$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: ncurVRsA7Rl5Lb+S4KVVXowy9WW8DfFKjMViojC3OFU= Subject key identifier: 9F:6E:4F:BB:D0:9C:CC:3E:80:C9:7C:DE:55:59:A1:1A:27:EB:E6:C6 Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 74C96BA6FED882DCBF75B4163906ADDB7A7F4315 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: BF Signing time: Tue 22 Sep 2026 15:15:13 +0000 Manifest this update: Tue 22 Sep 2026 15:10:13 +0000 Manifest next update: Wed 23 Sep 2026 16:40:13 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: pTCQFBUV9y4bUnlmvTKC8d1Y+8OkWe9/toU0yrw1XE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c9:6b:a6:fe:d8:82:dc:bf:75:b4:16:39:06:ad:db:7a:7f:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Sep 22 15:10:13 2026 GMT Not After : Sep 23 16:40:13 2026 GMT Subject: CN=9F6E4FBBD09CCC3E80C97CDE5559A11A27EBE6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:69:0d:e0:07:6f:8b:61:99:31:1b:87:d3: d5:29:be:0d:33:2b:32:6e:b8:42:89:5a:e3:66:86: 72:40:94:b4:03:4c:95:33:d1:b6:1b:a1:92:bf:bb: 04:6c:55:b2:71:df:3f:5e:9e:54:26:36:84:ab:96: 87:f8:08:63:52:86:08:5d:a6:39:84:fe:db:a0:f3: 82:ac:bf:d3:7b:ea:8a:58:36:ce:25:8a:54:26:17: 5b:d7:0d:59:89:ed:b0:ac:74:1d:1a:16:3c:95:0a: 01:e2:1f:ad:32:65:07:e9:1c:a6:27:12:1a:45:f9: 7f:22:4f:4e:3a:60:63:30:23:7a:d9:c5:91:1b:af: dd:5f:28:df:ff:74:6b:c2:a5:1e:7d:87:1a:cc:ff: 31:0a:51:24:7f:36:11:18:5d:8c:a0:50:2c:64:fd: bd:7d:68:64:33:e6:63:1f:3f:c2:1e:6a:95:7f:00: d9:74:4a:83:ab:b6:df:e1:28:d3:23:e5:3e:18:5e: a7:fb:1a:a9:17:b8:55:e1:f3:91:48:5e:03:72:57: 80:e4:37:1e:32:8c:41:e9:36:37:a2:dc:47:f2:a3: 8c:71:f3:d2:f5:83:65:3f:c5:ca:61:dc:a4:37:96: 19:60:ab:72:98:70:d1:ca:2e:66:5e:ec:48:6f:ec: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:4F:BB:D0:9C:CC:3E:80:C9:7C:DE:55:59:A1:1A:27:EB:E6:C6 X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d9:b1:ed:53:1f:e2:c6:1e:c1:00:7c:da:79:fe:8b:bf:18: 76:e8:c1:9d:99:15:1a:5b:b0:46:99:58:f2:f2:1f:da:c3:a0: 82:18:d5:db:58:a2:c2:37:87:f8:67:01:5a:ad:99:78:35:11: 2f:94:18:7c:a7:a3:82:3a:f0:a6:12:a8:a7:58:6f:d8:2a:3c: 64:03:4e:83:fe:1c:ed:50:53:13:85:41:d8:2c:7b:c3:26:37: 73:4c:e1:c7:1c:a3:3d:13:0c:7d:ce:3c:f0:12:bf:e9:4f:d3: fb:fd:ab:27:3c:d6:e0:90:ce:67:42:47:a1:9e:d6:e1:cf:4a: d5:b1:27:13:7d:f1:e8:f3:c1:56:f2:a4:d4:17:88:bc:91:ab: 7c:1d:a5:21:ad:39:57:20:89:d0:0a:3a:98:ac:81:d8:ff:5f: fe:ef:a7:58:5b:b4:43:8c:b0:8f:fd:1f:e0:b0:a3:7a:04:81: 9c:7a:63:6f:72:a6:41:79:6d:d6:cb:8e:b9:dc:58:65:23:30: 73:33:d4:8c:1f:cb:46:6a:b8:86:b8:b0:d3:1d:b1:27:70:35: 66:68:67:bc:14:7b:0c:39:e6:2d:7c:85:72:2c:18:9c:8f:af: 1f:88:f7:49:d9:60:74:1d:2e:f3:77:0b:f3:ee:98:03:8b:21: 8e:07:fb:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMlrpv7Ygty/dbQWOQat23p/QxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA5MjIxNTEwMTNaFw0yNjA5MjMxNjQwMTNaMDMxMTAvBgNV BAMTKDlGNkU0RkJCRDA5Q0NDM0U4MEM5N0NERTU1NTlBMTFBMjdFQkU2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjmkN4Advi2GZMRuH09Upvg0z KzJuuEKJWuNmhnJAlLQDTJUz0bYboZK/uwRsVbJx3z9enlQmNoSrlof4CGNShghd pjmE/tug84Ksv9N76opYNs4lilQmF1vXDVmJ7bCsdB0aFjyVCgHiH60yZQfpHKYn EhpF+X8iT046YGMwI3rZxZEbr91fKN//dGvCpR59hxrM/zEKUSR/NhEYXYygUCxk /b19aGQz5mMfP8IeapV/ANl0SoOrtt/hKNMj5T4YXqf7GqkXuFXh85FIXgNyV4Dk Nx4yjEHpNjei3Efyo4xx89L1g2U/xcph3KQ3lhlgq3KYcNHKLmZe7Ehv7CdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn25Pu9CczD6AyXzeVVmhGifr5sYwHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETZse1TH+LGHsEAfNp5/ou/GHbowZ2ZFRpb sEaZWPLyH9rDoIIY1dtYosI3h/hnAVqtmXg1ES+UGHyno4I68KYSqKdYb9gqPGQD ToP+HO1QUxOFQdgse8MmN3NM4cccoz0TDH3OPPASv+lP0/v9qyc81uCQzmdCR6Ge 1uHPStWxJxN98ejzwVbypNQXiLyRq3wdpSGtOVcgidAKOpisgdj/X/7vp1hbtEOM sI/9H+Cwo3oEgZx6Y29ypkF5bdbLjrncWGUjMHMz1Iwfy0ZquIa4sNMdsSdwNWZo Z7wUeww55i18hXIsGJyPrx+I90nZYHQdLvN3C/PumAOLIY4H+3k= -----END CERTIFICATE-----Generated at Wed Sep 23 05:19:59 2026 by rpki-client