$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: //AmooBf8VQ4cPdGr2GoiVf54MFbUKnoUypISsU1Kto= Subject key identifier: EB:A4:34:71:D3:E0:18:D8:94:A1:F2:28:63:DB:F7:1B:B6:1A:4A:7C Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 42CC04FE9988FD5779CE04DCC00EF26A4117A228 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 8A Signing time: Wed 12 Aug 2026 22:55:14 +0000 Manifest this update: Wed 12 Aug 2026 22:50:14 +0000 Manifest next update: Fri 14 Aug 2026 02:39:14 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 3: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: w2culVok95sK6y3nRk0CNaJjWJyjSBnUQM/e8s8aHto=) 4: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 5: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 6: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 02:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cc:04:fe:99:88:fd:57:79:ce:04:dc:c0:0e:f2:6a:41:17:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Aug 12 22:50:14 2026 GMT Not After : Aug 14 02:39:14 2026 GMT Subject: CN=EBA43471D3E018D894A1F22863DBF71BB61A4A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:90:71:15:95:26:c5:84:e2:5a:07:ea:3b: 48:73:82:4b:d7:03:25:77:15:ff:63:e9:00:d2:55: 45:af:b4:f5:6d:6b:1b:9d:68:85:3e:b2:21:2b:bd: 5b:7c:2e:fd:10:86:8a:32:d6:f3:2b:d5:25:ab:77: 06:65:35:17:95:82:a6:6d:ca:64:8c:ee:84:d8:59: 6c:fd:9c:86:09:c0:70:31:fc:0c:c7:c2:81:8f:e8: a3:e1:49:5f:ad:40:0e:f4:b9:4c:61:69:df:38:56: c5:d8:1d:4e:e7:40:8c:67:e7:21:10:42:da:3a:a8: ac:1b:4a:71:75:87:bd:cf:b7:5d:b2:58:57:7c:5d: f5:07:f1:7b:56:f0:2f:af:10:1f:ba:42:8d:da:f4: 10:a6:50:08:62:e3:bb:57:61:ce:bb:8f:ba:33:ec: b2:08:e0:c2:ad:e0:6b:a3:41:12:8c:56:bf:36:cf: 64:8a:d5:a7:1d:7a:f4:a6:98:a3:45:70:98:3b:93: 87:68:31:59:66:8d:8e:ff:00:58:94:6b:94:af:4f: ec:c4:1c:95:97:dd:93:cd:3e:f5:04:f2:14:7f:5e: cc:38:dd:0c:da:fa:5e:d9:2e:6d:c8:d1:30:64:2f: 40:7c:19:d6:4c:b9:18:35:52:10:61:8e:d7:98:fe: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A4:34:71:D3:E0:18:D8:94:A1:F2:28:63:DB:F7:1B:B6:1A:4A:7C X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:75:23:76:67:a9:41:34:d6:f8:87:5d:81:37:e5:80:29:62: 9d:51:13:66:1b:62:af:e0:60:8b:a5:f1:85:a0:07:65:02:09: 38:5d:70:e8:15:4d:28:a5:45:5c:be:b9:78:7c:6f:1a:9d:c3: d4:d8:ec:b3:fb:76:53:4b:b1:8a:8b:30:3d:fe:f6:5e:87:46: d6:c8:ed:c4:64:3f:c4:ec:60:bf:2a:02:88:77:39:04:e8:71: 58:cc:d1:11:68:b0:b4:d0:01:2e:ce:41:15:7c:d2:5a:60:d6: 80:5c:db:28:ce:b5:6a:22:2c:af:bb:98:f5:b4:0c:2a:2a:11: 7b:b8:43:36:8c:f3:dd:f1:64:8d:b6:8d:c7:07:a6:d2:83:21: ad:92:56:8a:d0:60:15:c2:79:33:11:02:42:fe:8c:a0:1e:fd: 36:6f:d1:0f:c3:6a:41:4e:11:ac:e5:cf:5b:d8:fa:70:70:5a: 8c:3b:b9:f1:48:8a:f2:8a:2f:0a:fe:13:52:40:a1:0d:3c:99: 88:90:8e:24:00:e7:0a:d6:45:4f:67:7f:5e:2d:b3:9f:d5:61: 7c:3d:a9:9e:35:40:7d:ce:7a:35:85:b1:0c:2e:4c:76:92:59: 8d:64:1e:a1:a2:eb:52:36:09:a1:9d:bb:ff:ac:e7:f3:24:c3: e3:fd:b4:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQswE/pmI/Vd5zgTcwA7yakEXoigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA4MTIyMjUwMTRaFw0yNjA4MTQwMjM5MTRaMDMxMTAvBgNV BAMTKEVCQTQzNDcxRDNFMDE4RDg5NEExRjIyODYzREJGNzFCQjYxQTRBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRJBxFZUmxYTiWgfqO0hzgkvX AyV3Ff9j6QDSVUWvtPVtaxudaIU+siErvVt8Lv0Qhooy1vMr1SWrdwZlNReVgqZt ymSM7oTYWWz9nIYJwHAx/AzHwoGP6KPhSV+tQA70uUxhad84VsXYHU7nQIxn5yEQ Qto6qKwbSnF1h73Pt12yWFd8XfUH8XtW8C+vEB+6Qo3a9BCmUAhi47tXYc67j7oz 7LII4MKt4GujQRKMVr82z2SK1acdevSmmKNFcJg7k4doMVlmjY7/AFiUa5SvT+zE HJWX3ZPNPvUE8hR/Xsw43Qza+l7ZLm3I0TBkL0B8GdZMuRg1UhBhjteY/oRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66Q0cdPgGNiUofIoY9v3G7YaSnwwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN1I3ZnqUE01viHXYE35YApYp1RE2YbYq/g YIul8YWgB2UCCThdcOgVTSilRVy+uXh8bxqdw9TY7LP7dlNLsYqLMD3+9l6HRtbI 7cRkP8TsYL8qAoh3OQTocVjM0RFosLTQAS7OQRV80lpg1oBc2yjOtWoiLK+7mPW0 DCoqEXu4QzaM893xZI22jccHptKDIa2SVorQYBXCeTMRAkL+jKAe/TZv0Q/DakFO Eazlz1vY+nBwWow7ufFIivKKLwr+E1JAoQ08mYiQjiQA5wrWRU9nf14ts5/VYXw9 qZ41QH3OejWFsQwuTHaSWY1kHqGi61I2CaGdu/+s5/Mkw+P9tBQ= -----END CERTIFICATE-----Generated at Thu Aug 13 12:55:07 2026 by rpki-client