$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: E/4Hw3MaDz7Z/wCI5rLW8B2EUhftyqfTHq9d2aD/7KI= Subject key identifier: 24:90:8D:9C:2C:D3:77:01:0F:96:69:3C:54:0D:03:4B:97:3F:FD:59 Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 03B6584B6C720E6FCF04CBF5C852D1A7E5C091FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 04:37:18 +0000 Manifest this update: Mon 21 Sep 2026 04:32:18 +0000 Manifest next update: Tue 22 Sep 2026 07:18:18 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: lBbtUItfJvxgFQEq6owk+F9/XagNwbD3nMdVJr0Cg0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b6:58:4b:6c:72:0e:6f:cf:04:cb:f5:c8:52:d1:a7:e5:c0:91:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: Sep 21 04:32:18 2026 GMT Not After : Sep 22 07:18:18 2026 GMT Subject: CN=24908D9C2CD377010F96693C540D034B973FFD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:bf:4d:ea:00:49:79:58:ef:57:f4:57:54: 58:bc:e9:b4:5c:2e:95:97:26:fb:7e:c1:69:86:b2: 9f:ae:17:92:cc:e2:f2:83:c2:d0:57:3d:04:74:c2: 8b:53:36:21:cf:5c:16:33:87:e5:75:9f:7e:79:f6: c2:ae:9c:30:3f:d9:1f:ec:6f:bd:68:59:84:7a:58: da:d9:d7:0c:6a:15:f8:16:00:23:cd:9a:f9:61:2a: e2:5c:d9:e8:a5:76:97:e7:0d:64:d1:1a:73:e0:84: 87:38:7f:47:89:b3:94:3b:d4:88:88:1a:73:bf:74: fa:43:25:46:28:6a:6a:94:2b:75:ab:01:f5:96:8c: 45:48:dc:66:97:45:3f:48:b2:0a:df:37:66:d1:f9: 64:3f:c2:84:e0:25:9a:65:ad:39:e7:05:5f:cb:92: 4d:d2:eb:14:34:73:ef:4b:d2:2b:6e:66:8a:41:94: 1b:e8:ca:39:fb:df:63:42:3c:5d:85:7b:2e:38:f0: b7:6f:5d:12:a6:fb:85:32:96:f7:f5:9b:ae:20:13: 11:48:bd:2b:b6:ba:c7:17:ba:27:ea:b2:1a:9b:27: 23:28:ee:76:10:76:ca:63:e1:e6:72:c0:58:7a:77: f8:9e:b0:23:af:dd:b7:5b:23:02:68:6d:70:75:66: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:90:8D:9C:2C:D3:77:01:0F:96:69:3C:54:0D:03:4B:97:3F:FD:59 X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:a1:f1:e4:a8:e5:fb:09:a2:0e:75:00:c4:ef:94:d9:62: ff:e0:e5:30:9b:43:9c:ce:db:54:05:74:8d:d4:55:63:cc:33: d2:7a:14:b1:1c:ce:b4:e6:d6:da:85:36:03:0c:66:a7:90:be: 7d:dc:c3:db:64:ff:c4:c3:e5:51:5f:a3:1c:5f:fa:ab:46:5d: 5b:0f:03:e8:ed:13:e9:d1:29:14:ab:a6:5d:c4:22:ba:03:c8: 76:0a:ac:f2:9b:fb:be:84:fb:62:fc:cb:63:f9:70:f2:79:7a: 4f:39:da:34:82:4e:81:60:80:1a:8c:13:a8:e2:67:cf:09:0f: a5:4a:cd:ab:a3:1a:19:12:7d:66:31:f7:99:4a:46:17:d1:d2: 8b:6e:5e:95:11:37:07:ec:e3:e5:36:c3:2a:73:81:3a:f1:6b: 93:d8:e5:d3:02:fc:fb:9b:ba:75:c2:91:57:e7:24:f0:ab:ac: d3:6c:6a:58:59:55:a9:e9:28:68:21:7a:a3:32:e1:5a:30:8a: 51:64:c7:8c:11:bd:b4:80:9a:00:7c:47:d1:46:8d:45:de:2e: 30:b2:49:31:d6:0d:63:17:b5:e7:b4:a1:81:df:bb:ea:d7:43: 82:16:cb:a4:ab:bb:c6:f2:d5:01:10:0d:66:79:b1:da:d9:76: f4:b5:87:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7ZYS2xyDm/PBMv1yFLRp+XAkf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA5MjEwNDMyMThaFw0yNjA5MjIwNzE4MThaMDMxMTAvBgNV BAMTKDI0OTA4RDlDMkNEMzc3MDEwRjk2NjkzQzU0MEQwMzRCOTczRkZENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Yb9N6gBJeVjvV/RXVFi86bRc LpWXJvt+wWmGsp+uF5LM4vKDwtBXPQR0wotTNiHPXBYzh+V1n3559sKunDA/2R/s b71oWYR6WNrZ1wxqFfgWACPNmvlhKuJc2eildpfnDWTRGnPghIc4f0eJs5Q71IiI GnO/dPpDJUYoamqUK3WrAfWWjEVI3GaXRT9IsgrfN2bR+WQ/woTgJZplrTnnBV/L kk3S6xQ0c+9L0ituZopBlBvoyjn732NCPF2Fey448LdvXRKm+4Uylvf1m64gExFI vSu2uscXuifqshqbJyMo7nYQdspj4eZywFh6d/iesCOv3bdbIwJobXB1Zj8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJCNnCzTdwEPlmk8VA0DS5c//VkwHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbxofHkqOX7CaIOdQDE75TZYv/g5TCbQ5zO 21QFdI3UVWPMM9J6FLEczrTm1tqFNgMMZqeQvn3cw9tk/8TD5VFfoxxf+qtGXVsP A+jtE+nRKRSrpl3EIroDyHYKrPKb+76E+2L8y2P5cPJ5ek852jSCToFggBqME6ji Z88JD6VKzaujGhkSfWYx95lKRhfR0otuXpURNwfs4+U2wypzgTrxa5PY5dMC/Pub unXCkVfnJPCrrNNsalhZVanpKGgheqMy4VowilFkx4wRvbSAmgB8R9FGjUXeLjCy STHWDWMXtee0oYHfu+rXQ4IWy6Sru8by1QEQDWZ5sdrZdvS1hzk= -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:32 2026 by rpki-client