$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: uRRm43VKuiTz+0yZin/3G0IVrM5neXqEbeKdmX5HfHo= Subject key identifier: E7:13:1D:99:E6:BD:4E:96:B7:C1:BF:1D:01:14:C1:FB:B5:3D:A2:DB Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 6016AE7F1E23A5A2572337A7F1E3AEB30FE44E3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 18:09:18 +0000 Manifest this update: Sun 02 Aug 2026 18:04:18 +0000 Manifest next update: Mon 03 Aug 2026 18:55:18 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: aW1j9KoiyHlpfU0HtiZ9hQuWtrKZq40ZOX0CWUwmVds=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:16:ae:7f:1e:23:a5:a2:57:23:37:a7:f1:e3:ae:b3:0f:e4:4e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Aug 2 18:04:18 2026 GMT Not After : Aug 3 18:55:18 2026 GMT Subject: CN=E7131D99E6BD4E96B7C1BF1D0114C1FBB53DA2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:5b:a7:d0:ff:b9:b6:d6:d8:66:ed:9c:2d: b3:15:2e:e1:cf:b2:74:e9:02:9c:b6:09:49:35:35: 0f:b1:e9:20:bb:75:b8:9c:75:9d:0e:d5:96:9c:c2: 86:74:bc:d0:ae:b6:3d:67:7f:e2:04:50:86:65:00: ab:21:05:9b:4d:fb:d8:99:a5:c3:71:42:5b:27:9d: 3b:9d:15:c4:e5:24:cd:99:dc:43:db:17:9e:84:23: db:a8:74:7d:ad:fa:c1:0f:21:95:ec:47:58:c8:b4: f4:f1:f5:d1:75:31:4c:79:91:ea:80:1e:c8:19:42: 1e:91:04:84:f0:1b:44:e3:3e:e7:2d:32:00:60:c3: 95:68:38:d1:af:b8:a6:52:71:9e:7c:9f:98:d6:8e: b6:59:99:fc:5f:a5:5c:16:b7:93:67:ed:c5:46:0a: 5d:39:d2:e1:37:a4:44:58:1f:d4:ae:ac:c1:00:2f: 7f:f2:50:ec:3f:36:9b:f9:3f:2f:19:a1:6b:d8:e9: ef:7f:93:d0:20:41:27:f3:c1:59:d0:9c:23:a3:d4: 7f:98:aa:ae:86:28:a2:88:5a:24:0c:e4:b2:54:a1: ab:89:3a:aa:9a:34:f6:c6:32:92:04:a2:a6:81:c1: 8c:fa:5b:e3:ee:6a:fd:16:00:57:ae:20:e0:db:53: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:13:1D:99:E6:BD:4E:96:B7:C1:BF:1D:01:14:C1:FB:B5:3D:A2:DB X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:0a:15:77:b1:36:cd:2b:b8:f6:45:4f:f8:f9:d3:35:fb: ab:da:a4:bc:29:2b:bd:e3:c3:31:1c:42:b4:8a:e9:2c:c0:27: 42:32:52:0b:17:98:83:c9:cd:3d:10:4e:17:7a:7d:88:1f:24: f0:9d:92:5c:df:1a:9f:23:5f:a6:02:f2:4a:52:26:1a:7b:86: 4a:a4:a2:77:18:92:c9:60:a6:5c:db:a7:14:92:d1:e8:23:f3: e6:59:7e:3b:3f:e8:8f:b8:55:d2:16:17:62:d9:36:97:54:1d: bd:cf:89:b7:4a:16:54:e0:db:55:5c:5a:c4:57:78:be:16:65: 08:d0:db:a3:05:c2:e8:a9:b7:77:c2:fa:41:ce:b9:b3:e5:6b: a3:ad:ea:ff:21:ba:a6:07:fd:42:db:8d:0d:d0:90:61:4b:15: ec:51:7b:53:41:9b:ad:82:4e:c7:47:b9:7b:e0:58:f7:24:c3: 3f:2b:ed:d2:bc:bf:09:69:f9:3e:bd:eb:38:69:8c:01:e1:96: e3:22:50:50:3b:3c:2c:a2:f8:53:fa:1f:a4:3b:f2:a9:8b:f8: f6:e9:f7:1f:8b:2a:49:0a:ba:33:d5:d2:dc:c3:2e:93:81:d8: 8a:d8:72:5c:2f:42:4f:5a:49:3a:f2:c6:df:f3:3c:c5:a5:de: 8d:ce:7e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBaufx4jpaJXIzen8eOusw/kTj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA4MDIxODA0MThaFw0yNjA4MDMxODU1MThaMDMxMTAvBgNV BAMTKEU3MTMxRDk5RTZCRDRFOTZCN0MxQkYxRDAxMTRDMUZCQjUzREEyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4Fun0P+5ttbYZu2cLbMVLuHP snTpApy2CUk1NQ+x6SC7dbicdZ0O1ZacwoZ0vNCutj1nf+IEUIZlAKshBZtN+9iZ pcNxQlsnnTudFcTlJM2Z3EPbF56EI9uodH2t+sEPIZXsR1jItPTx9dF1MUx5keqA HsgZQh6RBITwG0TjPuctMgBgw5VoONGvuKZScZ58n5jWjrZZmfxfpVwWt5Nn7cVG Cl050uE3pERYH9SurMEAL3/yUOw/Npv5Py8ZoWvY6e9/k9AgQSfzwVnQnCOj1H+Y qq6GKKKIWiQM5LJUoauJOqqaNPbGMpIEoqaBwYz6W+Puav0WAFeuIODbU5YzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xMdmea9Tpa3wb8dARTB+7U9otswHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClPChV3sTbNK7j2RU/4+dM1+6vapLwpK73j wzEcQrSK6SzAJ0IyUgsXmIPJzT0QThd6fYgfJPCdklzfGp8jX6YC8kpSJhp7hkqk oncYkslgplzbpxSS0egj8+ZZfjs/6I+4VdIWF2LZNpdUHb3PibdKFlTg21VcWsRX eL4WZQjQ26MFwuipt3fC+kHOubPla6Ot6v8huqYH/ULbjQ3QkGFLFexRe1NBm62C TsdHuXvgWPckwz8r7dK8vwlp+T696zhpjAHhluMiUFA7PCyi+FP6H6Q78qmL+Pbp 9x+LKkkKujPV0tzDLpOB2IrYclwvQk9aSTryxt/zPMWl3o3Ofoc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:57 2026 by rpki-client