$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: SqHWy/1ron/Jj4s6XjKwNxTcFkIhnY8scnFDVb+9Glw= Subject key identifier: 61:74:30:46:97:4B:E2:BC:9F:FB:93:51:D8:45:18:87:FF:A4:3D:DA Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 410E37035728709380331E10D232272BDE7F18D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:12:35 +0000 Manifest this update: Sun 02 Aug 2026 08:07:35 +0000 Manifest next update: Mon 03 Aug 2026 08:48:35 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) 2: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: Slk/dut/nsDdqw3LA2M4PspPhVsxZNlYVEnaoD/BPDU=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0e:37:03:57:28:70:93:80:33:1e:10:d2:32:27:2b:de:7f:18:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Aug 2 08:07:35 2026 GMT Not After : Aug 3 08:48:35 2026 GMT Subject: CN=61743046974BE2BC9FFB9351D8451887FFA43DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:c5:57:2c:bb:73:69:37:2f:55:8f:5c:1b: d8:3e:b8:18:04:c7:0e:ea:fb:8e:55:47:62:16:7d: 47:c2:6a:0f:81:25:2b:ca:d6:4b:56:1a:94:27:82: f4:21:6b:cb:6c:e5:54:86:ad:9a:2b:9c:8c:0e:39: 61:82:e6:8e:b4:74:1b:4e:c2:be:e2:8c:34:9e:5c: 39:50:44:90:a7:ce:26:bf:f6:5a:02:82:8e:64:88: 36:d0:5c:35:a5:83:f0:13:41:02:d5:9a:fd:ef:20: db:bf:57:57:ce:f0:5c:b2:fa:b9:5f:56:d9:dc:d9: 96:a0:cc:87:52:53:1a:e4:87:3d:8f:26:0a:58:e0: 82:4c:38:c4:b8:ca:2d:e5:81:8b:e9:58:14:8b:0a: 14:04:68:50:35:b6:4f:8e:d7:5d:29:9f:3d:7d:ea: 62:a3:bc:04:a9:0f:36:d4:45:cf:15:db:7b:57:04: 0e:83:06:2d:45:c0:3f:d6:0f:b0:ce:c6:c5:b6:a3: d2:e2:8d:24:8c:8e:43:43:1a:5b:d6:0e:7a:43:e5: bd:73:70:6f:aa:55:79:df:d1:e9:41:3b:20:58:cf: 28:22:70:28:b7:de:4e:47:0f:b4:06:42:fc:7e:32: 26:9f:0b:cb:57:2f:25:16:2c:30:1a:a9:7d:6c:d6: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:30:46:97:4B:E2:BC:9F:FB:93:51:D8:45:18:87:FF:A4:3D:DA X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:39:27:b0:e3:19:99:09:42:74:20:5f:8c:e9:ba:4b:d7:91: 69:78:61:db:c6:d6:e1:c5:b7:15:27:43:2e:a2:36:64:eb:07: f9:00:03:5a:07:a8:14:5e:6e:9a:5b:5f:8a:64:e2:03:0c:4f: 16:b4:bc:82:3f:c2:29:fe:0c:44:08:d1:32:3c:10:d7:45:11: b8:9e:c6:7a:95:da:f3:01:75:53:a9:96:46:89:6c:8a:cb:5c: e0:d0:8a:f2:41:76:28:a0:0d:2b:69:82:50:06:1e:7d:12:67: 7b:58:64:dc:99:36:27:39:a5:d6:1e:e7:c4:82:cf:2c:4f:e1: d2:55:6a:05:94:93:24:45:cf:f9:ba:a2:2a:6f:de:31:5c:20: ca:69:19:4b:1a:8f:09:25:de:ea:b3:a3:5c:aa:59:f5:7c:d9: 21:96:16:24:ad:a5:97:92:59:b4:1c:c2:54:46:5c:4a:5d:bc: fb:1a:13:6b:a1:f7:18:ef:a8:13:1a:86:40:28:6b:48:d4:29: 25:0a:dc:3a:c1:05:47:8f:16:c7:87:b1:6a:eb:24:04:b9:f0: 3b:11:24:e5:14:82:6b:69:a9:22:05:0e:d8:46:86:e2:05:b2: ec:d2:08:f8:c3:19:1f:f0:d4:4a:0c:6d:ee:77:5e:09:bf:d0: 17:0f:dd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQ43A1cocJOAMx4Q0jInK95/GNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA4MDIwODA3MzVaFw0yNjA4MDMwODQ4MzVaMDMxMTAvBgNV BAMTKDYxNzQzMDQ2OTc0QkUyQkM5RkZCOTM1MUQ4NDUxODg3RkZBNDNEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4MVXLLtzaTcvVY9cG9g+uBgE xw7q+45VR2IWfUfCag+BJSvK1ktWGpQngvQha8ts5VSGrZornIwOOWGC5o60dBtO wr7ijDSeXDlQRJCnzia/9loCgo5kiDbQXDWlg/ATQQLVmv3vINu/V1fO8Fyy+rlf Vtnc2ZagzIdSUxrkhz2PJgpY4IJMOMS4yi3lgYvpWBSLChQEaFA1tk+O110pnz19 6mKjvASpDzbURc8V23tXBA6DBi1FwD/WD7DOxsW2o9LijSSMjkNDGlvWDnpD5b1z cG+qVXnf0elBOyBYzygicCi33k5HD7QGQvx+MiafC8tXLyUWLDAaqX1s1j1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYXQwRpdL4ryf+5NR2EUYh/+kPdowHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY5J7DjGZkJQnQgX4zpukvXkWl4YdvG1uHF txUnQy6iNmTrB/kAA1oHqBRebppbX4pk4gMMTxa0vII/win+DEQI0TI8ENdFEbie xnqV2vMBdVOplkaJbIrLXODQivJBdiigDStpglAGHn0SZ3tYZNyZNic5pdYe58SC zyxP4dJVagWUkyRFz/m6oipv3jFcIMppGUsajwkl3uqzo1yqWfV82SGWFiStpZeS WbQcwlRGXEpdvPsaE2uh9xjvqBMahkAoa0jUKSUK3DrBBUePFseHsWrrJAS58DsR JOUUgmtpqSIFDthGhuIFsuzSCPjDGR/w1EoMbe53Xgm/0BcP3XU= -----END CERTIFICATE-----Generated at Sun Aug 2 22:48:26 2026 by rpki-client