$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: uIMbrT9C/qKxvwQN2JCcKrQjHvnMIsfGzvfYSy09T6Q= Subject key identifier: 36:C5:6A:ED:A7:79:52:DA:C6:BD:83:0A:79:F5:99:EF:7C:5B:5B:50 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 249651CB782311E09E7B725ED2808D50E75AB6B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:13:58 +0000 Manifest this update: Tue 28 Jul 2026 14:08:58 +0000 Manifest next update: Wed 29 Jul 2026 17:50:58 +0000 Files and hashes: 1: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: XSXm/26lNuRmSqJv+F/7bj7cEnBtEkzbF5v9+qO9Nms=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:51:cb:78:23:11:e0:9e:7b:72:5e:d2:80:8d:50:e7:5a:b6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Jul 28 14:08:58 2026 GMT Not After : Jul 29 17:50:58 2026 GMT Subject: CN=36C56AEDA77952DAC6BD830A79F599EF7C5B5B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:64:7e:00:46:9f:5b:b4:39:96:c0:3c:31: 4b:fd:89:2b:05:c4:b4:d7:27:3e:9e:43:66:d0:d7: 93:eb:d9:bb:95:b4:bd:10:0d:a4:80:dc:53:46:dd: 5d:de:5f:e7:77:13:51:c4:2a:d4:14:c4:c6:27:34: 3a:f8:b8:5c:a8:49:20:9a:98:6c:95:83:3d:41:df: 81:e2:24:9d:33:6d:66:9b:c3:68:5a:54:c0:6a:b8: 9c:aa:86:9b:39:5d:66:1c:09:96:f7:a7:73:d8:1d: fc:7c:b8:d3:e0:6b:9f:5f:46:dc:ac:2d:82:dd:13: 9e:3c:7c:d7:07:09:54:97:30:95:2b:8a:08:2f:85: c8:cb:5d:ce:5e:d7:52:cb:4e:9f:cf:b0:70:d2:88: 92:44:af:30:1f:3e:06:2e:53:04:75:4a:3a:c3:28: bc:03:f1:d2:86:ca:fd:df:fb:2f:58:10:a9:b5:2c: e6:da:b7:5e:d3:af:ab:f2:8e:63:86:37:c1:8e:97: 74:b2:5a:61:22:04:29:7b:3a:4c:01:12:11:75:9a: 56:cc:19:90:d9:f2:d5:7d:1e:6f:a2:43:4c:88:2d: 5d:c4:93:e6:95:e2:a5:c1:2d:21:8e:35:62:ca:bd: 50:cf:7b:52:64:39:82:d7:46:90:92:8f:d7:77:17: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:6A:ED:A7:79:52:DA:C6:BD:83:0A:79:F5:99:EF:7C:5B:5B:50 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7d:40:67:aa:19:b7:63:6d:21:25:32:38:8b:f7:52:84:42: 2e:13:65:df:87:bf:ae:5c:04:35:e6:aa:d2:72:4e:9a:da:cd: a6:6e:98:90:59:ef:01:38:08:77:93:2d:77:c6:1b:05:e5:0a: 5d:4f:1f:c4:69:7c:ef:10:cf:ce:6d:3b:9a:4d:17:4b:e1:70: 03:25:9f:c5:80:60:7a:9e:f2:f7:2e:2f:b5:cd:77:b9:3c:9f: b2:be:95:51:84:c4:81:93:f6:93:02:42:2e:2b:21:ee:55:50: a8:79:a7:e3:8a:4c:a4:5b:20:35:c7:07:31:b7:d1:80:8a:93: dd:a5:64:34:7a:07:00:e3:7c:29:14:55:c5:4a:7c:f9:3f:54: d7:45:66:66:48:21:14:49:2a:d3:56:36:b2:3f:83:ef:03:54: 03:28:4b:38:41:4f:79:ec:91:f0:09:e7:a5:a6:4e:2b:ed:84: 8d:cb:f0:a7:4b:d1:51:67:15:d2:9b:28:7e:a9:5f:e9:30:49: ac:5d:d6:81:39:12:44:8d:74:77:81:c6:73:a5:85:83:51:d1: 56:f5:d7:49:b8:71:3f:31:48:07:35:2a:70:82:7b:64:1f:2d: 31:65:52:c1:b2:6b:1b:53:be:c3:3f:5f:42:3c:a4:60:0f:75: 1e:6e:0d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJZRy3gjEeCee3Je0oCNUOdatrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA3MjgxNDA4NThaFw0yNjA3MjkxNzUwNThaMDMxMTAvBgNV BAMTKDM2QzU2QUVEQTc3OTUyREFDNkJEODMwQTc5RjU5OUVGN0M1QjVCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/p2R+AEafW7Q5lsA8MUv9iSsF xLTXJz6eQ2bQ15Pr2buVtL0QDaSA3FNG3V3eX+d3E1HEKtQUxMYnNDr4uFyoSSCa mGyVgz1B34HiJJ0zbWabw2haVMBquJyqhps5XWYcCZb3p3PYHfx8uNPga59fRtys LYLdE548fNcHCVSXMJUriggvhcjLXc5e11LLTp/PsHDSiJJErzAfPgYuUwR1SjrD KLwD8dKGyv3f+y9YEKm1LObat17Tr6vyjmOGN8GOl3SyWmEiBCl7OkwBEhF1mlbM GZDZ8tV9Hm+iQ0yILV3Ek+aV4qXBLSGONWLKvVDPe1JkOYLXRpCSj9d3F2PZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNsVq7ad5UtrGvYMKefWZ73xbW1AwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABp9QGeqGbdjbSElMjiL91KEQi4TZd+Hv65c BDXmqtJyTprazaZumJBZ7wE4CHeTLXfGGwXlCl1PH8RpfO8Qz85tO5pNF0vhcAMl n8WAYHqe8vcuL7XNd7k8n7K+lVGExIGT9pMCQi4rIe5VUKh5p+OKTKRbIDXHBzG3 0YCKk92lZDR6BwDjfCkUVcVKfPk/VNdFZmZIIRRJKtNWNrI/g+8DVAMoSzhBT3ns kfAJ56WmTivthI3L8KdL0VFnFdKbKH6pX+kwSaxd1oE5EkSNdHeBxnOlhYNR0Vb1 10m4cT8xSAc1KnCCe2QfLTFlUsGyaxtTvsM/X0I8pGAPdR5uDSw= -----END CERTIFICATE-----Generated at Wed Jul 29 08:45:05 2026 by rpki-client