$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: RtyGjhjFyPP/MJwh71G/wcaC0jzA0ODe8vai0EEjv7c= Subject key identifier: BF:FE:7D:7E:6E:D1:7F:D7:58:2E:3C:B7:92:D6:B4:A6:BD:C8:55:B4 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 785564EC163E3A044D180AEDBB1DB474C7A18416 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 12:43:40 +0000 Manifest this update: Mon 27 Jul 2026 12:38:40 +0000 Manifest next update: Tue 28 Jul 2026 13:19:40 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 2: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: iWKvIVta/kb6OY3ZgaB/AoRbR5D1YrpZ8tALOWp3N28=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:55:64:ec:16:3e:3a:04:4d:18:0a:ed:bb:1d:b4:74:c7:a1:84:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Jul 27 12:38:40 2026 GMT Not After : Jul 28 13:19:40 2026 GMT Subject: CN=BFFE7D7E6ED17FD7582E3CB792D6B4A6BDC855B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:c7:6e:41:de:f4:7e:81:06:20:af:4c:7a: 3b:70:9f:a4:a4:8c:ee:21:b6:a4:5f:ba:a8:75:b9: ef:22:7b:4d:c9:ca:bf:97:ed:b8:0e:fb:c8:de:31: 2a:49:73:bb:60:5b:2c:52:7e:4b:15:5d:a3:30:cd: f8:0e:4c:20:7d:e4:04:c3:15:86:7f:e4:91:d6:8e: f0:dd:2a:96:72:67:11:33:f8:34:26:cb:37:a5:52: 81:c5:ff:15:11:22:8f:ab:32:9b:a9:fb:c6:56:eb: 4a:27:3e:2a:d0:ee:1d:7b:88:dc:12:65:c8:91:f0: 93:d4:ab:50:74:d4:1f:ee:67:a6:95:07:ec:1f:ec: 2a:dc:1a:76:ec:b7:75:58:18:68:1c:9e:6a:77:77: 3c:e8:0a:c7:4e:71:4e:f9:7a:fe:da:80:ed:99:09: 43:a4:5c:df:52:8a:ff:6d:6a:0a:8d:21:e8:5a:3e: 07:eb:0b:1a:d4:68:74:2d:92:e3:f2:9f:dc:be:c8: d9:25:d3:6d:0f:ea:19:fa:d3:ce:75:b1:c0:72:2b: 4c:e2:31:1d:32:c5:89:20:9a:48:06:36:45:b7:18: c6:16:93:64:08:1d:a7:6c:60:ae:d2:7a:f1:97:a9: 8e:b7:0a:28:bb:64:ab:06:c5:cf:cb:15:87:13:76: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FE:7D:7E:6E:D1:7F:D7:58:2E:3C:B7:92:D6:B4:A6:BD:C8:55:B4 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:aa:f1:c1:84:9d:0b:8e:16:bf:cd:a7:38:62:3a:eb:8e:a3: ad:1d:6b:ac:7d:e0:14:f6:bb:05:d2:48:d6:92:04:c4:54:91: 1c:8b:40:eb:20:8a:ff:9f:46:72:9e:c6:07:cb:7c:be:88:95: f5:69:cc:ce:1b:df:fa:af:09:9e:aa:21:64:de:a7:68:8c:04: 89:2f:31:81:6e:b6:fd:bf:25:89:4e:1b:5c:de:68:d9:20:6e: 21:1f:d1:80:f6:02:0b:bb:0f:2a:fc:fa:ad:ab:a3:8d:45:1e: 24:ec:0c:35:3e:3b:ec:1e:8e:c2:aa:5f:08:c0:47:07:1f:0c: 9b:15:d7:1f:e9:ab:93:09:ef:73:55:62:63:81:be:28:32:8f: 4c:38:35:89:82:d6:80:c0:2d:52:e4:54:ce:8b:18:f0:2a:0e: 2f:a6:0d:14:0d:04:c5:2b:02:a7:26:b7:3b:7c:5c:61:51:7f: 92:ee:73:16:34:32:2e:10:15:52:00:69:48:ac:8c:ef:d5:17: 2c:9f:c4:e4:c5:5c:7f:b4:a6:33:77:c3:11:f5:d3:ea:4e:9e: 7d:62:db:d3:c6:1a:af:3e:29:11:7b:51:9c:88:d6:0c:c7:9b: 78:0f:f0:81:be:10:b5:0b:d8:94:36:d2:2f:33:15:4f:1b:97: f1:1a:c3:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFVk7BY+OgRNGArtux20dMehhBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA3MjcxMjM4NDBaFw0yNjA3MjgxMzE5NDBaMDMxMTAvBgNV BAMTKEJGRkU3RDdFNkVEMTdGRDc1ODJFM0NCNzkyRDZCNEE2QkRDODU1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OsduQd70foEGIK9Mejtwn6Sk jO4htqRfuqh1ue8ie03Jyr+X7bgO+8jeMSpJc7tgWyxSfksVXaMwzfgOTCB95ATD FYZ/5JHWjvDdKpZyZxEz+DQmyzelUoHF/xURIo+rMpup+8ZW60onPirQ7h17iNwS ZciR8JPUq1B01B/uZ6aVB+wf7CrcGnbst3VYGGgcnmp3dzzoCsdOcU75ev7agO2Z CUOkXN9Siv9tagqNIehaPgfrCxrUaHQtkuPyn9y+yNkl020P6hn60851scByK0zi MR0yxYkgmkgGNkW3GMYWk2QIHadsYK7SevGXqY63Cii7ZKsGxc/LFYcTdtm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/59fm7Rf9dYLjy3kta0pr3IVbQwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2q8cGEnQuOFr/NpzhiOuuOo60da6x94BT2 uwXSSNaSBMRUkRyLQOsgiv+fRnKexgfLfL6IlfVpzM4b3/qvCZ6qIWTep2iMBIkv MYFutv2/JYlOG1zeaNkgbiEf0YD2Agu7Dyr8+q2ro41FHiTsDDU+O+wejsKqXwjA RwcfDJsV1x/pq5MJ73NVYmOBvigyj0w4NYmC1oDALVLkVM6LGPAqDi+mDRQNBMUr Aqcmtzt8XGFRf5LucxY0Mi4QFVIAaUisjO/VFyyfxOTFXH+0pjN3wxH10+pOnn1i 29PGGq8+KRF7UZyI1gzHm3gP8IG+ELUL2JQ20i8zFU8bl/Eaw0M= -----END CERTIFICATE-----Generated at Mon Jul 27 18:55:18 2026 by rpki-client