$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: fxSi0LiNONAmlzG+6M1IAxzjgLzmWJlfJwYIpYsEbYU= Subject key identifier: 96:48:8E:1F:BC:B9:D1:F2:C1:7A:B3:89:AA:76:C1:F6:B5:95:7D:7C Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 5F1655260E9AA42B6ADB8AA4B5E023E716A0CCF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 17:04:51 +0000 Manifest this update: Tue 16 Jun 2026 16:59:51 +0000 Manifest next update: Wed 17 Jun 2026 20:14:51 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: 8E+4Aeq2nVIQmk4cdF1mit44csbRRU4wK0PmKzNiZzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:55:26:0e:9a:a4:2b:6a:db:8a:a4:b5:e0:23:e7:16:a0:cc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: Jun 16 16:59:51 2026 GMT Not After : Jun 17 20:14:51 2026 GMT Subject: CN=96488E1FBCB9D1F2C17AB389AA76C1F6B5957D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:34:2f:0a:09:3f:d6:12:a2:5d:c5:12:85: 23:9b:f7:ea:94:94:12:89:2d:30:fe:b2:b2:16:72: 0a:76:61:ba:43:1a:17:26:1d:58:88:3e:0c:d7:9f: 1e:64:5e:dc:d3:a2:6f:b4:ab:fc:f3:98:c9:cb:3a: 3a:fc:74:27:59:61:e4:0e:15:c8:96:35:e2:7a:ca: 62:78:c0:ed:2e:24:67:e6:d3:35:1f:01:58:38:eb: 8f:df:78:77:4b:6e:05:cf:4d:10:37:cf:66:7e:14: 4c:dc:9a:3f:ec:23:1f:38:07:52:1f:7f:98:ed:fe: f4:fa:f9:b9:d1:73:d0:92:7f:e9:8a:34:79:50:ad: 8f:6b:71:9b:0f:4d:92:26:1b:cd:30:96:24:d5:20: a5:91:e3:9a:76:26:50:5b:10:0e:80:dc:f8:6b:f5: 87:de:8f:5a:d9:56:98:a3:7b:57:23:03:a8:22:90: 6a:6e:20:ea:55:15:45:41:c2:d9:96:ed:30:bb:b7: e2:d2:9f:5a:df:5e:c4:1e:49:9f:ae:03:cd:df:e3: 5c:e4:6d:75:04:8a:61:d2:f0:11:01:9f:91:06:7f: fe:bf:60:47:93:7d:87:fa:bf:12:48:30:c2:98:cc: f1:74:7c:0e:fd:a4:96:7a:64:68:8a:db:d6:0e:12: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:8E:1F:BC:B9:D1:F2:C1:7A:B3:89:AA:76:C1:F6:B5:95:7D:7C X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:87:a4:0a:8a:13:1b:93:9e:2a:2a:4f:12:cc:36:7a:ef:7f: a1:17:03:7e:63:0c:70:20:13:66:85:b8:1e:a0:6b:36:f6:c9: 57:f2:49:95:87:be:1d:7b:71:37:45:22:ca:19:14:b3:9f:11: 36:2e:07:de:25:86:6f:fd:fc:04:00:4c:2f:53:50:a3:51:f0: 25:e4:b1:7d:47:e6:19:7c:1d:8e:b4:98:9d:28:ac:d6:a2:dc: d9:e3:a8:15:7b:09:5e:ba:e8:aa:b6:b2:d0:2d:97:0f:d3:f2: d5:2b:e9:20:22:a9:0a:f0:5c:54:f5:b8:ea:d9:e1:bf:89:63: ae:09:18:38:44:c5:51:42:1f:16:3e:1e:69:14:eb:0e:c1:de: 0d:51:68:74:8b:b9:65:9c:09:61:a9:81:9d:b6:39:08:ae:ab: df:f8:d4:0b:51:be:73:e2:19:90:d0:cf:e7:f8:34:78:b4:b2: 8f:ad:43:8b:53:cf:90:28:94:6d:86:95:e0:9d:1b:f9:47:0d: 8b:58:3e:d7:ca:29:3f:29:a2:48:73:2c:29:17:89:45:af:12: c7:6d:6b:1d:ae:21:09:b5:e9:1f:c8:d8:22:96:a1:62:35:a9: 0c:91:5d:a4:d9:91:9c:2f:4d:10:51:30:8d:d6:41:14:86:7e: b6:29:eb:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxZVJg6apCtq24qkteAj5xagzPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA2MTYxNjU5NTFaFw0yNjA2MTcyMDE0NTFaMDMxMTAvBgNV BAMTKDk2NDg4RTFGQkNCOUQxRjJDMTdBQjM4OUFBNzZDMUY2QjU5NTdEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCciDQvCgk/1hKiXcUShSOb9+qU lBKJLTD+srIWcgp2YbpDGhcmHViIPgzXnx5kXtzTom+0q/zzmMnLOjr8dCdZYeQO FciWNeJ6ymJ4wO0uJGfm0zUfAVg464/feHdLbgXPTRA3z2Z+FEzcmj/sIx84B1If f5jt/vT6+bnRc9CSf+mKNHlQrY9rcZsPTZImG80wliTVIKWR45p2JlBbEA6A3Phr 9Yfej1rZVpije1cjA6gikGpuIOpVFUVBwtmW7TC7t+LSn1rfXsQeSZ+uA83f41zk bXUEimHS8BEBn5EGf/6/YEeTfYf6vxJIMMKYzPF0fA79pJZ6ZGiK29YOEjFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkiOH7y50fLBerOJqnbB9rWVfXwwHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWHpAqKExuTnioqTxLMNnrvf6EXA35jDHAg E2aFuB6gazb2yVfySZWHvh17cTdFIsoZFLOfETYuB94lhm/9/AQATC9TUKNR8CXk sX1H5hl8HY60mJ0orNai3NnjqBV7CV666Kq2stAtlw/T8tUr6SAiqQrwXFT1uOrZ 4b+JY64JGDhExVFCHxY+HmkU6w7B3g1RaHSLuWWcCWGpgZ22OQiuq9/41AtRvnPi GZDQz+f4NHi0so+tQ4tTz5AolG2GleCdG/lHDYtYPtfKKT8pokhzLCkXiUWvEsdt ax2uIQm16R/I2CKWoWI1qQyRXaTZkZwvTRBRMI3WQRSGfrYp66A= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:26 2026 by rpki-client