$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: +UpTQdl0ltCj7ig0Yz5MzJ9IOnDw5ehect+WPiUrsko= Subject key identifier: 58:7B:F9:E6:F8:4A:A6:C3:29:4A:BA:3F:C4:0E:EE:BC:02:CE:6D:20 Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 5FEBD7E3705D4CD83B3B3DEB733AC143B4F8C0F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 16:11:58 +0000 Manifest this update: Sun 02 Aug 2026 16:06:58 +0000 Manifest next update: Mon 03 Aug 2026 18:15:58 +0000 Files and hashes: 1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: NYMhiOfXk+ifFt5sav3d3z6VSGBxr9QGUq7SlLAgUHY=) 2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:eb:d7:e3:70:5d:4c:d8:3b:3b:3d:eb:73:3a:c1:43:b4:f8:c0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Aug 2 16:06:58 2026 GMT Not After : Aug 3 18:15:58 2026 GMT Subject: CN=587BF9E6F84AA6C3294ABA3FC40EEEBC02CE6D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:01:b8:77:4a:0b:1d:81:ba:9b:93:db:10: 4c:bf:e8:b3:7d:61:36:72:35:8e:a6:93:f9:ee:52: ed:6d:a2:6b:11:a1:6e:1f:37:c5:c3:ee:13:f1:ca: f3:bc:29:05:51:89:bc:31:0e:a4:02:a7:dc:8e:ab: 09:7e:b4:37:7d:ef:bd:06:6a:87:a0:d1:25:10:dd: 8b:fd:fb:9c:5c:bb:6d:9c:50:8a:5e:ce:c7:0a:bd: d7:e8:0b:90:5c:80:87:cc:4c:e4:ff:48:4d:44:40: 72:b8:27:a5:bb:ad:e5:0c:11:56:5d:f6:6c:c8:e5: d1:4a:f4:ba:e9:d8:0c:62:8b:b6:17:1d:61:6b:20: 52:11:a8:35:8d:80:b0:f8:47:6d:f6:72:8c:d0:e0: dc:34:79:38:a2:41:1c:b1:1a:b2:96:be:c0:7a:10: 61:8b:fd:18:ea:33:1e:fc:12:32:cc:d1:25:0c:31: 79:eb:d3:7d:b0:fd:b5:c0:bf:17:d2:f0:b7:d9:ac: 9d:7b:65:ea:ff:5d:fc:d3:69:29:4f:15:9c:f5:92: 38:55:54:b7:5d:75:65:01:e9:d0:01:4d:e5:bb:ce: de:d5:c2:f4:6f:6d:e6:47:72:18:1e:dd:71:8d:1c: a8:6a:ab:7c:9f:5a:39:f0:58:46:65:0f:3f:63:74: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:F9:E6:F8:4A:A6:C3:29:4A:BA:3F:C4:0E:EE:BC:02:CE:6D:20 X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:4d:94:5f:34:9d:d9:2e:d2:5b:de:ac:dd:c7:2e:a5:b8: f5:3a:fd:a0:ef:64:57:a7:b5:18:ae:7b:28:32:98:3f:5d:42: 6d:00:b7:48:cb:ec:9f:fd:00:68:59:60:92:c8:21:0c:fb:d7: 02:ab:d8:20:a7:a1:80:cc:29:01:42:98:b8:0e:d6:32:ea:4f: 32:61:2e:2b:95:8c:61:51:de:c4:6a:31:3a:21:1b:10:55:30: ec:00:96:0d:d2:e3:b1:a3:66:31:42:1f:c3:ba:fa:98:24:40: 5b:b9:3b:e9:67:63:78:61:5b:0e:2c:f8:95:ef:7d:26:50:64: 1c:0d:2c:18:db:82:bf:56:49:9f:ff:d9:4a:bb:ac:fa:07:c5: c5:2e:da:63:9e:a8:c3:11:d5:36:36:44:d1:f7:7a:43:88:9e: db:ec:4e:0b:8f:cf:c5:02:2b:c5:90:c2:23:30:f7:1c:ec:15: 7f:05:4b:0d:d0:3c:d9:dd:19:9c:be:3c:c2:96:0e:07:01:a6: 32:f4:5f:56:94:cc:74:46:dc:fe:f8:f7:e0:3b:ed:9f:28:d5: a1:8d:18:72:07:62:1a:80:b7:86:15:ae:3e:a4:84:5b:7b:93: 7a:7a:22:9d:94:d7:80:1f:99:56:3e:5f:ed:d1:25:89:9a:3b: d4:a8:a7:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+vX43BdTNg7Oz3rczrBQ7T4wPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA4MDIxNjA2NThaFw0yNjA4MDMxODE1NThaMDMxMTAvBgNV BAMTKDU4N0JGOUU2Rjg0QUE2QzMyOTRBQkEzRkM0MEVFRUJDMDJDRTZEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5wG4d0oLHYG6m5PbEEy/6LN9 YTZyNY6mk/nuUu1tomsRoW4fN8XD7hPxyvO8KQVRibwxDqQCp9yOqwl+tDd9770G aoeg0SUQ3Yv9+5xcu22cUIpezscKvdfoC5BcgIfMTOT/SE1EQHK4J6W7reUMEVZd 9mzI5dFK9Lrp2Axii7YXHWFrIFIRqDWNgLD4R232cozQ4Nw0eTiiQRyxGrKWvsB6 EGGL/RjqMx78EjLM0SUMMXnr032w/bXAvxfS8LfZrJ17Zer/XfzTaSlPFZz1kjhV VLdddWUB6dABTeW7zt7VwvRvbeZHchge3XGNHKhqq3yfWjnwWEZlDz9jdBLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHv55vhKpsMpSro/xA7uvALObSAwHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxZTZRfNJ3ZLtJb3qzdxy6luPU6/aDvZFen tRiueygymD9dQm0At0jL7J/9AGhZYJLIIQz71wKr2CCnoYDMKQFCmLgO1jLqTzJh LiuVjGFR3sRqMTohGxBVMOwAlg3S47GjZjFCH8O6+pgkQFu5O+lnY3hhWw4s+JXv fSZQZBwNLBjbgr9WSZ//2Uq7rPoHxcUu2mOeqMMR1TY2RNH3ekOIntvsTguPz8UC K8WQwiMw9xzsFX8FSw3QPNndGZy+PMKWDgcBpjL0X1aUzHRG3P749+A77Z8o1aGN GHIHYhqAt4YVrj6khFt7k3p6Ip2U14AfmVY+X+3RJYmaO9Sop1Y= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:39 2026 by rpki-client