$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft File: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft (raw, json) Hash identifier: bEFcr0iYwe4KJb2HB9BpGUTSflKwhzqAVckZQvVhrJI= Subject key identifier: 8B:89:83:FA:F0:0F:14:B5:CB:F5:DC:95:F2:57:D9:4C:32:4B:10:19 Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B Certificate issuer: /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Certificate serial: 3E876A9BA986511E922AE25A1A3289EF209EA2A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 09:18:20 +0000 Manifest this update: Tue 28 Jul 2026 09:13:20 +0000 Manifest next update: Wed 29 Jul 2026 11:02:20 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: X6m+xeJ0gpaLFRDzspoO6SIub/jpD7DBy+UlBcZmfKs=) 2: 330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl (hash: YnD+t5VQcNp9mw7Bk0TTt4zGcF605w14XSjEMPEz8ws=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:87:6a:9b:a9:86:51:1e:92:2a:e2:5a:1a:32:89:ef:20:9e:a2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B Validity Not Before: Jul 28 09:13:20 2026 GMT Not After : Jul 29 11:02:20 2026 GMT Subject: CN=8B8983FAF00F14B5CBF5DC95F257D94C324B1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:1a:9d:0a:e5:88:64:9d:dd:9f:63:39:00: 86:cc:73:7a:9b:51:bb:7b:f3:9c:a9:02:82:79:06: 63:af:59:73:43:9f:33:e4:16:e1:9d:cf:20:a7:18: 6a:16:89:7f:fa:f3:70:98:63:39:9d:ad:d1:48:ab: cd:75:c4:07:4e:cb:78:5b:be:02:40:0e:32:9b:b8: 85:eb:ad:6a:bd:4a:84:3b:93:99:f6:5e:f6:43:37: 46:e0:19:7d:f8:40:f0:40:88:9a:4b:f5:e0:3e:26: 19:c5:60:08:0d:7e:d0:09:b2:de:0c:21:e9:56:5d: 6b:4c:c1:5d:b9:d7:3f:2d:f2:fd:d9:52:ec:19:d0: 6d:99:99:d9:e2:bd:c9:1e:4f:4c:9a:4c:10:92:a6: e5:63:90:31:44:09:27:12:6f:92:fc:63:29:91:76: bf:0b:f3:8e:6b:8a:57:f8:4c:19:2f:ff:28:7c:a5: 24:e3:e5:8d:ff:2e:82:51:da:8f:56:74:b5:a2:8f: dd:67:81:06:98:90:6e:28:3f:26:ed:02:e6:85:f2: 6e:1c:96:7a:56:78:59:99:35:b0:56:19:6c:af:19: 0b:a2:46:44:dc:6b:cb:f8:e4:cf:1d:ea:61:dd:62: a3:cf:cf:6c:47:57:24:1d:ab:ee:b6:17:41:5d:d2: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:89:83:FA:F0:0F:14:B5:CB:F5:DC:95:F2:57:D9:4C:32:4B:10:19 X509v3 Authority Key Identifier: keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:00:51:bf:59:fb:41:cd:d2:d8:87:a2:6d:c3:a8:85:2a:76: 0b:8b:9c:0a:94:5e:43:1f:12:9b:50:b0:a6:e5:1f:a4:c5:91: 2b:f0:2f:ab:be:d8:2e:84:e1:26:1d:fc:ef:01:35:15:8e:40: 13:02:2c:d5:7e:12:7c:87:a1:57:9d:46:81:78:40:43:93:cb: 1a:12:62:3c:4a:4e:71:b9:cb:3c:df:e7:64:b1:58:03:58:9a: 8e:72:6e:c1:f7:47:4b:fb:97:2f:d3:31:ed:2c:e4:43:d9:91: 02:94:d8:01:91:5c:01:01:21:76:8f:a5:2f:d4:69:a8:bb:c3: 97:e2:99:84:c9:e2:8d:a8:b8:82:4b:cb:51:14:a0:75:9e:0e: 3f:b2:cf:de:c0:be:65:7e:a9:90:94:07:1a:ce:d7:46:6f:40: 68:1c:b3:fd:68:8f:69:35:b4:d1:a9:cc:29:b6:02:e2:c0:77: 99:1a:a8:10:25:67:68:17:ca:d7:a0:9d:fb:a1:ac:3c:15:80: 4c:20:a2:7c:49:30:c1:49:cf:76:f6:e3:40:91:05:2e:db:da: e4:40:54:d1:20:5f:7c:18:9b:2e:b8:53:92:be:72:77:e7:66: 1c:e4:e0:d6:82:92:a0:ba:cc:21:9f:f6:a8:77:75:54:7b:82: fe:2b:72:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPodqm6mGUR6SKuJaGjKJ7yCeoqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0UxQzky Q0U3NDc2QjAeFw0yNjA3MjgwOTEzMjBaFw0yNjA3MjkxMTAyMjBaMDMxMTAvBgNV BAMTKDhCODk4M0ZBRjAwRjE0QjVDQkY1REM5NUYyNTdEOTRDMzI0QjEwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02hqdCuWIZJ3dn2M5AIbMc3qb Ubt785ypAoJ5BmOvWXNDnzPkFuGdzyCnGGoWiX/683CYYzmdrdFIq811xAdOy3hb vgJADjKbuIXrrWq9SoQ7k5n2XvZDN0bgGX34QPBAiJpL9eA+JhnFYAgNftAJst4M IelWXWtMwV251z8t8v3ZUuwZ0G2ZmdnivckeT0yaTBCSpuVjkDFECScSb5L8YymR dr8L845rilf4TBkv/yh8pSTj5Y3/LoJR2o9WdLWij91ngQaYkG4oPybtAuaF8m4c lnpWeFmZNbBWGWyvGQuiRkTca8v45M8d6mHdYqPPz2xHVyQdq+62F0Fd0rMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4mD+vAPFLXL9dyV8lfZTDJLEBkwHwYDVR0j BBgwFoAUMwphbypj6/C7MuJewxPhySznR2swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlZDA1ODQtYWMyZC00NjY0LWJjMTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYy QTYzRUJGMEJCMzJFMjVFQzMxM0UxQzkyQ0U3NDc2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzBBNjE2RjJBNjNFQkYwQkIzMkUyNUVDMzEzRTFDOTJDRTc0 NzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMzMwQTYxNkYyQTYzRUJGMEJCMzJFMjVFQzMxM0Ux QzkyQ0U3NDc2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgAUb9Z+0HN0tiHom3DqIUqdguLnAqUXkMf EptQsKblH6TFkSvwL6u+2C6E4SYd/O8BNRWOQBMCLNV+EnyHoVedRoF4QEOTyxoS YjxKTnG5yzzf52SxWANYmo5ybsH3R0v7ly/TMe0s5EPZkQKU2AGRXAEBIXaPpS/U aai7w5fimYTJ4o2ouIJLy1EUoHWeDj+yz97AvmV+qZCUBxrO10ZvQGgcs/1oj2k1 tNGpzCm2AuLAd5kaqBAlZ2gXytegnfuhrDwVgEwgonxJMMFJz3b240CRBS7b2uRA VNEgX3wYmy64U5K+cnfnZhzk4NaCkqC6zCGf9qh3dVR7gv4rcns= -----END CERTIFICATE-----Generated at Tue Jul 28 21:01:56 2026 by rpki-client