$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: UVkauwsKX167Jq/8slGSV+2OOTOmYmSQ4qyoXK0aNhQ= Subject key identifier: 4F:46:D0:D9:42:30:94:DE:C3:05:26:1B:8B:42:2D:59:8B:F4:6E:F0 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 7EC20AB2326A011583D2C6E2FC92E61BBDF2BA55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 22:24:26 +0000 Manifest this update: Tue 28 Jul 2026 22:19:26 +0000 Manifest next update: Wed 29 Jul 2026 23:35:26 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 2: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 4: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 6: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: psMSbpem4S1MEECrMyG6IDZDV8WuIkjiMYDiDzHaeY8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:0a:b2:32:6a:01:15:83:d2:c6:e2:fc:92:e6:1b:bd:f2:ba:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Jul 28 22:19:26 2026 GMT Not After : Jul 29 23:35:26 2026 GMT Subject: CN=4F46D0D9423094DEC305261B8B422D598BF46EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:09:1a:02:f8:1e:c0:14:8b:c2:4c:94:7e: 7a:9c:4a:38:55:a1:49:24:2b:8a:02:65:c0:bb:a9: c0:4d:4b:96:ce:04:76:c0:11:23:01:b3:2e:8c:67: 26:b6:4a:06:50:af:ab:77:45:f6:34:fa:d1:85:27: 96:94:77:06:d2:f8:a7:75:59:85:c3:c7:be:26:f4: 4d:59:d2:f2:9b:70:ae:bb:83:ab:1c:66:95:bc:de: 4e:d4:63:9b:d8:df:db:0f:58:88:e7:08:37:1e:68: c0:a8:d4:7c:49:80:74:52:56:99:11:1d:30:6d:2d: 2f:47:bc:b1:c5:1d:e9:d5:28:d3:c1:06:36:25:33: ea:2f:95:0b:14:da:1b:3c:8f:18:92:44:ac:d3:9c: ca:87:2c:ab:11:db:7e:bc:63:64:7c:8b:49:06:e0: cb:75:bb:89:19:c0:e6:e9:68:58:ee:66:11:66:98: 31:d2:74:f9:fe:c0:bf:be:73:ed:ba:4d:a3:25:22: db:f1:72:73:cb:d6:89:f0:ab:26:4a:c4:3f:18:9d: 7b:01:37:2a:9d:d2:e4:23:cb:1a:00:f7:f6:5c:94: 09:9d:ec:76:d1:81:e5:60:2e:73:a5:21:c0:31:76: ba:0c:f4:57:ee:ec:af:92:ac:32:2d:70:d8:8d:1d: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:D0:D9:42:30:94:DE:C3:05:26:1B:8B:42:2D:59:8B:F4:6E:F0 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:90:9d:af:d5:b8:86:46:15:e0:cf:07:2c:bc:92:a2:67:c8: 94:cf:aa:a4:9a:50:12:98:28:83:ef:c9:cb:ee:07:fc:3a:65: 1d:99:ad:ca:44:31:08:1f:30:52:62:6a:0b:75:04:06:22:f4: a3:f1:c4:1e:c5:8b:f4:2a:0d:7d:1c:30:5b:1e:25:3e:19:b4: 2a:59:7e:19:b5:80:3f:27:2e:73:4b:6f:23:d7:b0:9f:50:06: 43:6d:b1:ac:66:00:9b:1a:a5:c5:7a:8e:ae:49:8b:77:06:3a: 74:5e:fd:03:e0:61:2c:07:fd:99:b2:c3:03:8c:4c:97:e1:fd: 7a:14:3b:c5:55:6f:19:c5:e0:64:c6:f2:a6:81:21:04:43:ce: 55:ef:0a:76:01:db:bd:8b:a4:c5:e8:b0:ee:05:8d:cc:0e:5c: 31:7d:ed:69:ee:d7:3a:e4:f6:7b:e9:db:8e:d5:85:4d:eb:e8: b2:7c:8b:c8:9e:48:35:58:4b:86:ab:b5:77:57:c3:a0:2d:d6: bf:e1:04:a6:e9:28:65:6a:1c:76:4c:7e:13:6e:47:27:9a:a0: 2a:93:10:c3:5a:ac:14:cb:46:6f:c9:ff:71:1f:bf:1f:88:e2: 65:4b:6c:2d:ac:55:c6:7e:30:ac:1f:e2:da:cd:c0:ff:71:a9: 28:98:73:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsIKsjJqARWD0sbi/JLmG73yulUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA3MjgyMjE5MjZaFw0yNjA3MjkyMzM1MjZaMDMxMTAvBgNV BAMTKDRGNDZEMEQ5NDIzMDk0REVDMzA1MjYxQjhCNDIyRDU5OEJGNDZFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdgkaAvgewBSLwkyUfnqcSjhV oUkkK4oCZcC7qcBNS5bOBHbAESMBsy6MZya2SgZQr6t3RfY0+tGFJ5aUdwbS+Kd1 WYXDx74m9E1Z0vKbcK67g6scZpW83k7UY5vY39sPWIjnCDceaMCo1HxJgHRSVpkR HTBtLS9HvLHFHenVKNPBBjYlM+ovlQsU2hs8jxiSRKzTnMqHLKsR2368Y2R8i0kG 4Mt1u4kZwObpaFjuZhFmmDHSdPn+wL++c+26TaMlItvxcnPL1onwqyZKxD8YnXsB Nyqd0uQjyxoA9/ZclAmd7HbRgeVgLnOlIcAxdroM9Ffu7K+SrDItcNiNHXpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0bQ2UIwlN7DBSYbi0ItWYv0bvAwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKQna/VuIZGFeDPByy8kqJnyJTPqqSaUBKY KIPvycvuB/w6ZR2ZrcpEMQgfMFJiagt1BAYi9KPxxB7Fi/QqDX0cMFseJT4ZtCpZ fhm1gD8nLnNLbyPXsJ9QBkNtsaxmAJsapcV6jq5Ji3cGOnRe/QPgYSwH/ZmywwOM TJfh/XoUO8VVbxnF4GTG8qaBIQRDzlXvCnYB272LpMXosO4FjcwOXDF97Wnu1zrk 9nvp247VhU3r6LJ8i8ieSDVYS4artXdXw6At1r/hBKbpKGVqHHZMfhNuRyeaoCqT EMNarBTLRm/J/3Efvx+I4mVLbC2sVcZ+MKwf4trNwP9xqSiYc88= -----END CERTIFICATE-----Generated at Wed Jul 29 15:46:01 2026 by rpki-client