$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft (raw, json) Hash identifier: YS0lFMiwBtn14IIBRkbIA8xWhjFyzVkeGjMrGX+rkGI= Subject key identifier: 2D:8F:DD:F5:FA:EC:0D:92:BE:03:20:22:7D:93:FF:8A:FE:AD:7C:B9 Authority key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Certificate issuer: /CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Certificate serial: 06EF8A3305DDD25FF60011D9AD11ABF1D44AC202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft Manifest number: BD Signing time: Tue 22 Sep 2026 11:10:29 +0000 Manifest this update: Tue 22 Sep 2026 11:05:29 +0000 Manifest next update: Wed 23 Sep 2026 12:58:29 +0000 Files and hashes: 1: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl (hash: SSskv44ivHb9RpLDbY/ut+aKs8qUW47Jqc0rBpktFtk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ef:8a:33:05:dd:d2:5f:f6:00:11:d9:ad:11:ab:f1:d4:4a:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Validity Not Before: Sep 22 11:05:29 2026 GMT Not After : Sep 23 12:58:29 2026 GMT Subject: CN=2D8FDDF5FAEC0D92BE0320227D93FF8AFEAD7CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:c9:4c:4b:56:34:17:ec:be:53:22:0c:bc: c8:a6:d7:31:10:15:f8:b7:20:67:fa:8e:14:89:a6: 7b:3a:50:91:3e:8f:38:65:4d:cd:70:73:91:cc:f5: 08:04:a9:04:e9:29:92:12:e3:b1:f6:11:92:7f:aa: a5:57:29:7b:57:7d:d5:13:50:06:51:41:42:81:53: f2:2f:fc:f1:bf:90:13:7e:03:c0:a6:17:0c:f4:8c: 33:e0:4b:fb:30:20:e9:16:b5:43:17:9c:ec:a8:9a: 6d:5c:27:22:01:ce:25:18:66:28:65:4c:96:a1:db: 6b:1a:1f:4c:99:9a:6b:56:c5:c5:09:c3:35:2a:20: 83:c8:d3:fb:b9:7d:bf:34:ab:82:30:95:fb:1d:d4: 3b:47:13:98:99:84:d7:8e:c9:80:e5:8e:d1:82:2d: 58:ba:d3:04:28:b1:53:c1:e2:c3:5a:d2:5d:9f:6a: 12:c6:97:6f:f9:f5:26:d6:db:59:ae:d2:5e:3e:81: 45:87:c5:7d:26:2c:fb:62:17:47:4a:54:8f:bd:b3: 20:c2:58:e3:88:f2:fe:1d:da:b7:cf:5d:ed:f1:18: 33:0e:fc:39:b8:ba:fa:c9:ea:6b:99:34:ff:31:6c: 25:ef:19:c3:78:72:36:6e:47:55:27:ec:24:5e:8d: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8F:DD:F5:FA:EC:0D:92:BE:03:20:22:7D:93:FF:8A:FE:AD:7C:B9 X509v3 Authority Key Identifier: keyid:3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b8:b7:74:e6:ad:e8:d4:13:b5:39:b3:2d:e6:02:8d:4e:c9: 10:60:8d:08:50:23:22:0c:49:5a:63:e5:0b:34:80:ee:f2:7c: ae:44:51:4c:e5:dc:e0:5c:31:83:75:db:fb:16:38:89:c5:c5: de:81:ae:44:09:da:e5:3b:6c:21:51:9b:c5:c5:c5:48:e8:6c: f7:31:a0:5b:7e:d1:b7:4a:ec:7a:55:5d:94:3c:dc:dc:38:f5: 62:37:77:42:4f:52:72:3c:0f:7f:50:2b:e5:6e:32:39:13:8d: 1b:d5:ee:b9:98:26:1a:a9:74:95:4b:45:94:b9:b3:e7:29:4e: 5e:d2:2e:1a:a6:0e:fa:f3:8d:59:2e:3c:07:1e:98:1e:2d:64: e6:35:be:c4:5d:85:68:f3:1b:a2:61:cd:00:87:ec:cc:27:c1: da:f8:8e:14:19:2f:95:b5:58:02:d8:df:73:28:91:b7:f6:00: d4:40:da:37:bd:dc:8e:ec:f9:12:d4:16:d3:ce:e2:b3:c4:9e: 7a:52:84:4d:e1:07:dd:46:4f:4f:b5:31:00:99:d5:d6:de:64: 29:24:6e:ae:08:67:57:b1:74:24:55:68:cf:42:11:0a:63:41: b2:71:a2:1e:7b:f6:62:97:75:12:1f:9c:10:11:db:d7:22:c4: 03:ff:6c:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBu+KMwXd0l/2ABHZrRGr8dRKwgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5 NUQ0QUU0ODAeFw0yNjA5MjIxMTA1MjlaFw0yNjA5MjMxMjU4MjlaMDMxMTAvBgNV BAMTKDJEOEZEREY1RkFFQzBEOTJCRTAzMjAyMjdEOTNGRjhBRkVBRDdDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRjslMS1Y0F+y+UyIMvMim1zEQ Ffi3IGf6jhSJpns6UJE+jzhlTc1wc5HM9QgEqQTpKZIS47H2EZJ/qqVXKXtXfdUT UAZRQUKBU/Iv/PG/kBN+A8CmFwz0jDPgS/swIOkWtUMXnOyomm1cJyIBziUYZihl TJah22saH0yZmmtWxcUJwzUqIIPI0/u5fb80q4Iwlfsd1DtHE5iZhNeOyYDljtGC LVi60wQosVPB4sNa0l2fahLGl2/59SbW21mu0l4+gUWHxX0mLPtiF0dKVI+9syDC WOOI8v4d2rfPXe3xGDMO/Dm4uvrJ6muZNP8xbCXvGcN4cjZuR1Un7CRejfArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULY/d9frsDZK+AyAifZP/iv6tfLkwHwYDVR0j BBgwFoAUPFs2nuxqJLJRS+lljA04epXUrkgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0M2Y3ODYtODIzNS00YTkwLThhMDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVF QzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5NUQ0QUU0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVCMzY5RUVDNkEyNEIyNTE0QkU5NjU4QzBEMzg3QTk1RDRB RTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4 N0E5NUQ0QUU0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy4t3TmrejUE7U5sy3mAo1OyRBgjQhQIyIM SVpj5Qs0gO7yfK5EUUzl3OBcMYN12/sWOInFxd6BrkQJ2uU7bCFRm8XFxUjobPcx oFt+0bdK7HpVXZQ83Nw49WI3d0JPUnI8D39QK+VuMjkTjRvV7rmYJhqpdJVLRZS5 s+cpTl7SLhqmDvrzjVkuPAcemB4tZOY1vsRdhWjzG6JhzQCH7Mwnwdr4jhQZL5W1 WALY33Mokbf2ANRA2je93I7s+RLUFtPO4rPEnnpShE3hB91GT0+1MQCZ1dbeZCkk bq4IZ1exdCRVaM9CEQpjQbJxoh579mKXdRIfnBAR29cixAP/bLA= -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:29 2026 by rpki-client