$ rpki-client -vvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: 4qX0fKFEddTxKVGKt2TSJ7j6QaNUG7PpOBYecseAKSs= Subject key identifier: 4E:F7:74:35:AC:B5:D8:E8:7F:C6:EC:68:76:20:05:2B:9F:AF:D4:A0 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 45D3AD97CA1E263F57576866A72AA69EF9215069 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:12:10 +0000 Manifest this update: Tue 16 Jun 2026 23:07:10 +0000 Manifest next update: Thu 18 Jun 2026 01:50:10 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: cIiUyJbDBszSH54imwDvY+XZSCU3PDGpH++OR/YZi9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d3:ad:97:ca:1e:26:3f:57:57:68:66:a7:2a:a6:9e:f9:21:50:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Jun 16 23:07:10 2026 GMT Not After : Jun 18 01:50:10 2026 GMT Subject: CN=4EF77435ACB5D8E87FC6EC687620052B9FAFD4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:41:f0:a4:94:3d:9a:0b:81:d1:19:f4:fa: 0b:d7:5b:0f:0e:c1:c5:24:c8:8e:2e:08:eb:23:54: c7:a5:86:7a:03:ea:49:36:b8:68:b1:15:ef:d8:0b: e3:92:4f:4b:13:90:94:6d:06:56:98:2f:f1:4f:e6: b4:8b:08:92:8c:18:53:b1:a7:50:c6:d0:81:7a:cb: 77:2e:67:3b:b6:1a:fb:6b:23:c4:c2:94:ed:2f:22: 83:a0:4e:84:38:b2:7c:17:08:f8:26:2c:a7:3c:b2: 0d:c0:8d:50:85:18:e0:14:48:86:04:2c:ae:06:76: ed:c8:9e:7b:d6:89:4d:f4:40:91:23:ae:02:8e:59: b2:04:80:20:66:55:ea:f3:3a:a7:8c:11:0d:94:27: 74:ac:89:b3:f1:4f:95:17:83:6b:69:17:5c:7c:31: cd:74:1a:c0:3f:e6:e9:06:0f:d8:e4:c5:d9:b8:b5: 89:89:07:24:25:2b:45:ad:a7:8f:97:6a:c4:f1:c2: 08:91:d3:53:8f:1d:63:9d:dc:c3:e5:4d:ab:65:d7: b3:fa:1a:7e:1c:1f:98:b5:5d:1e:a4:95:ef:e6:0c: 1a:ce:59:a6:5c:d6:40:bf:a9:a9:e5:97:00:bb:e2: 9b:00:55:22:6b:44:89:9e:b2:04:db:0e:01:41:9c: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:74:35:AC:B5:D8:E8:7F:C6:EC:68:76:20:05:2B:9F:AF:D4:A0 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:04:a3:cf:f9:39:22:9b:42:fd:66:c2:c6:74:11:d4:87:37: ba:73:5c:c6:7e:99:4c:8f:e6:11:e6:d8:23:67:62:dd:aa:9d: 5e:b9:14:34:19:58:d3:29:1d:44:b4:fd:fa:a5:07:ac:d3:a9: 83:4f:97:a6:e5:64:68:6b:d9:af:59:e3:63:3a:6e:18:aa:24: ef:f5:d7:5f:45:0a:18:83:cd:ec:98:5f:dd:42:ec:bd:dd:1a: 51:ba:08:09:cc:83:5f:e4:d3:c7:8f:91:21:9c:f1:9a:0e:1f: 64:77:c9:35:b3:ca:0b:60:ab:dd:be:96:de:95:6d:f6:a9:da: 01:74:72:e4:51:56:f6:8d:06:cc:bc:89:50:5c:3a:8c:4a:49: 74:f5:89:72:2d:bd:ea:0e:71:f9:34:30:40:89:0a:58:44:a1: bf:58:e8:10:96:fc:c9:24:e1:0c:84:e3:4b:74:f4:40:9a:22: 11:9b:89:36:af:69:b2:07:5c:9a:f6:2c:53:84:50:67:2a:60: a1:6f:9e:cd:ec:53:0d:93:3a:ae:53:d6:0c:f4:58:0a:6b:a7: 75:e8:5d:e5:03:e3:38:c6:ff:6a:b7:62:bc:7d:77:71:dc:f9: d6:8d:1f:cf:f5:a6:6e:f6:c6:96:33:bd:51:98:b5:ee:ba:b2: 3b:7c:d6:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdOtl8oeJj9XV2hmpyqmnvkhUGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA2MTYyMzA3MTBaFw0yNjA2MTgwMTUwMTBaMDMxMTAvBgNV BAMTKDRFRjc3NDM1QUNCNUQ4RTg3RkM2RUM2ODc2MjAwNTJCOUZBRkQ0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywkHwpJQ9mguB0Rn0+gvXWw8O wcUkyI4uCOsjVMelhnoD6kk2uGixFe/YC+OST0sTkJRtBlaYL/FP5rSLCJKMGFOx p1DG0IF6y3cuZzu2GvtrI8TClO0vIoOgToQ4snwXCPgmLKc8sg3AjVCFGOAUSIYE LK4Gdu3InnvWiU30QJEjrgKOWbIEgCBmVerzOqeMEQ2UJ3SsibPxT5UXg2tpF1x8 Mc10GsA/5ukGD9jkxdm4tYmJByQlK0Wtp4+XasTxwgiR01OPHWOd3MPlTatl17P6 Gn4cH5i1XR6kle/mDBrOWaZc1kC/qanllwC74psAVSJrRImesgTbDgFBnDsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTvd0Nay12Oh/xuxodiAFK5+v1KAwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEEo8/5OSKbQv1mwsZ0EdSHN7pzXMZ+mUyP 5hHm2CNnYt2qnV65FDQZWNMpHUS0/fqlB6zTqYNPl6blZGhr2a9Z42M6bhiqJO/1 119FChiDzeyYX91C7L3dGlG6CAnMg1/k08ePkSGc8ZoOH2R3yTWzygtgq92+lt6V bfap2gF0cuRRVvaNBsy8iVBcOoxKSXT1iXItveoOcfk0MECJClhEob9Y6BCW/Mkk 4QyE40t09ECaIhGbiTavabIHXJr2LFOEUGcqYKFvns3sUw2TOq5T1gz0WAprp3Xo XeUD4zjG/2q3Yrx9d3Hc+daNH8/1pm72xpYzvVGYte66sjt81s4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:41:17 2026 by rpki-client