$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: FGOmj8cEEQq+dLLUAgJ2mzvpAITdW9CEtfVRUGI4QcU= Subject key identifier: E6:B3:C7:36:B6:C4:B6:BB:AE:0F:9E:55:8D:4C:B6:38:84:7B:74:61 Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 4CB9B4EE44ECB3F43B987F79A328972EA1397741 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:45:57 +0000 Manifest this update: Mon 21 Sep 2026 11:40:57 +0000 Manifest next update: Tue 22 Sep 2026 14:23:57 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: ITZnOxw2sCCK8qnAfExGiNSC7QM5EQD1TWAT9vGDQvw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b9:b4:ee:44:ec:b3:f4:3b:98:7f:79:a3:28:97:2e:a1:39:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Sep 21 11:40:57 2026 GMT Not After : Sep 22 14:23:57 2026 GMT Subject: CN=E6B3C736B6C4B6BBAE0F9E558D4CB638847B7461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:fb:01:4f:6e:f9:fb:5b:8d:8b:7a:1d:0c: d9:61:0c:8c:e4:59:9b:29:42:0a:18:79:f7:f1:95: 59:3d:0e:50:af:ef:b8:12:a1:47:61:0c:b9:41:6e: b1:d2:29:55:a4:01:04:5b:0e:fd:46:96:62:71:8f: 4a:22:ac:b5:5d:a2:4f:b8:ff:f2:de:71:9f:63:50: de:e8:3b:10:44:af:f5:ef:19:3a:da:44:b7:b5:6b: 8f:9d:85:04:f7:0c:89:2f:72:79:c0:6a:20:16:71: 85:75:f9:2d:45:64:19:0c:67:8e:10:17:84:ad:7a: dd:a9:e8:3c:4b:84:6e:f6:25:51:19:63:5c:4b:e3: 3d:04:48:55:b4:d1:45:36:dd:15:c8:77:17:f0:24: e4:15:90:72:da:d5:07:26:92:57:56:07:b7:21:5d: d8:fe:68:c0:f7:c8:ca:3d:a8:98:21:4a:07:94:0f: ee:0a:32:fb:d0:c8:bf:8a:cf:40:fb:6f:84:a8:41: 48:d4:a3:7d:73:5a:77:65:36:33:f3:50:e5:b0:9a: 53:d2:bd:4c:d1:18:e2:d3:d7:e8:f6:65:83:70:a4: a0:a6:ab:06:6c:47:11:fe:ba:43:5c:4e:7e:fa:0b: b2:d2:ca:23:b9:27:ad:f6:dc:f1:75:89:a4:8d:80: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B3:C7:36:B6:C4:B6:BB:AE:0F:9E:55:8D:4C:B6:38:84:7B:74:61 X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:06:96:46:1e:ee:4d:13:45:68:91:90:e5:54:2b:11:40:3b: dd:20:8b:ca:97:a5:4b:ba:de:21:fb:d7:a4:d0:14:5a:df:a8: 4f:a7:6a:d0:4f:20:2e:7b:e7:51:6a:16:2d:44:3f:cd:92:4e: 54:92:7b:36:db:a7:c8:8f:42:26:69:4c:e8:ad:82:f3:ff:81: de:2a:43:4f:50:57:a0:dc:a7:62:53:df:9f:59:c6:24:ae:7e: 31:c0:1e:93:5b:1d:ad:61:bd:c6:7f:66:15:9d:77:13:3c:2b: 6b:1b:b8:10:3f:be:c1:9f:bc:c5:c9:e8:de:d1:7d:81:5f:a0: ed:9e:e9:db:72:44:aa:98:3e:35:3e:45:50:35:9b:cc:5c:07: 7b:fb:4b:ed:53:d9:9c:53:7b:41:c1:2f:dc:aa:9e:6d:85:86: eb:f4:ff:6f:43:71:f7:d8:89:e5:28:11:3c:fc:a1:e1:92:b5: 61:31:73:e8:57:b7:a9:5e:fe:92:aa:34:9c:e7:73:69:83:00: 31:ee:71:e9:46:e9:d2:ee:9e:69:48:31:e7:6d:03:ef:ec:87: 43:75:89:3b:db:e9:9e:12:c4:c9:5f:e7:d3:d4:5a:63:e4:12: ff:88:36:b0:d5:23:78:ba:7e:ec:a2:4e:0e:1c:b9:d6:81:de: 9b:68:6f:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLm07kTss/Q7mH95oyiXLqE5d0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA5MjExMTQwNTdaFw0yNjA5MjIxNDIzNTdaMDMxMTAvBgNV BAMTKEU2QjNDNzM2QjZDNEI2QkJBRTBGOUU1NThENENCNjM4ODQ3Qjc0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAfsBT275+1uNi3odDNlhDIzk WZspQgoYeffxlVk9DlCv77gSoUdhDLlBbrHSKVWkAQRbDv1GlmJxj0oirLVdok+4 //LecZ9jUN7oOxBEr/XvGTraRLe1a4+dhQT3DIkvcnnAaiAWcYV1+S1FZBkMZ44Q F4Stet2p6DxLhG72JVEZY1xL4z0ESFW00UU23RXIdxfwJOQVkHLa1QcmkldWB7ch Xdj+aMD3yMo9qJghSgeUD+4KMvvQyL+Kz0D7b4SoQUjUo31zWndlNjPzUOWwmlPS vUzRGOLT1+j2ZYNwpKCmqwZsRxH+ukNcTn76C7LSyiO5J6323PF1iaSNgJijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rPHNrbEtruuD55VjUy2OIR7dGEwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAGlkYe7k0TRWiRkOVUKxFAO90gi8qXpUu6 3iH716TQFFrfqE+natBPIC5751FqFi1EP82STlSSezbbp8iPQiZpTOitgvP/gd4q Q09QV6Dcp2JT359ZxiSufjHAHpNbHa1hvcZ/ZhWddxM8K2sbuBA/vsGfvMXJ6N7R fYFfoO2e6dtyRKqYPjU+RVA1m8xcB3v7S+1T2ZxTe0HBL9yqnm2Fhuv0/29DcffY ieUoETz8oeGStWExc+hXt6le/pKqNJznc2mDADHucelG6dLunmlIMedtA+/sh0N1 iTvb6Z4SxMlf59PUWmPkEv+INrDVI3i6fuyiTg4cudaB3ptob+0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:17 2026 by rpki-client