$ rpki-client -vvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: prdZquSjIcZh/ZPkIOnnnaxTJrecEU8Pqkt7vbgIl0s= Subject key identifier: 1F:9B:6F:9E:2C:AB:AC:45:66:90:18:5D:D0:0F:D8:46:2D:A4:34:19 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 2CEA314C4E9E49106BA4B94B1B9416CCBD435BCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: 6D Signing time: Tue 21 Jul 2026 05:07:10 +0000 Manifest this update: Tue 21 Jul 2026 05:02:10 +0000 Manifest next update: Wed 22 Jul 2026 08:53:10 +0000 Files and hashes: 1: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: w4ZJHe0RKXqFSGISbSQ0CKc2V9Zhr6qn+4mPP/23DrI=) 2: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 3: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:31:4c:4e:9e:49:10:6b:a4:b9:4b:1b:94:16:cc:bd:43:5b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Jul 21 05:02:10 2026 GMT Not After : Jul 22 08:53:10 2026 GMT Subject: CN=1F9B6F9E2CABAC456690185DD00FD8462DA43419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:66:70:58:98:fd:70:13:a0:38:9a:83:49: 69:de:a7:8f:c4:9d:00:ce:da:80:4a:ff:e3:3d:dc: 1f:3c:16:31:c6:46:91:03:78:03:83:b2:0b:3b:3c: a0:a0:74:39:96:25:7c:a8:61:8a:6d:86:01:44:6d: a5:43:44:52:8c:37:4c:7d:af:57:ab:c7:8f:e7:f8: 20:53:e3:d6:36:dc:c3:09:4f:0c:43:f7:10:46:d8: 07:de:92:08:58:85:9d:89:1a:b4:22:c9:64:4b:5c: 8f:f9:9b:fb:c7:de:fe:ac:24:4a:ae:8a:f3:23:3e: d1:44:fd:4e:dc:64:c2:a1:a9:57:2e:5f:10:54:fc: 5a:bc:88:2c:b9:10:c9:88:0b:0b:71:8a:ea:4f:9f: f8:7c:33:7c:f3:17:05:c7:a8:7c:9b:ab:df:6b:a9: e7:4f:6a:e4:f4:f3:38:a3:0f:df:53:28:40:86:5f: e8:42:f9:ba:53:6c:03:f6:c3:f3:e3:a7:68:6e:42: bf:29:98:a1:ed:2b:67:6c:9b:09:30:1e:af:ad:9b: 18:05:d0:53:d8:5b:d2:ad:87:8b:64:9f:b6:00:1c: bc:35:13:58:a7:15:d4:75:75:a4:6c:35:77:a2:4a: 2a:b0:e9:f2:a5:61:b1:77:d2:28:cb:21:a7:c2:ec: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:6F:9E:2C:AB:AC:45:66:90:18:5D:D0:0F:D8:46:2D:A4:34:19 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:f3:30:a7:c4:4f:a1:70:4d:c6:d9:29:5b:93:f5:b1:95: 56:65:28:b2:99:47:cd:77:59:ee:28:26:1c:0f:90:24:61:27: 09:f3:b5:f0:e3:57:3d:a4:b8:f2:33:61:8a:fb:65:a9:d2:e3: e8:87:5a:44:0c:26:80:69:e3:2a:dc:4b:31:70:17:50:a5:a3: 6a:a3:d6:9b:ee:77:a0:51:f4:4a:09:66:6f:aa:87:fb:a1:15: aa:d6:ce:c3:c7:34:9e:8b:1f:9c:74:90:28:78:99:54:58:fe: 5e:15:79:86:7b:3c:7e:2d:a1:57:6e:7a:d2:82:1f:53:a4:a3: 0d:33:16:f3:10:71:7c:f9:92:63:a1:af:ea:ca:c8:89:d1:18: db:30:69:81:0f:6d:e7:3c:93:21:9c:aa:2f:06:e6:d8:10:c4: 77:c0:81:cd:3b:bc:07:64:cc:a1:ce:79:5f:53:fe:dd:10:22: 2a:c9:fa:34:9f:fb:4a:c5:25:07:82:42:8f:58:d9:84:7e:18: 52:35:cf:a5:aa:23:0c:4e:84:29:1a:dd:b1:a3:3a:d5:07:2c: 33:8b:a0:19:61:50:14:0f:6f:71:8e:05:30:94:8b:74:eb:b4: 82:29:15:9b:80:53:a4:79:f8:a1:56:0f:99:fd:87:14:cf:cf: 22:11:ac:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOoxTE6eSRBrpLlLG5QWzL1DW8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA3MjEwNTAyMTBaFw0yNjA3MjIwODUzMTBaMDMxMTAvBgNV BAMTKDFGOUI2RjlFMkNBQkFDNDU2NjkwMTg1REQwMEZEODQ2MkRBNDM0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/amZwWJj9cBOgOJqDSWnep4/E nQDO2oBK/+M93B88FjHGRpEDeAODsgs7PKCgdDmWJXyoYYpthgFEbaVDRFKMN0x9 r1erx4/n+CBT49Y23MMJTwxD9xBG2AfekghYhZ2JGrQiyWRLXI/5m/vH3v6sJEqu ivMjPtFE/U7cZMKhqVcuXxBU/Fq8iCy5EMmICwtxiupPn/h8M3zzFwXHqHybq99r qedPauT08zijD99TKECGX+hC+bpTbAP2w/Pjp2huQr8pmKHtK2dsmwkwHq+tmxgF 0FPYW9Kth4tkn7YAHLw1E1inFdR1daRsNXeiSiqw6fKlYbF30ijLIafC7Kt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5tvniyrrEVmkBhd0A/YRi2kNBkwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZc8zCnxE+hcE3G2Slbk/WxlVZlKLKZR813 We4oJhwPkCRhJwnztfDjVz2kuPIzYYr7ZanS4+iHWkQMJoBp4yrcSzFwF1Clo2qj 1pvud6BR9EoJZm+qh/uhFarWzsPHNJ6LH5x0kCh4mVRY/l4VeYZ7PH4toVduetKC H1Okow0zFvMQcXz5kmOhr+rKyInRGNswaYEPbec8kyGcqi8G5tgQxHfAgc07vAdk zKHOeV9T/t0QIirJ+jSf+0rFJQeCQo9Y2YR+GFI1z6WqIwxOhCka3bGjOtUHLDOL oBlhUBQPb3GOBTCUi3TrtIIpFZuAU6R5+KFWD5n9hxTPzyIRrCI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:32 2026 by rpki-client