$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: S77ioxsAPRm/HjxEKEuvvbAoWaYGq2TdH9J6QMKhTdw= Subject key identifier: 87:22:15:96:23:00:96:E7:D2:24:9E:03:55:78:B2:67:F2:6A:13:6D Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 68F9C5E6ABBCCC9AD68BDEFB3FD20DCF56D4F9B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:37:13 +0000 Manifest this update: Tue 28 Jul 2026 16:32:13 +0000 Manifest next update: Wed 29 Jul 2026 17:30:13 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 2: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 3: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: tISCwUtPuoJXklOeb1OiWOn6uzUSJBTi2hsPeGRkCNI=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f9:c5:e6:ab:bc:cc:9a:d6:8b:de:fb:3f:d2:0d:cf:56:d4:f9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Jul 28 16:32:13 2026 GMT Not After : Jul 29 17:30:13 2026 GMT Subject: CN=87221596230096E7D2249E035578B267F26A136D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:47:9f:31:71:bd:38:cc:b1:9b:ab:66:54: d1:d9:ea:f1:db:8e:ae:44:e1:86:c6:3a:86:13:ac: db:4c:82:32:b3:8b:85:92:e6:fd:f8:95:44:89:b6: 4e:6a:ce:45:41:41:60:c4:06:7b:49:1d:c4:c9:63: c2:a9:96:70:c3:9b:a0:1a:b3:2f:48:4d:c0:81:24: 87:fd:56:44:55:89:6b:59:2f:ab:4a:08:f0:d9:16: bd:31:27:97:6d:06:cf:23:08:f4:70:00:9d:49:9e: fd:da:0f:39:4f:c6:c7:0a:16:03:81:11:cf:6f:fc: f3:14:46:84:a1:eb:f8:cf:71:80:85:dc:0e:07:fe: aa:fc:0d:30:a1:bf:ea:be:2f:9d:db:2c:ef:9a:64: 41:86:23:c3:98:7e:33:de:1b:93:b9:26:55:e4:d1: 2c:06:c5:7f:28:25:92:59:6b:53:a7:af:83:39:5b: d1:b6:af:aa:2f:fe:87:45:73:11:6c:cd:ad:8d:39: 4d:f3:19:83:60:97:15:ac:dc:7c:47:b8:cd:a1:35: 32:d7:12:a4:f7:f1:c7:83:a8:b7:0f:8c:96:1e:bc: 7d:92:90:43:2a:ca:a4:70:72:e3:50:12:b4:d6:46: 95:50:7b:24:ca:a9:09:d8:5b:9f:d4:0f:69:8b:13: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:22:15:96:23:00:96:E7:D2:24:9E:03:55:78:B2:67:F2:6A:13:6D X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:14:a7:32:60:4e:3f:83:5e:ce:b9:cc:21:e3:75:1e:cd:7b: ed:99:06:c2:ee:7b:45:ea:de:d9:82:1e:df:db:62:13:1c:64: e6:b6:a5:a2:88:48:74:e3:6d:3c:43:f8:51:79:95:a1:a8:d7: f4:8b:74:fc:41:85:f4:15:52:e5:91:96:ce:dc:42:53:dc:e0: 0a:14:d0:a0:26:47:b2:c4:4d:a4:3b:17:15:ee:a0:09:40:54: 3f:f2:48:1c:75:07:b9:b1:b9:5b:f2:d0:58:51:a9:5c:35:4e: 23:05:c5:ac:9c:13:b5:69:bd:f2:73:c0:bc:bb:42:d8:98:3d: c4:c8:b0:ab:bd:fc:6b:cd:c8:c9:11:0d:65:57:5b:a2:03:fb: a5:52:f5:3b:09:b0:7f:9a:8d:5b:7a:65:9d:8c:d7:9f:a0:7f: e4:1d:81:af:92:da:38:5b:5b:3f:f9:50:a8:d8:82:f5:af:a6: 41:37:db:8c:01:74:49:0f:7d:c6:a0:c7:b4:f7:80:59:f0:c1: 0e:f0:88:08:98:3f:46:57:3e:12:54:0b:40:72:69:d0:ae:a1: 76:24:6f:c6:98:97:14:b6:6b:5f:2e:32:a9:4d:18:63:7f:28: ab:c1:6d:9e:38:ad:ee:75:66:9c:e7:e8:6a:a6:f2:c5:6e:cb: cf:db:59:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPnF5qu8zJrWi977P9INz1bU+bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA3MjgxNjMyMTNaFw0yNjA3MjkxNzMwMTNaMDMxMTAvBgNV BAMTKDg3MjIxNTk2MjMwMDk2RTdEMjI0OUUwMzU1NzhCMjY3RjI2QTEzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqkefMXG9OMyxm6tmVNHZ6vHb jq5E4YbGOoYTrNtMgjKzi4WS5v34lUSJtk5qzkVBQWDEBntJHcTJY8KplnDDm6Aa sy9ITcCBJIf9VkRViWtZL6tKCPDZFr0xJ5dtBs8jCPRwAJ1Jnv3aDzlPxscKFgOB Ec9v/PMURoSh6/jPcYCF3A4H/qr8DTChv+q+L53bLO+aZEGGI8OYfjPeG5O5JlXk 0SwGxX8oJZJZa1Onr4M5W9G2r6ov/odFcxFsza2NOU3zGYNglxWs3HxHuM2hNTLX EqT38ceDqLcPjJYevH2SkEMqyqRwcuNQErTWRpVQeyTKqQnYW5/UD2mLE2nHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyIVliMAlufSJJ4DVXiyZ/JqE20wHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkUpzJgTj+DXs65zCHjdR7Ne+2ZBsLue0Xq 3tmCHt/bYhMcZOa2paKISHTjbTxD+FF5laGo1/SLdPxBhfQVUuWRls7cQlPc4AoU 0KAmR7LETaQ7FxXuoAlAVD/ySBx1B7mxuVvy0FhRqVw1TiMFxaycE7VpvfJzwLy7 QtiYPcTIsKu9/GvNyMkRDWVXW6ID+6VS9TsJsH+ajVt6ZZ2M15+gf+Qdga+S2jhb Wz/5UKjYgvWvpkE324wBdEkPfcagx7T3gFnwwQ7wiAiYP0ZXPhJUC0ByadCuoXYk b8aYlxS2a18uMqlNGGN/KKvBbZ44re51Zpzn6Gqm8sVuy8/bWeA= -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:04 2026 by rpki-client