$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: nuvKB/3VEKvfj/j9L0SAevLr4B/LBOubDbby7kFWEns= Subject key identifier: 3A:9A:F9:44:36:53:92:1F:33:DB:E3:8E:1C:F9:B8:02:B2:FF:16:06 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 2626A1ADBCB0871AC536E356A9A9DD1A38916D27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:49:27 +0000 Manifest this update: Sun 02 Aug 2026 05:44:27 +0000 Manifest next update: Mon 03 Aug 2026 09:15:27 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: EM5wXPLfnaxRwpEa2hUE3S23eelGhnvRBpCQ/3IS+AE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:a1:ad:bc:b0:87:1a:c5:36:e3:56:a9:a9:dd:1a:38:91:6d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Aug 2 05:44:27 2026 GMT Not After : Aug 3 09:15:27 2026 GMT Subject: CN=3A9AF9443653921F33DBE38E1CF9B802B2FF1606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:9c:44:d4:43:3e:90:2f:c1:ad:65:ec:08: 7e:ed:3c:18:0b:b9:31:79:61:17:28:f7:4a:fd:65: 72:92:a9:89:66:66:7b:58:41:43:06:84:31:21:51: e8:48:a6:16:9c:1f:0b:50:01:a2:f7:83:47:68:ad: fd:99:71:99:4d:b7:43:cd:72:94:e6:0c:3f:aa:d0: 15:6c:c4:5f:49:d7:7e:b1:ad:27:f6:c5:12:66:01: 7e:4a:51:72:23:9b:86:ec:ff:a8:9a:10:a5:98:8b: a0:bf:46:35:ca:e1:34:b0:5f:db:00:b3:ac:56:75: 5a:ee:6c:3d:5c:80:50:93:82:c2:da:28:f1:67:16: e7:e0:93:c6:84:35:04:08:c8:2f:d2:be:7c:4f:fc: ba:41:24:34:16:53:3f:6b:88:66:bc:b1:2e:6a:31: 89:3b:30:1f:1c:e9:ba:db:d6:53:e8:39:bb:8b:fd: 57:2a:73:44:af:2a:fe:8d:ad:ef:6e:7e:1c:62:4e: 7b:53:16:52:ab:cf:0b:07:3e:b1:cf:2c:f2:e8:85: 90:32:f3:4d:5c:b2:bd:2c:77:4c:c9:85:07:d5:12: 2f:ac:e7:4b:bd:10:85:1b:f3:c1:3c:a4:f4:00:16: 28:ea:17:a9:05:59:f6:72:83:be:06:be:9d:a4:6a: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:F9:44:36:53:92:1F:33:DB:E3:8E:1C:F9:B8:02:B2:FF:16:06 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2f:36:ee:b5:61:73:59:98:93:9b:4a:03:03:92:c1:2d:e4: ae:bc:1a:43:3b:6a:e9:e7:bb:d9:09:a2:78:8e:80:7f:e0:b2: f1:a4:9e:b3:3e:fb:64:53:f0:32:62:27:95:8e:b5:7c:52:1b: 0b:47:65:28:3e:7d:eb:60:45:3d:b3:e2:7f:9d:57:c2:36:00: 22:5c:0e:42:fe:b3:e6:78:b3:39:98:e3:44:a4:63:d1:dc:8c: 5a:bc:6b:e4:e9:6f:81:6a:19:d4:80:9c:5e:07:cb:fc:f1:65: 7b:c6:68:fa:66:0e:f0:ee:d3:34:c6:e6:63:da:71:86:18:f9: ab:ec:53:17:1b:b0:7d:2b:10:41:d2:dc:6c:25:3e:ec:81:8f: bd:ff:2b:08:db:3a:2c:9d:74:7b:41:15:99:45:de:a6:df:a3: 43:35:44:d0:fc:79:df:1d:1c:c5:78:bd:18:69:ef:a0:35:8d: ea:10:b6:b3:b0:36:fa:0d:ed:fc:ec:1f:99:a7:71:8e:0e:3f: 0e:db:8d:26:4e:ff:34:fa:6b:d0:d9:96:a0:a5:4c:0f:1d:ef: 4d:40:0a:ce:07:3a:af:60:bb:ad:3b:57:2d:d0:13:92:39:94: 5d:fa:13:c1:48:a8:5a:ab:cf:35:ce:d4:ed:83:6c:1e:93:59: 40:b5:e1:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiahrbywhxrFNuNWqandGjiRbScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA4MDIwNTQ0MjdaFw0yNjA4MDMwOTE1MjdaMDMxMTAvBgNV BAMTKDNBOUFGOTQ0MzY1MzkyMUYzM0RCRTM4RTFDRjlCODAyQjJGRjE2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYZxE1EM+kC/BrWXsCH7tPBgL uTF5YRco90r9ZXKSqYlmZntYQUMGhDEhUehIphacHwtQAaL3g0dorf2ZcZlNt0PN cpTmDD+q0BVsxF9J136xrSf2xRJmAX5KUXIjm4bs/6iaEKWYi6C/RjXK4TSwX9sA s6xWdVrubD1cgFCTgsLaKPFnFufgk8aENQQIyC/SvnxP/LpBJDQWUz9riGa8sS5q MYk7MB8c6brb1lPoObuL/Vcqc0SvKv6Nre9ufhxiTntTFlKrzwsHPrHPLPLohZAy 801csr0sd0zJhQfVEi+s50u9EIUb88E8pPQAFijqF6kFWfZyg74Gvp2kaqr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpr5RDZTkh8z2+OOHPm4ArL/FgYwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUvNu61YXNZmJObSgMDksEt5K68GkM7aunn u9kJoniOgH/gsvGknrM++2RT8DJiJ5WOtXxSGwtHZSg+fetgRT2z4n+dV8I2ACJc DkL+s+Z4szmY40SkY9HcjFq8a+Tpb4FqGdSAnF4Hy/zxZXvGaPpmDvDu0zTG5mPa cYYY+avsUxcbsH0rEEHS3GwlPuyBj73/KwjbOiyddHtBFZlF3qbfo0M1RND8ed8d HMV4vRhp76A1jeoQtrOwNvoN7fzsH5mncY4OPw7bjSZO/zT6a9DZlqClTA8d701A Cs4HOq9gu607Vy3QE5I5lF36E8FIqFqrzzXO1O2DbB6TWUC14WY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:34 2026 by rpki-client