$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: ckJOT5t3TvY54Xwg537gI7AYlRscsIfsc5CVVPX8JyI= Subject key identifier: 0F:D3:B3:94:2A:2D:8B:C4:DC:02:95:26:83:CE:D3:D8:19:17:95:0D Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 21BBF94EBA92D91EF57F5E6FFC412BACA7CADE3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:42:24 +0000 Manifest this update: Mon 21 Sep 2026 00:37:24 +0000 Manifest next update: Tue 22 Sep 2026 03:58:24 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: AsbDr1NsHZdd6MHpsmX7l7wdI1NEjzQJAgqTtWT8SUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:f9:4e:ba:92:d9:1e:f5:7f:5e:6f:fc:41:2b:ac:a7:ca:de:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Sep 21 00:37:24 2026 GMT Not After : Sep 22 03:58:24 2026 GMT Subject: CN=0FD3B3942A2D8BC4DC02952683CED3D81917950D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:25:35:ce:28:93:4f:32:11:0c:0e:38:1b: 9a:0c:d1:b1:4c:bf:bf:d2:38:e9:4f:fc:de:6f:5e: 0d:e4:f3:e4:73:af:fd:0d:f9:13:4a:de:aa:aa:55: 04:3e:c2:50:e4:f0:5c:1c:ab:f2:1f:91:d6:bc:67: 10:7e:82:33:9f:26:a4:4e:7d:fd:4a:6f:97:6d:dd: bf:33:75:f6:58:60:c3:6b:cf:5b:8d:85:31:28:0c: b9:75:20:d6:af:42:9e:e5:6a:1f:8a:0f:bc:b8:6d: 06:58:a5:6c:87:55:59:82:55:af:96:a8:bd:20:5c: 22:f3:22:2a:81:94:0c:90:0c:ac:fa:48:06:07:08: ff:bf:35:61:7d:93:2d:fd:eb:87:bc:25:b1:8b:3b: da:52:2b:d0:c0:ec:e1:38:df:51:67:bf:80:44:9d: bf:4b:45:73:ac:de:bd:c6:11:2d:e1:1a:e2:2e:ae: e5:d0:35:00:bc:f7:2c:f5:5d:22:65:01:14:99:fb: 15:2d:e7:93:cb:38:28:47:14:6a:fd:89:85:d3:d9: b8:a9:8e:9f:ea:ce:11:ed:7a:00:f1:6d:87:37:b3: ae:c5:df:3b:b0:bf:8e:ff:92:9e:03:d0:4b:a4:a2: cf:63:4d:33:b0:25:59:ab:32:1b:25:69:c9:c3:73: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:B3:94:2A:2D:8B:C4:DC:02:95:26:83:CE:D3:D8:19:17:95:0D X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:17:bc:97:b8:3e:98:bf:02:13:60:14:63:7c:80:67:8d:6e: 7e:89:57:5f:ea:9d:ba:7d:34:68:c2:68:de:9e:f8:04:1b:ae: c4:aa:c0:e0:4e:a0:94:d8:27:b0:df:38:76:2f:d4:df:74:31: 27:5a:22:f3:09:9a:9f:d2:ef:bd:8e:4d:af:b3:c0:fd:36:17: 0e:5d:25:1d:df:9e:ad:6d:0b:bb:36:47:13:15:c5:8a:ef:a7: d3:65:27:41:6f:06:24:27:36:75:86:6f:d9:f5:a6:0b:47:05: 51:9e:f3:5f:8a:68:62:4e:73:b6:14:57:32:93:0b:e0:9f:e5: 30:4a:d7:3e:a2:10:dc:b9:5b:2e:d1:0e:bb:24:d6:09:9b:0d: da:b5:6c:f1:f5:78:83:71:81:89:fa:35:d5:ff:41:65:39:34: 95:71:4e:2e:49:11:67:8e:67:8f:65:d6:02:90:0a:4d:4d:da: cd:5c:96:b8:f1:34:57:02:fb:70:24:35:c9:43:08:6f:16:60: 20:07:d7:b0:e3:70:3c:b8:5f:1f:71:cb:44:b0:18:eb:07:f7: 26:53:84:bd:4f:71:de:f2:48:1f:e4:dd:af:e6:47:55:91:32: 98:22:34:49:89:ad:94:a9:80:7d:c1:82:49:87:3c:c4:a0:d1: a6:5a:3c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbv5TrqS2R71f15v/EErrKfK3jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA5MjEwMDM3MjRaFw0yNjA5MjIwMzU4MjRaMDMxMTAvBgNV BAMTKDBGRDNCMzk0MkEyRDhCQzREQzAyOTUyNjgzQ0VEM0Q4MTkxNzk1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYSU1ziiTTzIRDA44G5oM0bFM v7/SOOlP/N5vXg3k8+Rzr/0N+RNK3qqqVQQ+wlDk8Fwcq/Ifkda8ZxB+gjOfJqRO ff1Kb5dt3b8zdfZYYMNrz1uNhTEoDLl1INavQp7lah+KD7y4bQZYpWyHVVmCVa+W qL0gXCLzIiqBlAyQDKz6SAYHCP+/NWF9ky3964e8JbGLO9pSK9DA7OE431Fnv4BE nb9LRXOs3r3GES3hGuIuruXQNQC89yz1XSJlARSZ+xUt55PLOChHFGr9iYXT2bip jp/qzhHtegDxbYc3s67F3zuwv47/kp4D0Eukos9jTTOwJVmrMhslacnDc/0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9OzlCoti8TcApUmg87T2BkXlQ0wHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUXvJe4Ppi/AhNgFGN8gGeNbn6JV1/qnbp9 NGjCaN6e+AQbrsSqwOBOoJTYJ7DfOHYv1N90MSdaIvMJmp/S772OTa+zwP02Fw5d JR3fnq1tC7s2RxMVxYrvp9NlJ0FvBiQnNnWGb9n1pgtHBVGe81+KaGJOc7YUVzKT C+Cf5TBK1z6iENy5Wy7RDrsk1gmbDdq1bPH1eINxgYn6NdX/QWU5NJVxTi5JEWeO Z49l1gKQCk1N2s1clrjxNFcC+3AkNclDCG8WYCAH17DjcDy4Xx9xy0SwGOsH9yZT hL1Pcd7ySB/k3a/mR1WRMpgiNEmJrZSpgH3BgkmHPMSg0aZaPKI= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:48 2026 by rpki-client