$ rpki-client -vvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: bLFUarmmJmVnVX2d89akdWsq8Bif454/lv9+RVXZZrI= Subject key identifier: 25:86:A3:C7:25:0F:EB:BD:5D:68:EE:CA:17:8E:92:60:AD:9E:74:BE Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 496195845F598F6EAD2AFB1B12CC06273B8E0833 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:07:22 +0000 Manifest this update: Mon 20 Jul 2026 21:02:22 +0000 Manifest next update: Tue 21 Jul 2026 21:42:22 +0000 Files and hashes: 1: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: LfjCP+zJ/vMXSpGBlVUlSsRY+juW9uTjoJopzWNmq+U=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:61:95:84:5f:59:8f:6e:ad:2a:fb:1b:12:cc:06:27:3b:8e:08:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Jul 20 21:02:22 2026 GMT Not After : Jul 21 21:42:22 2026 GMT Subject: CN=2586A3C7250FEBBD5D68EECA178E9260AD9E74BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:d3:ad:56:2e:5d:af:75:9f:b1:6a:63:c6: f3:b9:d2:6e:23:48:41:9d:1c:54:06:50:a0:62:ff: 6e:14:73:33:bb:f7:d5:ad:2e:eb:89:1f:73:d2:bb: 94:e4:9c:f0:6d:0b:d0:a6:45:67:47:d2:66:0a:f0: c9:53:09:3d:b8:b1:ad:44:a7:08:75:bd:0d:7e:f6: a8:36:5e:15:1f:16:81:b9:74:ff:2e:3a:d3:3b:6a: c0:c2:a3:f6:c8:7e:7c:15:e6:0b:a2:e0:25:12:cd: 40:5c:f9:f3:26:ed:a6:b5:28:19:3a:f2:da:f1:3c: b1:32:df:26:a3:a7:a4:2b:9a:e7:be:4d:cf:93:a9: bc:74:9f:3e:94:27:0f:f2:70:e7:b8:95:9b:96:ac: 9d:c9:b2:e0:e1:2f:0b:cf:17:2b:2e:cf:c0:f3:07: 1d:17:d6:a6:b2:e0:ca:a3:40:ee:92:09:cb:ab:76: d8:77:d7:26:c6:06:8f:86:9d:c2:88:5e:46:b1:96: 6e:b1:c5:07:70:2c:59:65:3c:5a:c6:4a:32:c6:2d: f0:cd:42:f1:d3:4b:66:3d:d5:23:4b:aa:9c:e8:db: ea:18:22:42:db:44:85:90:78:86:e2:a2:64:f8:c6: 3a:52:09:ff:ef:ea:4e:5f:e7:a6:ae:f9:d8:b9:dc: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:86:A3:C7:25:0F:EB:BD:5D:68:EE:CA:17:8E:92:60:AD:9E:74:BE X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:36:f7:ed:8e:9b:f7:a3:a7:17:5c:14:12:97:28:d1:6e:44: cb:b1:cb:d6:9c:e9:d7:9d:d6:c9:6d:fe:84:c4:3a:5e:16:3b: 31:18:ec:7c:71:96:b8:3f:cb:2c:cf:9b:8f:8b:62:ad:fa:59: b4:19:a7:d6:89:fb:b2:d5:a2:b9:fd:45:de:61:7d:8c:99:13: d3:b4:6b:cf:ba:21:70:1e:4c:d1:86:26:51:bc:2c:76:78:13: 0d:61:e1:51:4c:dd:2e:ff:c0:ea:ac:e7:9f:8c:85:b1:e2:51: 20:38:b1:32:0c:a2:5b:95:25:f5:01:10:ee:65:79:dd:a2:02: f0:83:d7:04:81:c6:3b:53:40:b9:b1:9c:e4:9c:c5:ef:f6:39: 49:68:a2:e9:f3:5b:a4:76:bb:c9:81:ca:f6:5f:e7:40:f8:b8: 98:70:ca:be:b6:a0:f1:7b:2b:48:a5:98:f3:1f:94:0f:67:5e: 88:86:4c:07:56:35:5b:c6:61:95:7e:45:e0:0a:46:5b:81:50: 9c:16:5a:4a:90:58:f9:f1:d1:6e:a9:c1:70:4b:79:79:a6:51: 40:fc:a5:0b:29:53:82:74:5f:10:7a:43:b7:99:ab:df:5f:d1: 06:17:fe:05:a2:c8:c1:fb:46:66:db:d7:5d:27:60:b1:89:b9: d1:a2:6a:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWGVhF9Zj26tKvsbEswGJzuOCDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA3MjAyMTAyMjJaFw0yNjA3MjEyMTQyMjJaMDMxMTAvBgNV BAMTKDI1ODZBM0M3MjUwRkVCQkQ1RDY4RUVDQTE3OEU5MjYwQUQ5RTc0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaNOtVi5dr3WfsWpjxvO50m4j SEGdHFQGUKBi/24UczO799WtLuuJH3PSu5TknPBtC9CmRWdH0mYK8MlTCT24sa1E pwh1vQ1+9qg2XhUfFoG5dP8uOtM7asDCo/bIfnwV5gui4CUSzUBc+fMm7aa1KBk6 8trxPLEy3yajp6Qrmue+Tc+Tqbx0nz6UJw/ycOe4lZuWrJ3JsuDhLwvPFysuz8Dz Bx0X1qay4MqjQO6SCcurdth31ybGBo+GncKIXkaxlm6xxQdwLFllPFrGSjLGLfDN QvHTS2Y91SNLqpzo2+oYIkLbRIWQeIbiomT4xjpSCf/v6k5f56au+di53LAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYajxyUP671daO7KF46SYK2edL4wHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc29+2Om/ejpxdcFBKXKNFuRMuxy9ac6ded 1slt/oTEOl4WOzEY7Hxxlrg/yyzPm4+LYq36WbQZp9aJ+7LVorn9Rd5hfYyZE9O0 a8+6IXAeTNGGJlG8LHZ4Ew1h4VFM3S7/wOqs55+MhbHiUSA4sTIMoluVJfUBEO5l ed2iAvCD1wSBxjtTQLmxnOScxe/2OUloounzW6R2u8mByvZf50D4uJhwyr62oPF7 K0ilmPMflA9nXoiGTAdWNVvGYZV+ReAKRluBUJwWWkqQWPnx0W6pwXBLeXmmUUD8 pQspU4J0XxB6Q7eZq99f0QYX/gWiyMH7Rmbb110nYLGJudGiav8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:17:17 2026 by rpki-client