$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: 1M9TNBJPkiL/Pf+yPSAgID2i9tv+MXFGz2jSlUDJkr8= Subject key identifier: D9:62:57:9C:AE:6F:03:51:EB:04:00:46:C3:6B:76:95:64:8E:D9:91 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 487F3ADDAECA3D3E89D38507396BC1D7114DBE98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 12:43:39 +0000 Manifest this update: Fri 17 Jul 2026 12:38:39 +0000 Manifest next update: Sat 18 Jul 2026 14:17:39 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: 5N+2sFP2Dbh0akw9Kyxq2KvXEOFEB96R+j1y/81saP0=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 14:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7f:3a:dd:ae:ca:3d:3e:89:d3:85:07:39:6b:c1:d7:11:4d:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Jul 17 12:38:39 2026 GMT Not After : Jul 18 14:17:39 2026 GMT Subject: CN=D962579CAE6F0351EB040046C36B7695648ED991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:01:71:6d:18:d0:70:4c:aa:7a:2c:4f:c4: e8:49:6f:cb:bf:e6:63:d2:b3:dc:ec:80:6b:96:ae: a8:ad:c2:fa:d3:87:f8:b9:57:6a:ca:f8:b9:53:fe: 14:82:87:93:4f:fc:d6:28:c2:a3:5a:8c:97:ac:0c: 42:c6:e4:be:f5:d0:73:49:d8:39:ba:96:13:1d:62: 4a:94:73:30:96:83:f2:dd:ff:af:ac:02:be:6e:7b: 4d:48:17:92:75:23:f7:13:34:c4:6f:fb:38:ca:a8: 70:7e:52:fb:20:07:fe:8b:ee:65:6e:6e:d5:de:64: e3:4a:dd:e7:40:30:43:83:8b:94:c2:24:dd:ce:73: fb:fb:4f:9b:71:c9:34:82:92:d0:57:0b:4e:52:44: 9c:c1:ba:43:e7:91:36:d0:14:c7:77:02:9b:ef:2e: b6:08:83:e0:aa:58:fb:c6:a2:06:64:7f:07:4f:54: b1:35:18:80:90:65:e2:ff:ca:a3:d5:9f:93:f1:5c: ce:a5:a3:b3:a3:6d:44:88:e2:0d:07:70:ca:47:01: ce:6f:c0:c5:68:a3:16:17:d1:52:f3:2b:c1:8a:09: 79:ea:6c:d0:8d:b4:a8:13:44:05:9f:60:d3:2e:8d: a6:6e:b5:81:a9:0b:16:7f:a9:3d:ce:b8:ea:91:e6: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:57:9C:AE:6F:03:51:EB:04:00:46:C3:6B:76:95:64:8E:D9:91 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:62:41:b1:0f:1a:a3:93:67:e1:bc:72:e0:e1:b1:d0:0d:82: 0c:74:e5:43:49:d4:1d:dd:7f:89:0d:ff:a6:50:fc:83:e7:7c: b4:fa:ac:b5:35:c2:75:19:94:d1:bd:dd:22:03:0b:73:1b:0e: c5:13:28:05:94:9c:92:cf:51:a2:f8:5d:d5:77:4a:c5:e8:3c: d0:01:4a:1a:d1:27:9a:1a:c7:66:49:db:5f:61:13:d0:c5:1d: da:99:79:22:17:83:4d:d9:84:56:b1:df:47:d9:f0:81:01:8e: 73:43:3d:d6:3a:c5:f8:99:92:36:e0:ae:49:f2:d2:e3:82:eb: 53:29:24:2c:19:a4:5a:e2:5a:7d:f8:72:e9:f8:91:03:21:1a: 0c:48:76:01:c6:03:1f:75:6a:aa:43:09:ce:d7:4b:06:82:df: 2d:9d:16:ba:07:05:22:68:bc:8e:f9:77:09:ba:1e:a0:cb:97: ec:97:cb:3f:1b:de:d9:26:f3:cc:87:6a:4b:de:8d:f1:a9:e9: 0c:64:d9:5b:bb:55:f0:45:29:0c:dc:e8:27:a2:8a:74:26:c7: ab:d2:b7:4c:c6:ad:ad:e7:01:a4:66:3b:1c:b5:2d:e0:e2:ce: 8e:b8:7f:4e:8e:a0:b3:3c:ff:1c:d8:b8:9c:fa:22:65:18:64: b9:70:d1:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSH863a7KPT6J04UHOWvB1xFNvpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA3MTcxMjM4MzlaFw0yNjA3MTgxNDE3MzlaMDMxMTAvBgNV BAMTKEQ5NjI1NzlDQUU2RjAzNTFFQjA0MDA0NkMzNkI3Njk1NjQ4RUQ5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQQFxbRjQcEyqeixPxOhJb8u/ 5mPSs9zsgGuWrqitwvrTh/i5V2rK+LlT/hSCh5NP/NYowqNajJesDELG5L710HNJ 2Dm6lhMdYkqUczCWg/Ld/6+sAr5ue01IF5J1I/cTNMRv+zjKqHB+UvsgB/6L7mVu btXeZONK3edAMEODi5TCJN3Oc/v7T5txyTSCktBXC05SRJzBukPnkTbQFMd3Apvv LrYIg+CqWPvGogZkfwdPVLE1GICQZeL/yqPVn5PxXM6lo7OjbUSI4g0HcMpHAc5v wMVooxYX0VLzK8GKCXnqbNCNtKgTRAWfYNMujaZutYGpCxZ/qT3OuOqR5gNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WJXnK5vA1HrBABGw2t2lWSO2ZEwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJiQbEPGqOTZ+G8cuDhsdANggx05UNJ1B3d f4kN/6ZQ/IPnfLT6rLU1wnUZlNG93SIDC3MbDsUTKAWUnJLPUaL4XdV3SsXoPNAB ShrRJ5oax2ZJ219hE9DFHdqZeSIXg03ZhFax30fZ8IEBjnNDPdY6xfiZkjbgrkny 0uOC61MpJCwZpFriWn34cun4kQMhGgxIdgHGAx91aqpDCc7XSwaC3y2dFroHBSJo vI75dwm6HqDLl+yXyz8b3tkm88yHakvejfGp6Qxk2Vu7VfBFKQzc6CeiinQmx6vS t0zGra3nAaRmOxy1LeDizo64f06OoLM8/xzYuJz6ImUYZLlw0fk= -----END CERTIFICATE-----Generated at Sat Jul 18 07:16:08 2026 by rpki-client