$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: qO7kVPMvp+lQ1evzm1T3OAdFUNSEQxzdC7FyRsA07kk= Subject key identifier: B3:4A:7F:71:55:EE:52:CC:08:9A:2E:88:A6:31:51:7B:6D:A6:3A:4D Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 1B5F42E7EA21D95006ACDEA19C9411DDA54EA0B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 08:17:20 +0000 Manifest this update: Sun 19 Jul 2026 08:12:20 +0000 Manifest next update: Mon 20 Jul 2026 11:39:20 +0000 Files and hashes: 1: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 2: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 3: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: nyoq5nh7bmXA/2gdFf43lXSTFEP0lM/g9VgGzOwLqhk=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 5: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 11:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5f:42:e7:ea:21:d9:50:06:ac:de:a1:9c:94:11:dd:a5:4e:a0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Jul 19 08:12:20 2026 GMT Not After : Jul 20 11:39:20 2026 GMT Subject: CN=B34A7F7155EE52CC089A2E88A631517B6DA63A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:b9:8a:b3:0f:90:5b:c3:f2:6d:87:2c:e4: 41:9f:30:6e:02:87:1b:5f:21:7d:3a:06:b9:3f:4b: 5e:e0:68:8d:4e:5e:4a:1b:a4:07:1c:02:be:5b:93: d0:3c:d0:1c:c3:ac:c6:f5:f3:06:8e:52:9d:36:ef: 32:0e:ed:d7:01:f3:63:57:02:03:9d:4e:d9:da:75: 02:06:6c:a6:61:21:b7:cb:71:b0:f6:7a:f7:45:81: f3:11:5e:b2:2d:ae:f5:ea:eb:04:4d:92:b5:60:94: 8e:9b:45:c4:88:72:4a:4e:d3:37:36:05:3f:47:e2: 1f:d3:c8:e4:1d:16:df:50:e5:0f:4d:9b:61:64:99: d3:42:f4:be:0c:b8:de:fd:c4:f9:9f:86:10:fa:1c: b7:f2:4c:66:51:bd:50:ae:7c:04:51:23:e4:6b:73: e7:24:7c:2f:40:b1:44:80:44:88:9f:13:06:f9:4d: 71:0b:e0:f9:7b:0a:4a:8b:de:75:43:57:50:08:f9: 0b:48:6a:23:90:59:e2:c9:11:a5:8f:0a:a2:ec:82: 4a:4f:98:b7:be:f4:54:6b:a1:d0:ff:c5:d5:46:52: 75:c2:1a:4c:22:08:eb:f1:61:05:44:ab:6c:1e:f6: 2c:ab:70:0d:de:2a:e0:f1:bc:b7:3d:68:bc:86:da: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:7F:71:55:EE:52:CC:08:9A:2E:88:A6:31:51:7B:6D:A6:3A:4D X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3d:a4:31:07:88:9f:b6:19:17:e7:a0:a4:50:34:67:ea:a4: 0a:ea:e0:9b:ef:e2:95:08:e7:f3:d3:b7:0e:65:cc:78:6c:41: 03:a9:7b:01:dc:f5:e5:1c:76:97:e7:97:ff:61:59:45:fd:89: 01:fd:89:f2:19:4c:b7:c8:d3:41:65:f5:ae:ed:9d:7d:a6:d9: 06:01:16:b2:9a:40:70:ff:c0:21:87:07:f7:db:67:11:70:94: b7:1e:b5:2f:76:d1:dd:ae:c6:bc:af:26:83:82:3c:ef:5f:ed: 55:71:08:5f:30:ea:e4:25:95:f7:7e:d5:71:c7:e9:3d:05:97: 74:06:af:c8:a7:0c:61:4e:63:7a:6e:4a:9e:2a:95:38:b6:8a: 54:99:1a:d4:17:2f:43:13:eb:74:1c:b7:4b:b5:56:73:bb:d9: a3:7d:8a:1b:bd:30:7e:17:87:58:41:b3:f6:98:c2:de:9b:34: 86:44:b2:e6:b5:f8:3e:2e:d9:2a:cf:fd:49:a8:e4:e9:35:8d: 74:60:ef:45:72:a0:26:0f:af:d9:64:ed:80:04:87:ca:a8:ec: a6:ea:d8:5e:66:7b:6e:40:37:1d:22:e5:36:8d:08:34:51:ce: 0d:56:9b:88:48:a3:bf:c9:4e:0d:17:21:5d:0c:a9:6c:52:98: b9:30:ea:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG19C5+oh2VAGrN6hnJQR3aVOoLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA3MTkwODEyMjBaFw0yNjA3MjAxMTM5MjBaMDMxMTAvBgNV BAMTKEIzNEE3RjcxNTVFRTUyQ0MwODlBMkU4OEE2MzE1MTdCNkRBNjNBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wLmKsw+QW8PybYcs5EGfMG4C hxtfIX06Brk/S17gaI1OXkobpAccAr5bk9A80BzDrMb18waOUp027zIO7dcB82NX AgOdTtnadQIGbKZhIbfLcbD2evdFgfMRXrItrvXq6wRNkrVglI6bRcSIckpO0zc2 BT9H4h/TyOQdFt9Q5Q9Nm2FkmdNC9L4MuN79xPmfhhD6HLfyTGZRvVCufARRI+Rr c+ckfC9AsUSARIifEwb5TXEL4Pl7CkqL3nVDV1AI+QtIaiOQWeLJEaWPCqLsgkpP mLe+9FRrodD/xdVGUnXCGkwiCOvxYQVEq2we9iyrcA3eKuDxvLc9aLyG2kcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs0p/cVXuUswImi6IpjFRe22mOk0wHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg9pDEHiJ+2GRfnoKRQNGfqpArq4Jvv4pUI 5/PTtw5lzHhsQQOpewHc9eUcdpfnl/9hWUX9iQH9ifIZTLfI00Fl9a7tnX2m2QYB FrKaQHD/wCGHB/fbZxFwlLcetS920d2uxryvJoOCPO9f7VVxCF8w6uQllfd+1XHH 6T0Fl3QGr8inDGFOY3puSp4qlTi2ilSZGtQXL0MT63Qct0u1VnO72aN9ihu9MH4X h1hBs/aYwt6bNIZEsua1+D4u2SrP/Umo5Ok1jXRg70VyoCYPr9lk7YAEh8qo7Kbq 2F5me25ANx0i5TaNCDRRzg1Wm4hIo7/JTg0XIV0MqWxSmLkw6sE= -----END CERTIFICATE-----Generated at Mon Jul 20 04:22:57 2026 by rpki-client