$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft (raw, json) Hash identifier: Zd4C6v+nhi8oQ9zpe1NKxVQHyf/YGzCN3GqU815UBlg= Subject key identifier: F4:EA:CF:4E:D8:16:E0:30:53:F8:0C:DE:8C:3A:F3:89:2A:F6:AA:90 Authority key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Certificate issuer: /CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Certificate serial: 7509EF4172838DDE89D515F78CF1418186FC9EAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 17:20:08 +0000 Manifest this update: Tue 16 Jun 2026 17:15:08 +0000 Manifest next update: Wed 17 Jun 2026 20:26:08 +0000 Files and hashes: 1: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl (hash: eeRlIaF0beNkrJ5+p03mY0YZdJJlPv8ER7/rYYDh8M4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:09:ef:41:72:83:8d:de:89:d5:15:f7:8c:f1:41:81:86:fc:9e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Validity Not Before: Jun 16 17:15:08 2026 GMT Not After : Jun 17 20:26:08 2026 GMT Subject: CN=F4EACF4ED816E03053F80CDE8C3AF3892AF6AA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:62:47:af:52:08:a9:30:0c:d2:d8:a1:ff: a5:60:4a:4f:f2:f3:a0:3d:0d:98:12:6c:14:84:f2: 3b:ba:d0:48:ec:00:57:d6:d6:b5:ff:67:2c:de:9a: bd:16:8d:99:65:ee:d2:e9:52:58:06:08:10:79:0b: 28:59:5a:14:57:ec:19:41:18:20:bf:1b:b8:d6:e7: 85:27:9e:b5:45:0d:96:78:a9:51:2c:2b:d9:21:f1: 2c:40:d5:17:ee:fd:eb:07:d8:ff:9e:33:cb:a5:70: 39:56:3e:28:98:3a:2b:3e:96:ee:9f:7b:52:f9:d2: 5a:a1:01:30:7c:81:1d:04:9f:e5:6e:c9:bf:a0:b2: f0:24:1a:25:ab:49:d5:fb:32:4c:01:35:0e:8b:5c: ae:86:79:b2:ec:6b:0f:d3:69:db:c1:1d:32:a6:4a: e4:f2:2d:05:48:3a:0d:58:e0:f1:bb:ed:42:88:8a: 0b:dd:fb:4c:4c:d0:3c:f1:26:5c:e6:87:42:71:61: b5:8a:7f:c0:e2:9a:27:f4:8e:b3:7d:48:bf:33:7b: 69:51:e9:a9:70:94:2b:b9:93:48:fc:1d:7b:8a:57: e1:f3:42:b5:7a:71:a4:17:db:3d:ab:67:ff:1b:7a: 23:bb:37:c4:0e:2f:91:69:73:53:4f:15:87:3c:a9: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EA:CF:4E:D8:16:E0:30:53:F8:0C:DE:8C:3A:F3:89:2A:F6:AA:90 X509v3 Authority Key Identifier: keyid:3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:a0:51:25:39:e6:a3:2a:6b:3f:57:53:b1:63:bf:30:92: 54:ca:7b:1b:26:d9:cf:97:ef:23:be:a1:13:d1:67:e0:db:ed: ec:e2:47:99:29:70:97:2d:17:7d:82:49:f6:17:a9:64:0c:d4: 5a:f8:ef:9a:91:c7:69:91:2c:20:c4:40:1e:92:aa:95:28:27: 21:8e:16:8c:f6:4b:63:c8:65:e5:3a:e8:29:2e:dc:cd:84:cb: a0:46:ec:42:a1:5c:18:a0:c7:fe:f2:1a:9f:8d:bb:df:e4:51: d9:01:9c:3b:70:cd:98:19:01:03:e3:7f:11:6f:df:d3:0c:2d: 38:09:02:37:4c:b4:13:0f:2f:99:03:ad:18:81:c7:bf:d3:a5: ee:59:02:05:17:9e:76:17:10:22:7b:be:53:63:76:eb:3f:91: 67:54:38:8a:e8:72:3e:f5:54:59:6c:69:64:3d:b3:ed:be:4b: c0:8a:82:f9:98:74:cc:f9:d9:3a:d5:41:3b:b8:85:4f:ce:13: 50:e1:7c:87:c3:1b:a2:26:45:38:e1:f3:97:21:5c:ad:b3:a0: 46:8b:45:b0:3d:3c:6a:5f:81:72:98:25:9c:a1:1c:10:97:e2: 79:d7:18:33:5d:9c:a1:15:54:14:38:10:5b:81:cb:8a:c7:03: 89:79:08:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQnvQXKDjd6J1RX3jPFBgYb8nq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5 NUQ0QUU0ODAeFw0yNjA2MTYxNzE1MDhaFw0yNjA2MTcyMDI2MDhaMDMxMTAvBgNV BAMTKEY0RUFDRjRFRDgxNkUwMzA1M0Y4MENERThDM0FGMzg5MkFGNkFBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZmJHr1IIqTAM0tih/6VgSk/y 86A9DZgSbBSE8ju60EjsAFfW1rX/Zyzemr0WjZll7tLpUlgGCBB5CyhZWhRX7BlB GCC/G7jW54UnnrVFDZZ4qVEsK9kh8SxA1Rfu/esH2P+eM8ulcDlWPiiYOis+lu6f e1L50lqhATB8gR0En+Vuyb+gsvAkGiWrSdX7MkwBNQ6LXK6GebLsaw/TadvBHTKm SuTyLQVIOg1Y4PG77UKIigvd+0xM0DzxJlzmh0JxYbWKf8Dimif0jrN9SL8ze2lR 6alwlCu5k0j8HXuKV+HzQrV6caQX2z2rZ/8beiO7N8QOL5Fpc1NPFYc8qecJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9OrPTtgW4DBT+AzejDrziSr2qpAwHwYDVR0j BBgwFoAUPFs2nuxqJLJRS+lljA04epXUrkgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0M2Y3ODYtODIzNS00YTkwLThhMDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVF QzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5NUQ0QUU0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVCMzY5RUVDNkEyNEIyNTE0QkU5NjU4QzBEMzg3QTk1RDRB RTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4 N0E5NUQ0QUU0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD/oFElOeajKms/V1OxY78wklTKexsm2c+X 7yO+oRPRZ+Db7eziR5kpcJctF32CSfYXqWQM1Fr475qRx2mRLCDEQB6SqpUoJyGO Foz2S2PIZeU66Cku3M2Ey6BG7EKhXBigx/7yGp+Nu9/kUdkBnDtwzZgZAQPjfxFv 39MMLTgJAjdMtBMPL5kDrRiBx7/Tpe5ZAgUXnnYXECJ7vlNjdus/kWdUOIrocj71 VFlsaWQ9s+2+S8CKgvmYdMz52TrVQTu4hU/OE1DhfIfDG6ImRTjh85chXK2zoEaL RbA9PGpfgXKYJZyhHBCX4nnXGDNdnKEVVBQ4EFuBy4rHA4l5CLs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:33 2026 by rpki-client