$ rpki-client -vvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: TBWpQjgEASjbDASVh8raCbr2njznnx39uqg+bFUGR7w= Subject key identifier: B5:C8:40:F0:09:D5:44:58:17:89:8D:D9:70:27:64:90:8C:9D:FB:3E Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 41569D34B4137365C42B2B3D11EFEBACBDDB6C75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:53:13 +0000 Manifest this update: Tue 16 Jun 2026 19:48:13 +0000 Manifest next update: Wed 17 Jun 2026 21:18:13 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: b2RBaLeoYTe9O/Bu1X674c3PsVy9MUiXAMehdeNqtdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:56:9d:34:b4:13:73:65:c4:2b:2b:3d:11:ef:eb:ac:bd:db:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Jun 16 19:48:13 2026 GMT Not After : Jun 17 21:18:13 2026 GMT Subject: CN=B5C840F009D5445817898DD9702764908C9DFB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:a5:21:9e:f8:70:3f:ed:e6:c1:f2:86:41: 29:97:27:40:c4:c1:ff:50:57:ce:77:e8:44:8e:06: 41:59:22:ae:84:f9:e8:c0:b8:55:a2:ec:be:bb:0c: a8:9f:77:a9:cc:ba:5c:5c:e8:cc:5b:1a:7e:ae:4a: 3a:5a:a7:76:7e:a5:04:09:a5:d3:62:eb:19:fe:2e: 1b:47:31:18:0b:e1:26:67:aa:de:05:a2:49:23:e3: 83:71:fd:ea:ed:67:07:46:3e:48:fc:be:99:ab:5c: c8:d9:75:1e:99:0b:a8:3e:6a:04:32:6c:b5:5a:33: 75:20:a0:d1:d4:d1:5c:b7:0b:2f:95:d6:d9:ce:5c: d4:c9:6a:df:b0:8f:f9:03:b8:31:3c:21:f2:f9:e9: f1:18:d2:3f:e2:5e:ad:69:c7:2e:b4:a6:60:1d:fa: ce:ee:18:72:03:a2:77:36:43:29:08:78:30:db:91: 5c:46:0d:0c:c5:f6:cd:c2:81:80:84:36:1b:01:1e: 8b:b0:49:4f:fc:5c:24:bc:e6:73:ca:a8:ea:7a:14: ca:82:44:b6:10:26:00:e2:b5:a1:05:b9:d0:18:8a: f4:7e:b3:c6:8e:88:22:a3:9c:d0:f8:86:47:ad:29: b9:0e:c6:8c:9d:ca:50:ec:c5:ec:7e:7d:f7:d5:59: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C8:40:F0:09:D5:44:58:17:89:8D:D9:70:27:64:90:8C:9D:FB:3E X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bb:85:9d:98:10:35:73:e6:8f:8e:5f:9d:98:85:23:d7:7e: 8e:c3:ec:db:67:f0:30:08:2a:ff:3b:a0:b1:1b:40:c5:95:51: 9a:e4:e6:5b:e2:d1:5b:50:10:88:4c:63:cd:f2:d4:24:66:41: 68:c7:66:87:ba:4e:5f:15:fb:72:92:22:35:c3:2f:ea:bc:41: 85:78:81:ba:a7:30:ee:16:42:4b:6f:43:b4:97:00:d8:98:58: 0b:a7:e7:ea:92:5b:08:fc:bb:e6:8a:3f:8e:1d:f9:f9:64:21: 7e:e3:e6:b8:f5:24:a1:c5:b4:50:46:c7:88:64:da:7b:64:d3: c9:9d:5d:27:ee:a5:1c:78:11:e4:57:a0:0a:7c:17:30:3f:b6: 9e:32:53:d7:f9:2b:a8:87:ea:20:7f:ea:9d:fb:f7:dc:93:ed: 38:d2:b7:e4:8d:73:bd:fe:ba:2e:fd:6e:f5:7d:ec:c0:23:8f: 94:1c:5f:f5:23:9a:cf:e1:85:20:0f:ee:41:2c:12:b9:80:a3: 7d:61:57:49:fe:47:83:d0:51:13:b9:83:f7:3f:9a:5d:bb:7f: 14:05:ff:b6:4e:fb:80:81:12:f4:6a:b2:8a:94:d8:c2:2b:ef: 38:e2:1a:a5:ca:8d:5e:b9:74:c6:98:25:cf:db:08:7c:12:1c: e7:8a:31:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVadNLQTc2XEKys9Ee/rrL3bbHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA2MTYxOTQ4MTNaFw0yNjA2MTcyMTE4MTNaMDMxMTAvBgNV BAMTKEI1Qzg0MEYwMDlENTQ0NTgxNzg5OEREOTcwMjc2NDkwOEM5REZCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYKUhnvhwP+3mwfKGQSmXJ0DE wf9QV8536ESOBkFZIq6E+ejAuFWi7L67DKifd6nMulxc6MxbGn6uSjpap3Z+pQQJ pdNi6xn+LhtHMRgL4SZnqt4Fokkj44Nx/ertZwdGPkj8vpmrXMjZdR6ZC6g+agQy bLVaM3UgoNHU0Vy3Cy+V1tnOXNTJat+wj/kDuDE8IfL56fEY0j/iXq1pxy60pmAd +s7uGHIDonc2QykIeDDbkVxGDQzF9s3CgYCENhsBHouwSU/8XCS85nPKqOp6FMqC RLYQJgDitaEFudAYivR+s8aOiCKjnND4hketKbkOxoydylDsxex+fffVWfRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtchA8AnVRFgXiY3ZcCdkkIyd+z4wHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI67hZ2YEDVz5o+OX52YhSPXfo7D7Ntn8DAI Kv87oLEbQMWVUZrk5lvi0VtQEIhMY83y1CRmQWjHZoe6Tl8V+3KSIjXDL+q8QYV4 gbqnMO4WQktvQ7SXANiYWAun5+qSWwj8u+aKP44d+flkIX7j5rj1JKHFtFBGx4hk 2ntk08mdXSfupRx4EeRXoAp8FzA/tp4yU9f5K6iH6iB/6p3799yT7TjSt+SNc73+ ui79bvV97MAjj5QcX/Ujms/hhSAP7kEsErmAo31hV0n+R4PQURO5g/c/ml27fxQF /7ZO+4CBEvRqsoqU2MIr7zjiGqXKjV65dMaYJc/bCHwSHOeKMf8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:38 2026 by rpki-client