlFNzFBRERFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9es3ow/D+TaRPao225fOGOO1c +0tgIpy79t/U7S6DtcLrkkGflSOlCIC6V3e6SxyfXZ+uLKnShd9PqugM5l+qEuSv eD7WAAcLf3K2NwXJT8IOeXmNcLEBHyI1rsDFDkqkaUKgb7dRHOU59ApxLT0f6uFF 487UAn6xkfO2xEj2+zeDaFUg3Ab2lg9udMi7i1Z1k+qgzSHpUGRhQIs5/umFUH8k QjV0nNtGZ+tB5/WsCmwAWPVjR1+8ZYa5knPy5cneBGAf9wC/YcSykzXTU9XS2VXP O8k9uHW27tssicSgw+HRvkU84RLtdA9YHOMTA26HMCGsMwQY/ghTPypLbd8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55kJUAm2ivR3rOO0jIDVnnGt3pMwHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPNJ2lFa0IuTBCjmwxf+1k11e2GLQoMbrWl kN/Tro6nm2hA48B2P6VsyYdXD+AQXqCz/y+SVKY6fCNpZhoGKYeStP8mHQs9/8Pt 9SQc1yUSHchhoCkFbWOtdH7Hbnty3K3P9UHbUYl8yeqXyhf3e2vpG0hg7bFBgYPJ +3TcxPToyN7WGDSOxubS/5xarYbvnzjChMzw5ZjT3bIB0kBsNMUmrfPik9fFDW2c QgFJylFxLocn1b2LiKXGhzh9Z97KjwnFePrUlyFLy+oPMn0Iy9aG4S+EhZIfYiJV ZCM0roRSfvwKgOk7KqaAJMex4WLz/7cp+GGjN9Gi3weSfsILsMg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:35 2026 by rpki-client