$ rpki-client -vvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: SljWPIF3O7DMpbQm2s98Y1s8X90UeaZAL9tUNY5fMLw= Subject key identifier: E1:7B:21:66:19:21:F9:C2:D5:91:B5:63:1F:BA:55:E8:E4:F1:DF:E9 Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 0854CF983EA6C71585085AF6D30C4C5425749A57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 10:20:35 +0000 Manifest this update: Wed 17 Jun 2026 10:15:35 +0000 Manifest next update: Thu 18 Jun 2026 13:44:35 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: +UIaC4HF0BiEc7Me4u7pabtKbJ96trp0pn4DbXvZ5BQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:cf:98:3e:a6:c7:15:85:08:5a:f6:d3:0c:4c:54:25:74:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Jun 17 10:15:35 2026 GMT Not After : Jun 18 13:44:35 2026 GMT Subject: CN=E17B21661921F9C2D591B5631FBA55E8E4F1DFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:f5:a0:b2:96:e1:d1:ae:5b:56:81:2d:03: 58:61:37:ec:43:d6:53:40:35:72:3e:33:0b:43:95: 84:95:e5:ee:5a:a6:6c:a5:f5:b1:6f:5f:71:64:a7: 49:12:ad:4d:7d:4b:e9:bb:bf:92:b3:9d:f4:5e:78: bf:e6:84:b6:31:15:70:27:f2:ac:31:ea:88:43:3e: a2:c1:e9:7f:07:f4:13:9e:90:c0:a3:33:e3:24:9e: 65:16:0d:27:dc:d4:ce:4d:94:5c:08:84:46:51:46: d3:a3:f3:bc:5c:61:3f:5f:2e:ec:1e:85:95:8b:d3: a7:53:b1:f5:ce:b1:52:9f:d8:65:e7:7c:74:4c:99: a9:af:97:72:36:d7:90:40:66:ff:f9:da:1c:3f:64: c5:8f:87:e2:f5:09:a9:5f:dd:82:20:fc:21:30:d4: 70:91:97:c5:5b:86:52:60:00:f1:01:38:14:73:ec: 0b:34:24:9e:e9:9b:ff:f1:5b:9a:64:33:7b:82:b8: 0d:26:53:2b:ec:5b:08:92:23:8e:3c:e1:14:40:be: fc:96:ce:1e:8d:e6:ce:75:a2:21:c1:05:15:51:09: c1:d8:b1:19:1d:c5:f7:57:78:ef:5a:f4:b1:c5:46: 23:56:26:6a:8a:31:ed:f5:21:52:4b:a9:71:66:d2: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7B:21:66:19:21:F9:C2:D5:91:B5:63:1F:BA:55:E8:E4:F1:DF:E9 X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0e:1f:ea:3b:8e:51:09:f7:c9:91:15:b9:a0:56:00:23:d3: 57:8e:74:8a:ae:bf:7d:11:a3:52:2e:2b:1f:c3:0a:d1:54:4d: 07:72:5f:ff:62:f9:1f:c6:e5:6c:d0:c6:4a:4f:4b:77:45:0a: b0:92:ee:0d:bc:81:8a:b2:86:77:f0:73:4b:6d:a8:24:5b:0b: 52:69:be:28:5a:fc:1c:ec:c9:32:62:71:9a:9d:c9:bc:f1:f5: 53:f4:a8:e2:3a:20:a7:5b:99:79:02:52:aa:17:c2:be:61:7f: bf:02:11:fe:95:7b:76:88:31:c5:e2:79:df:fe:79:ce:84:04: 87:56:d6:90:af:7a:d7:d0:ea:3e:d8:61:91:a2:d0:d3:56:09: 4d:ed:c4:a9:95:79:e8:d8:f3:ea:37:7b:1a:18:f7:bd:76:a6: 47:35:c7:b6:ce:0a:85:9f:92:0b:94:10:75:b1:e0:b8:0a:fa: d5:90:ae:dc:8d:4d:1f:61:8d:66:8e:49:6c:1c:a5:7c:60:bf: 1c:e9:76:54:fa:cb:5e:7e:84:3d:d6:9b:13:81:bb:81:c7:ea: da:62:56:95:3a:e6:be:6c:5a:3d:db:31:62:24:3e:c0:a2:cb: 8c:d5:c4:6f:51:50:e6:00:c3:a6:eb:37:70:fb:8e:f3:b3:de: 17:15:aa:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFTPmD6mxxWFCFr20wxMVCV0mlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA2MTcxMDE1MzVaFw0yNjA2MTgxMzQ0MzVaMDMxMTAvBgNV BAMTKEUxN0IyMTY2MTkyMUY5QzJENTkxQjU2MzFGQkE1NUU4RTRGMURGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXvWgspbh0a5bVoEtA1hhN+xD 1lNANXI+MwtDlYSV5e5apmyl9bFvX3Fkp0kSrU19S+m7v5KznfReeL/mhLYxFXAn 8qwx6ohDPqLB6X8H9BOekMCjM+MknmUWDSfc1M5NlFwIhEZRRtOj87xcYT9fLuwe hZWL06dTsfXOsVKf2GXnfHRMmamvl3I215BAZv/52hw/ZMWPh+L1Calf3YIg/CEw 1HCRl8VbhlJgAPEBOBRz7As0JJ7pm//xW5pkM3uCuA0mUyvsWwiSI4484RRAvvyW zh6N5s51oiHBBRVRCcHYsRkdxfdXeO9a9LHFRiNWJmqKMe31IVJLqXFm0qRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XshZhkh+cLVkbVjH7pV6OTx3+kwHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAOH+o7jlEJ98mRFbmgVgAj01eOdIquv30R o1IuKx/DCtFUTQdyX/9i+R/G5WzQxkpPS3dFCrCS7g28gYqyhnfwc0ttqCRbC1Jp viha/BzsyTJicZqdybzx9VP0qOI6IKdbmXkCUqoXwr5hf78CEf6Ve3aIMcXied/+ ec6EBIdW1pCvetfQ6j7YYZGi0NNWCU3txKmVeejY8+o3exoY9712pkc1x7bOCoWf kguUEHWx4LgK+tWQrtyNTR9hjWaOSWwcpXxgvxzpdlT6y15+hD3WmxOBu4HH6tpi VpU65r5sWj3bMWIkPsCiy4zVxG9RUOYAw6brN3D7jvOz3hcVqgc= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:41 2026 by rpki-client