$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft (raw, json) Hash identifier: Zcs9du7Qy7Qv1PfdF8vsPPFeoPaIAMRNveeT6tR479c= Subject key identifier: 66:1E:66:EA:E6:59:83:78:0E:E6:5A:49:28:84:FB:80:D3:89:61:26 Authority key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Certificate issuer: /CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Certificate serial: 7080E6A8B337E1F455D41133E286ABB01908A34A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:49:20 +0000 Manifest this update: Wed 23 Sep 2026 18:44:20 +0000 Manifest next update: Thu 24 Sep 2026 20:13:20 +0000 Files and hashes: 1: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl (hash: WjHy7Bnm0THF6yC9Zbp2CwOQrCutSEBP2E2lqHHoC7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:80:e6:a8:b3:37:e1:f4:55:d4:11:33:e2:86:ab:b0:19:08:a3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Validity Not Before: Sep 23 18:44:20 2026 GMT Not After : Sep 24 20:13:20 2026 GMT Subject: CN=661E66EAE65983780EE65A492884FB80D3896126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:d0:ae:49:e8:a4:f0:07:df:44:66:c4:31: 10:4d:55:03:ff:dd:c5:9a:b1:51:29:8a:28:1f:cc: da:9f:aa:8d:a2:42:b2:11:c0:a6:fb:60:e4:f0:8f: 6a:6f:f3:6a:22:c1:1f:b1:82:c1:89:e8:7a:cd:bb: cd:3d:ab:38:7a:f0:11:85:70:df:c6:eb:f8:14:3f: 25:85:4f:13:df:8a:21:40:4b:02:3d:65:bd:ca:88: df:06:18:c0:83:bb:9f:26:9a:5b:72:ee:ad:a1:55: d3:90:bb:b8:62:60:c6:28:82:94:5a:db:e1:84:fc: d8:c3:a6:b5:d0:8e:bf:ce:32:2b:5a:24:6a:51:7a: 1c:cb:fb:82:b1:4b:b2:e1:32:a5:e3:18:cb:b4:eb: c2:53:a2:2a:d8:c9:89:bd:39:8b:91:bc:23:07:f0: f6:20:f4:e8:2a:9e:e8:81:91:0e:dc:3e:2a:b8:b0: ae:3d:0b:f1:f5:77:1d:66:2a:e4:00:76:09:af:69: 43:46:1d:75:11:b3:55:52:93:5b:0c:fe:f6:e1:06: d9:e7:bb:53:14:61:64:10:9e:39:73:1e:bd:d4:bd: db:60:6f:84:bf:bc:53:de:75:34:de:66:94:15:84: 2c:38:e0:06:86:f4:31:7d:94:a0:37:25:6b:8a:84: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1E:66:EA:E6:59:83:78:0E:E6:5A:49:28:84:FB:80:D3:89:61:26 X509v3 Authority Key Identifier: keyid:3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:07:0b:e6:99:d7:03:2e:04:d1:fe:59:bb:d1:7a:f4:2f:32: a7:26:4c:e1:1a:9d:9c:aa:3d:a1:7f:4d:0f:1a:e3:74:c3:37: c2:aa:94:8a:ac:91:ed:56:ea:4b:e0:03:7e:f6:3c:fc:c5:26: 1a:ff:f7:31:28:e0:cb:fb:ce:c2:56:9a:d7:18:f4:15:47:e9: df:2a:92:ec:86:a6:df:91:24:26:cb:a6:ce:1b:3a:00:59:a5: 9b:b3:7f:78:8f:aa:68:86:16:1a:58:d4:98:81:f0:b0:45:3e: 75:d8:f6:50:0d:d9:2a:dd:86:51:79:38:af:42:6b:f7:e1:d2: b9:1b:78:92:54:01:45:8f:3a:f1:ff:fc:ac:bd:ad:fd:31:45: 8c:e1:22:86:df:21:87:da:81:c6:d0:3d:55:49:47:76:77:68: 5e:83:0e:45:74:cb:55:b7:97:6e:13:82:b5:b8:c4:aa:de:bd: 4b:bd:b9:4d:58:e2:fd:dd:f6:28:73:fa:0f:ba:51:27:4d:fb: c9:67:a6:b3:bb:53:44:4b:97:82:37:6c:d5:3b:06:ed:7d:b4: f9:00:d4:0a:75:54:d8:a8:8b:4f:85:41:6b:cc:3c:76:40:06: d4:76:12:78:55:43:57:3b:ec:23:11:4f:78:97:22:02:50:91: de:51:e4:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIDmqLM34fRV1BEz4oarsBkIo0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNC QzA4MUM5OTAeFw0yNjA5MjMxODQ0MjBaFw0yNjA5MjQyMDEzMjBaMDMxMTAvBgNV BAMTKDY2MUU2NkVBRTY1OTgzNzgwRUU2NUE0OTI4ODRGQjgwRDM4OTYxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2NCuSeik8AffRGbEMRBNVQP/ 3cWasVEpiigfzNqfqo2iQrIRwKb7YOTwj2pv82oiwR+xgsGJ6HrNu809qzh68BGF cN/G6/gUPyWFTxPfiiFASwI9Zb3KiN8GGMCDu58mmlty7q2hVdOQu7hiYMYogpRa 2+GE/NjDprXQjr/OMitaJGpRehzL+4KxS7LhMqXjGMu068JToirYyYm9OYuRvCMH 8PYg9OgqnuiBkQ7cPiq4sK49C/H1dx1mKuQAdgmvaUNGHXURs1VSk1sM/vbhBtnn u1MUYWQQnjlzHr3Uvdtgb4S/vFPedTTeZpQVhCw44AaG9DF9lKA3JWuKhIBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZh5m6uZZg3gO5lpJKIT7gNOJYSYwHwYDVR0j BBgwFoAUPwV8m+sWzndP8UgxGPz907wIHJkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJmMzljMTctNjcyNS00MmJlLWJlZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJF QjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNCQzA4MUM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjA1N0M5QkVCMTZDRTc3NEZGMTQ4MzExOEZDRkREM0JDMDgx Qzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZE RDNCQzA4MUM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkHC+aZ1wMuBNH+WbvRevQvMqcmTOEanZyq PaF/TQ8a43TDN8KqlIqske1W6kvgA372PPzFJhr/9zEo4Mv7zsJWmtcY9BVH6d8q kuyGpt+RJCbLps4bOgBZpZuzf3iPqmiGFhpY1JiB8LBFPnXY9lAN2SrdhlF5OK9C a/fh0rkbeJJUAUWPOvH//Ky9rf0xRYzhIobfIYfagcbQPVVJR3Z3aF6DDkV0y1W3 l24TgrW4xKrevUu9uU1Y4v3d9ihz+g+6USdN+8lnprO7U0RLl4I3bNU7Bu19tPkA 1Ap1VNioi0+FQWvMPHZABtR2EnhVQ1c77CMRT3iXIgJQkd5R5JE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:17:24 2026 by rpki-client