$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: +WbcVImn526vwiptzS0Y7V95ySYeXpgNRPdNZd1ldQ8= Subject key identifier: 6E:8A:0F:BF:A2:AA:DF:15:C8:60:66:A1:4B:43:1C:E1:D2:1B:42:57 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 454DDB43200A6FC489828D5F1D6F96CCD0DE1BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 13:48:29 +0000 Manifest this update: Tue 28 Jul 2026 13:43:29 +0000 Manifest next update: Wed 29 Jul 2026 17:24:29 +0000 Files and hashes: 1: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: goI3w7JWQ5GZmhIkMQKd2wWVs08ZBpDm6I7vwgQpL10=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4d:db:43:20:0a:6f:c4:89:82:8d:5f:1d:6f:96:cc:d0:de:1b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Jul 28 13:43:29 2026 GMT Not After : Jul 29 17:24:29 2026 GMT Subject: CN=6E8A0FBFA2AADF15C86066A14B431CE1D21B4257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:ec:95:03:9b:6c:f0:7a:1e:5d:d7:e3:b9: 6c:88:75:34:98:b3:d5:a4:22:b7:a4:8f:f8:ad:8c: 58:4d:90:d3:6d:f8:f9:b4:16:9a:1e:3f:30:70:d4: 23:ca:fb:a3:f9:34:46:cb:89:1d:f8:6c:bb:d7:cd: 4b:af:fc:9d:50:e2:fd:ba:37:4b:b6:b4:67:71:37: 21:24:dc:90:35:73:5e:39:ee:a4:86:79:8d:8d:e7: 0c:a6:82:7b:b4:63:6c:e2:f3:01:2e:69:04:2e:f3: 42:ab:96:1b:66:d4:30:b2:21:c2:27:af:88:04:26: bb:48:65:fe:f8:ed:e1:b7:65:36:9e:a1:01:63:0e: 9c:f9:22:6e:6b:74:90:32:8a:05:91:79:9f:a7:84: 4c:8e:ea:23:78:81:1b:0c:42:c5:f3:f9:96:f9:73: 76:28:34:aa:be:2b:82:30:11:2e:ca:e4:38:c8:96: 2e:f9:aa:35:fe:a6:6b:f0:2b:44:df:b5:f6:b0:a3: 9e:96:e7:d1:6e:d5:a0:f8:e9:1c:03:4f:86:f5:4a: 46:ce:61:99:49:70:81:8e:cb:6d:c2:21:c2:74:df: 94:38:cc:da:44:7e:4f:24:4b:38:74:fe:c6:c2:e6: ae:d6:d0:73:3a:53:dc:bf:81:57:23:dd:52:28:40: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8A:0F:BF:A2:AA:DF:15:C8:60:66:A1:4B:43:1C:E1:D2:1B:42:57 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:44:df:a5:bb:0f:69:71:13:ef:5b:63:2f:91:e2:59:c1:eb: 6c:c6:ed:17:b1:09:b5:01:39:a7:6a:1c:ce:b2:16:ed:2b:b2: 73:d4:0f:2d:1b:92:68:e8:fc:99:75:b8:7b:0b:6d:81:de:8c: f9:4b:60:ba:86:ff:41:4c:35:5e:27:53:77:f5:77:ec:9d:f1: 2b:78:91:19:4a:ee:31:3c:e5:e5:eb:28:4b:ed:16:c0:89:fa: ed:53:ec:8c:11:b4:72:67:fc:11:c2:e4:0f:79:97:c4:42:8c: c6:76:51:6f:3c:a9:73:29:62:d5:fb:e6:25:b6:95:81:ab:a1: 7f:72:dd:a9:0c:82:e3:fa:63:a3:81:a0:63:4c:a9:98:3e:89: da:a7:28:1f:65:37:6d:19:53:88:de:fc:c9:9e:76:64:cd:f7: a9:ad:17:d0:21:b9:26:4a:6d:8f:e1:28:96:30:8f:ad:eb:c2: f4:a0:21:9b:ab:82:ad:72:09:0f:c4:24:ed:32:09:e8:d8:05: 30:ba:5f:8c:34:73:0b:f6:e5:33:9f:56:62:e4:dc:f8:10:4a: 52:46:58:4b:e9:5b:85:b3:4e:69:a3:bd:eb:f6:be:5b:89:eb: 01:5f:e7:c0:23:7c:e5:79:26:32:b0:9d:de:2c:e8:66:ff:f0: e7:a6:c0:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURU3bQyAKb8SJgo1fHW+WzNDeG7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA3MjgxMzQzMjlaFw0yNjA3MjkxNzI0MjlaMDMxMTAvBgNV BAMTKDZFOEEwRkJGQTJBQURGMTVDODYwNjZBMTRCNDMxQ0UxRDIxQjQyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmt+yVA5ts8HoeXdfjuWyIdTSY s9WkIrekj/itjFhNkNNt+Pm0FpoePzBw1CPK+6P5NEbLiR34bLvXzUuv/J1Q4v26 N0u2tGdxNyEk3JA1c1457qSGeY2N5wymgnu0Y2zi8wEuaQQu80Krlhtm1DCyIcIn r4gEJrtIZf747eG3ZTaeoQFjDpz5Im5rdJAyigWReZ+nhEyO6iN4gRsMQsXz+Zb5 c3YoNKq+K4IwES7K5DjIli75qjX+pmvwK0Tftfawo56W59Fu1aD46RwDT4b1SkbO YZlJcIGOy23CIcJ035Q4zNpEfk8kSzh0/sbC5q7W0HM6U9y/gVcj3VIoQAfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbooPv6Kq3xXIYGahS0Mc4dIbQlcwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5E36W7D2lxE+9bYy+R4lnB62zG7RexCbUB OadqHM6yFu0rsnPUDy0bkmjo/Jl1uHsLbYHejPlLYLqG/0FMNV4nU3f1d+yd8St4 kRlK7jE85eXrKEvtFsCJ+u1T7IwRtHJn/BHC5A95l8RCjMZ2UW88qXMpYtX75iW2 lYGroX9y3akMguP6Y6OBoGNMqZg+idqnKB9lN20ZU4je/MmedmTN96mtF9AhuSZK bY/hKJYwj63rwvSgIZurgq1yCQ/EJO0yCejYBTC6X4w0cwv25TOfVmLk3PgQSlJG WEvpW4WzTmmjvev2vluJ6wFf58AjfOV5JjKwnd4s6Gb/8OemwLs= -----END CERTIFICATE-----Generated at Wed Jul 29 01:26:36 2026 by rpki-client