$ rpki-client -vvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: 27aurXxR41VmirU/ECUiI6dI7+Xa+UGd88zZRytahCA= Subject key identifier: E6:07:2B:ED:47:3D:E6:F3:62:20:1E:34:57:6D:33:9D:BB:22:EF:25 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 61DDB79FE42CA908EE64686C0190294718F005CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:37:04 +0000 Manifest this update: Mon 20 Jul 2026 16:32:04 +0000 Manifest next update: Tue 21 Jul 2026 17:58:04 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) 2: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: dD5Xeg7+dEEMMyQ7Rt+PcJZFazxBWJF9Hgcuwy7kutA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dd:b7:9f:e4:2c:a9:08:ee:64:68:6c:01:90:29:47:18:f0:05:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Jul 20 16:32:04 2026 GMT Not After : Jul 21 17:58:04 2026 GMT Subject: CN=E6072BED473DE6F362201E34576D339DBB22EF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:7f:9b:c4:77:08:bb:f9:32:9a:8b:f1:29: df:83:42:5f:d7:85:b6:2e:e5:00:a3:51:d4:95:3c: 6a:c1:86:f0:9f:5e:63:c7:15:b3:b1:ab:44:1d:b2: 3f:d7:a6:ac:f0:54:0d:c4:fe:52:9b:d5:f3:af:f3: 37:ff:d8:b6:7d:7e:4b:b8:48:21:15:ee:10:25:0f: a2:25:aa:2d:c5:f8:1c:56:03:7d:1d:1b:90:2b:19: 80:11:48:a7:69:d4:54:40:18:64:0c:5a:57:eb:19: 75:5b:e5:a0:7f:d8:df:95:e9:33:8e:b4:a4:c0:b8: ce:3e:07:68:71:55:22:af:a2:a5:35:4c:f9:74:02: 07:bc:68:cf:b3:02:4d:28:d1:0e:f1:3f:ce:7d:8b: bf:f5:a3:f7:73:0b:b4:4c:b8:6a:95:e1:67:fa:c6: 45:f2:40:b1:80:62:b5:14:df:51:7f:41:60:da:39: 99:e3:bd:7e:65:09:d2:c0:c1:47:bb:7a:b2:26:43: 48:ef:a5:f9:e7:27:f4:24:51:08:20:e2:6c:24:66: b2:3f:0c:cf:b4:d6:e5:1c:9f:f0:c8:0a:47:39:ea: 5b:af:8c:ac:27:68:aa:a1:aa:86:84:9d:c7:62:aa: 8e:b7:8a:7e:89:27:87:5a:f0:7a:bb:37:c2:d6:11: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:07:2B:ED:47:3D:E6:F3:62:20:1E:34:57:6D:33:9D:BB:22:EF:25 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fd:37:1a:f9:88:1c:f5:2c:de:e1:77:47:10:f0:1a:59:8d: 56:01:a0:0f:6f:c9:a1:b0:47:72:4f:50:3e:fe:d5:a0:13:2a: ca:4f:ca:f6:3a:d6:b3:3e:c9:9b:71:1a:d7:33:fb:f3:ae:fe: a1:b6:3c:ca:94:56:0f:be:2e:e1:08:34:d8:56:bb:68:85:5e: e4:4b:05:7b:ed:47:e1:ab:43:cc:91:64:8a:9b:71:a5:9a:a2: aa:f3:1c:f6:ac:c5:d7:8e:18:fa:b4:eb:9c:64:72:ff:6f:70: c9:a0:93:83:da:62:2c:5a:6c:76:b9:b1:cc:6b:fa:5d:ed:6e: 98:0f:22:f2:c1:ac:df:36:b1:50:3c:93:21:48:1b:df:16:b0: 26:b6:70:e2:a8:28:5b:1f:c1:ff:20:7f:a5:b8:fe:25:04:75: 94:a1:d5:28:4c:d0:d7:91:60:8f:c6:f9:a3:fe:3d:eb:d1:e5: d6:83:16:0c:9a:b7:39:e5:1b:75:39:e2:1d:cd:89:bf:35:fb: a2:8e:e9:01:ec:2f:e2:64:66:a8:6e:a6:f9:34:6c:5e:d4:58: c4:17:11:b3:d4:68:b9:72:4d:28:d0:45:7e:d7:6c:8c:f1:7f: c6:8f:ab:d2:d3:7b:fb:60:46:8f:74:2c:22:54:8f:e1:97:60: ff:b4:7d:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYd23n+QsqQjuZGhsAZApRxjwBc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA3MjAxNjMyMDRaFw0yNjA3MjExNzU4MDRaMDMxMTAvBgNV BAMTKEU2MDcyQkVENDczREU2RjM2MjIwMUUzNDU3NkQzMzlEQkIyMkVGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DX+bxHcIu/kymovxKd+DQl/X hbYu5QCjUdSVPGrBhvCfXmPHFbOxq0Qdsj/XpqzwVA3E/lKb1fOv8zf/2LZ9fku4 SCEV7hAlD6Ilqi3F+BxWA30dG5ArGYARSKdp1FRAGGQMWlfrGXVb5aB/2N+V6TOO tKTAuM4+B2hxVSKvoqU1TPl0Age8aM+zAk0o0Q7xP859i7/1o/dzC7RMuGqV4Wf6 xkXyQLGAYrUU31F/QWDaOZnjvX5lCdLAwUe7erImQ0jvpfnnJ/QkUQgg4mwkZrI/ DM+01uUcn/DICkc56luvjKwnaKqhqoaEncdiqo63in6JJ4da8Hq7N8LWES4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5gcr7Uc95vNiIB40V20znbsi7yUwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn9Nxr5iBz1LN7hd0cQ8BpZjVYBoA9vyaGw R3JPUD7+1aATKspPyvY61rM+yZtxGtcz+/Ou/qG2PMqUVg++LuEINNhWu2iFXuRL BXvtR+GrQ8yRZIqbcaWaoqrzHPasxdeOGPq065xkcv9vcMmgk4PaYixabHa5scxr +l3tbpgPIvLBrN82sVA8kyFIG98WsCa2cOKoKFsfwf8gf6W4/iUEdZSh1ShM0NeR YI/G+aP+PevR5daDFgyatznlG3U54h3Nib81+6KO6QHsL+JkZqhupvk0bF7UWMQX EbPUaLlyTSjQRX7XbIzxf8aPq9LTe/tgRo90LCJUj+GXYP+0fUw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:22 2026 by rpki-client