$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: C3PbMUnMY5ZADU8GnPpcUloNj5x9b3N729U9/Oa4K68= Subject key identifier: 9E:66:E6:AE:15:89:71:77:FC:D8:3F:9F:52:0E:10:E7:51:CB:55:39 Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 59D2C4980857A7D8319789734ACAE90F3966C1A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:34:32 +0000 Manifest this update: Mon 20 Jul 2026 18:29:32 +0000 Manifest next update: Tue 21 Jul 2026 22:17:32 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) 3: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: qNNynGLobbnH4O7OS2jWd8/ZfJErVIs8tlo1OekyI4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d2:c4:98:08:57:a7:d8:31:97:89:73:4a:ca:e9:0f:39:66:c1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Jul 20 18:29:32 2026 GMT Not After : Jul 21 22:17:32 2026 GMT Subject: CN=9E66E6AE15897177FCD83F9F520E10E751CB5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:e9:24:ba:0d:1d:1b:7e:9a:d7:cb:32:c2: 47:27:50:f2:6a:83:60:13:be:26:37:a5:21:36:cc: 96:ea:91:49:34:c0:22:f9:74:22:3c:0e:49:a3:e4: cc:9b:26:a5:30:bb:24:86:53:ab:d4:8d:01:e1:15: 4d:63:a0:09:09:a4:ca:b6:2c:8d:b8:17:37:11:ff: b5:69:3e:ad:a6:0e:0a:e7:22:ee:ac:cf:e3:5c:fd: e1:0b:b4:d8:d4:c5:3e:15:26:65:21:e4:0d:d9:18: 12:16:fe:00:0a:e0:1d:65:3d:be:a1:b0:62:b2:8b: 85:07:ed:a6:5d:2d:4e:f0:ae:7f:a7:73:cc:cf:7e: e7:a6:63:49:dc:c3:34:4d:a9:51:95:ed:7e:20:7c: 67:f8:16:c5:83:83:70:cb:57:a5:ef:9c:2a:96:88: 8d:7a:08:d2:1d:38:ed:d1:04:9d:0b:d0:90:99:97: 24:72:45:c8:0d:a0:4c:9f:69:67:18:61:7b:2c:0d: f0:7f:5c:9c:02:2d:7e:c6:2e:5d:09:2d:c1:2b:c0: b6:98:0f:47:ac:c1:67:f6:3f:35:d8:c0:36:e5:dd: 90:3a:67:a2:69:c7:42:52:2e:2f:89:09:ab:7d:44: f1:22:17:0e:a8:8f:89:5a:da:dd:b4:38:d5:95:1f: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:E6:AE:15:89:71:77:FC:D8:3F:9F:52:0E:10:E7:51:CB:55:39 X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:29:fa:02:da:01:07:67:d2:7a:c1:54:e5:b9:f7:ba:63:dd: f2:86:bb:ee:5b:b2:23:b7:8c:38:1c:43:2a:7e:63:d5:fe:02: 01:24:e2:97:b7:5d:82:98:52:14:ab:83:ab:73:95:2e:7c:c2: ff:72:07:e5:0d:55:a7:3f:c4:19:af:a6:38:23:e6:14:6d:89: 8a:02:18:dd:6c:d7:76:8a:17:72:84:10:12:8b:b7:dc:fe:d4: 6b:0d:b7:56:35:09:0e:88:54:e6:16:e6:55:b7:02:1f:bb:6f: fe:f9:fa:da:49:07:e1:a4:c0:79:d2:73:55:8a:13:17:8d:85: 98:17:7e:7b:60:27:ba:38:18:54:5d:ec:4c:c9:09:f2:41:60: 2a:e8:2e:6a:20:eb:db:78:1c:8e:fd:e7:3d:af:eb:07:97:2e: 60:59:cb:97:08:b9:34:2d:c6:61:b0:e2:d3:38:fa:dd:51:f3: 40:5c:b3:49:71:b4:78:21:a1:12:96:aa:fd:10:3b:40:f8:08: 5e:2d:c5:97:fb:54:ed:99:ae:8c:e1:ca:e7:f0:1e:9d:e9:a9: a4:0f:19:fb:0c:c9:13:25:80:0e:32:4d:ae:c2:43:cb:17:60: e9:f1:8c:0b:1a:2d:1d:51:08:5e:53:6d:6a:9e:bd:0c:4c:4e: 7a:de:13:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdLEmAhXp9gxl4lzSsrpDzlmwakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA3MjAxODI5MzJaFw0yNjA3MjEyMjE3MzJaMDMxMTAvBgNV BAMTKDlFNjZFNkFFMTU4OTcxNzdGQ0Q4M0Y5RjUyMEUxMEU3NTFDQjU1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOekkug0dG36a18sywkcnUPJq g2ATviY3pSE2zJbqkUk0wCL5dCI8Dkmj5MybJqUwuySGU6vUjQHhFU1joAkJpMq2 LI24FzcR/7VpPq2mDgrnIu6sz+Nc/eELtNjUxT4VJmUh5A3ZGBIW/gAK4B1lPb6h sGKyi4UH7aZdLU7wrn+nc8zPfuemY0ncwzRNqVGV7X4gfGf4FsWDg3DLV6XvnCqW iI16CNIdOO3RBJ0L0JCZlyRyRcgNoEyfaWcYYXssDfB/XJwCLX7GLl0JLcErwLaY D0eswWf2PzXYwDbl3ZA6Z6Jpx0JSLi+JCat9RPEiFw6oj4la2t20ONWVH8rZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmbmrhWJcXf82D+fUg4Q51HLVTkwHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQp+gLaAQdn0nrBVOW597pj3fKGu+5bsiO3 jDgcQyp+Y9X+AgEk4pe3XYKYUhSrg6tzlS58wv9yB+UNVac/xBmvpjgj5hRtiYoC GN1s13aKF3KEEBKLt9z+1GsNt1Y1CQ6IVOYW5lW3Ah+7b/75+tpJB+GkwHnSc1WK ExeNhZgXfntgJ7o4GFRd7EzJCfJBYCroLmog69t4HI795z2v6weXLmBZy5cIuTQt xmGw4tM4+t1R80Bcs0lxtHghoRKWqv0QO0D4CF4txZf7VO2ZrozhyufwHp3pqaQP GfsMyRMlgA4yTa7CQ8sXYOnxjAsaLR1RCF5TbWqevQxMTnreE8g= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:50 2026 by rpki-client