$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: gS9vjgHAuMjHFBn/gbRqo7HbtAoLBs0lD0FUAfdsbRU= Subject key identifier: CD:F4:FE:66:4F:A5:42:6C:ED:05:93:AB:79:46:5A:F5:AF:B1:22:B9 Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 7DE70329EC7586A06B918D54F01CBD50DCF56751 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:12:50 +0000 Manifest this update: Mon 20 Jul 2026 13:07:50 +0000 Manifest next update: Tue 21 Jul 2026 13:58:50 +0000 Files and hashes: 1: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: 3W3Vl1VxXFUFo1kvNMYSp25f+rzx4Akuu5mYY/UjOUM=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 3: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 13:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:03:29:ec:75:86:a0:6b:91:8d:54:f0:1c:bd:50:dc:f5:67:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Jul 20 13:07:50 2026 GMT Not After : Jul 21 13:58:50 2026 GMT Subject: CN=CDF4FE664FA5426CED0593AB79465AF5AFB122B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:86:62:f3:c5:8d:ab:35:05:44:2a:8a:c9: ae:e7:ca:08:83:3e:c9:aa:93:30:55:f4:f1:77:75: dd:40:00:32:ff:da:4b:cf:98:ba:4b:bf:07:aa:82: 8c:b5:e7:60:96:71:13:b5:f5:d0:a9:d5:3b:b3:02: 1d:3e:87:c0:b2:c9:b1:11:e7:b7:87:75:5e:e3:43: 2c:cf:5f:3a:43:de:4c:21:7e:63:2a:70:03:bf:5b: 82:6f:c1:05:b8:26:f6:b3:ee:b4:db:27:71:d5:aa: 40:a3:f0:3f:74:3e:c6:3e:0b:09:fa:80:05:b4:57: 7d:c5:a8:9c:e7:47:d3:f1:f5:35:1b:a7:cd:af:ee: 77:5b:bb:5a:cc:d6:97:63:e2:9b:d7:7b:73:af:0e: 58:51:bd:60:a8:ea:c8:01:c5:71:ff:bf:60:5c:43: 9c:7c:e7:80:58:fc:90:4a:5b:f9:73:22:f1:ea:37: 04:64:db:00:57:b0:59:8f:43:b9:af:73:c7:57:fd: 80:9d:9f:25:65:55:18:c9:25:6b:0f:f9:66:ee:a0: cd:28:70:3a:bb:31:5b:1c:c2:9c:55:31:16:33:26: f6:c2:4b:b3:0a:12:c6:d5:87:95:23:05:75:bd:2f: 7e:f1:43:27:4d:42:cb:1b:7f:d2:6d:73:9c:e0:a3: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F4:FE:66:4F:A5:42:6C:ED:05:93:AB:79:46:5A:F5:AF:B1:22:B9 X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:90:ef:f2:14:73:78:fc:9b:e6:96:10:61:38:d1:b0:e3:56: fd:27:fd:2c:4b:b9:ab:6c:81:69:60:fe:3b:ca:5f:da:bd:1e: 3a:1c:fd:5f:cd:7b:3e:91:02:16:fa:b2:0a:f4:96:0d:c4:74: 0d:22:9d:b3:10:15:88:e6:3e:f1:8c:6e:74:4a:8e:ae:f1:58: 90:ac:ed:c0:3e:63:13:e5:35:cf:07:8e:7f:b6:0b:cd:1e:9a: a9:91:84:b3:fc:3c:0e:f3:f2:d0:dc:75:c7:6f:30:16:ea:34: 33:17:a9:05:36:de:cc:1d:f0:3f:37:8a:77:f4:0e:0d:3a:ba: 9e:ed:52:2f:6d:27:56:10:15:3b:21:b4:56:f1:6e:f3:68:12: f3:cd:3b:ce:e5:a5:dc:e6:c1:9f:3f:20:bc:99:f7:71:80:5b: e6:83:5e:4c:70:6d:b3:08:ca:83:eb:0b:6b:aa:a0:33:97:4d: aa:98:1d:15:7b:26:c8:91:0f:75:34:7c:aa:53:4d:49:51:47: 2f:85:e8:f8:fe:a7:b0:3d:95:0b:ec:10:5f:52:06:61:b0:8d: a9:18:d8:5b:b9:88:af:d3:d5:a3:46:7d:82:ae:40:5f:a1:68: b7:54:d3:35:27:90:3c:c3:31:88:f7:8d:be:65:7f:69:dd:38: bb:b7:52:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfecDKex1hqBrkY1U8By9UNz1Z1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA3MjAxMzA3NTBaFw0yNjA3MjExMzU4NTBaMDMxMTAvBgNV BAMTKENERjRGRTY2NEZBNTQyNkNFRDA1OTNBQjc5NDY1QUY1QUZCMTIyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHDIZi88WNqzUFRCqKya7nygiD PsmqkzBV9PF3dd1AADL/2kvPmLpLvweqgoy152CWcRO19dCp1TuzAh0+h8CyybER 57eHdV7jQyzPXzpD3kwhfmMqcAO/W4JvwQW4Jvaz7rTbJ3HVqkCj8D90PsY+Cwn6 gAW0V33FqJznR9Px9TUbp82v7ndbu1rM1pdj4pvXe3OvDlhRvWCo6sgBxXH/v2Bc Q5x854BY/JBKW/lzIvHqNwRk2wBXsFmPQ7mvc8dX/YCdnyVlVRjJJWsP+WbuoM0o cDq7MVscwpxVMRYzJvbCS7MKEsbVh5UjBXW9L37xQydNQssbf9Jtc5zgo6tFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfT+Zk+lQmztBZOreUZa9a+xIrkwHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSQ7/IUc3j8m+aWEGE40bDjVv0n/SxLuats gWlg/jvKX9q9Hjoc/V/Nez6RAhb6sgr0lg3EdA0inbMQFYjmPvGMbnRKjq7xWJCs 7cA+YxPlNc8Hjn+2C80emqmRhLP8PA7z8tDcdcdvMBbqNDMXqQU23swd8D83inf0 Dg06up7tUi9tJ1YQFTshtFbxbvNoEvPNO87lpdzmwZ8/ILyZ93GAW+aDXkxwbbMI yoPrC2uqoDOXTaqYHRV7JsiRD3U0fKpTTUlRRy+F6Pj+p7A9lQvsEF9SBmGwjakY 2Fu5iK/T1aNGfYKuQF+haLdU0zUnkDzDMYj3jb5lf2ndOLu3UuQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:11 2026 by rpki-client