$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: JuqR0ayX+L543BhNP/NLFbzdP9PaL3a29a+3Dwk6F/U= Subject key identifier: 1C:D4:52:34:8F:6E:E8:22:47:5B:78:6C:A3:9E:7A:8D:47:B9:3A:AA Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 4E82E112F297E277F89553C8E193DF205786BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 67 Signing time: Sat 18 Jul 2026 06:20:07 +0000 Manifest this update: Sat 18 Jul 2026 06:15:07 +0000 Manifest next update: Sun 19 Jul 2026 06:46:07 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: eqtCZ5q+p5FFA0n3g1DuA25evwNn9fAEhkrd81ANLrQ=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 22:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:82:e1:12:f2:97:e2:77:f8:95:53:c8:e1:93:df:20:57:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Jul 18 06:15:07 2026 GMT Not After : Jul 19 06:46:07 2026 GMT Subject: CN=1CD452348F6EE822475B786CA39E7A8D47B93AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:fa:72:69:9b:42:f2:04:bc:f8:24:74:b2: 8a:bc:97:03:94:3d:8a:0b:7b:eb:6c:8c:90:f1:5f: d7:f9:f0:7e:c7:17:45:d2:44:67:7c:b4:a9:35:dd: 18:9b:54:22:db:7c:8d:5c:0b:7d:0a:b1:87:15:d1: d0:86:f2:50:12:89:a8:72:98:7b:fc:fa:27:84:86: db:eb:79:4e:58:60:02:18:e9:6d:5f:cc:c3:7f:f1: ab:09:06:93:14:1a:50:3f:57:3d:90:b2:14:60:f3: 68:a0:46:00:dc:c3:b3:88:cf:29:cf:21:0f:9f:41: 4c:f7:98:64:2c:7a:51:ef:0f:50:3e:fe:2e:92:17: 83:7f:ed:f8:75:30:2c:2e:e1:25:40:82:54:89:d8: dc:46:9e:10:11:85:21:1d:b2:9b:b0:9f:eb:2c:48: 47:d4:f6:d7:cf:42:27:65:62:62:38:78:6a:84:86: 76:a5:20:36:be:3e:1c:9e:28:e3:cf:ed:90:7e:51: 56:61:a1:4b:b5:09:61:4f:e6:07:32:ce:f6:b2:b5: 30:68:d1:f0:c9:58:5a:15:ae:1b:61:c0:83:7a:a5: bf:82:dd:99:05:3d:81:7c:0a:c1:b7:fc:1c:3b:7a: 2a:2d:fa:ea:ad:a0:bf:09:8a:67:57:c6:a0:8e:4e: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:52:34:8F:6E:E8:22:47:5B:78:6C:A3:9E:7A:8D:47:B9:3A:AA X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:86:63:bf:59:f2:df:5d:32:29:62:c7:42:35:95:e4:73:9f: 52:2c:98:7d:f0:d3:5a:42:09:7a:6a:fe:35:9b:80:4c:6d:11: d9:a9:fb:21:8f:96:6a:92:16:1e:a5:8c:3e:3e:f9:6b:b5:ab: dc:7d:61:33:6f:94:9a:8f:0d:d9:fa:9c:f2:16:90:d9:ad:49: 2a:3a:fd:c2:5c:e0:a0:5e:c8:76:04:3a:47:8b:15:0b:92:62: 81:31:b9:b0:b3:8e:3b:74:8c:8e:fd:37:87:b5:2c:73:56:2a: 16:03:84:38:a8:09:31:f6:21:71:3c:e2:bb:d6:8f:37:ae:0a: 4d:ba:f7:e2:2e:d8:31:8b:35:4f:78:73:ad:69:c5:5e:16:a8: 98:cb:74:b1:ec:60:70:81:ed:c7:b3:e4:97:b8:5b:12:fc:8d: 5b:c1:21:1e:5f:50:85:28:92:14:36:b7:0b:34:92:72:cd:e9: d3:77:ae:77:7a:ae:ca:43:ad:e5:66:06:43:ac:da:16:07:a4: 29:c6:d7:59:a4:ef:63:2c:22:cf:d2:2f:cd:53:98:da:1d:6d: 78:64:cf:17:d5:43:3f:04:e6:52:90:69:28:ba:7f:52:59:d8: 37:a6:20:a4:c5:bb:02:b6:4e:11:2c:9c:88:9f:31:c7:b1:fc: 64:72:67:71 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITToLhEvKX4nf4lVPI4ZPfIFeGuzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEy NzMwNTNDMB4XDTI2MDcxODA2MTUwN1oXDTI2MDcxOTA2NDYwN1owMzExMC8GA1UE AxMoMUNENDUyMzQ4RjZFRTgyMjQ3NUI3ODZDQTM5RTdBOEQ0N0I5M0FBQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKEw+nJpm0LyBLz4JHSyiryXA5Q9 igt762yMkPFf1/nwfscXRdJEZ3y0qTXdGJtUItt8jVwLfQqxhxXR0IbyUBKJqHKY e/z6J4SG2+t5TlhgAhjpbV/Mw3/xqwkGkxQaUD9XPZCyFGDzaKBGANzDs4jPKc8h D59BTPeYZCx6Ue8PUD7+LpIXg3/t+HUwLC7hJUCCVInY3EaeEBGFIR2ym7Cf6yxI R9T2189CJ2ViYjh4aoSGdqUgNr4+HJ4o48/tkH5RVmGhS7UJYU/mBzLO9rK1MGjR 8MlYWhWuG2HAg3qlv4LdmQU9gXwKwbf8HDt6Ki366q2gvwmKZ1fGoI5Owd8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQc1FI0j27oIkdbeGyjnnqNR7k6qjAfBgNVHSME GDAWgBQ6OqyHq0N4cww8jP03PlWOEnMFPDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC8zQTNBQUM4N0FC NDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMwNTNDLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8wLzNBM0FBQzg3QUI0Mzc4NzMwQzNDOENGRDM3M0U1NThFMTI3MzA1 M0MuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDhhYjE1Ny1kODI3LTQ5YTgtYmI4 Ni0yOGJlMTMxYzNkMjYvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4 RTEyNzMwNTNDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAWIZjv1ny310yKWLHQjWV5HOfUiyYffDTWkIJ emr+NZuATG0R2an7IY+WapIWHqWMPj75a7Wr3H1hM2+Umo8N2fqc8haQ2a1JKjr9 wlzgoF7IdgQ6R4sVC5JigTG5sLOOO3SMjv03h7Usc1YqFgOEOKgJMfYhcTziu9aP N64KTbr34i7YMYs1T3hzrWnFXhaomMt0sexgcIHtx7Pkl7hbEvyNW8EhHl9QhSiS FDa3CzSScs3p03eud3quykOt5WYGQ6zaFgekKcbXWaTvYywiz9IvzVOY2h1teGTP F9VDPwTmUpBpKLp/UlnYN6YgpMW7ArZOESyciJ8xx7H8ZHJncQ== -----END CERTIFICATE-----Generated at Sat Jul 18 08:17:49 2026 by rpki-client