$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: 4Ck5OZfGi5QKEFEJZ/lmZTCAsV08EICRVUcYEtZTjcI= Subject key identifier: 01:FA:68:51:1D:70:43:61:08:62:8C:A3:9A:3B:0F:26:79:32:A2:77 Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 7053103D8C3AE9036333D8E8531757BB64E64018 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: FF Signing time: Tue 10 Nov 2026 12:16:20 +0000 Manifest this update: Tue 10 Nov 2026 12:11:20 +0000 Manifest next update: Wed 11 Nov 2026 14:56:20 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: Rk0l80VZpw21tOneM8iYhHINacDe4YTnOqPCcba/PA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:53:10:3d:8c:3a:e9:03:63:33:d8:e8:53:17:57:bb:64:e6:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Nov 10 12:11:20 2026 GMT Not After : Nov 11 14:56:20 2026 GMT Subject: CN=01FA68511D70436108628CA39A3B0F267932A277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:4f:34:4a:2f:5c:18:f0:f9:4b:da:cc:85: 5c:16:8f:2b:79:16:00:e9:02:15:6b:58:23:70:6a: b6:b4:0f:94:06:d3:27:03:52:4a:53:57:34:9f:7d: 70:cd:4f:49:fb:0a:3b:0e:6e:b7:7e:82:8d:27:b3: 3b:59:f1:cf:38:11:57:3e:11:42:bd:2f:29:df:01: 95:d5:cf:3c:40:10:05:ac:4f:e1:7b:6b:36:4b:ca: 93:ac:bb:22:de:30:f9:11:60:40:e0:38:12:d6:13: 2d:a9:cf:22:51:e3:c3:3a:ed:2a:c0:c2:ba:6f:70: 86:3c:85:fb:bc:a7:d3:3e:54:4a:8e:c8:ef:89:d9: 33:94:5b:29:bd:21:9a:c5:b1:cd:0b:6a:b7:58:7a: 03:47:29:ff:20:a1:4f:4c:a3:71:a2:26:5c:64:3a: 6e:52:f0:3f:97:ab:39:01:b2:13:ac:8c:14:ee:ac: 16:ba:28:1b:42:6f:4f:06:fe:22:1e:8f:65:40:82: 57:e7:5f:c9:14:18:17:c8:6e:8f:63:8a:94:48:cc: fc:64:a7:e9:ad:a7:a1:f4:a7:15:ac:ae:de:98:8c: 20:8d:99:e3:bf:9b:d5:06:4e:2c:59:c8:9e:a1:b1: 6a:f3:97:5d:dc:b7:17:64:5c:2f:41:f2:cc:98:0d: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:68:51:1D:70:43:61:08:62:8C:A3:9A:3B:0F:26:79:32:A2:77 X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1a:2e:25:61:bd:5b:af:2a:6d:09:fc:6d:33:39:dc:87:c8: af:8c:91:7f:98:55:af:2a:1e:29:38:34:81:26:8e:3a:f2:3a: 58:e3:c9:8f:fb:dc:77:48:77:75:b5:84:89:29:3b:e6:cf:d4: ab:44:ea:5d:1e:e2:f7:af:df:51:40:ab:31:8f:81:c9:b0:10: 68:90:41:97:08:53:0f:71:6b:ad:8a:a0:89:36:36:6c:ed:63: 15:9d:e8:62:c2:ac:d5:3b:4d:24:c6:9b:4a:44:52:39:37:5e: 09:57:40:b5:de:45:a0:79:d1:5e:04:39:14:61:be:58:2f:0f: 95:fd:32:ea:b1:c4:0c:b0:07:25:b6:b0:43:99:d7:46:3b:a3: 72:b8:e8:00:f7:fe:03:7e:97:fd:9d:51:72:e1:5b:3e:e2:4c: 3c:4d:73:59:a5:81:1e:3f:3d:81:70:eb:58:ec:6d:03:6d:f0: 66:8b:48:dc:b4:b5:8f:ba:d5:9e:38:8c:43:ab:fe:ee:4a:6f: a6:dd:05:6b:3b:98:f6:53:b4:f3:49:79:b7:b7:c1:27:7e:04: e8:bf:62:1c:8b:5c:ef:39:2f:5d:34:06:f3:26:d0:f5:37:65: c7:4e:5a:3a:11:2f:ec:52:47:b8:e6:cb:45:43:01:6f:32:2e: 03:8e:57:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFMQPYw66QNjM9joUxdXu2TmQBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjExMTAxMjExMjBaFw0yNjExMTExNDU2MjBaMDMxMTAvBgNV BAMTKDAxRkE2ODUxMUQ3MDQzNjEwODYyOENBMzlBM0IwRjI2NzkzMkEyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTk80Si9cGPD5S9rMhVwWjyt5 FgDpAhVrWCNwara0D5QG0ycDUkpTVzSffXDNT0n7CjsObrd+go0nsztZ8c84EVc+ EUK9LynfAZXVzzxAEAWsT+F7azZLypOsuyLeMPkRYEDgOBLWEy2pzyJR48M67SrA wrpvcIY8hfu8p9M+VEqOyO+J2TOUWym9IZrFsc0LardYegNHKf8goU9Mo3GiJlxk Om5S8D+XqzkBshOsjBTurBa6KBtCb08G/iIej2VAglfnX8kUGBfIbo9jipRIzPxk p+mtp6H0pxWsrt6YjCCNmeO/m9UGTixZyJ6hsWrzl13ctxdkXC9B8syYDY5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfpoUR1wQ2EIYoyjmjsPJnkyoncwHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYaLiVhvVuvKm0J/G0zOdyHyK+MkX+YVa8q Hik4NIEmjjryOljjyY/73HdId3W1hIkpO+bP1KtE6l0e4vev31FAqzGPgcmwEGiQ QZcIUw9xa62KoIk2NmztYxWd6GLCrNU7TSTGm0pEUjk3XglXQLXeRaB50V4EORRh vlgvD5X9MuqxxAywByW2sEOZ10Y7o3K46AD3/gN+l/2dUXLhWz7iTDxNc1mlgR4/ PYFw61jsbQNt8GaLSNy0tY+61Z44jEOr/u5Kb6bdBWs7mPZTtPNJebe3wSd+BOi/ YhyLXO85L100BvMm0PU3ZcdOWjoRL+xSR7jmy0VDAW8yLgOOVws= -----END CERTIFICATE-----Generated at Tue Nov 10 21:02:24 2026 by rpki-client