$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: EJEcPiCQ5GXxkjmgSPAFlyT4tGVpdJfeLc5Kvfu2zik= Subject key identifier: 4C:46:3C:25:40:61:5A:FD:08:24:96:85:3B:58:4C:71:E6:12:8F:7C Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 015B65216928191AFBC749228FEAD6802C800B06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: BC Signing time: Mon 21 Sep 2026 09:07:46 +0000 Manifest this update: Mon 21 Sep 2026 09:02:46 +0000 Manifest next update: Tue 22 Sep 2026 10:56:46 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: Q1FAlFosNyWTlI7RtbReu3G8KnbPeNVtUybdy9Rohuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:65:21:69:28:19:1a:fb:c7:49:22:8f:ea:d6:80:2c:80:0b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Sep 21 09:02:46 2026 GMT Not After : Sep 22 10:56:46 2026 GMT Subject: CN=4C463C2540615AFD082496853B584C71E6128F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:bf:ce:0c:75:3a:69:4f:25:3d:83:a8:ce: 57:c4:ea:c3:cb:a2:ba:b8:6e:af:2e:74:ab:97:bb: 55:a9:53:a1:ec:84:e5:43:2b:4a:87:6f:a5:df:e1: 71:f1:e4:e0:21:7b:dc:44:54:5e:df:e7:0f:95:15: c4:d5:47:b7:75:7a:dd:d7:f0:1a:bb:5d:64:10:3b: ea:8f:bb:66:44:a7:10:96:0f:3b:8e:95:a9:55:b7: 4e:d5:03:03:50:20:a3:29:68:fc:7c:18:79:98:1f: a2:80:fe:62:30:be:37:33:97:57:af:e4:d8:73:f2: bf:4d:76:22:c3:ce:72:87:ec:15:c4:dc:56:8f:70: 27:bb:81:55:c4:7d:d7:00:9c:34:ff:e5:e6:52:40: 06:46:09:07:40:d2:a6:9a:13:fa:80:47:b1:28:ce: b7:7e:da:93:9e:9f:a3:66:75:56:90:67:e6:48:36: 9e:53:63:97:0e:7a:55:7c:c6:6d:6a:6c:fb:04:5e: f7:c0:03:74:9b:5b:e9:78:cb:da:b1:e3:67:43:ed: 91:9c:88:b4:b6:47:89:de:88:78:f3:da:f6:0a:1e: 15:47:56:2b:09:73:5f:2f:7c:63:49:68:ef:fc:b5: 31:ce:c7:04:51:86:da:26:dd:61:67:38:7f:d8:1e: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:46:3C:25:40:61:5A:FD:08:24:96:85:3B:58:4C:71:E6:12:8F:7C X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:78:c9:90:a8:51:08:45:e6:af:9c:ef:e9:ef:4e:3e:e0:1b: 5c:7e:63:8f:74:e7:b3:40:53:79:8d:6b:81:18:c9:f2:4d:63: dc:2b:c4:1f:71:4f:df:7e:9a:0d:31:21:75:48:29:48:61:29: 37:ab:d5:2a:b0:7d:5d:4d:54:b3:f6:4b:41:27:5a:1b:0b:df: 43:36:ad:f7:47:a7:1a:20:51:e7:cf:e1:76:8e:66:45:cc:46: f4:f8:ac:dc:36:d9:22:57:f9:e8:4c:2e:dc:7d:e6:dc:21:33: 9e:04:25:c8:5a:68:96:a5:88:25:04:78:b4:0a:6f:98:19:6c: 10:bc:08:13:8d:e4:e3:bd:38:d7:c5:2d:17:ba:57:de:5c:71: 9b:fd:46:ad:61:1f:a4:94:aa:b5:e8:17:ea:3d:b9:7d:cc:c6: 7b:27:4c:cc:f6:e8:a6:1c:61:84:69:ce:83:37:90:fa:45:28: 38:7f:58:d7:f0:57:1b:e3:90:3c:cc:4a:d7:3b:1f:46:2a:12: b5:71:28:24:ca:31:06:e1:a7:97:a6:d3:47:55:43:22:ed:d9: 0c:bf:55:54:74:0e:98:06:73:9e:9e:4a:34:ce:04:50:a3:0e: 7b:df:cf:18:83:c0:09:b6:82:f3:47:c3:ad:d6:61:f8:cb:e9: fd:bc:27:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVtlIWkoGRr7x0kij+rWgCyACwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA5MjEwOTAyNDZaFw0yNjA5MjIxMDU2NDZaMDMxMTAvBgNV BAMTKDRDNDYzQzI1NDA2MTVBRkQwODI0OTY4NTNCNTg0QzcxRTYxMjhGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI7/ODHU6aU8lPYOozlfE6sPL orq4bq8udKuXu1WpU6HshOVDK0qHb6Xf4XHx5OAhe9xEVF7f5w+VFcTVR7d1et3X 8Bq7XWQQO+qPu2ZEpxCWDzuOlalVt07VAwNQIKMpaPx8GHmYH6KA/mIwvjczl1ev 5Nhz8r9NdiLDznKH7BXE3FaPcCe7gVXEfdcAnDT/5eZSQAZGCQdA0qaaE/qAR7Eo zrd+2pOen6NmdVaQZ+ZINp5TY5cOelV8xm1qbPsEXvfAA3SbW+l4y9qx42dD7ZGc iLS2R4neiHjz2vYKHhVHVisJc18vfGNJaO/8tTHOxwRRhtom3WFnOH/YHt/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTEY8JUBhWv0IJJaFO1hMceYSj3wwHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd4yZCoUQhF5q+c7+nvTj7gG1x+Y49057NA U3mNa4EYyfJNY9wrxB9xT99+mg0xIXVIKUhhKTer1SqwfV1NVLP2S0EnWhsL30M2 rfdHpxogUefP4XaOZkXMRvT4rNw22SJX+ehMLtx95twhM54EJchaaJaliCUEeLQK b5gZbBC8CBON5OO9ONfFLRe6V95ccZv9Rq1hH6SUqrXoF+o9uX3MxnsnTMz26KYc YYRpzoM3kPpFKDh/WNfwVxvjkDzMStc7H0YqErVxKCTKMQbhp5em00dVQyLt2Qy/ VVR0DpgGc56eSjTOBFCjDnvfzxiDwAm2gvNHw63WYfjL6f28Jys= -----END CERTIFICATE-----Generated at Tue Sep 22 01:19:25 2026 by rpki-client