$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: Y3RMOxsApiw9yb1I66nEtYVSSKBwafMh5EAdvjH17m8= Subject key identifier: C2:B2:F4:C6:BC:12:F3:BE:F3:04:1B:6F:DC:B1:03:C4:BB:E2:98:92 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 234C84DC6F40442B8AB67C692F608935E9D898DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:28:47 +0000 Manifest this update: Tue 21 Jul 2026 02:23:47 +0000 Manifest next update: Wed 22 Jul 2026 05:23:47 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 2: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: Wr9lb8QAiQVzNRvSD6wg58nx0EAeE80vo1OIvYp0O8U=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4c:84:dc:6f:40:44:2b:8a:b6:7c:69:2f:60:89:35:e9:d8:98:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Jul 21 02:23:47 2026 GMT Not After : Jul 22 05:23:47 2026 GMT Subject: CN=C2B2F4C6BC12F3BEF3041B6FDCB103C4BBE29892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:d1:c5:d1:14:08:63:3a:ff:44:58:a6:68: 0c:7a:94:cf:21:36:c8:5f:b5:d9:5e:f8:a5:41:4a: 23:72:0c:a3:0a:6e:b7:4a:6d:41:9e:99:94:28:05: ae:a8:1b:bc:6d:d2:4a:b6:28:27:03:54:c5:b0:4d: b7:0f:ca:06:23:ec:08:3b:bf:47:a9:97:9f:9f:03: 61:7a:2b:cb:20:43:b5:0a:b5:42:52:88:53:60:e4: ea:83:b9:af:6e:a5:65:00:bd:d1:b0:c4:77:42:1d: 6d:9d:2b:9c:f3:d6:ba:40:ef:5c:eb:9d:ba:7f:f1: 3c:87:09:41:28:ff:2d:f5:6d:6b:69:74:66:0e:1a: 9a:a4:81:56:cf:12:a4:e3:c6:72:d4:f3:a7:94:22: b9:5d:8a:a2:c7:b5:fd:f6:f5:b9:ef:9e:6e:63:9f: ad:05:a5:e3:51:fb:8a:a4:a7:c0:b1:1c:72:78:fb: 06:6f:a4:0e:b6:63:02:b4:ac:4d:d4:da:f4:31:18: 7f:01:29:8c:e3:24:96:f1:ea:30:8a:d5:61:3d:4f: af:cd:43:9a:ab:29:39:e5:ee:52:2f:8c:68:a5:30: e5:e5:6e:e8:25:57:85:49:ac:08:82:94:53:ee:c9: 69:95:10:91:75:3a:98:54:c4:df:90:4f:b3:68:7c: 18:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:F4:C6:BC:12:F3:BE:F3:04:1B:6F:DC:B1:03:C4:BB:E2:98:92 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:f6:a0:01:09:d6:cd:4d:ce:0b:0a:e5:3a:d9:e3:fb:c8: 99:92:2b:56:73:e7:25:00:8a:3c:a9:44:d4:e1:ef:d3:bf:81: 9c:f3:17:f8:c5:e4:f4:ff:ce:73:c8:bd:54:cc:f0:53:51:1f: 3b:6d:2d:7b:33:e4:01:dd:20:23:7d:07:19:7a:5c:43:92:ef: e9:36:e8:28:09:16:30:0a:c6:c0:3d:8a:f7:18:87:05:94:e5: 10:8c:3d:fc:2a:2c:d0:7c:44:92:fe:9e:01:e3:95:18:60:f7: 7e:ed:5a:b1:96:d3:2c:4e:cb:91:24:93:ca:5e:5d:02:03:60: 34:9d:19:d2:f1:94:37:49:59:9e:41:aa:3a:a2:cc:dc:d8:50: 94:ee:f0:5e:28:0b:28:dd:a5:d7:79:6d:2d:c4:f1:77:ca:eb: 8b:17:fc:af:72:18:57:cd:2d:52:02:4f:ed:da:68:6c:de:92: a3:03:f0:20:25:97:d3:8a:3b:ef:f2:bf:de:46:db:05:11:5a: 4e:b7:3d:ff:4e:9e:f6:a3:2c:f9:78:af:4f:63:a5:4a:cf:8e: a8:81:f3:ad:6c:66:05:0a:cd:74:03:4b:e3:ea:ec:c2:fe:0d: 02:81:3c:42:f5:7e:95:65:14:ee:47:ab:5c:57:8b:8e:e4:5b: 12:ba:79:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0yE3G9ARCuKtnxpL2CJNenYmN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA3MjEwMjIzNDdaFw0yNjA3MjIwNTIzNDdaMDMxMTAvBgNV BAMTKEMyQjJGNEM2QkMxMkYzQkVGMzA0MUI2RkRDQjEwM0M0QkJFMjk4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIm9HF0RQIYzr/RFimaAx6lM8h Nshftdle+KVBSiNyDKMKbrdKbUGemZQoBa6oG7xt0kq2KCcDVMWwTbcPygYj7Ag7 v0epl5+fA2F6K8sgQ7UKtUJSiFNg5OqDua9upWUAvdGwxHdCHW2dK5zz1rpA71zr nbp/8TyHCUEo/y31bWtpdGYOGpqkgVbPEqTjxnLU86eUIrldiqLHtf329bnvnm5j n60FpeNR+4qkp8CxHHJ4+wZvpA62YwK0rE3U2vQxGH8BKYzjJJbx6jCK1WE9T6/N Q5qrKTnl7lIvjGilMOXlbuglV4VJrAiClFPuyWmVEJF1OphUxN+QT7NofBipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrL0xrwS877zBBtv3LEDxLvimJIwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFl9qABCdbNTc4LCuU62eP7yJmSK1Zz5yUA ijypRNTh79O/gZzzF/jF5PT/znPIvVTM8FNRHzttLXsz5AHdICN9Bxl6XEOS7+k2 6CgJFjAKxsA9ivcYhwWU5RCMPfwqLNB8RJL+ngHjlRhg937tWrGW0yxOy5Ekk8pe XQIDYDSdGdLxlDdJWZ5BqjqizNzYUJTu8F4oCyjdpdd5bS3E8XfK64sX/K9yGFfN LVICT+3aaGzekqMD8CAll9OKO+/yv95G2wURWk63Pf9OnvajLPl4r09jpUrPjqiB 861sZgUKzXQDS+Pq7ML+DQKBPEL1fpVlFO5Hq1xXi47kWxK6ecQ= -----END CERTIFICATE-----Generated at Tue Jul 21 07:03:39 2026 by rpki-client