$ rpki-client -vvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: zDDL4O/yDnBbcTpgdR9fzVRjb4UXuuYv2kEtvtpaWIw= Subject key identifier: 17:E4:7A:4C:1B:A4:32:0C:B7:03:1D:F3:4A:B3:82:76:FA:F1:01:8F Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 5EBEF131E86839E71177988039CFCAF48CDA5123 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 22:03:23 +0000 Manifest this update: Mon 20 Jul 2026 21:58:23 +0000 Manifest next update: Wed 22 Jul 2026 01:40:23 +0000 Files and hashes: 1: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 2: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) 3: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: IYy6YBY0rJhi4uuD3ybVWKVDlswm11MSYppMrSdhGRw=) 4: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:be:f1:31:e8:68:39:e7:11:77:98:80:39:cf:ca:f4:8c:da:51:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Jul 20 21:58:23 2026 GMT Not After : Jul 22 01:40:23 2026 GMT Subject: CN=17E47A4C1BA4320CB7031DF34AB38276FAF1018F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:38:1e:fb:f4:4f:9d:63:47:20:3f:7f:27: 05:2a:5f:4c:c7:af:36:d6:2d:f9:73:70:10:2e:74: 1f:88:bc:73:42:fe:16:2d:6b:4a:22:04:d7:2d:fd: 82:49:5b:f3:26:57:c1:9c:25:1f:1b:67:43:aa:4a: 97:e3:f8:23:5e:d1:c5:89:b8:f4:45:47:74:a1:17: 67:11:b8:a8:61:1b:15:92:9a:58:10:e2:66:44:49: 40:11:14:e6:de:84:c0:3a:07:4e:ee:d7:f8:96:ee: 32:69:2a:f3:1f:3c:db:d2:26:f0:9d:e9:97:9d:c4: ee:8b:9a:bd:f4:3c:e8:50:89:11:8e:89:f0:2c:7c: b4:89:71:fc:6a:e0:f3:18:9d:94:9d:99:e7:16:ae: f0:0f:b1:24:2e:5c:46:51:26:13:4f:e5:33:be:5c: 49:7b:4e:eb:0d:84:fe:5f:28:e2:b2:3f:2a:d4:96: 7e:8b:70:47:80:57:a3:c8:83:6c:c2:3b:c7:e2:e0: b0:d9:3f:37:d5:53:ed:c5:2a:6e:a1:cf:96:48:b7: 79:13:5f:95:fb:cb:db:d9:09:83:94:65:a1:af:30: a6:e8:fc:2b:c2:03:36:a3:9d:8a:d1:8d:b3:c9:fd: e9:df:4c:8e:66:a0:00:1f:04:da:35:26:88:09:6b: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E4:7A:4C:1B:A4:32:0C:B7:03:1D:F3:4A:B3:82:76:FA:F1:01:8F X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:60:d7:6f:c7:16:83:54:bd:9f:fb:43:bb:10:b4:8f:ff:0f: 29:8b:5f:3f:ff:31:3b:10:27:0f:cc:7a:87:ae:d1:7e:c8:f8: 88:d0:20:96:2e:5a:eb:2a:5a:94:42:61:9f:54:1a:bc:25:d2: c7:11:c3:2b:fd:3c:a3:f6:fe:b8:44:5a:ae:74:88:90:ec:21: 89:3b:bf:76:94:dc:bc:7f:1f:6b:8f:2e:d5:6c:a2:ce:35:d0: fa:3e:26:f2:2d:da:ba:5e:d1:1c:59:dc:f3:56:82:ab:ae:50: 67:ce:3b:f0:a6:cc:41:e3:fb:83:ad:c7:1c:4f:55:34:3f:c8: 60:21:af:28:1e:05:e4:57:03:81:15:4f:b7:cc:30:62:f6:9f: a7:89:84:4b:ae:65:ee:14:55:74:16:86:b3:db:8d:58:96:c6: ce:76:be:db:bc:99:14:fc:33:a8:ae:ba:c5:d1:87:ae:65:03: 05:c9:f2:23:8e:6e:e1:bf:35:45:99:d2:d8:5f:cd:71:2d:24: 92:f0:9f:89:43:01:0e:b6:b5:dc:ad:be:49:12:fb:41:d2:e1: e5:c9:3f:e9:2c:37:53:47:5f:61:87:89:be:20:e4:67:3d:19: 5e:fc:74:39:45:6a:3a:a9:5d:6e:6a:12:88:bf:ff:30:94:63: 5d:e3:86:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXr7xMehoOecRd5iAOc/K9IzaUSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA3MjAyMTU4MjNaFw0yNjA3MjIwMTQwMjNaMDMxMTAvBgNV BAMTKDE3RTQ3QTRDMUJBNDMyMENCNzAzMURGMzRBQjM4Mjc2RkFGMTAxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsJjge+/RPnWNHID9/JwUqX0zH rzbWLflzcBAudB+IvHNC/hYta0oiBNct/YJJW/MmV8GcJR8bZ0OqSpfj+CNe0cWJ uPRFR3ShF2cRuKhhGxWSmlgQ4mZESUARFObehMA6B07u1/iW7jJpKvMfPNvSJvCd 6ZedxO6Lmr30POhQiRGOifAsfLSJcfxq4PMYnZSdmecWrvAPsSQuXEZRJhNP5TO+ XEl7TusNhP5fKOKyPyrUln6LcEeAV6PIg2zCO8fi4LDZPzfVU+3FKm6hz5ZIt3kT X5X7y9vZCYOUZaGvMKbo/CvCAzajnYrRjbPJ/enfTI5moAAfBNo1JogJa6V/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF+R6TBukMgy3Ax3zSrOCdvrxAY8wHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBg12/HFoNUvZ/7Q7sQtI//DymLXz//MTsQ Jw/Meoeu0X7I+IjQIJYuWusqWpRCYZ9UGrwl0scRwyv9PKP2/rhEWq50iJDsIYk7 v3aU3Lx/H2uPLtVsos410Po+JvIt2rpe0RxZ3PNWgquuUGfOO/CmzEHj+4OtxxxP VTQ/yGAhrygeBeRXA4EVT7fMMGL2n6eJhEuuZe4UVXQWhrPbjViWxs52vtu8mRT8 M6iuusXRh65lAwXJ8iOObuG/NUWZ0thfzXEtJJLwn4lDAQ62tdytvkkS+0HS4eXJ P+ksN1NHX2GHib4g5Gc9GV78dDlFajqpXW5qEoi//zCUY13jhvU= -----END CERTIFICATE-----Generated at Tue Jul 21 10:05:06 2026 by rpki-client