$ rpki-client -vvvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: xqvdgQedoFDkqTRoBnbP/c01FKBiKEo0OiGdl7mt45c= Subject key identifier: 44:78:0A:F8:C1:B2:39:29:9E:13:0B:9C:8C:00:F1:1D:0B:A4:F6:84 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 16F25906FE0805DA115E93ACE1DEFA67AE84D4D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:39:50 +0000 Manifest this update: Tue 22 Sep 2026 02:34:50 +0000 Manifest next update: Wed 23 Sep 2026 03:21:50 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: PGdUgDwKEn+bEicQPLW9CuVeC5BH3+a+skAMWwWZnak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f2:59:06:fe:08:05:da:11:5e:93:ac:e1:de:fa:67:ae:84:d4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Sep 22 02:34:50 2026 GMT Not After : Sep 23 03:21:50 2026 GMT Subject: CN=44780AF8C1B239299E130B9C8C00F11D0BA4F684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0b:c6:a3:5a:57:22:c3:0b:33:43:49:bc:a0: 4b:b2:c0:de:a0:07:85:ef:47:a3:a2:21:85:7c:78: 01:59:e0:ed:4b:43:40:3a:f5:ca:95:22:e0:a4:bb: 7e:f0:0c:52:cc:36:ba:5b:8f:13:6e:0c:91:19:4c: e4:b2:d8:a0:bf:fc:bf:43:a8:7e:99:f8:16:09:31: d7:92:79:8f:60:6a:d1:8b:65:91:9d:98:b0:da:05: 87:b5:6a:2a:d2:81:7e:0a:bf:fe:6c:4f:5e:41:ff: e5:09:39:17:a6:c2:bd:62:28:91:b7:b7:b0:8f:f9: 5a:06:73:06:39:54:77:59:0c:06:0b:72:6e:ab:fb: 90:ee:18:5c:f9:ee:9a:ea:a0:ad:8c:ec:a0:35:24: 1a:80:a3:49:3c:fd:de:61:30:53:28:61:95:8c:53: fb:34:0f:aa:28:fc:a5:a9:9e:e4:ca:ab:4b:6f:7a: 20:62:e0:b1:16:a2:67:69:4a:59:68:55:d1:06:fe: d9:0c:83:70:9c:82:fa:06:c0:38:c9:53:64:eb:a5: 61:bf:20:48:73:f9:e6:15:20:32:df:7c:25:8c:1c: 78:36:1e:51:22:ae:ea:ec:19:45:a6:ce:89:99:ac: c0:29:53:6a:f9:1d:e2:64:b7:ce:da:46:8a:ea:3e: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:78:0A:F8:C1:B2:39:29:9E:13:0B:9C:8C:00:F1:1D:0B:A4:F6:84 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f8:3a:88:e0:8b:e0:08:4f:c4:ee:17:7b:f7:d9:14:28:a3: 6e:10:23:07:43:b5:31:89:aa:98:bf:b9:93:9b:40:c8:db:ac: e9:6f:21:d7:b3:88:2c:13:7b:fa:5f:55:b6:98:c7:35:ac:ad: ca:8c:54:05:b6:be:f2:22:21:5d:97:68:50:64:8d:55:f7:33: a1:67:2a:ef:62:53:ef:fc:95:68:68:e9:6d:0f:11:19:0d:d3: b0:a3:31:d4:b2:c3:58:f0:a6:76:50:95:ca:ac:70:94:d0:49: ee:f3:a9:ec:16:43:12:c9:4b:11:8e:15:32:fb:0e:0a:3c:67: c3:52:bb:4c:70:22:97:2e:54:d4:af:f8:8d:14:85:52:50:a5: bb:e6:71:84:2f:cf:9c:93:c6:bb:b5:e7:4f:15:5c:3d:72:4d: 99:40:64:33:af:ec:35:51:6f:bb:39:5f:c9:07:1e:f7:80:f6: e8:c0:98:50:dc:2a:cc:83:5b:cf:92:68:6c:cd:25:90:f3:e5: c5:ee:eb:ba:f2:2e:ab:28:0a:c2:b5:3b:7f:fd:6f:4b:09:3d: 2a:1c:e3:46:bb:de:d4:ef:cc:27:09:ed:b4:f0:91:01:63:76: 23:22:5a:1a:91:c2:65:e3:27:21:02:d4:98:82:c5:b0:e0:83: 87:11:d8:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvJZBv4IBdoRXpOs4d76Z66E1NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA5MjIwMjM0NTBaFw0yNjA5MjMwMzIxNTBaMDMxMTAvBgNV BAMTKDQ0NzgwQUY4QzFCMjM5Mjk5RTEzMEI5QzhDMDBGMTFEMEJBNEY2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhC8ajWlciwwszQ0m8oEuywN6g B4XvR6OiIYV8eAFZ4O1LQ0A69cqVIuCku37wDFLMNrpbjxNuDJEZTOSy2KC//L9D qH6Z+BYJMdeSeY9gatGLZZGdmLDaBYe1airSgX4Kv/5sT15B/+UJORemwr1iKJG3 t7CP+VoGcwY5VHdZDAYLcm6r+5DuGFz57prqoK2M7KA1JBqAo0k8/d5hMFMoYZWM U/s0D6oo/KWpnuTKq0tveiBi4LEWomdpSlloVdEG/tkMg3CcgvoGwDjJU2TrpWG/ IEhz+eYVIDLffCWMHHg2HlEirursGUWmzomZrMApU2r5HeJkt87aRorqPoRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURHgK+MGyOSmeEwucjADxHQuk9oQwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA34Oojgi+AIT8TuF3v32RQoo24QIwdDtTGJ qpi/uZObQMjbrOlvIdeziCwTe/pfVbaYxzWsrcqMVAW2vvIiIV2XaFBkjVX3M6Fn Ku9iU+/8lWho6W0PERkN07CjMdSyw1jwpnZQlcqscJTQSe7zqewWQxLJSxGOFTL7 Dgo8Z8NSu0xwIpcuVNSv+I0UhVJQpbvmcYQvz5yTxru1508VXD1yTZlAZDOv7DVR b7s5X8kHHveA9ujAmFDcKsyDW8+SaGzNJZDz5cXu67ryLqsoCsK1O3/9b0sJPSoc 40a73tTvzCcJ7bTwkQFjdiMiWhqRwmXjJyEC1JiCxbDgg4cR2Bk= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:54 2026 by rpki-client