$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: Cq2j+nEskqWNKISGqYAef8qsBctBsYmru5bdkhujJt4= Subject key identifier: E8:D2:36:75:4C:3E:9C:D6:FC:A7:84:EE:C6:91:37:2A:A7:8A:B3:38 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 0C72A11DE543BD1C964A70E1ABDF79FA7C021183 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 06:40:17 +0000 Manifest this update: Tue 28 Jul 2026 06:35:17 +0000 Manifest next update: Wed 29 Jul 2026 09:23:17 +0000 Files and hashes: 1: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: fnrHfQ5VaqOzT0qA2My8o478+usB3xW/q3/q1t7ChjE=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) 4: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:72:a1:1d:e5:43:bd:1c:96:4a:70:e1:ab:df:79:fa:7c:02:11:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Jul 28 06:35:17 2026 GMT Not After : Jul 29 09:23:17 2026 GMT Subject: CN=E8D236754C3E9CD6FCA784EEC691372AA78AB338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:d0:87:a1:37:6d:a9:d9:54:ac:91:78:b1: 44:b4:f8:b7:0d:5a:be:74:c8:6b:95:bc:9b:89:3d: 8b:bf:19:f0:8f:1a:ed:d8:fd:e6:a3:e2:d6:87:3b: 1d:3b:29:14:73:c5:6f:81:88:6e:88:8e:79:ee:0f: e7:3a:d5:94:c5:f7:dd:15:46:06:0c:ab:7e:31:dc: fc:20:d3:32:4a:ad:ac:4d:59:75:e6:ef:1e:79:d0: 53:ef:f2:c6:00:b9:47:b5:ce:f6:f7:85:53:5a:03: b5:c8:b0:cf:76:93:96:8e:61:15:bb:45:08:29:6b: 94:77:6c:49:cf:93:2e:7f:a9:b6:d7:78:83:5d:1d: f3:2c:b4:9d:36:fc:43:ea:cc:f6:a0:60:74:fa:56: 2f:d8:c6:70:fa:2f:91:2e:38:b0:98:71:ab:31:ba: 94:b6:08:1c:cc:82:27:95:b9:3c:f1:e6:a7:71:9b: 66:45:17:66:69:5d:df:11:21:66:8f:b7:50:a2:10: 9a:9c:c4:7e:22:d2:7a:e0:f0:65:a3:2f:f8:ee:59: d3:4e:a9:61:18:dd:31:e8:cd:ce:c6:ed:66:16:be: 47:26:64:c8:a8:b3:71:c4:81:bd:3a:71:96:14:b1: fd:c5:2f:b0:5c:03:0c:68:3c:bd:0a:2a:5b:d8:c3: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:36:75:4C:3E:9C:D6:FC:A7:84:EE:C6:91:37:2A:A7:8A:B3:38 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e1:cc:ff:ad:07:ca:6b:7c:a2:8d:d4:17:3b:54:2c:4c:e9: 4a:6a:88:b7:02:64:37:b4:f3:90:c0:c7:dd:5e:57:83:e0:f0: 9b:6c:d6:ee:ee:b4:20:13:f1:cf:b6:7b:f5:ba:a4:cd:6e:60: d9:be:bd:4b:10:97:e1:c8:ce:42:1f:f2:7c:bd:e4:6e:00:b6: a0:fe:2e:b9:33:6c:32:74:53:a9:cc:00:af:a3:7d:12:9a:7b: fd:63:b3:a5:b7:ea:68:81:ea:9a:ed:a2:50:de:ed:11:37:76: 1d:53:a0:a7:e3:33:58:28:01:04:d4:e0:aa:37:51:3d:0c:4d: 3c:38:16:6e:73:f1:fd:62:4a:50:32:c5:aa:6f:09:7e:c1:45: d9:41:f2:88:92:27:31:b4:03:69:9c:02:f9:92:6d:03:ab:46: 83:11:c9:e1:b6:9c:b8:8e:f9:07:e5:d1:42:0a:75:63:50:ea: d3:a7:78:54:bb:af:b7:03:fc:f8:eb:d7:5b:cb:36:10:ba:b5: 4f:8c:1f:3d:36:f9:c0:27:e6:10:1c:95:3f:7a:1c:3c:b7:dd: 48:85:82:95:7e:15:ff:8b:bc:6a:02:4b:b2:7c:cc:c0:28:ad: b5:60:28:1c:30:7b:94:b0:e0:4e:9f:ac:d4:3b:bc:93:d6:51: 25:4a:26:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHKhHeVDvRyWSnDhq995+nwCEYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA3MjgwNjM1MTdaFw0yNjA3MjkwOTIzMTdaMDMxMTAvBgNV BAMTKEU4RDIzNjc1NEMzRTlDRDZGQ0E3ODRFRUM2OTEzNzJBQTc4QUIzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4dCHoTdtqdlUrJF4sUS0+LcN Wr50yGuVvJuJPYu/GfCPGu3Y/eaj4taHOx07KRRzxW+BiG6IjnnuD+c61ZTF990V RgYMq34x3Pwg0zJKraxNWXXm7x550FPv8sYAuUe1zvb3hVNaA7XIsM92k5aOYRW7 RQgpa5R3bEnPky5/qbbXeINdHfMstJ02/EPqzPagYHT6Vi/YxnD6L5EuOLCYcasx upS2CBzMgieVuTzx5qdxm2ZFF2ZpXd8RIWaPt1CiEJqcxH4i0nrg8GWjL/juWdNO qWEY3THozc7G7WYWvkcmZMios3HEgb06cZYUsf3FL7BcAwxoPL0KKlvYw+pJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NI2dUw+nNb8p4TuxpE3KqeKszgwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjhzP+tB8prfKKN1Bc7VCxM6UpqiLcCZDe0 85DAx91eV4Pg8Jts1u7utCAT8c+2e/W6pM1uYNm+vUsQl+HIzkIf8ny95G4AtqD+ LrkzbDJ0U6nMAK+jfRKae/1js6W36miB6prtolDe7RE3dh1ToKfjM1goAQTU4Ko3 UT0MTTw4Fm5z8f1iSlAyxapvCX7BRdlB8oiSJzG0A2mcAvmSbQOrRoMRyeG2nLiO +Qfl0UIKdWNQ6tOneFS7r7cD/Pjr11vLNhC6tU+MHz02+cAn5hAclT96HDy33UiF gpV+Ff+LvGoCS7J8zMAorbVgKBwwe5Sw4E6frNQ7vJPWUSVKJvc= -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:14 2026 by rpki-client