$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: Q3/g3q/Z7XIOa+g5QSa7u12pkpFCTRFlZ6HmZcUXLsE= Subject key identifier: 34:70:44:78:55:06:77:CC:19:E2:C1:80:F7:F7:D3:3F:69:06:A8:DC Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 1878DEE26921463ACFD9A89E0309DFBA88E85FBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 01:13:40 +0000 Manifest this update: Tue 28 Jul 2026 01:08:40 +0000 Manifest next update: Wed 29 Jul 2026 04:48:40 +0000 Files and hashes: 1: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: eiVRJAfCXWJ4nn2Cp99Teq6TY2H0/3z3jGAFfeTZ/Ms=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:78:de:e2:69:21:46:3a:cf:d9:a8:9e:03:09:df:ba:88:e8:5f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Jul 28 01:08:40 2026 GMT Not After : Jul 29 04:48:40 2026 GMT Subject: CN=34704478550677CC19E2C180F7F7D33F6906A8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:71:36:a1:1b:ef:f4:07:93:ef:d3:a5:5f:8b: 37:33:fc:1c:3b:24:56:c2:3e:34:0d:ce:dc:c0:64: 68:7c:61:2b:0f:92:34:4b:95:b7:6b:75:0e:fa:ec: b6:3a:e7:bd:92:e2:58:f4:a1:b4:1a:a8:37:57:37: 6d:62:a5:10:05:15:4f:06:0e:a6:89:cb:4b:ab:b8: 5d:bc:56:5b:12:2b:a9:f5:51:26:fc:b2:73:46:18: f3:19:23:e5:5a:8f:00:b4:bd:10:c9:47:22:f6:1f: a5:90:4f:68:8f:ee:cb:96:37:96:67:71:3d:73:fc: 3c:2f:d9:20:f2:d8:f0:b9:7d:64:1c:ad:89:1f:ee: 9f:89:f2:b4:0a:04:66:7c:bf:5d:c1:d8:12:f4:33: 27:4d:cc:00:51:3b:a1:b4:61:93:5b:05:60:c7:e9: 2a:cc:91:e1:43:d0:4d:e6:bc:0b:aa:ba:e9:47:14: f1:81:67:54:fb:c3:be:89:4d:cd:54:b9:40:04:b1: 05:51:f5:19:dc:02:f3:c7:5d:78:c8:86:f4:12:db: ef:a5:12:84:bb:7d:8e:cd:bf:ab:0e:b8:97:97:da: 98:36:b8:51:3d:83:12:f2:2d:e4:d0:5d:be:78:72: 37:d3:ed:1d:2c:8e:5d:c5:8c:60:e0:44:77:ae:32: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:70:44:78:55:06:77:CC:19:E2:C1:80:F7:F7:D3:3F:69:06:A8:DC X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a5:db:fb:bf:11:b0:c7:eb:82:b9:fd:48:fc:37:c7:e5:5c: d9:0d:81:0f:2c:d9:31:54:4f:e9:ef:db:5d:e1:5a:fa:6d:4b: 71:cb:40:78:76:de:f4:88:08:aa:11:41:2c:28:47:63:2d:10: 43:59:61:26:f0:aa:e5:13:48:5d:a4:ea:f3:86:0f:d2:d2:57: 0b:e5:58:79:27:b1:50:fc:f5:6c:5b:00:c5:70:0b:ee:8a:13: 4d:06:fe:5d:a7:da:48:47:39:d6:90:d0:9d:0e:e7:c0:b0:21: 20:5a:26:72:26:9d:ba:93:dc:11:8f:d9:89:4e:0a:1c:aa:f4: 18:eb:91:3a:16:fd:41:e5:bf:4b:8e:75:4b:0c:44:51:fa:15: c8:0b:70:07:f8:24:12:f5:57:7a:60:dd:c8:be:54:9f:8d:47: f4:bf:df:c3:85:e2:f7:2f:5a:64:5b:a1:4e:23:46:1f:7b:06: 9d:41:58:00:6d:0a:3c:e1:67:cc:7c:a7:fe:e5:6d:77:fc:91: 73:e6:52:2e:61:e9:0c:81:b1:82:11:17:97:3d:b9:94:89:59: bf:e8:4e:b5:ad:18:d5:08:a9:b1:42:c9:34:b9:a2:db:3e:5c: 96:e5:a5:06:dd:31:be:d7:69:56:72:f0:63:e3:b0:79:59:6c: f1:ad:0e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHje4mkhRjrP2aieAwnfuojoX7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA3MjgwMTA4NDBaFw0yNjA3MjkwNDQ4NDBaMDMxMTAvBgNV BAMTKDM0NzA0NDc4NTUwNjc3Q0MxOUUyQzE4MEY3RjdEMzNGNjkwNkE4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscTahG+/0B5Pv06Vfizcz/Bw7 JFbCPjQNztzAZGh8YSsPkjRLlbdrdQ767LY6572S4lj0obQaqDdXN21ipRAFFU8G DqaJy0uruF28VlsSK6n1USb8snNGGPMZI+VajwC0vRDJRyL2H6WQT2iP7suWN5Zn cT1z/Dwv2SDy2PC5fWQcrYkf7p+J8rQKBGZ8v13B2BL0MydNzABRO6G0YZNbBWDH 6SrMkeFD0E3mvAuquulHFPGBZ1T7w76JTc1UuUAEsQVR9RncAvPHXXjIhvQS2++l EoS7fY7Nv6sOuJeX2pg2uFE9gxLyLeTQXb54cjfT7R0sjl3FjGDgRHeuMrKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHBEeFUGd8wZ4sGA9/fTP2kGqNwwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGl2/u/EbDH64K5/Uj8N8flXNkNgQ8s2TFU T+nv213hWvptS3HLQHh23vSICKoRQSwoR2MtEENZYSbwquUTSF2k6vOGD9LSVwvl WHknsVD89WxbAMVwC+6KE00G/l2n2khHOdaQ0J0O58CwISBaJnImnbqT3BGP2YlO Chyq9BjrkToW/UHlv0uOdUsMRFH6FcgLcAf4JBL1V3pg3ci+VJ+NR/S/38OF4vcv WmRboU4jRh97Bp1BWABtCjzhZ8x8p/7lbXf8kXPmUi5h6QyBsYIRF5c9uZSJWb/o TrWtGNUIqbFCyTS5ots+XJblpQbdMb7XaVZy8GPjsHlZbPGtDsY= -----END CERTIFICATE-----Generated at Tue Jul 28 20:41:15 2026 by rpki-client