$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: jd0tJK/BON8LnpCklS5c6SOkQlAclHfLnyDjcB8xvMc= Subject key identifier: 30:50:A7:B7:D8:E4:CF:B6:A7:9C:32:18:88:98:BF:4F:34:6D:38:24 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 01D1602EC88EE652FF4C00E98B751F3F8F48F2BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 23:35:53 +0000 Manifest this update: Sun 02 Aug 2026 23:30:53 +0000 Manifest next update: Tue 04 Aug 2026 02:20:53 +0000 Files and hashes: 1: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: imiW/O8iACko8cd4HpS62uOtVqEOt9lpQAC0xKKRLWU=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d1:60:2e:c8:8e:e6:52:ff:4c:00:e9:8b:75:1f:3f:8f:48:f2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Aug 2 23:30:53 2026 GMT Not After : Aug 4 02:20:53 2026 GMT Subject: CN=3050A7B7D8E4CFB6A79C32188898BF4F346D3824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:08:ed:de:0b:99:3b:fe:d4:07:ad:28:c5: f7:d1:cd:67:14:58:c9:07:25:96:3c:9e:98:2c:77: 59:d2:2d:63:1a:7a:24:71:b8:3c:60:0f:eb:26:fc: 5a:7b:da:4b:50:b2:44:96:d5:58:95:b3:1b:57:b7: 14:47:1e:01:86:e4:6b:4c:5a:b3:03:17:7e:d8:2f: f8:8f:b2:4a:98:01:67:39:fb:7f:89:3b:9f:d8:cd: 87:1d:b3:61:f5:41:a1:31:a1:67:0e:c0:f9:3d:c7: a7:8f:24:f0:7b:de:97:15:d3:68:22:40:ca:5f:d3: 47:bf:14:35:53:d3:a3:6a:9e:53:9a:8b:1a:64:50: 24:8f:c0:74:54:e7:64:ce:41:f9:b0:f1:81:8c:97: 7b:f3:d2:24:30:27:a5:d5:e7:09:cf:4b:b9:da:5f: 17:2e:bd:bd:1b:81:0a:04:e7:1e:46:78:06:8c:d0: 43:50:41:46:fb:b0:05:cf:da:0f:f1:f3:a4:ff:32: f8:47:b1:ae:02:f2:99:d6:3f:57:52:d5:7c:95:9d: 42:bf:fd:05:5f:5a:ea:4d:0b:fe:cc:2c:17:6b:40: c8:be:b8:96:ab:80:6d:e8:da:3f:e4:56:3e:2f:55: 03:72:71:80:50:6c:41:84:f7:9a:ee:2c:88:34:68: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:A7:B7:D8:E4:CF:B6:A7:9C:32:18:88:98:BF:4F:34:6D:38:24 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:b8:06:c9:9d:ee:84:38:63:e3:85:b9:2e:00:41:a2:22: 52:3c:53:59:fb:da:66:f7:3e:4e:91:fe:95:61:d7:6f:0e:82: f0:6b:60:67:57:8a:47:9d:2f:71:88:1f:f3:9f:62:61:ea:7d: 84:3e:39:da:6c:ff:cb:e9:34:3a:c8:40:14:84:12:7a:a8:cb: ec:c6:15:b5:e2:13:fc:f7:81:5a:8e:68:6c:3d:f1:bb:6e:36: eb:35:7c:a4:ae:0e:04:d3:88:39:ae:ec:18:fd:bf:0a:e2:08: 9c:39:9a:e0:f2:40:06:aa:36:e2:6a:f7:ec:1c:50:d8:4c:ff: 8b:72:87:ed:48:fc:2d:67:c9:6a:3c:f6:f9:4f:ed:65:4e:49: c5:0d:5c:47:aa:1f:4f:c4:00:7c:2e:d7:83:54:77:19:44:c0: 5e:a3:8e:94:96:dc:97:f8:ed:83:18:8d:9d:9b:fb:41:8e:dd: 3c:3a:50:af:1a:8b:a3:e9:e3:df:6b:2f:1a:89:35:9b:12:9b: ab:b5:a8:d3:34:83:a0:93:4c:e1:45:22:e6:2e:23:e7:5a:8c: c1:de:2b:28:72:3b:a6:e9:aa:fe:5c:ce:56:64:09:65:10:03: 94:aa:77:3c:4a:c0:dd:2d:29:6e:d7:fb:09:50:19:1e:09:a0: d3:96:f7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdFgLsiO5lL/TADpi3UfP49I8r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA4MDIyMzMwNTNaFw0yNjA4MDQwMjIwNTNaMDMxMTAvBgNV BAMTKDMwNTBBN0I3RDhFNENGQjZBNzlDMzIxODg4OThCRjRGMzQ2RDM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Cgjt3guZO/7UB60oxffRzWcU WMkHJZY8npgsd1nSLWMaeiRxuDxgD+sm/Fp72ktQskSW1ViVsxtXtxRHHgGG5GtM WrMDF37YL/iPskqYAWc5+3+JO5/YzYcds2H1QaExoWcOwPk9x6ePJPB73pcV02gi QMpf00e/FDVT06NqnlOaixpkUCSPwHRU52TOQfmw8YGMl3vz0iQwJ6XV5wnPS7na Xxcuvb0bgQoE5x5GeAaM0ENQQUb7sAXP2g/x86T/MvhHsa4C8pnWP1dS1XyVnUK/ /QVfWupNC/7MLBdrQMi+uJargG3o2j/kVj4vVQNycYBQbEGE95ruLIg0aAvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFCnt9jkz7annDIYiJi/TzRtOCQwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6wuAbJne6EOGPjhbkuAEGiIlI8U1n72mb3 Pk6R/pVh128OgvBrYGdXikedL3GIH/OfYmHqfYQ+Odps/8vpNDrIQBSEEnqoy+zG FbXiE/z3gVqOaGw98btuNus1fKSuDgTTiDmu7Bj9vwriCJw5muDyQAaqNuJq9+wc UNhM/4tyh+1I/C1nyWo89vlP7WVOScUNXEeqH0/EAHwu14NUdxlEwF6jjpSW3Jf4 7YMYjZ2b+0GO3Tw6UK8ai6Pp499rLxqJNZsSm6u1qNM0g6CTTOFFIuYuI+dajMHe KyhyO6bpqv5czlZkCWUQA5SqdzxKwN0tKW7X+wlQGR4JoNOW90s= -----END CERTIFICATE-----Generated at Mon Aug 3 01:43:45 2026 by rpki-client