$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: BxsoyQBV0zPOyqovz9UZ5ts4BGcpVkGUHRAfh3n2NwY= Subject key identifier: 7D:33:49:33:36:AD:C8:C3:0F:48:54:80:82:9E:F5:F4:49:4B:A1:3A Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 4BEFB55B2BAFC0378251CFAD61A6C78808CC111D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 21:16:20 +0000 Manifest this update: Mon 13 Jul 2026 21:11:20 +0000 Manifest next update: Tue 14 Jul 2026 22:31:20 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 2: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 3: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: +ryrD1PPL/GHCM7Pe2u6wg3YYOk/X2KQThFGBXzx7jQ=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 22:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ef:b5:5b:2b:af:c0:37:82:51:cf:ad:61:a6:c7:88:08:cc:11:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Jul 13 21:11:20 2026 GMT Not After : Jul 14 22:31:20 2026 GMT Subject: CN=7D33493336ADC8C30F485480829EF5F4494BA13A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:45:8c:55:b0:88:ff:83:96:83:c7:55:d2: 5f:f6:26:10:90:90:c4:9d:5a:43:36:38:b8:94:77: 82:61:51:21:65:88:c7:20:3c:29:1c:05:fc:57:75: b1:11:bf:f2:dd:64:97:c6:34:dd:3f:e1:6e:a4:c6: ba:5f:ff:09:f5:22:bb:e0:1a:8c:d2:cc:9d:54:18: 51:c9:0f:72:ae:be:ff:23:65:a8:f0:58:31:c9:47: 1e:44:67:ad:7d:8e:b5:75:17:71:85:7c:07:ea:ef: ae:b5:17:7b:ed:db:31:b5:e4:f8:3f:08:92:c1:6d: 0b:86:40:41:32:0f:c6:dd:68:94:7b:06:4e:dc:a0: 90:a0:2a:fd:99:f3:c7:c1:30:f9:48:c9:3b:4c:f3: 86:25:09:a1:e5:6f:02:92:1b:bd:5e:f5:33:21:a5: de:33:a0:7d:fd:a0:33:61:17:ca:16:82:62:60:8c: 9c:b8:6b:fd:e0:34:a6:f2:4a:4a:4e:95:4c:20:63: f5:dc:e4:bb:ef:5c:47:f6:22:49:c3:f5:20:61:97: 8b:28:2f:3d:a7:a6:2e:f8:c0:6a:23:7a:4d:e0:24: 90:a9:72:3d:2b:91:e4:c3:88:c8:d5:ed:51:1b:59: 4e:45:b5:b1:5e:84:94:05:c5:f2:85:6d:05:01:b3: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:49:33:36:AD:C8:C3:0F:48:54:80:82:9E:F5:F4:49:4B:A1:3A X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:14:b8:8d:0d:94:d0:55:54:a9:2c:eb:06:45:b8:4e:5b:3f: e9:7d:66:56:be:31:35:48:f4:5b:b9:3a:56:f0:6d:e4:1b:3c: 9f:78:04:77:2f:c7:18:db:36:7b:59:e4:16:32:a8:74:d5:cd: 5e:b1:91:4b:59:68:b8:df:57:07:5b:65:5b:ec:72:fa:2d:9f: 8a:77:09:45:93:f3:29:68:92:88:56:f0:ad:27:b0:c5:9c:16: 26:e0:d2:6a:d2:f4:7f:84:ba:98:43:a8:3e:28:f6:0a:60:76: bd:d3:88:59:d5:04:a1:28:66:e0:3f:16:39:a0:3a:e5:35:7a: ad:fa:ea:46:60:62:06:56:10:4a:a5:26:3c:67:fa:5a:f2:24: 48:46:d6:a7:8f:f0:2b:cc:28:4e:f4:fb:23:fb:90:eb:5a:50: 81:4d:49:83:e2:e6:d5:60:42:8e:13:2a:1f:c1:36:7f:3d:36: 60:19:6c:7a:03:47:3f:3d:d3:55:d3:19:6b:c7:b0:5e:d4:0c: 3f:2f:39:f7:7a:5e:b7:f2:91:95:c4:58:23:ce:4b:4f:e9:3a: b9:6b:40:f0:43:31:f7:68:6d:14:24:f8:a0:6d:55:1d:ac:4a: ac:06:5d:71:bf:83:60:4f:25:55:7a:8d:d9:5e:67:21:fd:e5: 5b:9e:06:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS++1WyuvwDeCUc+tYabHiAjMER0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA3MTMyMTExMjBaFw0yNjA3MTQyMjMxMjBaMDMxMTAvBgNV BAMTKDdEMzM0OTMzMzZBREM4QzMwRjQ4NTQ4MDgyOUVGNUY0NDk0QkExM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDakWMVbCI/4OWg8dV0l/2JhCQ kMSdWkM2OLiUd4JhUSFliMcgPCkcBfxXdbERv/LdZJfGNN0/4W6kxrpf/wn1Irvg GozSzJ1UGFHJD3Kuvv8jZajwWDHJRx5EZ619jrV1F3GFfAfq7661F3vt2zG15Pg/ CJLBbQuGQEEyD8bdaJR7Bk7coJCgKv2Z88fBMPlIyTtM84YlCaHlbwKSG71e9TMh pd4zoH39oDNhF8oWgmJgjJy4a/3gNKbySkpOlUwgY/Xc5LvvXEf2IknD9SBhl4so Lz2npi74wGojek3gJJCpcj0rkeTDiMjV7VEbWU5FtbFehJQFxfKFbQUBs9KzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfTNJMzatyMMPSFSAgp719ElLoTowHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQUuI0NlNBVVKks6wZFuE5bP+l9Zla+MTVI 9Fu5OlbwbeQbPJ94BHcvxxjbNntZ5BYyqHTVzV6xkUtZaLjfVwdbZVvscvotn4p3 CUWT8ylokohW8K0nsMWcFibg0mrS9H+EuphDqD4o9gpgdr3TiFnVBKEoZuA/Fjmg OuU1eq366kZgYgZWEEqlJjxn+lryJEhG1qeP8CvMKE70+yP7kOtaUIFNSYPi5tVg Qo4TKh/BNn89NmAZbHoDRz8901XTGWvHsF7UDD8vOfd6XrfykZXEWCPOS0/pOrlr QPBDMfdobRQk+KBtVR2sSqwGXXG/g2BPJVV6jdleZyH95VueBqw= -----END CERTIFICATE-----Generated at Tue Jul 14 03:45:40 2026 by rpki-client