$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: 6z2WngxKdo2aDMg5WcAsROj9PPiDXA4S419dQVIx6ss= Subject key identifier: 30:24:56:85:E0:D9:D9:83:F8:A2:20:02:F5:BD:19:84:63:C1:0C:ED Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 352ED007414F38EA8936CEED9D8DDA0D27D0A22F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:13:39 +0000 Manifest this update: Sun 02 Aug 2026 13:08:39 +0000 Manifest next update: Mon 03 Aug 2026 14:43:39 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 3: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: fCyMLd+/SlRuD31W7t80Zfk+C7AIv38BBZSUR/MsxZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 14:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2e:d0:07:41:4f:38:ea:89:36:ce:ed:9d:8d:da:0d:27:d0:a2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Aug 2 13:08:39 2026 GMT Not After : Aug 3 14:43:39 2026 GMT Subject: CN=30245685E0D9D983F8A22002F5BD198463C10CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:77:36:e2:85:5d:5c:f5:5b:86:95:d0:92: 5e:b1:31:80:0f:9d:58:e7:7a:4a:12:a3:4d:ea:43: 9c:b2:09:92:43:2f:f2:1c:5d:b1:75:95:69:6d:13: 68:0e:ac:8b:41:bb:06:14:40:27:89:71:dd:ca:68: 27:73:7d:7c:e9:d9:46:e8:11:45:38:a0:03:16:97: e9:09:2c:e3:34:f6:f2:72:b6:55:0c:fb:be:2c:dc: 69:07:e8:65:33:16:35:db:c3:ad:66:ad:33:91:b9: 37:fc:5d:ae:ba:d2:15:3a:73:7e:fd:62:6f:d9:73: 3b:a1:29:ef:a9:fe:56:24:d2:70:38:e0:a7:9f:72: f8:90:d0:d8:12:0a:d2:22:b6:a8:d6:66:9d:e3:e0: 48:c0:b1:1c:97:c3:8c:ec:dd:d2:be:a7:da:ed:06: 65:d7:07:43:a8:51:40:a1:ab:83:93:06:db:1f:61: 98:ed:2b:99:9b:c3:e8:4e:ca:91:c3:36:0b:19:1b: bb:70:90:6b:a0:24:0a:80:77:82:c9:f8:f1:d9:bc: 0b:25:02:b7:8a:80:0e:a8:95:02:87:10:00:00:d8: e6:2c:33:00:ab:c1:2a:8f:bf:82:52:f0:00:2d:7f: 93:d2:a6:78:66:2f:65:c4:2a:73:3e:21:3b:a8:14: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:24:56:85:E0:D9:D9:83:F8:A2:20:02:F5:BD:19:84:63:C1:0C:ED X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7f:39:98:81:f6:9c:cd:94:62:31:36:64:e3:73:aa:b4:9f: d9:54:b2:ea:a0:01:53:6c:6b:f6:22:ab:cd:86:32:18:8a:aa: b9:1c:e6:07:7b:a6:5c:d2:89:c6:9c:c6:7e:fb:be:fb:da:a6: 5b:c4:13:fd:2d:bc:09:3f:4b:eb:8b:fd:75:39:71:d6:d4:c8: 33:51:a7:03:a1:94:7b:82:67:7a:4f:5f:4c:10:36:1a:33:16: 70:cc:07:05:3e:f9:76:af:3d:5f:f2:f3:97:18:9b:d4:e2:67: 33:3c:2b:78:5f:65:53:30:04:c9:92:2b:0f:d4:11:07:12:99: 93:a8:09:2c:9a:03:81:84:5a:b1:bf:64:1c:28:ed:69:20:4b: 81:2e:a8:09:7b:0f:0b:2a:6a:59:fe:91:ca:d4:9a:c2:d6:ef: 73:9d:6f:d6:51:ea:89:8c:5f:d5:6a:47:80:cb:c8:51:b5:22: 2e:3f:6d:12:c5:69:41:73:1a:55:38:b7:43:24:26:21:a6:5d: 86:56:a7:fa:df:94:ac:f3:d7:bf:96:b9:37:d3:e5:20:10:9e: dd:c9:22:d3:1e:99:b5:1c:d7:ee:19:5a:34:d4:be:79:a5:bc: 6c:f2:94:1a:7b:ab:95:93:25:4d:33:42:92:71:f9:bf:aa:02: dc:cf:59:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNS7QB0FPOOqJNs7tnY3aDSfQoi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjA4MDIxMzA4MzlaFw0yNjA4MDMxNDQzMzlaMDMxMTAvBgNV BAMTKDMwMjQ1Njg1RTBEOUQ5ODNGOEEyMjAwMkY1QkQxOTg0NjNDMTBDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y3c24oVdXPVbhpXQkl6xMYAP nVjnekoSo03qQ5yyCZJDL/IcXbF1lWltE2gOrItBuwYUQCeJcd3KaCdzfXzp2Ubo EUU4oAMWl+kJLOM09vJytlUM+74s3GkH6GUzFjXbw61mrTORuTf8Xa660hU6c379 Ym/ZczuhKe+p/lYk0nA44KefcviQ0NgSCtIitqjWZp3j4EjAsRyXw4zs3dK+p9rt BmXXB0OoUUChq4OTBtsfYZjtK5mbw+hOypHDNgsZG7twkGugJAqAd4LJ+PHZvAsl AreKgA6olQKHEAAA2OYsMwCrwSqPv4JS8AAtf5PSpnhmL2XEKnM+ITuoFMTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMCRWheDZ2YP4oiAC9b0ZhGPBDO0wHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9/OZiB9pzNlGIxNmTjc6q0n9lUsuqgAVNs a/Yiq82GMhiKqrkc5gd7plzSicacxn77vvvaplvEE/0tvAk/S+uL/XU5cdbUyDNR pwOhlHuCZ3pPX0wQNhozFnDMBwU++XavPV/y85cYm9TiZzM8K3hfZVMwBMmSKw/U EQcSmZOoCSyaA4GEWrG/ZBwo7WkgS4EuqAl7Dwsqaln+kcrUmsLW73Odb9ZR6omM X9VqR4DLyFG1Ii4/bRLFaUFzGlU4t0MkJiGmXYZWp/rflKzz17+WuTfT5SAQnt3J ItMembUc1+4ZWjTUvnmlvGzylBp7q5WTJU0zQpJx+b+qAtzPWcs= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:42 2026 by rpki-client