$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: /OCKmdBV1gFPrEXf4o501CXh25pdOGoUWngSpcXC+RM= Subject key identifier: C5:95:D6:33:06:E2:BC:B4:F3:FB:6A:22:89:21:0C:2C:84:11:41:E5 Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 26C0E91F94E851390194CA681470548C1D39634B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:24:11 +0000 Manifest this update: Tue 28 Jul 2026 14:19:11 +0000 Manifest next update: Wed 29 Jul 2026 15:49:11 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) 2: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: mrtff/ef/2SBgAhk3aCwwsJtmm1Hy1JkTvI0B/Fr91w=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c0:e9:1f:94:e8:51:39:01:94:ca:68:14:70:54:8c:1d:39:63:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Jul 28 14:19:11 2026 GMT Not After : Jul 29 15:49:11 2026 GMT Subject: CN=C595D63306E2BCB4F3FB6A2289210C2C841141E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:6e:e9:ae:73:7e:46:87:4c:c1:02:ee:74: 21:1b:75:e7:7f:d8:58:fb:b6:5e:e3:fc:34:c6:80: 24:ff:9f:a7:67:0d:89:ce:c7:13:e7:b2:a1:0f:57: 46:af:90:d0:53:51:67:fc:45:66:55:f5:e3:15:9b: 6a:2c:3e:36:db:9f:67:99:aa:d9:fd:91:37:49:47: 63:1d:1f:27:ef:60:46:91:ba:8d:1a:91:b4:7c:02: 65:55:86:b3:ac:ea:30:e8:77:e7:da:5b:3d:f6:3e: 88:d5:70:7d:9c:dc:a0:9f:ad:53:fa:75:6b:1b:ef: a8:a7:e6:f9:d5:fe:7e:4a:6a:7d:6a:db:85:ec:78: 5a:1b:0a:f0:dc:23:16:ea:a6:77:8f:59:35:4f:97: 75:a4:63:c9:c4:57:79:b0:e9:07:48:c8:ed:45:94: e9:48:33:fd:53:47:c3:a3:da:05:8d:b2:9e:20:d7: 02:f6:49:39:ec:76:fe:52:23:b4:3a:e4:28:82:94: a1:a3:cb:34:b0:4d:1d:5c:44:7a:83:2b:12:25:3d: 7d:d2:5d:f6:ae:e4:d0:1a:68:1f:ce:ce:ed:76:72: 2c:51:88:56:dd:58:04:9b:bc:e4:82:d3:80:b3:8a: 9b:9d:b6:6b:0a:bc:5d:2c:fd:d0:04:68:96:70:16: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:95:D6:33:06:E2:BC:B4:F3:FB:6A:22:89:21:0C:2C:84:11:41:E5 X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1a:5e:cb:6e:5c:c6:fd:38:e8:6a:5f:18:71:e4:f1:1f:5f: 9c:4f:9d:db:0d:f1:39:1e:9f:96:ff:c1:b7:8f:fb:09:d1:24: 77:f7:50:6a:03:be:81:1c:bb:cf:f9:1d:46:00:bb:0c:fe:a9: 55:dc:fe:84:19:40:dc:7a:61:b3:40:e6:5c:a5:d3:ae:1e:62: b6:93:d8:16:7e:48:39:44:09:e1:29:fe:5b:77:8c:c7:cf:3a: 0c:46:d7:d5:fd:d3:56:30:db:a5:32:19:df:2e:1c:30:77:ea: 85:4e:a1:ff:2b:3f:14:4e:e9:f9:02:20:c7:c9:d3:f1:0d:cf: c0:8b:9b:fd:e3:99:f4:26:4e:ef:79:5b:f0:f1:7f:94:6f:e4: 31:ad:08:68:a3:ff:28:e2:49:e7:a4:0a:e4:62:cb:77:52:44: 80:ad:2d:d7:cd:1d:a9:50:fe:00:1d:4c:f6:03:60:20:4d:99: 0d:81:64:be:ad:c8:78:b0:2a:76:0b:54:93:25:bd:8f:d6:49: 82:6b:80:6f:88:6b:e0:06:6f:37:f1:38:99:1f:8d:e9:f5:d3: 1f:ab:a6:33:12:76:5e:8f:a6:f5:57:34:98:50:15:18:eb:6d: 28:c8:14:50:f0:ba:4d:5a:32:9b:cb:e1:5b:1c:f0:66:3f:4d: 38:97:12:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsDpH5ToUTkBlMpoFHBUjB05Y0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA3MjgxNDE5MTFaFw0yNjA3MjkxNTQ5MTFaMDMxMTAvBgNV BAMTKEM1OTVENjMzMDZFMkJDQjRGM0ZCNkEyMjg5MjEwQzJDODQxMTQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMG7prnN+RodMwQLudCEbded/ 2Fj7tl7j/DTGgCT/n6dnDYnOxxPnsqEPV0avkNBTUWf8RWZV9eMVm2osPjbbn2eZ qtn9kTdJR2MdHyfvYEaRuo0akbR8AmVVhrOs6jDod+faWz32PojVcH2c3KCfrVP6 dWsb76in5vnV/n5Kan1q24XseFobCvDcIxbqpnePWTVPl3WkY8nEV3mw6QdIyO1F lOlIM/1TR8Oj2gWNsp4g1wL2STnsdv5SI7Q65CiClKGjyzSwTR1cRHqDKxIlPX3S Xfau5NAaaB/Ozu12cixRiFbdWASbvOSC04CzipudtmsKvF0s/dAEaJZwFuR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZXWMwbivLTz+2oiiSEMLIQRQeUwHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8aXstuXMb9OOhqXxhx5PEfX5xPndsN8Tke n5b/wbeP+wnRJHf3UGoDvoEcu8/5HUYAuwz+qVXc/oQZQNx6YbNA5lyl064eYraT 2BZ+SDlECeEp/lt3jMfPOgxG19X901Yw26UyGd8uHDB36oVOof8rPxRO6fkCIMfJ 0/ENz8CLm/3jmfQmTu95W/Dxf5Rv5DGtCGij/yjiSeekCuRiy3dSRICtLdfNHalQ /gAdTPYDYCBNmQ2BZL6tyHiwKnYLVJMlvY/WSYJrgG+Ia+AGbzfxOJkfjen10x+r pjMSdl6PpvVXNJhQFRjrbSjIFFDwuk1aMpvL4Vsc8GY/TTiXEmo= -----END CERTIFICATE-----Generated at Tue Jul 28 23:32:53 2026 by rpki-client