$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: Q6nMOjof7R+AzSm0ncnsqBArgcfJwHcOBHPMPvy9NnU= Subject key identifier: 87:9F:8B:0F:69:4C:43:30:E7:24:F2:44:62:D7:89:47:B2:E8:77:0F Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 1E818C880D7DB5EE249870AC68BD3CF3234C7C5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:41:58 +0000 Manifest this update: Wed 23 Sep 2026 08:36:58 +0000 Manifest next update: Thu 24 Sep 2026 09:58:58 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: VnBFWN715g1/eVLfWqnsxFiDY1rEtQtSPpXcHqrqGfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:81:8c:88:0d:7d:b5:ee:24:98:70:ac:68:bd:3c:f3:23:4c:7c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Sep 23 08:36:58 2026 GMT Not After : Sep 24 09:58:58 2026 GMT Subject: CN=879F8B0F694C4330E724F24462D78947B2E8770F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:4c:63:d7:30:9e:9d:5b:06:43:8c:76:ae: 04:58:91:c8:d6:49:a8:c0:cd:fc:4b:cb:31:d6:77: 12:91:45:e3:da:a5:59:d6:8b:e2:1d:c8:f0:12:22: 76:67:29:80:37:2c:dd:d6:f7:a4:0d:e3:61:7c:f6: 84:88:c5:5d:89:0a:27:bd:ac:64:de:2b:e5:03:e1: 80:ad:1e:98:c2:a3:91:4d:5a:ce:5a:1e:e8:e8:1e: bf:60:69:00:32:d6:54:a1:05:13:e2:38:9c:59:38: 32:dc:98:45:d9:3c:37:7e:de:83:24:31:3d:e9:25: 45:c1:81:4b:67:30:6b:e9:e0:86:94:2a:de:5d:e7: 1f:3f:5c:d2:d1:68:8e:ec:53:13:3f:e3:ad:ac:1a: ae:1d:dd:da:44:4f:af:c5:92:43:88:0d:5e:7f:e7: ca:83:2c:8a:0a:ad:2b:5c:98:ff:92:d4:eb:ed:b8: 49:e1:3f:0c:50:11:2c:1b:6e:2e:c0:6c:bf:4b:ce: 92:59:d1:62:1c:cc:f0:7b:ad:d0:04:49:86:0a:4f: b6:d4:df:70:27:51:02:31:95:68:da:34:90:4c:a8: 4e:0a:57:e6:73:e1:7e:57:1b:0b:00:26:34:2b:03: 8c:57:ab:11:30:ec:a2:01:44:67:91:12:c8:89:6d: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9F:8B:0F:69:4C:43:30:E7:24:F2:44:62:D7:89:47:B2:E8:77:0F X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a4:fc:c1:c9:0e:e6:86:f6:8e:c4:af:72:ce:b7:2e:dc:20: ed:ad:de:ca:99:c8:59:27:82:f1:83:0b:2b:fb:81:69:d3:ed: f0:83:73:40:f1:83:d5:71:5b:ad:91:02:cc:86:61:34:96:d2: 3d:19:95:a1:a7:a1:f2:a2:f3:4b:c9:d2:41:a1:a6:91:fc:dc: 92:5d:e2:42:a1:8f:39:74:71:7f:81:58:64:3c:f8:aa:a3:2c: d3:9d:66:cf:a3:e7:a0:72:a8:ec:37:04:1e:60:f6:c9:52:4f: d4:a2:da:62:3b:cb:57:ea:d5:bb:fc:c4:63:64:9a:b2:98:7d: 74:0a:8a:bd:81:16:2c:1b:81:7d:58:70:15:69:35:a1:b1:06: 79:11:b7:08:b7:dc:c2:0d:cf:eb:00:2b:90:14:9a:a6:02:03: 8a:f5:77:51:f5:e8:c5:85:24:33:34:3f:7f:22:1f:a2:6b:ec: 95:78:99:b6:39:f7:1d:4d:d9:6c:98:8d:14:64:4d:1f:9f:32: d6:71:dd:ed:84:ac:58:b0:67:6b:41:20:f8:8d:a9:64:ce:80: fe:7e:e6:3f:df:ed:09:4f:53:7a:a0:ed:3f:8e:6e:2f:eb:78: 9c:13:b3:51:48:dd:52:29:2d:90:70:76:47:49:fa:90:cd:2e: 4d:ce:1c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoGMiA19te4kmHCsaL088yNMfF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA5MjMwODM2NThaFw0yNjA5MjQwOTU4NThaMDMxMTAvBgNV BAMTKDg3OUY4QjBGNjk0QzQzMzBFNzI0RjI0NDYyRDc4OTQ3QjJFODc3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ykxj1zCenVsGQ4x2rgRYkcjW SajAzfxLyzHWdxKRRePapVnWi+IdyPASInZnKYA3LN3W96QN42F89oSIxV2JCie9 rGTeK+UD4YCtHpjCo5FNWs5aHujoHr9gaQAy1lShBRPiOJxZODLcmEXZPDd+3oMk MT3pJUXBgUtnMGvp4IaUKt5d5x8/XNLRaI7sUxM/462sGq4d3dpET6/FkkOIDV5/ 58qDLIoKrStcmP+S1OvtuEnhPwxQESwbbi7AbL9LzpJZ0WIczPB7rdAESYYKT7bU 33AnUQIxlWjaNJBMqE4KV+Zz4X5XGwsAJjQrA4xXqxEw7KIBRGeREsiJbUYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5+LD2lMQzDnJPJEYteJR7Lodw8wHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKk/MHJDuaG9o7Er3LOty7cIO2t3sqZyFkn gvGDCyv7gWnT7fCDc0Dxg9VxW62RAsyGYTSW0j0ZlaGnofKi80vJ0kGhppH83JJd 4kKhjzl0cX+BWGQ8+KqjLNOdZs+j56ByqOw3BB5g9slST9Si2mI7y1fq1bv8xGNk mrKYfXQKir2BFiwbgX1YcBVpNaGxBnkRtwi33MINz+sAK5AUmqYCA4r1d1H16MWF JDM0P38iH6Jr7JV4mbY59x1N2WyYjRRkTR+fMtZx3e2ErFiwZ2tBIPiNqWTOgP5+ 5j/f7QlPU3qg7T+Obi/reJwTs1FI3VIpLZBwdkdJ+pDNLk3OHGM= -----END CERTIFICATE-----Generated at Wed Sep 23 16:05:09 2026 by rpki-client