$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: ibadMe2PKSNYyP0lAMentyGIjJxIaSvg/xBAhxQY8S0= Subject key identifier: 1B:D2:BF:87:46:A1:EC:45:55:F0:33:29:9F:68:76:02:9A:3F:47:4D Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 732E0BED5324B62983F7B157460601A1EE366847 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 09:32:16 +0000 Manifest this update: Wed 29 Jul 2026 09:27:16 +0000 Manifest next update: Thu 30 Jul 2026 10:30:16 +0000 Files and hashes: 1: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: 4tS71X5xWuQ6GUCaBJI6aoYtSsDsMA95T4ZLOGWkw/Q=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 4: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:0b:ed:53:24:b6:29:83:f7:b1:57:46:06:01:a1:ee:36:68:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Jul 29 09:27:16 2026 GMT Not After : Jul 30 10:30:16 2026 GMT Subject: CN=1BD2BF8746A1EC4555F033299F6876029A3F474D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:a6:c9:41:10:41:f1:09:35:9f:d2:36:fc: a8:d3:dc:67:bf:7d:01:0a:31:81:a6:c0:98:90:5e: de:f4:2c:aa:d3:14:89:a9:42:ba:73:c2:11:40:ae: fd:df:40:37:ab:3a:93:93:d5:38:b2:f3:8a:48:a3: 7c:13:c9:1b:ab:9f:8e:de:b1:1f:b0:63:4d:d1:43: 81:30:49:31:fd:15:ee:18:c6:9d:5c:d4:1c:31:14: 79:08:bc:ae:69:6c:e9:a3:07:aa:0e:09:fe:a3:6c: 1e:c0:4c:b2:d7:45:30:92:17:fb:de:cd:53:14:14: 15:fe:d3:9a:41:62:12:7e:31:18:33:0b:59:97:5e: 4f:2c:0c:0a:fc:a6:67:ec:04:69:79:a1:ba:3b:db: 3f:e4:81:2a:6b:bc:f3:e4:eb:e3:40:53:ba:6b:a3: dd:68:b9:54:70:6a:1b:29:1d:54:0a:ee:a6:cb:52: 32:61:f4:dc:19:ea:9b:6f:aa:64:51:94:ee:53:50: ed:57:a0:09:40:32:54:28:84:6b:49:23:ce:34:72: 27:03:46:eb:65:04:a3:87:3a:4b:2a:20:f3:62:9c: ad:c5:10:e0:68:e2:1d:0c:24:a0:87:cb:ef:a2:f1: 2e:49:ff:1b:32:91:6d:44:2f:22:02:c7:f5:3a:de: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:BF:87:46:A1:EC:45:55:F0:33:29:9F:68:76:02:9A:3F:47:4D X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:b0:ee:ae:e9:ae:d7:b8:62:41:95:a9:5b:ac:b2:f2:3f: 42:28:17:e6:a3:67:c3:0e:b2:94:11:73:3a:f6:40:13:45:27: 6c:90:ff:95:c6:90:fb:96:36:af:82:c4:dd:f0:19:79:54:64: 9d:df:c8:fd:ee:08:ca:ff:9e:e3:d7:bc:75:3f:05:5f:55:ae: 43:97:42:31:fb:91:5e:d1:22:1b:c6:c2:22:41:c2:2e:82:c4: f8:63:33:06:32:46:ea:2e:1a:ff:5d:cf:cb:59:b0:9c:5f:cb: 2a:23:35:de:9b:39:71:95:f0:e1:0a:6b:45:b6:f2:77:89:b7: 29:4c:95:57:52:22:27:44:fc:f7:7f:cd:4e:4c:c1:e6:b1:f6: a3:46:60:46:6e:0a:41:5c:93:9e:ba:80:5d:90:2c:f6:5e:72: f8:d2:cf:3c:03:a1:e9:97:87:28:f3:06:4d:2b:85:66:a3:9d: ed:8c:9e:31:71:00:33:66:07:8f:ca:96:b9:ba:f8:2f:8d:4c: 22:6c:79:bc:2c:1e:87:3b:dc:ca:6e:da:87:0f:7d:b6:ef:a4: 61:bb:76:f4:79:8b:5c:5c:f8:35:aa:d5:27:6c:6a:5b:e4:0a: ea:5f:59:25:d4:77:29:82:a4:fd:48:81:58:40:b0:8f:4f:fe: 65:11:c8:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcy4L7VMktimD97FXRgYBoe42aEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA3MjkwOTI3MTZaFw0yNjA3MzAxMDMwMTZaMDMxMTAvBgNV BAMTKDFCRDJCRjg3NDZBMUVDNDU1NUYwMzMyOTlGNjg3NjAyOUEzRjQ3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk6bJQRBB8Qk1n9I2/KjT3Ge/ fQEKMYGmwJiQXt70LKrTFImpQrpzwhFArv3fQDerOpOT1Tiy84pIo3wTyRurn47e sR+wY03RQ4EwSTH9Fe4Yxp1c1BwxFHkIvK5pbOmjB6oOCf6jbB7ATLLXRTCSF/ve zVMUFBX+05pBYhJ+MRgzC1mXXk8sDAr8pmfsBGl5obo72z/kgSprvPPk6+NAU7pr o91ouVRwahspHVQK7qbLUjJh9NwZ6ptvqmRRlO5TUO1XoAlAMlQohGtJI840cicD RutlBKOHOksqIPNinK3FEOBo4h0MJKCHy++i8S5J/xsykW1ELyICx/U63jBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9K/h0ah7EVV8DMpn2h2Apo/R00wHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+TsO6u6a7XuGJBlalbrLLyP0IoF+ajZ8MO spQRczr2QBNFJ2yQ/5XGkPuWNq+CxN3wGXlUZJ3fyP3uCMr/nuPXvHU/BV9VrkOX QjH7kV7RIhvGwiJBwi6CxPhjMwYyRuouGv9dz8tZsJxfyyojNd6bOXGV8OEKa0W2 8neJtylMlVdSIidE/Pd/zU5Mweax9qNGYEZuCkFck566gF2QLPZecvjSzzwDoemX hyjzBk0rhWajne2MnjFxADNmB4/Klrm6+C+NTCJsebwsHoc73Mpu2ocPfbbvpGG7 dvR5i1xc+DWq1SdsalvkCupfWSXUdymCpP1IgVhAsI9P/mURyE8= -----END CERTIFICATE-----Generated at Wed Jul 29 11:16:57 2026 by rpki-client