$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: nVQO9xr02+mwLHifjOOoQ5zVqP/4xpF1lifstaWiHBk= Subject key identifier: 8A:97:9C:7C:25:A9:79:F5:BE:B5:08:56:A0:D6:07:B4:4A:73:23:14 Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 13BC62250554C9563F0E765E5E4F1008A6843E6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:44:13 +0000 Manifest this update: Tue 16 Jun 2026 20:39:13 +0000 Manifest next update: Wed 17 Jun 2026 22:55:13 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: B5GExExytzyqMX18ESVCT5dwOICZXgBXC9o9iV4IgN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:62:25:05:54:c9:56:3f:0e:76:5e:5e:4f:10:08:a6:84:3e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Jun 16 20:39:13 2026 GMT Not After : Jun 17 22:55:13 2026 GMT Subject: CN=8A979C7C25A979F5BEB50856A0D607B44A732314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:49:2b:37:48:07:e5:84:cd:bf:59:5a:9c: 52:0e:73:0f:14:2a:3e:f3:ff:86:ca:86:d1:89:d2: 28:38:bd:7a:a3:82:7d:69:ac:5c:9b:00:1f:4b:d1: 23:65:34:a8:ee:e2:4e:c8:1b:58:12:a1:23:c7:42: 41:aa:95:8e:d4:73:b0:bd:e4:ed:88:b6:49:58:ec: 1c:40:25:41:19:c9:b8:80:b4:17:b7:e2:ce:19:31: 23:41:ba:36:97:43:4e:c2:b2:85:98:90:b6:66:6e: 5b:91:f2:7b:02:22:03:cf:dc:4f:35:91:55:91:f3: 77:f3:b4:f6:ab:1c:11:95:18:29:37:d2:1e:2d:9f: ba:89:5e:ba:a2:d4:b5:e0:43:f5:d3:fa:de:58:e4: 2a:8f:b5:74:ef:d0:e2:02:94:11:8b:93:8f:d9:66: 28:17:94:ef:f6:ce:19:ff:61:a4:28:28:ce:ea:79: 8b:6e:fe:ad:9b:7a:54:73:da:c1:e7:ba:d3:9c:60: 85:eb:dc:98:59:73:5c:14:45:95:d7:60:ea:96:79: c7:f7:bf:6d:2f:93:2d:92:a7:47:ac:33:05:3d:56: 5e:7e:f8:2a:4b:f5:85:61:bb:87:40:8e:f0:d1:4d: c4:21:db:41:e9:1b:1c:ab:be:bf:61:7d:bc:c1:79: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:9C:7C:25:A9:79:F5:BE:B5:08:56:A0:D6:07:B4:4A:73:23:14 X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3c:1f:bf:17:a9:43:cd:b3:da:29:7f:22:3a:a0:40:f5:cf: 41:19:70:d0:8a:e7:27:30:1b:85:b4:43:17:87:4d:d0:02:b7: 0b:6d:23:aa:9c:72:b6:80:fb:79:7d:88:9a:34:2d:32:08:3d: bb:18:9b:56:ea:ba:50:27:61:56:ac:a4:7d:28:14:dc:e8:6c: 9a:23:9a:bc:3f:7f:0d:7d:99:9c:5f:ee:94:0b:26:b1:21:7c: 8c:7d:d5:5c:71:43:95:6f:2f:31:0d:24:d9:3f:2f:05:38:52: ed:1a:5a:9d:f7:4b:12:9c:3a:4e:da:3e:23:13:95:06:5b:42: 36:ee:12:b9:57:49:2b:25:07:f4:e3:ef:77:51:08:f4:7e:3b: 20:d1:6c:10:8a:fa:34:c4:2f:f0:51:77:ab:44:73:6d:c8:a7: 7e:5d:e5:be:35:1d:d9:e6:82:cc:ab:6d:e7:4b:d2:d8:ab:b6: 63:23:73:43:52:37:6f:76:f1:72:9d:4d:eb:73:cd:c3:44:b5: 13:2d:3a:5c:9f:b6:fa:a3:ca:e3:0c:2d:1d:4e:34:29:f4:e9: 4b:ca:48:54:7e:c9:2a:dc:0b:c2:e3:0c:18:d9:67:4c:25:ea: 5d:e3:22:4a:b3:e5:57:24:5c:b1:a2:34:df:4d:58:9f:dd:d6: 5b:94:60:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7xiJQVUyVY/DnZeXk8QCKaEPmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA2MTYyMDM5MTNaFw0yNjA2MTcyMjU1MTNaMDMxMTAvBgNV BAMTKDhBOTc5QzdDMjVBOTc5RjVCRUI1MDg1NkEwRDYwN0I0NEE3MzIzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmUkrN0gH5YTNv1lanFIOcw8U Kj7z/4bKhtGJ0ig4vXqjgn1prFybAB9L0SNlNKju4k7IG1gSoSPHQkGqlY7Uc7C9 5O2ItklY7BxAJUEZybiAtBe34s4ZMSNBujaXQ07CsoWYkLZmbluR8nsCIgPP3E81 kVWR83fztParHBGVGCk30h4tn7qJXrqi1LXgQ/XT+t5Y5CqPtXTv0OIClBGLk4/Z ZigXlO/2zhn/YaQoKM7qeYtu/q2belRz2sHnutOcYIXr3JhZc1wURZXXYOqWecf3 v20vky2Sp0esMwU9Vl5++CpL9YVhu4dAjvDRTcQh20HpGxyrvr9hfbzBeV8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipecfCWpefW+tQhWoNYHtEpzIxQwHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw8H78XqUPNs9opfyI6oED1z0EZcNCK5ycw G4W0QxeHTdACtwttI6qccraA+3l9iJo0LTIIPbsYm1bqulAnYVaspH0oFNzobJoj mrw/fw19mZxf7pQLJrEhfIx91VxxQ5VvLzENJNk/LwU4Uu0aWp33SxKcOk7aPiMT lQZbQjbuErlXSSslB/Tj73dRCPR+OyDRbBCK+jTEL/BRd6tEc23Ip35d5b41Hdnm gsyrbedL0tirtmMjc0NSN2928XKdTetzzcNEtRMtOlyftvqjyuMMLR1ONCn06UvK SFR+ySrcC8LjDBjZZ0wl6l3jIkqz5VckXLGiNN9NWJ/d1luUYIE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:55 2026 by rpki-client