$ rpki-client -vvf rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft File: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft (raw, json) Hash identifier: +VmIEMwdYJz5tK49TzA7WLTlHblbSy2yeRWSceXK9a4= Subject key identifier: 92:C3:6A:B4:EB:7E:49:2D:52:7B:4B:0C:9E:63:E1:21:CC:02:A5:15 Authority key identifier: 31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 Certificate issuer: /CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Certificate serial: 4E6FF88EEB5D2AE0247020D4D758FFCD0D3FEE44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:02:33 +0000 Manifest this update: Mon 20 Jul 2026 16:57:33 +0000 Manifest next update: Tue 21 Jul 2026 19:33:33 +0000 Files and hashes: 1: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: JHt7Y4sfZDXhljzVs+do4tcZibHDOYboGApg1o5d8oY=) 2: 3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl (hash: kjos1XnL8CChxxglznDp0NpJfVhmFIlDLS0x7/W4pWc=) 3: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: KtHFgiZtCU/Oo5xwU2fpqeHLtCGkwIQI7UNolZenHzM=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: Q63O5LgByYAATkaug4pVt8bzE+ZHKwWLFzPYd2unh+E=) 5: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: FR/6TdAfo1P3iR6uXvmbo5xbGJoxQcFRkSBLcjXonAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6f:f8:8e:eb:5d:2a:e0:24:70:20:d4:d7:58:ff:cd:0d:3f:ee:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2 Validity Not Before: Jul 20 16:57:33 2026 GMT Not After : Jul 21 19:33:33 2026 GMT Subject: CN=92C36AB4EB7E492D527B4B0C9E63E121CC02A515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:7f:1b:67:7d:b8:53:60:d9:f4:0c:60:8d: 4d:6f:81:32:f1:f7:b5:b0:4c:62:d7:eb:5a:e2:ed: c8:9b:67:2f:1c:8f:5f:33:79:f1:e2:2f:a9:e0:49: 4c:e7:24:26:f6:44:26:82:2f:5a:d1:ec:b6:86:9e: 00:78:1b:3a:7c:f8:1a:12:ec:7d:57:67:64:c8:ea: c4:6f:36:11:a8:82:78:d8:e4:5a:67:92:82:9b:99: 67:fa:0f:c5:aa:52:e8:19:09:7a:ba:dc:06:ff:33: a9:23:22:ca:41:d1:ba:18:50:d8:7b:09:98:c1:a7: 58:a8:25:68:67:b6:71:bb:5e:5d:cf:e2:e3:bf:92: 5f:e4:f6:7c:b7:ed:70:1d:b7:94:4a:33:cd:32:97: e7:30:d5:e9:75:5e:58:28:9c:e0:98:14:64:0b:30: 23:02:d0:53:24:a7:c6:e5:73:ee:bd:fd:42:f4:be: 80:9c:91:30:c0:c7:88:8e:46:69:c3:69:b8:c5:3d: d1:73:0b:ea:65:3a:e7:20:53:45:95:08:ad:38:d5: 9d:de:83:55:8a:aa:ea:ec:6e:6c:4c:0c:69:98:e3: 52:a6:08:b6:a4:66:9d:7b:24:2b:7a:d1:c1:23:40: 74:19:f1:4c:99:30:80:be:1c:c2:81:ad:60:16:ad: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:6A:B4:EB:7E:49:2D:52:7B:4B:0C:9E:63:E1:21:CC:02:A5:15 X509v3 Authority Key Identifier: keyid:31:14:FE:A2:82:06:14:B6:E8:BF:E3:0F:B3:E0:E4:E1:2F:EE:3F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/3114FEA2820614B6E8BFE30FB3E0E4E12FEE3FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a5:84:bb:da:aa:bf:43:96:06:2a:50:25:6b:b4:c9:e7:20: d9:53:5e:33:ed:d9:ef:ca:ed:cb:cd:6a:87:e3:85:46:29:c3: 45:4b:77:b2:ef:e0:3d:7c:6f:b7:ad:48:0d:5a:ef:ae:b8:2b: f7:f2:f7:2b:93:9b:2c:1d:28:cf:34:ed:47:7c:7c:46:b3:1b: 97:f0:0d:4d:15:be:c3:59:4b:74:06:bc:c4:49:d1:13:a6:a9: d6:7c:ec:a5:19:f3:96:90:38:c4:da:15:1f:d3:f1:9d:79:bf: 73:9f:67:2f:d7:f1:6e:03:c2:0b:19:20:3e:84:1c:40:ce:0a: fd:7d:9d:9b:d1:11:0f:f8:e1:c8:89:75:04:92:23:d7:a2:6e: ed:22:36:74:19:1a:8e:cb:bb:11:e5:04:bc:71:7a:cf:4c:fe: 7c:80:98:d2:7d:72:ad:05:a6:00:7c:40:99:d0:cc:77:a9:9e: 92:57:de:9b:d6:f9:47:09:3e:31:2c:ec:c3:e8:6a:7a:97:d4: ff:ba:33:d9:7c:26:36:db:57:b8:34:d7:1d:cd:b5:ba:cf:16: 5e:89:e7:54:9a:44:89:e1:72:9b:d6:09:4b:26:47:0e:36:43: 24:6a:e7:cc:ae:06:3e:39:2e:29:2a:a6:2f:92:69:a4:89:dc: ef:bb:b1:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTm/4jutdKuAkcCDU11j/zQ0/7kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEy RkVFM0ZBMjAeFw0yNjA3MjAxNjU3MzNaFw0yNjA3MjExOTMzMzNaMDMxMTAvBgNV BAMTKDkyQzM2QUI0RUI3RTQ5MkQ1MjdCNEIwQzlFNjNFMTIxQ0MwMkE1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iH8bZ324U2DZ9AxgjU1vgTLx 97WwTGLX61ri7cibZy8cj18zefHiL6ngSUznJCb2RCaCL1rR7LaGngB4Gzp8+BoS 7H1XZ2TI6sRvNhGognjY5FpnkoKbmWf6D8WqUugZCXq63Ab/M6kjIspB0boYUNh7 CZjBp1ioJWhntnG7Xl3P4uO/kl/k9ny37XAdt5RKM80yl+cw1el1XlgonOCYFGQL MCMC0FMkp8blc+69/UL0voCckTDAx4iORmnDabjFPdFzC+plOucgU0WVCK041Z3e g1WKqursbmxMDGmY41KmCLakZp17JCt60cEjQHQZ8UyZMIC+HMKBrWAWrV6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUksNqtOt+SS1Se0sMnmPhIcwCpRUwHwYDVR0j BBgwFoAUMRT+ooIGFLbov+MPs+Dk4S/uP6IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA3NjA4Y2UtYzNmOC00NGViLWFlZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4 MjA2MTRCNkU4QkZFMzBGQjNFMEU0RTEyRkVFM0ZBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMTE0RkVBMjgyMDYxNEI2RThCRkUzMEZCM0UwRTRFMTJGRUUz RkEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvMzExNEZFQTI4MjA2MTRCNkU4QkZFMzBGQjNFMEU0 RTEyRkVFM0ZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmlhLvaqr9DlgYqUCVrtMnnINlTXjPt2e/K 7cvNaofjhUYpw0VLd7Lv4D18b7etSA1a7664K/fy9yuTmywdKM807Ud8fEazG5fw DU0VvsNZS3QGvMRJ0ROmqdZ87KUZ85aQOMTaFR/T8Z15v3OfZy/X8W4DwgsZID6E HEDOCv19nZvREQ/44ciJdQSSI9eibu0iNnQZGo7LuxHlBLxxes9M/nyAmNJ9cq0F pgB8QJnQzHepnpJX3pvW+UcJPjEs7MPoanqX1P+6M9l8JjbbV7g01x3NtbrPFl6J 51SaRInhcpvWCUsmRw42QyRq58yuBj45Likqpi+SaaSJ3O+7sQ0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:02 2026 by rpki-client