$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: Qg/XXp7sMX5ooR50crX9UhlPxpTYmyWxS378f7MUMjc= Subject key identifier: E0:15:DC:2F:8B:28:2C:90:C4:E3:E3:6F:44:16:50:67:11:AE:7E:9F Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 2CF718D5DFA22DB758D34751A2C837F3F040ACE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 11:41:53 +0000 Manifest this update: Sun 02 Aug 2026 11:36:53 +0000 Manifest next update: Mon 03 Aug 2026 12:24:53 +0000 Files and hashes: 1: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: Csk9+5CCbEzq1G9ebr9S1hBgsmKyxg15IWEMd3qdnoU=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f7:18:d5:df:a2:2d:b7:58:d3:47:51:a2:c8:37:f3:f0:40:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: Aug 2 11:36:53 2026 GMT Not After : Aug 3 12:24:53 2026 GMT Subject: CN=E015DC2F8B282C90C4E3E36F4416506711AE7E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:64:d8:87:fe:c9:94:a9:88:15:6d:12:60: 6f:e4:f8:e0:3d:58:fe:68:be:39:53:04:b7:ea:ea: ad:10:a0:7e:24:bb:05:2d:dd:c6:95:52:e6:be:93: b1:93:a5:72:8e:4b:bc:85:8a:37:ee:ee:b3:b5:e9: 9d:f9:4b:bb:8b:6f:ec:a5:43:02:95:4a:8f:3c:f5: 28:3e:16:f2:1b:09:c8:bf:5e:12:f7:c0:e3:bb:4b: 5c:9f:61:a3:b1:a5:c1:df:af:5e:f5:10:a4:55:56: 0a:52:a5:40:78:df:0d:b3:e6:0c:6f:d3:a8:91:8f: 14:7b:17:6b:50:83:d3:97:3a:18:e8:02:b4:6b:28: 35:02:6e:f2:66:6d:2d:d1:ae:49:b4:c2:b9:6b:b7: 07:a8:d5:63:bf:59:b9:29:90:ae:96:9f:1f:f9:6c: 32:5e:54:48:30:fd:7c:34:74:61:0d:3c:1f:5e:da: 73:cb:d9:82:75:bd:2b:f7:94:22:59:35:92:1b:ae: 5a:d3:a7:36:7f:e0:65:38:64:83:63:a5:a6:30:33: 24:a3:e2:7b:49:07:93:a0:b2:31:2c:fb:4f:50:81: fc:ea:a2:ab:3f:3a:bb:2c:5c:ac:19:0a:14:97:18: 23:10:23:97:60:d5:50:3e:83:11:10:89:f0:9d:1d: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:DC:2F:8B:28:2C:90:C4:E3:E3:6F:44:16:50:67:11:AE:7E:9F X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:31:9d:4c:16:36:06:28:be:aa:70:f0:61:e3:b5:8d:36:52: a4:90:42:a3:f2:fd:c6:bf:68:98:fe:06:3a:3b:2a:97:8d:9b: 6e:dc:25:f4:1d:14:f6:3d:aa:17:b4:e6:71:18:bd:06:40:9a: 43:aa:70:60:57:79:12:84:6e:51:da:5c:a7:ea:2e:aa:2e:f1: b9:b0:07:86:3a:b4:45:87:e4:e9:2d:34:51:a5:7d:cb:11:e8: 69:d5:b5:c2:8b:94:1b:fa:98:2a:c0:2a:04:7a:86:5f:bb:69: e2:db:98:22:34:a9:59:90:90:fc:df:f9:6c:8f:e6:50:3b:25: cd:da:eb:35:2b:48:93:8c:db:31:90:91:9c:1f:2b:42:99:b3: b1:ed:ee:e9:c7:e8:fe:f7:36:bf:34:33:56:e4:2b:a3:d5:b0: 2a:0b:c9:cc:3f:ce:22:9d:8e:28:9c:39:27:8a:9f:e0:b6:14: 6d:02:b6:42:cf:da:6c:86:cb:bd:be:04:50:b4:21:c3:f1:cc: 80:fb:3e:57:b8:79:16:f5:f9:73:57:4b:bd:28:d9:54:1d:53: 68:6e:2a:f4:bb:4d:61:f8:b2:3a:2f:16:01:8d:77:d3:07:38: bd:93:c2:8a:2c:d1:84:b7:c2:ff:3a:80:60:5f:70:23:aa:c1: 7d:f0:8b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPcY1d+iLbdY00dRosg38/BArOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjA4MDIxMTM2NTNaFw0yNjA4MDMxMjI0NTNaMDMxMTAvBgNV BAMTKEUwMTVEQzJGOEIyODJDOTBDNEUzRTM2RjQ0MTY1MDY3MTFBRTdFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjGTYh/7JlKmIFW0SYG/k+OA9 WP5ovjlTBLfq6q0QoH4kuwUt3caVUua+k7GTpXKOS7yFijfu7rO16Z35S7uLb+yl QwKVSo889Sg+FvIbCci/XhL3wOO7S1yfYaOxpcHfr171EKRVVgpSpUB43w2z5gxv 06iRjxR7F2tQg9OXOhjoArRrKDUCbvJmbS3Rrkm0wrlrtweo1WO/WbkpkK6Wnx/5 bDJeVEgw/Xw0dGENPB9e2nPL2YJ1vSv3lCJZNZIbrlrTpzZ/4GU4ZINjpaYwMySj 4ntJB5OgsjEs+09Qgfzqoqs/OrssXKwZChSXGCMQI5dg1VA+gxEQifCdHTSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4BXcL4soLJDE4+NvRBZQZxGufp8wHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIxnUwWNgYovqpw8GHjtY02UqSQQqPy/ca/ aJj+Bjo7KpeNm27cJfQdFPY9qhe05nEYvQZAmkOqcGBXeRKEblHaXKfqLqou8bmw B4Y6tEWH5OktNFGlfcsR6GnVtcKLlBv6mCrAKgR6hl+7aeLbmCI0qVmQkPzf+WyP 5lA7Jc3a6zUrSJOM2zGQkZwfK0KZs7Ht7unH6P73Nr80M1bkK6PVsCoLycw/ziKd jiicOSeKn+C2FG0CtkLP2myGy72+BFC0IcPxzID7Ple4eRb1+XNXS70o2VQdU2hu KvS7TWH4sjovFgGNd9MHOL2Twoos0YS3wv86gGBfcCOqwX3wiw8= -----END CERTIFICATE-----Generated at Sun Aug 2 22:44:58 2026 by rpki-client