$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft File: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft (raw, json) Hash identifier: gpT7TcsR8ZD6m9G9VC41uHYNXgc29mpdFajYKD5X2Fg= Subject key identifier: 79:E0:2D:85:50:A7:1E:73:FC:B7:6F:30:B9:A0:84:E7:49:B7:5F:5C Authority key identifier: 3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 Certificate issuer: /CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Certificate serial: 671B8C3EAD2C4B8712290D2BA16EC084E2A5D099 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:05:29 +0000 Manifest this update: Sun 20 Sep 2026 23:00:29 +0000 Manifest next update: Tue 22 Sep 2026 02:03:29 +0000 Files and hashes: 1: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl (hash: VvP2yAIDvGD1SlB/GFpjMEPLion5+ouZpjRTzk6za8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1b:8c:3e:ad:2c:4b:87:12:29:0d:2b:a1:6e:c0:84:e2:a5:d0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Validity Not Before: Sep 20 23:00:29 2026 GMT Not After : Sep 22 02:03:29 2026 GMT Subject: CN=79E02D8550A71E73FCB76F30B9A084E749B75F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:53:a9:24:9a:67:d4:64:df:a8:48:cc:87: 7d:68:b7:e1:c4:66:5e:18:55:82:d9:00:c5:f0:ae: f9:a3:35:98:5e:d2:ca:3b:d2:e5:29:5d:2c:7c:07: ea:10:ff:62:cb:bf:ed:ef:35:ed:62:d4:44:0e:78: c0:47:38:04:81:6c:da:d1:c7:74:ca:32:6f:9a:8d: 16:74:50:71:1a:da:08:8d:a4:a1:02:7c:08:89:8a: 72:33:e9:76:60:8e:5c:98:e1:1e:f5:b0:ce:91:e0: b2:13:e7:ed:c5:f0:a8:71:d7:d8:4e:a7:c6:7d:0c: b2:3e:71:40:d9:2a:6f:0b:d4:42:2d:e6:84:a6:54: 61:c0:cb:68:55:8f:ba:30:8f:82:6a:eb:a9:e0:a1: bd:5c:e3:d1:f7:6e:44:a6:d2:64:6d:06:66:a3:06: 06:25:28:09:52:09:fd:28:a5:ac:8e:08:51:31:15: 56:67:86:f2:32:19:dc:de:f6:1a:0c:b0:8c:52:e7: a1:b7:5d:2a:69:2f:95:ca:22:0f:11:23:9c:00:dc: e9:8e:69:93:d7:89:e8:a0:6b:4d:cf:24:33:82:db: c6:16:21:d3:8c:5b:7f:79:74:5e:33:59:ab:81:b8: 68:dc:f4:dc:66:b6:8a:05:d8:8e:c8:32:b1:4d:5f: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E0:2D:85:50:A7:1E:73:FC:B7:6F:30:B9:A0:84:E7:49:B7:5F:5C X509v3 Authority Key Identifier: keyid:3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:7a:47:b0:e2:e8:7e:2a:0c:ce:e1:18:38:54:16:e1:ae:01: af:ff:64:c4:a4:a6:89:03:9a:25:f8:f0:b7:5e:b0:4a:5f:b4: 1d:e9:e0:dd:ee:4f:42:78:4a:87:4a:22:72:c2:98:ea:89:ca: 06:28:46:05:7c:c2:b1:9f:3e:27:6d:66:d4:7a:c2:b7:7a:56: 24:a8:e8:81:3c:f2:4b:1d:af:02:ab:45:1d:6e:2f:a2:95:b1: 23:ad:83:ee:31:6e:e7:61:80:19:1e:21:cf:82:69:87:be:32: 31:4c:a7:2a:e2:61:76:cd:30:48:da:12:af:82:de:ff:32:1c: 40:66:9d:36:31:3e:11:8f:e3:5e:97:d5:39:c4:56:69:f7:c2: b4:a6:78:2c:d8:a3:c7:83:bc:65:5b:a0:49:38:14:e9:2d:c5: 14:16:90:47:c9:bb:68:61:6f:60:28:0a:a4:2e:7d:72:b3:5b: c6:44:3e:af:4a:29:0c:fd:78:62:76:d0:b1:08:06:d4:7f:3d: 38:50:54:f2:1a:87:e8:53:be:9f:22:dd:ce:85:96:09:3e:25: 70:98:e6:2c:7b:d9:fc:5f:a0:18:70:cf:c4:a6:8c:94:e2:57: ed:a4:1c:0c:29:05:23:66:4a:c2:fb:0e:af:86:d5:17:51:22: cf:1c:09:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxuMPq0sS4cSKQ0roW7AhOKl0JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0 NjFFQjlCNTAeFw0yNjA5MjAyMzAwMjlaFw0yNjA5MjIwMjAzMjlaMDMxMTAvBgNV BAMTKDc5RTAyRDg1NTBBNzFFNzNGQ0I3NkYzMEI5QTA4NEU3NDlCNzVGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC741OpJJpn1GTfqEjMh31ot+HE Zl4YVYLZAMXwrvmjNZhe0so70uUpXSx8B+oQ/2LLv+3vNe1i1EQOeMBHOASBbNrR x3TKMm+ajRZ0UHEa2giNpKECfAiJinIz6XZgjlyY4R71sM6R4LIT5+3F8Khx19hO p8Z9DLI+cUDZKm8L1EIt5oSmVGHAy2hVj7owj4Jq66ngob1c49H3bkSm0mRtBmaj BgYlKAlSCf0opayOCFExFVZnhvIyGdze9hoMsIxS56G3XSppL5XKIg8RI5wA3OmO aZPXieiga03PJDOC28YWIdOMW395dF4zWauBuGjc9NxmtooF2I7IMrFNX6SHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeAthVCnHnP8t28wuaCE50m3X1wwHwYDVR0j BBgwFoAUOnIM3Qni+XqRK5t98sM1KUYeubUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJhYzYxOWItMjFlNi00MWQ2LThlOTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQw OUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0NjFFQjlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTcyMENERDA5RTJGOTdBOTEyQjlCN0RGMkMzMzUyOTQ2MUVC OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1 Mjk0NjFFQjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMl6R7Di6H4qDM7hGDhUFuGuAa//ZMSkpokD miX48LdesEpftB3p4N3uT0J4SodKInLCmOqJygYoRgV8wrGfPidtZtR6wrd6ViSo 6IE88ksdrwKrRR1uL6KVsSOtg+4xbudhgBkeIc+CaYe+MjFMpyriYXbNMEjaEq+C 3v8yHEBmnTYxPhGP416X1TnEVmn3wrSmeCzYo8eDvGVboEk4FOktxRQWkEfJu2hh b2AoCqQufXKzW8ZEPq9KKQz9eGJ20LEIBtR/PThQVPIah+hTvp8i3c6Flgk+JXCY 5ix72fxfoBhwz8SmjJTiV+2kHAwpBSNmSsL7Dq+G1RdRIs8cCTo= -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:57 2026 by rpki-client