$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: OA2bgqjZ9vX5HByUf0/MacUqOlIlBNvZFLqWKYDndkk= Subject key identifier: 0E:63:4A:C8:19:0A:72:4C:81:7F:3F:83:B8:B0:34:2E:7B:88:8F:F5 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 269B1E41008E91956F35D30F2BA6DCA4AB532BC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:47:34 +0000 Manifest this update: Sun 20 Sep 2026 20:42:34 +0000 Manifest next update: Mon 21 Sep 2026 23:18:34 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: xojcBV1KXOjMzIJUOpCMy+gjAg+Ngh0QEzxYI5pWC7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9b:1e:41:00:8e:91:95:6f:35:d3:0f:2b:a6:dc:a4:ab:53:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Sep 20 20:42:34 2026 GMT Not After : Sep 21 23:18:34 2026 GMT Subject: CN=0E634AC8190A724C817F3F83B8B0342E7B888FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:fa:b1:4a:d1:05:ad:de:b3:7a:b1:d1:b9: 2c:8b:d9:8f:b3:24:72:da:bc:de:f2:cc:1e:27:f3: 28:cc:c3:73:e9:07:e8:85:59:39:a3:fc:82:e4:3c: 61:1e:7d:d2:71:a2:c3:5c:17:19:69:cc:43:14:16: 6c:d7:58:80:73:0e:ef:16:3b:cd:6b:17:9b:56:5f: a6:ca:4d:d7:ce:2a:ee:cb:91:be:12:2d:63:be:58: 47:96:fd:1d:69:5b:3a:3e:8e:d9:e8:d0:b6:9c:2a: 8f:bc:56:06:c2:5f:11:a6:8f:b5:b3:61:96:c8:00: f8:b3:2d:45:4e:46:30:2d:ed:a9:e5:45:bb:9c:62: 20:4f:74:13:7f:8e:06:2f:cd:cb:11:98:0a:a2:1d: 35:96:4d:81:b2:9f:16:61:61:30:cb:fe:7f:ff:09: 2f:d0:5d:ac:6b:70:29:b7:85:aa:e5:4d:c7:6b:56: cc:14:39:35:82:af:72:9d:b2:2a:9a:a8:30:4d:28: aa:2a:a2:cd:06:7b:06:eb:d0:24:e4:3c:16:04:f8: 37:9f:89:2e:a1:48:9a:a5:86:73:34:ed:e9:a0:e7: b6:49:3a:0b:7e:22:5a:50:95:06:f5:bf:e0:7c:10: 58:af:ed:c1:df:06:f2:04:8b:d1:28:2c:f4:30:30: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:4A:C8:19:0A:72:4C:81:7F:3F:83:B8:B0:34:2E:7B:88:8F:F5 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2d:1b:2a:ab:ac:03:b4:72:94:08:94:58:37:68:fd:f1:db: 66:5a:83:03:05:e9:c1:00:b5:87:cc:12:6a:e2:5e:ec:af:03: 12:dc:e5:05:b6:11:2c:4d:21:9a:50:a9:32:c2:63:6a:20:0c: a2:89:e1:08:f4:44:66:f6:db:5e:99:4d:14:4b:85:2a:49:c8: 9f:37:27:64:5b:c0:ff:03:28:1f:cc:1a:08:ed:71:5e:6d:1a: 61:ec:66:52:2e:17:eb:ef:75:99:65:85:6d:10:93:16:91:b0: 16:2d:50:74:96:e0:5f:d4:85:58:65:62:17:83:19:3e:37:98: 02:09:83:6c:19:28:a9:d4:ed:c3:80:55:e8:34:47:96:95:be: f8:07:0a:dd:3b:62:3c:56:e0:71:3b:c8:11:fb:13:d9:04:18: 0d:12:ef:33:01:20:5a:d9:9d:d8:e9:0a:7b:50:6b:a8:f6:03: 38:2b:64:02:1c:b0:23:d1:a3:26:3e:99:96:61:0e:a2:b1:55: c9:ee:95:4d:af:08:9f:3a:6e:5c:7e:a4:be:d0:fa:cc:d6:bb: 65:75:9a:98:cf:a9:a7:96:1a:41:07:3b:66:b8:f1:29:16:93: 24:2b:e8:1c:c3:a1:44:ef:05:71:45:e0:15:20:cb:20:02:44: 60:0c:53:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpseQQCOkZVvNdMPK6bcpKtTK8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA5MjAyMDQyMzRaFw0yNjA5MjEyMzE4MzRaMDMxMTAvBgNV BAMTKDBFNjM0QUM4MTkwQTcyNEM4MTdGM0Y4M0I4QjAzNDJFN0I4ODhGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lfqxStEFrd6zerHRuSyL2Y+z JHLavN7yzB4n8yjMw3PpB+iFWTmj/ILkPGEefdJxosNcFxlpzEMUFmzXWIBzDu8W O81rF5tWX6bKTdfOKu7Lkb4SLWO+WEeW/R1pWzo+jtno0LacKo+8VgbCXxGmj7Wz YZbIAPizLUVORjAt7anlRbucYiBPdBN/jgYvzcsRmAqiHTWWTYGynxZhYTDL/n// CS/QXaxrcCm3harlTcdrVswUOTWCr3KdsiqaqDBNKKoqos0Gewbr0CTkPBYE+Def iS6hSJqlhnM07emg57ZJOgt+IlpQlQb1v+B8EFiv7cHfBvIEi9EoLPQwMBFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmNKyBkKckyBfz+DuLA0LnuIj/UwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8tGyqrrAO0cpQIlFg3aP3x22ZagwMF6cEA tYfMEmriXuyvAxLc5QW2ESxNIZpQqTLCY2ogDKKJ4Qj0RGb2216ZTRRLhSpJyJ83 J2RbwP8DKB/MGgjtcV5tGmHsZlIuF+vvdZllhW0QkxaRsBYtUHSW4F/UhVhlYheD GT43mAIJg2wZKKnU7cOAVeg0R5aVvvgHCt07YjxW4HE7yBH7E9kEGA0S7zMBIFrZ ndjpCntQa6j2AzgrZAIcsCPRoyY+mZZhDqKxVcnulU2vCJ86blx+pL7Q+szWu2V1 mpjPqaeWGkEHO2a48SkWkyQr6BzDoUTvBXFF4BUgyyACRGAMU9E= -----END CERTIFICATE-----Generated at Mon Sep 21 15:58:01 2026 by rpki-client