$ rpki-client -vvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: ZOFhnxVGJM949E0jpqt+OPTQbo2sqNUoj7ZZvut7vgY= Subject key identifier: FC:83:58:51:E6:5F:04:60:AE:3A:2C:F8:8C:68:C8:85:5E:37:59:8A Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 28802DD3B8F1F8E913439B4778B1FF0732101C99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:14:19 +0000 Manifest this update: Mon 20 Jul 2026 14:09:19 +0000 Manifest next update: Tue 21 Jul 2026 15:38:19 +0000 Files and hashes: 1: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 2: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: OstfqtzeDgPDMkjt05PQG6l0o9hys1r/cQumWCPyRRc=) 3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 4: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) 5: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:80:2d:d3:b8:f1:f8:e9:13:43:9b:47:78:b1:ff:07:32:10:1c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Jul 20 14:09:19 2026 GMT Not After : Jul 21 15:38:19 2026 GMT Subject: CN=FC835851E65F0460AE3A2CF88C68C8855E37598A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:e3:63:26:f8:72:b3:45:f7:ed:8d:d6:f2: 56:af:00:3b:3c:3d:1a:2b:8c:9e:02:dd:05:d6:43: 32:26:a0:ee:2a:b8:77:1a:d6:2a:58:20:9f:1e:6e: a9:fe:29:f1:b0:d2:90:93:e4:6b:8a:82:3d:c1:c9: f4:cd:32:b5:96:1a:e5:9c:ce:83:cb:43:93:a3:3e: fb:c6:e9:da:c1:80:24:5c:b9:9b:b1:49:b2:f0:0f: c5:da:b8:d5:45:7d:cb:4d:5a:c2:62:00:6b:db:b9: 05:68:aa:59:1d:ee:5f:6a:9f:58:73:3c:55:db:46: d3:84:8d:23:50:f4:b0:fe:11:6b:da:80:1f:74:8e: 4f:51:46:71:98:b3:49:b9:b4:87:7e:39:44:a6:3f: 72:d6:f2:89:7c:89:38:d6:fe:14:d7:48:5a:99:a8: f5:2f:58:2b:ee:a6:b4:39:5e:95:95:2d:a8:32:a0: 91:14:50:fd:7a:09:ec:35:f7:47:83:0a:32:dd:b4: bd:cf:2d:3c:e6:88:6f:78:21:bf:b4:27:ca:b4:7a: 95:0e:04:68:8f:32:4a:0e:57:62:05:ce:ca:11:19: a0:4e:b9:c2:e0:ce:99:91:a6:a0:f1:ae:13:f9:37: 92:24:3c:de:ef:91:75:9a:2e:3b:d3:23:bb:98:0a: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:58:51:E6:5F:04:60:AE:3A:2C:F8:8C:68:C8:85:5E:37:59:8A X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:7b:ff:0d:76:09:a9:39:9b:ba:b2:b3:e4:79:36:29:8d: 05:7d:a4:d8:0a:ae:1f:c3:23:c1:4e:2d:f1:a8:d1:1b:7f:fe: 68:73:16:9b:27:48:4b:db:0f:e2:13:59:ce:2b:d9:d9:56:0c: 33:a7:aa:73:ac:77:d2:15:0c:3e:f5:54:6e:c9:34:9c:e0:c9: fe:90:f8:3f:7f:6f:6e:f4:6f:9e:3b:68:e4:1a:73:94:48:c3: e8:87:02:bf:bc:41:9a:bf:ff:cd:3b:d8:30:18:c5:83:2a:0c: 20:3f:79:94:50:89:85:4e:fb:1b:96:51:38:0e:53:8d:87:79: 3f:fa:05:f1:0b:8e:ea:30:60:5f:fd:6a:b5:09:55:00:54:fb: bc:b8:dd:a7:49:0c:75:38:11:6e:ad:f9:81:42:31:a2:86:a8: 72:fe:8c:8a:41:79:06:63:58:f5:5a:6b:c4:1f:cf:49:ab:fc: 32:cc:58:0c:7e:14:53:c9:ff:b0:f7:36:38:a3:89:c2:4e:ba: eb:85:30:f4:47:29:64:40:3c:73:0a:e4:22:25:93:29:71:07: fa:d3:22:bf:de:3a:04:ca:4a:d7:cd:4f:12:55:ed:a4:a6:dc: 76:0a:d7:59:52:cd:1b:13:09:70:35:a7:82:0e:e3:19:ed:e6: c9:01:8b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIAt07jx+OkTQ5tHeLH/BzIQHJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA3MjAxNDA5MTlaFw0yNjA3MjExNTM4MTlaMDMxMTAvBgNV BAMTKEZDODM1ODUxRTY1RjA0NjBBRTNBMkNGODhDNjhDODg1NUUzNzU5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uuNjJvhys0X37Y3W8lavADs8 PRorjJ4C3QXWQzImoO4quHca1ipYIJ8ebqn+KfGw0pCT5GuKgj3ByfTNMrWWGuWc zoPLQ5OjPvvG6drBgCRcuZuxSbLwD8XauNVFfctNWsJiAGvbuQVoqlkd7l9qn1hz PFXbRtOEjSNQ9LD+EWvagB90jk9RRnGYs0m5tId+OUSmP3LW8ol8iTjW/hTXSFqZ qPUvWCvuprQ5XpWVLagyoJEUUP16Cew190eDCjLdtL3PLTzmiG94Ib+0J8q0epUO BGiPMkoOV2IFzsoRGaBOucLgzpmRpqDxrhP5N5IkPN7vkXWaLjvTI7uYCtibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/INYUeZfBGCuOiz4jGjIhV43WYowHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs+e/8NdgmpOZu6srPkeTYpjQV9pNgKrh/D I8FOLfGo0Rt//mhzFpsnSEvbD+ITWc4r2dlWDDOnqnOsd9IVDD71VG7JNJzgyf6Q +D9/b270b547aOQac5RIw+iHAr+8QZq//8072DAYxYMqDCA/eZRQiYVO+xuWUTgO U42HeT/6BfELjuowYF/9arUJVQBU+7y43adJDHU4EW6t+YFCMaKGqHL+jIpBeQZj WPVaa8Qfz0mr/DLMWAx+FFPJ/7D3NjijicJOuuuFMPRHKWRAPHMK5CIlkylxB/rT Ir/eOgTKStfNTxJV7aSm3HYK11lSzRsTCXA1p4IO4xnt5skBi0w= -----END CERTIFICATE-----Generated at Tue Jul 21 06:44:01 2026 by rpki-client