$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: e9t366Y6qxGrvc4B3CO71xbwum1jxyPZNbrZcHeDz9U= Subject key identifier: A8:BE:85:E9:65:C1:36:14:2A:CF:1E:65:79:06:E0:1F:F2:51:B3:DF Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 2F871B90495AA042A94B1000AD21A32093DA03BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 22:55:06 +0000 Manifest this update: Tue 28 Jul 2026 22:50:06 +0000 Manifest next update: Thu 30 Jul 2026 00:18:06 +0000 Files and hashes: 1: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: PsAFks6Av7VJFY7pER1kTy+ithNWtK9j8ReJtcJKAeU=) 2: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 4: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 5: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:87:1b:90:49:5a:a0:42:a9:4b:10:00:ad:21:a3:20:93:da:03:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Jul 28 22:50:06 2026 GMT Not After : Jul 30 00:18:06 2026 GMT Subject: CN=A8BE85E965C136142ACF1E657906E01FF251B3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:a3:19:e4:4e:eb:24:e5:6e:00:38:e0:d4: 28:c8:63:10:96:01:91:a1:1f:a2:34:a6:2c:69:29: d5:65:6b:0e:c4:59:59:11:ce:6d:08:0c:e4:9f:43: ad:45:6e:96:bd:ae:97:48:cb:4c:7e:32:a1:d7:01: f9:15:56:dc:48:5b:43:5e:ee:c4:80:08:d9:04:c4: b5:a3:d7:a5:f8:29:58:3f:04:33:52:5f:fa:7f:2a: ed:e9:3f:06:55:0f:d9:55:b8:fe:4f:a0:50:7a:f4: d4:91:68:56:20:52:0a:b3:8e:ba:7e:e7:7b:8a:64: 9e:39:f1:47:93:44:34:fc:b8:ca:12:b6:64:14:7f: d7:37:00:53:41:b5:ee:2c:bf:72:9c:aa:dc:db:11: bd:9f:27:81:7e:8a:61:4e:47:9f:59:1f:cd:ca:20: 49:20:59:dd:fe:0b:70:31:55:49:76:c0:86:d0:bc: c9:72:2b:72:b1:60:ef:06:ad:8c:46:9c:6c:cb:26: 26:83:9c:b5:c7:c8:44:c2:be:9c:ca:0a:fc:90:5e: e2:51:42:2e:d6:f2:d6:1f:23:2a:b6:fa:13:13:c0: 92:e6:aa:da:dd:b2:e9:b7:9a:ff:11:c9:ac:32:75: 45:de:88:c1:66:d9:9f:76:3a:56:d2:92:7b:97:af: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BE:85:E9:65:C1:36:14:2A:CF:1E:65:79:06:E0:1F:F2:51:B3:DF X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:31:c2:b3:c9:d5:c0:39:17:0d:ab:c9:d2:8c:2b:42:7e:fd: 8b:c5:1a:72:6a:b8:92:ca:55:bc:0c:19:e2:01:16:b9:4f:c1: f2:cf:c1:58:3b:34:96:59:9a:dc:e5:51:1c:0b:ce:e1:41:d4: 57:fb:ec:23:e0:10:dd:3a:30:17:b2:5d:6f:78:ba:4c:46:ac: 22:c9:a4:bd:03:fb:91:bc:b3:35:19:b4:b0:ee:d9:1a:51:f7: cc:b9:c2:4d:04:e1:1e:12:17:f6:cc:c1:e1:fa:6e:56:5f:3a: c2:a5:14:32:16:f4:1e:17:fc:65:8c:33:3b:4f:ba:0b:53:65: f9:22:bb:61:e7:a2:16:c5:36:e9:60:25:49:68:8d:f6:f1:f3: be:af:ba:28:96:3e:5c:59:43:d7:a2:c5:9d:28:23:44:9e:04: d3:fa:aa:b6:1c:56:02:27:bf:7e:b2:86:e6:3d:31:1c:6b:35: 7d:d6:fb:ff:d2:4f:e4:7f:90:44:d3:26:2e:f9:47:77:90:70: ba:f1:67:ba:1f:c8:ed:e6:64:ea:4b:3f:17:15:ea:ce:6e:bc: 37:0e:24:e9:fa:6a:70:7b:76:b9:ff:27:3a:50:97:39:62:e7: 53:19:52:ed:b2:1d:9f:7e:8b:5e:66:13:67:12:13:0e:bc:1f: 48:29:09:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4cbkElaoEKpSxAArSGjIJPaA7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA3MjgyMjUwMDZaFw0yNjA3MzAwMDE4MDZaMDMxMTAvBgNV BAMTKEE4QkU4NUU5NjVDMTM2MTQyQUNGMUU2NTc5MDZFMDFGRjI1MUIzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyKMZ5E7rJOVuADjg1CjIYxCW AZGhH6I0pixpKdVlaw7EWVkRzm0IDOSfQ61Fbpa9rpdIy0x+MqHXAfkVVtxIW0Ne 7sSACNkExLWj16X4KVg/BDNSX/p/Ku3pPwZVD9lVuP5PoFB69NSRaFYgUgqzjrp+ 53uKZJ458UeTRDT8uMoStmQUf9c3AFNBte4sv3KcqtzbEb2fJ4F+imFOR59ZH83K IEkgWd3+C3AxVUl2wIbQvMlyK3KxYO8GrYxGnGzLJiaDnLXHyETCvpzKCvyQXuJR Qi7W8tYfIyq2+hMTwJLmqtrdsum3mv8RyawydUXeiMFm2Z92OlbSknuXr7ZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqL6F6WXBNhQqzx5leQbgH/JRs98wHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIxwrPJ1cA5Fw2rydKMK0J+/YvFGnJquJLK VbwMGeIBFrlPwfLPwVg7NJZZmtzlURwLzuFB1Ff77CPgEN06MBeyXW94ukxGrCLJ pL0D+5G8szUZtLDu2RpR98y5wk0E4R4SF/bMweH6blZfOsKlFDIW9B4X/GWMMztP ugtTZfkiu2HnohbFNulgJUlojfbx876vuiiWPlxZQ9eixZ0oI0SeBNP6qrYcVgIn v36yhuY9MRxrNX3W+//ST+R/kETTJi75R3eQcLrxZ7ofyO3mZOpLPxcV6s5uvDcO JOn6anB7drn/JzpQlzli51MZUu2yHZ9+i15mE2cSEw68H0gpCfE= -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:57 2026 by rpki-client