$ rpki-client -vvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: mLG39hcUlop/HC4E3UbrTkJ308ct3hP8PMdJJvGiDeE= Subject key identifier: 4D:E1:36:D3:A7:31:EA:4D:C1:7E:86:55:C5:C0:0F:E5:7D:3C:49:84 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 379AA5ACA35ACDF8835C85C2D112A69B2D47F405 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 00:42:03 +0000 Manifest this update: Wed 29 Jul 2026 00:37:03 +0000 Manifest next update: Thu 30 Jul 2026 01:49:03 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 2: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 3: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: tEvaz2d9bKOhLb0qeTkauOdzScHDYC2byqoxebXu064=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9a:a5:ac:a3:5a:cd:f8:83:5c:85:c2:d1:12:a6:9b:2d:47:f4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Jul 29 00:37:03 2026 GMT Not After : Jul 30 01:49:03 2026 GMT Subject: CN=4DE136D3A731EA4DC17E8655C5C00FE57D3C4984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:24:c4:7c:6e:3e:bc:a1:17:c6:eb:dc:97: e9:17:84:8b:3d:7b:c2:24:58:17:28:1d:de:fd:7f: 0f:86:dc:88:b3:07:3a:f7:dd:fb:1f:fc:b4:bf:df: 9b:cb:2f:1a:fc:5f:00:67:3e:60:25:a7:83:9e:e8: fd:7f:1a:d7:f4:dc:5a:8a:86:ca:46:81:99:23:a0: 5e:b9:8a:54:cb:68:b4:ae:33:2d:24:d8:27:fa:41: 3e:b2:43:ad:dd:be:6a:14:ff:37:0c:9e:c3:d7:41: fb:cb:7b:59:5b:33:6a:50:63:61:5f:74:a0:f2:fc: 89:9f:0e:04:07:cc:5d:c0:e4:66:03:e7:6e:6b:ea: f3:fb:bb:f7:a4:e2:34:d4:66:81:0a:56:49:41:7b: d0:8e:aa:78:d4:4c:bb:d8:93:5d:3a:aa:a3:1b:7f: 5e:94:75:ec:f9:f6:8b:5d:b9:5f:f1:2c:98:cf:a4: e7:47:4b:65:53:e5:1b:ed:7f:97:0a:c6:a7:06:2c: 33:e9:ca:cc:a6:35:59:60:48:82:7f:15:d1:8d:38: e1:57:48:eb:0d:ef:95:5c:75:83:5d:1c:5f:9a:bd: e7:0f:03:9e:04:d4:fa:57:cc:ff:70:eb:e5:3a:ca: b8:96:61:29:a7:01:2c:5f:e4:f6:cf:a7:d8:fd:ab: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E1:36:D3:A7:31:EA:4D:C1:7E:86:55:C5:C0:0F:E5:7D:3C:49:84 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:2c:87:fb:8b:4c:e3:32:f1:96:e4:4b:e3:74:cf:f2:4c: 6a:94:00:fc:8e:d7:f5:75:21:e9:ad:63:4c:82:a6:07:35:f6: 50:ec:66:7c:a5:fc:61:24:75:8e:cf:f4:7f:2e:2a:f2:27:78: f3:1b:07:f8:71:91:10:19:fe:4d:9b:f2:c9:0a:6d:4a:04:37: dc:05:b8:9a:99:3d:8b:1d:79:e2:b3:3f:17:84:46:68:28:4f: e8:b5:22:bb:53:52:8d:8e:ed:8b:e7:3d:7b:a8:27:ff:af:06: 66:94:30:7b:0d:fb:e9:20:9e:dc:33:52:14:0a:3c:3d:68:a7: 57:64:25:66:de:e6:ed:70:2f:3d:a5:a9:7a:74:67:7a:8e:a4: 89:83:33:20:03:65:78:b5:a5:fc:31:4b:e8:55:aa:6b:60:f9: f7:f6:cc:20:f9:8f:0b:80:0e:15:94:a0:18:4c:d4:e0:0c:d8: 71:42:9e:f8:c2:b8:4c:61:2f:32:8c:8b:5b:68:63:1a:f0:3f: 3f:19:fa:5a:59:94:e0:f4:9a:79:f4:f0:b0:75:36:54:c5:c3: 33:d1:e3:5b:fc:8d:04:80:ec:bb:cc:20:a6:20:95:d3:6e:35: 81:c6:e2:f7:7e:06:4c:ae:df:c4:f8:60:d0:fe:75:88:7a:15: ab:aa:72:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5qlrKNazfiDXIXC0RKmmy1H9AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA3MjkwMDM3MDNaFw0yNjA3MzAwMTQ5MDNaMDMxMTAvBgNV BAMTKDRERTEzNkQzQTczMUVBNERDMTdFODY1NUM1QzAwRkU1N0QzQzQ5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxCTEfG4+vKEXxuvcl+kXhIs9 e8IkWBcoHd79fw+G3IizBzr33fsf/LS/35vLLxr8XwBnPmAlp4Oe6P1/Gtf03FqK hspGgZkjoF65ilTLaLSuMy0k2Cf6QT6yQ63dvmoU/zcMnsPXQfvLe1lbM2pQY2Ff dKDy/ImfDgQHzF3A5GYD525r6vP7u/ek4jTUZoEKVklBe9COqnjUTLvYk106qqMb f16Udez59otduV/xLJjPpOdHS2VT5Rvtf5cKxqcGLDPpysymNVlgSIJ/FdGNOOFX SOsN75VcdYNdHF+avecPA54E1PpXzP9w6+U6yriWYSmnASxf5PbPp9j9q0MNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTeE206cx6k3BfoZVxcAP5X08SYQwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKoLIf7i0zjMvGW5EvjdM/yTGqUAPyO1/V1 IemtY0yCpgc19lDsZnyl/GEkdY7P9H8uKvInePMbB/hxkRAZ/k2b8skKbUoEN9wF uJqZPYsdeeKzPxeERmgoT+i1IrtTUo2O7YvnPXuoJ/+vBmaUMHsN++kgntwzUhQK PD1op1dkJWbe5u1wLz2lqXp0Z3qOpImDMyADZXi1pfwxS+hVqmtg+ff2zCD5jwuA DhWUoBhM1OAM2HFCnvjCuExhLzKMi1toYxrwPz8Z+lpZlOD0mnn08LB1NlTFwzPR 41v8jQSA7LvMIKYgldNuNYHG4vd+Bkyu38T4YND+dYh6FauqcqE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:37:20 2026 by rpki-client