$ rpki-client -vvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: HYKgvI7RoEHGYUAOIYEzL6DHn/jZTeuER51v2WUJC28= Subject key identifier: 8C:29:4C:30:F4:92:D4:33:12:D8:8C:BE:B7:9F:0C:CD:74:3F:6A:3D Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 2004DD50E42F6EAB148F64C5C025B6D92C2EFC7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 19:46:18 +0000 Manifest this update: Sun 19 Jul 2026 19:41:18 +0000 Manifest next update: Mon 20 Jul 2026 20:44:18 +0000 Files and hashes: 1: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) 2: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: rrA1po0CMHMtbKTXvpTNej/uc/ARVKPNY0C3mM2Te3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:04:dd:50:e4:2f:6e:ab:14:8f:64:c5:c0:25:b6:d9:2c:2e:fc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: Jul 19 19:41:18 2026 GMT Not After : Jul 20 20:44:18 2026 GMT Subject: CN=8C294C30F492D43312D88CBEB79F0CCD743F6A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:6c:ef:b6:58:d5:de:66:0a:7a:b5:d1:48: cb:6e:d4:2e:67:61:52:ad:32:12:e4:b2:ef:9e:b2: 75:f5:67:51:b2:ba:e2:b5:16:f0:22:c2:ec:71:8b: d7:6a:2e:7d:7c:e9:8c:e5:45:04:61:40:0c:a5:41: 80:22:6e:cf:70:7b:3e:2a:af:24:aa:7c:52:35:ce: be:7c:a0:19:ed:78:9f:47:62:e7:55:57:7d:f8:42: 9d:74:5c:92:4b:30:d6:6f:74:4a:6f:b8:c2:13:4b: 8d:01:49:f8:6c:67:f7:f0:2f:e0:b2:13:8d:d1:d6: 91:ee:92:55:f6:62:3f:79:ca:6a:32:2a:40:27:7c: 95:b4:72:fc:60:fe:d8:e3:f8:64:ff:ef:e4:1c:c1: 6f:38:10:ec:8a:f9:ee:90:78:c1:c1:fa:29:25:54: 1a:d2:e6:e6:48:c9:5a:dd:ae:4b:dd:76:76:9d:7d: 99:5a:83:91:b2:0f:8c:84:39:f0:1c:3c:1e:93:8a: 6a:b7:58:fa:86:7b:b8:c5:25:55:c9:58:31:93:ae: d6:99:e9:85:18:1d:d4:3b:e3:c2:27:15:0b:74:85: 20:64:fc:b6:3d:b6:ee:d9:9e:81:00:4a:a3:fb:31: 3f:cb:8b:1d:f6:67:4b:d8:61:b8:cd:56:b1:bf:e9: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:4C:30:F4:92:D4:33:12:D8:8C:BE:B7:9F:0C:CD:74:3F:6A:3D X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d8:3a:89:f8:dc:a5:ff:97:fe:b8:e3:43:f2:47:30:eb:f7: 5a:a5:31:e8:1d:71:14:b0:b2:f4:28:2e:23:a2:63:ce:10:be: 46:ac:7c:37:9b:27:13:bd:47:37:85:3f:bd:87:26:49:94:8f: 8f:40:cd:36:88:97:e3:d0:50:b1:5a:4a:a3:ba:f9:81:eb:8d: ea:97:6f:ab:6e:6b:ed:fd:ac:25:cf:85:6a:27:fc:b1:25:3d: 08:7b:e5:22:ef:f8:71:ae:06:c6:e3:8a:ab:80:5e:54:08:8c: c2:b1:95:93:47:9e:c9:ac:a7:d0:d3:d4:e9:b0:ae:6a:81:2b: 0f:3f:1d:e3:ea:d1:74:e6:e9:bb:ef:f7:32:ed:30:01:52:e1: 8c:46:4e:b3:59:6c:13:2d:92:69:2e:28:7d:3f:88:42:02:e9: b2:ae:50:65:86:08:05:98:5b:6b:17:81:77:c2:63:e5:66:33: 23:34:ca:dd:67:7b:1d:6b:2e:80:ee:78:53:02:28:b8:e9:15: 18:a3:b3:28:6b:2c:a8:24:f8:5a:89:0f:d4:48:0f:2f:d7:2f: 94:21:f1:17:57:ef:ce:97:29:3f:02:18:15:c4:c3:97:53:e6: 10:86:fb:f5:70:ef:83:e6:66:b1:06:55:bb:f4:2f:9a:0e:e6: 9a:3b:a5:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIATdUOQvbqsUj2TFwCW22Swu/H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA3MTkxOTQxMThaFw0yNjA3MjAyMDQ0MThaMDMxMTAvBgNV BAMTKDhDMjk0QzMwRjQ5MkQ0MzMxMkQ4OENCRUI3OUYwQ0NENzQzRjZBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugWzvtljV3mYKerXRSMtu1C5n YVKtMhLksu+esnX1Z1GyuuK1FvAiwuxxi9dqLn186YzlRQRhQAylQYAibs9wez4q rySqfFI1zr58oBnteJ9HYudVV334Qp10XJJLMNZvdEpvuMITS40BSfhsZ/fwL+Cy E43R1pHuklX2Yj95ymoyKkAnfJW0cvxg/tjj+GT/7+QcwW84EOyK+e6QeMHB+ikl VBrS5uZIyVrdrkvddnadfZlag5GyD4yEOfAcPB6Timq3WPqGe7jFJVXJWDGTrtaZ 6YUYHdQ748InFQt0hSBk/LY9tu7ZnoEASqP7MT/Lix32Z0vYYbjNVrG/6Xn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjClMMPSS1DMS2Iy+t58MzXQ/aj0wHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfYOon43KX/l/6440PyRzDr91qlMegdcRSw svQoLiOiY84QvkasfDebJxO9RzeFP72HJkmUj49AzTaIl+PQULFaSqO6+YHrjeqX b6tua+39rCXPhWon/LElPQh75SLv+HGuBsbjiquAXlQIjMKxlZNHnsmsp9DT1Omw rmqBKw8/HePq0XTm6bvv9zLtMAFS4YxGTrNZbBMtkmkuKH0/iEIC6bKuUGWGCAWY W2sXgXfCY+VmMyM0yt1nex1rLoDueFMCKLjpFRijsyhrLKgk+FqJD9RIDy/XL5Qh 8RdX786XKT8CGBXEw5dT5hCG+/Vw74PmZrEGVbv0L5oO5po7pRY= -----END CERTIFICATE-----Generated at Sun Jul 19 23:36:55 2026 by rpki-client