$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: FpGWq7DwtrVr969Sc2rctCULgqFT+3cVNXd9jR6AHxg= Subject key identifier: 8C:A0:A1:A0:13:6E:B4:3A:95:2C:89:59:00:C9:0C:56:E4:08:5D:F5 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 4393CD90F220347E8A2672ECADA1AA9F8E635586 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: 72 Signing time: Mon 27 Jul 2026 03:21:57 +0000 Manifest this update: Mon 27 Jul 2026 03:16:57 +0000 Manifest next update: Tue 28 Jul 2026 05:50:57 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) 2: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: iwIvmeDzUL9I0tzWDjwo3MF7VaT3nTReLK/esfBTlvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:93:cd:90:f2:20:34:7e:8a:26:72:ec:ad:a1:aa:9f:8e:63:55:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Jul 27 03:16:57 2026 GMT Not After : Jul 28 05:50:57 2026 GMT Subject: CN=8CA0A1A0136EB43A952C895900C90C56E4085DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:e7:ff:ae:8a:bc:78:0d:b6:f6:1e:26:88: b5:b0:49:e6:de:d9:b5:29:a0:92:33:21:12:77:de: 1f:d7:67:96:0f:f8:83:0a:d3:fb:65:62:31:23:c8: a2:ee:94:bd:63:ef:aa:ba:6d:5a:04:2e:ac:94:2a: 5c:cd:4a:a8:37:14:cc:fc:08:8e:b7:ab:2b:85:02: 94:5f:31:35:2f:be:cb:83:12:1a:1d:16:dd:b4:fc: 0a:d0:25:0f:5d:af:11:14:ef:f1:f2:05:45:4a:e5: 6e:a0:c4:fb:95:be:f7:dd:9f:51:bf:6b:f2:d0:15: 5d:a2:ea:c7:38:f1:52:39:97:c9:af:79:a7:a7:5e: 92:1f:bc:2e:20:eb:af:ec:0a:2f:06:a8:e9:33:b9: 41:3c:8c:9e:89:04:f1:b2:67:af:1a:a5:83:34:53: 01:7b:36:96:9a:8c:8f:79:c2:9c:81:5b:23:97:bb: 6d:20:8d:78:cd:67:58:f9:f2:e2:f1:a2:a0:aa:d0: 12:9b:e9:97:a1:43:02:cc:57:5d:4a:27:d0:97:46: ab:20:2c:dc:0f:6b:0d:c1:57:92:05:41:ba:e5:78: 8d:67:da:35:fa:b7:73:53:23:10:4f:b5:ee:a2:d6: e3:2d:0e:05:34:18:8e:96:07:92:d0:c6:bf:38:ab: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:A1:A0:13:6E:B4:3A:95:2C:89:59:00:C9:0C:56:E4:08:5D:F5 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c4:50:66:cf:87:03:18:1c:47:44:7c:0e:69:3d:ea:10:df: d1:4c:9a:12:66:64:fe:64:85:13:4b:00:b1:f9:9f:d6:eb:cf: cd:f9:3b:02:0a:fa:e6:d8:a6:b7:ac:87:8a:42:92:36:36:ad: 02:cf:29:b0:92:f1:b3:3f:e4:a9:38:ae:d7:f7:ca:59:c4:f1: 74:f6:90:c4:59:69:e0:10:8f:6b:ba:c5:bd:07:6f:10:98:ff: 18:57:bd:70:37:e7:2f:0d:56:70:68:b3:dd:8c:77:22:94:36: e7:a8:ad:ed:16:6e:fb:0b:3b:10:40:f4:40:4e:4d:28:b3:71: 07:ff:08:67:2a:f8:4d:bd:4c:7f:e0:35:dd:1e:20:be:97:76: 3b:df:c7:23:59:3a:55:87:ec:63:0c:13:f0:a7:d6:3c:a5:e7: 95:16:05:10:85:76:97:d8:17:9e:53:d9:47:af:51:83:80:6a: 52:c2:95:31:21:41:5c:07:8e:62:1a:87:de:14:49:71:24:f0: db:1f:05:55:53:5d:15:e9:2d:dc:98:6a:80:25:ce:d8:64:3a: 6b:0e:82:04:b6:d7:bc:a5:44:99:ab:71:be:a2:cf:28:0f:64: 91:fb:58:12:b0:c8:d5:b4:51:2e:67:e0:dd:2a:f4:78:f4:a8: a8:17:cb:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5PNkPIgNH6KJnLsraGqn45jVYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA3MjcwMzE2NTdaFw0yNjA3MjgwNTUwNTdaMDMxMTAvBgNV BAMTKDhDQTBBMUEwMTM2RUI0M0E5NTJDODk1OTAwQzkwQzU2RTQwODVERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQOf/roq8eA229h4miLWwSebe 2bUpoJIzIRJ33h/XZ5YP+IMK0/tlYjEjyKLulL1j76q6bVoELqyUKlzNSqg3FMz8 CI63qyuFApRfMTUvvsuDEhodFt20/ArQJQ9drxEU7/HyBUVK5W6gxPuVvvfdn1G/ a/LQFV2i6sc48VI5l8mveaenXpIfvC4g66/sCi8GqOkzuUE8jJ6JBPGyZ68apYM0 UwF7NpaajI95wpyBWyOXu20gjXjNZ1j58uLxoqCq0BKb6ZehQwLMV11KJ9CXRqsg LNwPaw3BV5IFQbrleI1n2jX6t3NTIxBPte6i1uMtDgU0GI6WB5LQxr84q5GPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKChoBNutDqVLIlZAMkMVuQIXfUwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTEUGbPhwMYHEdEfA5pPeoQ39FMmhJmZP5k hRNLALH5n9brz835OwIK+ubYpresh4pCkjY2rQLPKbCS8bM/5Kk4rtf3ylnE8XT2 kMRZaeAQj2u6xb0HbxCY/xhXvXA35y8NVnBos92MdyKUNueore0WbvsLOxBA9EBO TSizcQf/CGcq+E29TH/gNd0eIL6XdjvfxyNZOlWH7GMME/Cn1jyl55UWBRCFdpfY F55T2UevUYOAalLClTEhQVwHjmIah94USXEk8NsfBVVTXRXpLdyYaoAlzthkOmsO ggS217ylRJmrcb6izygPZJH7WBKwyNW0US5n4N0q9Hj0qKgXy80= -----END CERTIFICATE-----Generated at Mon Jul 27 14:31:19 2026 by rpki-client