$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: fE9uk5/D3KMoNo2Tl14eFrtcl/JP+ocu4TkgGiDnbBo= Subject key identifier: A9:0C:62:E5:E7:22:AA:33:21:D9:F4:C8:41:A2:FD:AC:B5:BA:71:C3 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 6C035BDCA7B40242EC9B8A40864D7491A49CD015 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 09:01:51 +0000 Manifest this update: Mon 09 Nov 2026 08:56:51 +0000 Manifest next update: Tue 10 Nov 2026 12:22:51 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: 9XHgfopM87yS3l379C1nbw4fdAKFUDBw1YX6VQRnlAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:03:5b:dc:a7:b4:02:42:ec:9b:8a:40:86:4d:74:91:a4:9c:d0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Nov 9 08:56:51 2026 GMT Not After : Nov 10 12:22:51 2026 GMT Subject: CN=A90C62E5E722AA3321D9F4C841A2FDACB5BA71C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:13:ca:fa:87:64:05:1f:6b:fe:4e:73:d8: 1a:84:88:3c:3c:b9:18:fe:c9:1e:22:68:8b:17:33: 58:8d:a9:4f:40:04:de:db:f7:1b:82:a5:af:0b:95: 31:3e:f9:1a:34:c1:97:14:d0:e9:c4:24:3a:d7:f3: bd:c5:21:1b:71:bf:83:e3:5b:86:9b:f2:0c:17:e8: a6:15:4c:9f:32:f3:6a:a6:29:17:73:ee:64:49:52: 0e:ec:aa:a4:c8:ef:d4:c6:f7:91:e4:28:42:5f:2e: e8:e8:90:17:ec:6f:1a:bd:59:f0:9b:50:0d:4f:46: dc:d1:d5:5e:52:a9:00:f0:f1:25:94:05:55:c0:76: 3b:7c:50:2f:47:6e:6d:06:88:af:c9:17:ea:07:52: 62:15:3f:ff:f9:a7:f7:8f:6a:92:91:cd:49:4c:24: 23:8c:3e:3c:0f:df:57:32:75:08:8f:d6:7b:93:96: 58:80:a5:cd:29:e0:79:c5:d4:81:39:fd:54:08:3b: ea:10:7c:ac:76:bb:fb:27:5b:27:d0:75:ab:ca:58: a6:72:82:e8:66:3d:cb:45:00:61:61:c9:2d:8f:a9: d0:16:77:36:77:6f:b1:02:41:35:9e:0a:16:94:d0: a8:dc:7e:44:dd:0c:c3:cd:12:a2:03:5d:f6:cf:4e: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:62:E5:E7:22:AA:33:21:D9:F4:C8:41:A2:FD:AC:B5:BA:71:C3 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:cc:cb:a3:8f:80:e0:0b:cd:71:77:52:ef:b6:9e:ea:a3: a3:8c:ed:b4:c4:f9:44:bc:5a:4f:b0:89:2f:61:9e:d0:b8:2d: b7:f5:a7:6b:8e:d0:e0:5a:6a:72:13:fd:7c:9a:ad:f4:13:9c: 3d:b5:38:0d:f4:61:3e:7b:f7:fe:67:24:3f:44:b7:d0:ba:06: dd:e5:4a:58:09:00:1b:9a:98:35:93:97:ca:71:59:c9:1b:d4: 28:9b:81:e9:3e:4b:d0:a1:89:e5:51:0d:b6:d2:b5:50:b2:e1: 62:a0:0d:3f:20:3b:d8:13:8b:90:96:18:13:b3:5f:79:17:6f: 16:14:f8:e8:76:51:84:6e:8e:5c:93:f9:99:f8:d7:d3:35:35: bd:68:8a:39:75:75:40:46:ea:cb:c8:7c:fa:4b:56:5a:1a:a7: 16:cd:53:1f:0d:6b:7b:be:65:3f:b9:f0:a0:3c:13:7d:71:d2: cf:e3:ae:8a:24:71:db:4f:9e:9d:2b:e3:28:5a:27:bf:df:1d: 56:53:4a:e3:4d:a2:02:42:80:c9:4b:25:8c:f2:18:27:38:5e: b8:7d:f9:a0:2d:08:ae:e0:31:d5:0b:9c:3b:84:3a:7a:e9:6f: de:17:d3:14:b1:65:42:35:48:67:78:65:46:5f:38:a1:fd:c1: 59:24:96:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbANb3Ke0AkLsm4pAhk10kaSc0BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjExMDkwODU2NTFaFw0yNjExMTAxMjIyNTFaMDMxMTAvBgNV BAMTKEE5MEM2MkU1RTcyMkFBMzMyMUQ5RjRDODQxQTJGREFDQjVCQTcxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbBPK+odkBR9r/k5z2BqEiDw8 uRj+yR4iaIsXM1iNqU9ABN7b9xuCpa8LlTE++Ro0wZcU0OnEJDrX873FIRtxv4Pj W4ab8gwX6KYVTJ8y82qmKRdz7mRJUg7sqqTI79TG95HkKEJfLujokBfsbxq9WfCb UA1PRtzR1V5SqQDw8SWUBVXAdjt8UC9Hbm0GiK/JF+oHUmIVP//5p/ePapKRzUlM JCOMPjwP31cydQiP1nuTlliApc0p4HnF1IE5/VQIO+oQfKx2u/snWyfQdavKWKZy guhmPctFAGFhyS2PqdAWdzZ3b7ECQTWeChaU0KjcfkTdDMPNEqIDXfbPTklJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQxi5eciqjMh2fTIQaL9rLW6ccMwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn3zMujj4DgC81xd1Lvtp7qo6OM7bTE+US8 Wk+wiS9hntC4Lbf1p2uO0OBaanIT/XyarfQTnD21OA30YT579/5nJD9Et9C6Bt3l SlgJABuamDWTl8pxWckb1Cibgek+S9ChieVRDbbStVCy4WKgDT8gO9gTi5CWGBOz X3kXbxYU+Oh2UYRujlyT+Zn419M1Nb1oijl1dUBG6svIfPpLVloapxbNUx8Na3u+ ZT+58KA8E31x0s/jrookcdtPnp0r4yhaJ7/fHVZTSuNNogJCgMlLJYzyGCc4Xrh9 +aAtCK7gMdULnDuEOnrpb94X0xSxZUI1SGd4ZUZfOKH9wVkklig= -----END CERTIFICATE-----Generated at Mon Nov 9 23:27:52 2026 by rpki-client