$ rpki-client -vvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: 0Akt9QVc4M3wQCRZBdIe5WQ3uyuZ+hAWZ9YoKqAopH4= Subject key identifier: 70:AE:C1:F1:FB:73:B9:AF:03:AF:B3:1D:93:0B:6B:61:3F:2E:BC:53 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 58F40A95CD0539827DA0D70603AE7F8DF875F1C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:05:35 +0000 Manifest this update: Tue 12 May 2026 16:00:35 +0000 Manifest next update: Wed 13 May 2026 16:44:35 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: 7IfOKTWdHgA4Mdnt+kv92RPuSx9TgKpmgkkFeaJilfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f4:0a:95:cd:05:39:82:7d:a0:d7:06:03:ae:7f:8d:f8:75:f1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: May 12 16:00:35 2026 GMT Not After : May 13 16:44:35 2026 GMT Subject: CN=70AEC1F1FB73B9AF03AFB31D930B6B613F2EBC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:6e:34:52:07:fb:ea:e5:a7:6f:7f:15:60: f9:37:94:e8:ba:04:b7:d8:fc:78:9e:b9:02:9e:94: 9c:fc:4a:9a:c7:13:e8:ba:60:5d:9f:47:94:f0:98: 1c:98:d2:ef:50:cf:28:6d:51:06:21:38:9e:bb:35: ff:b0:87:ba:8e:9a:54:29:20:16:8b:b5:f1:c5:7c: 39:ad:35:58:c5:2e:2b:34:1b:e8:e0:a7:a5:3b:2a: 1b:86:8a:92:cd:ac:a5:a2:00:9c:fd:22:8d:7c:d4: 52:df:be:a7:de:8b:3d:3e:d9:cc:4c:dc:87:86:79: ae:eb:27:20:99:32:2c:ba:a6:4e:b2:4e:96:ad:7c: 6f:69:fd:63:55:7f:4a:df:6b:96:51:c5:43:76:ea: 79:c1:86:ec:69:6e:7c:26:9e:4c:09:7f:4d:61:5b: 49:12:03:5c:95:45:2f:17:2b:fc:4b:53:04:c1:3b: f0:84:b9:c2:20:f8:c4:37:6d:72:06:65:76:19:86: 57:89:a8:8f:d7:fa:d8:a3:c6:76:96:e1:aa:c7:4a: 3f:16:eb:e1:62:e3:2e:7b:ed:28:a6:09:50:69:74: bb:a3:a2:e1:ab:77:1a:3b:11:f4:cb:b1:77:1e:ac: be:1e:fc:ed:d3:ae:2b:a8:80:fe:61:6b:19:ec:73: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AE:C1:F1:FB:73:B9:AF:03:AF:B3:1D:93:0B:6B:61:3F:2E:BC:53 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:bb:86:79:6b:1e:a6:cd:e3:a3:05:b5:10:e6:f2:46:9b:f1: a6:94:39:11:25:ab:0a:fc:26:34:2c:32:6f:be:88:e7:88:b2: d4:98:09:cb:7f:5a:52:7f:86:1f:56:ba:c3:70:05:fa:15:c4: 1c:f5:ba:12:a5:b2:77:9d:86:09:31:57:66:88:50:e2:61:00: 5a:a3:45:94:86:66:4a:23:76:26:9b:d4:e3:c5:9e:d8:bb:91: a0:11:f4:13:01:eb:42:ab:f3:aa:65:5b:e8:70:d7:da:2c:82: 5b:79:a2:d2:97:1e:63:db:6e:c0:8f:f4:2d:52:d5:4b:ee:7d: 60:ed:1e:92:0d:91:b0:ac:7a:66:84:c1:2c:63:42:01:e4:68: 77:79:b2:10:0d:7f:ce:e0:93:d8:6b:8e:45:d2:ea:4d:3e:b6: b6:99:49:90:7f:f9:3d:48:28:c7:46:e9:66:1c:ef:3c:1d:20: 2e:48:76:27:4e:5b:ec:db:66:16:d6:ab:a5:93:81:62:11:2c: 58:a6:0c:69:b1:0b:ee:29:6b:ec:3e:c4:7c:1e:8e:47:72:e0: cf:7f:24:d6:23:a4:ff:c7:e3:3c:4c:c8:23:2a:e1:91:5e:0f: df:56:72:93:b9:09:84:10:be:b4:d6:56:48:80:fd:ee:10:8f: 74:7f:bd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPQKlc0FOYJ9oNcGA65/jfh18cMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA1MTIxNjAwMzVaFw0yNjA1MTMxNjQ0MzVaMDMxMTAvBgNV BAMTKDcwQUVDMUYxRkI3M0I5QUYwM0FGQjMxRDkzMEI2QjYxM0YyRUJDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOom40Ugf76uWnb38VYPk3lOi6 BLfY/HieuQKelJz8SprHE+i6YF2fR5TwmByY0u9QzyhtUQYhOJ67Nf+wh7qOmlQp IBaLtfHFfDmtNVjFLis0G+jgp6U7KhuGipLNrKWiAJz9Io181FLfvqfeiz0+2cxM 3IeGea7rJyCZMiy6pk6yTpatfG9p/WNVf0rfa5ZRxUN26nnBhuxpbnwmnkwJf01h W0kSA1yVRS8XK/xLUwTBO/CEucIg+MQ3bXIGZXYZhleJqI/X+tijxnaW4arHSj8W 6+Fi4y577SimCVBpdLujouGrdxo7EfTLsXcerL4e/O3TriuogP5haxnsc+FPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcK7B8ftzua8Dr7MdkwtrYT8uvFMwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa7hnlrHqbN46MFtRDm8kab8aaUORElqwr8 JjQsMm++iOeIstSYCct/WlJ/hh9WusNwBfoVxBz1uhKlsnedhgkxV2aIUOJhAFqj RZSGZkojdiab1OPFnti7kaAR9BMB60Kr86plW+hw19osglt5otKXHmPbbsCP9C1S 1UvufWDtHpINkbCsemaEwSxjQgHkaHd5shANf87gk9hrjkXS6k0+traZSZB/+T1I KMdG6WYc7zwdIC5IdidOW+zbZhbWq6WTgWIRLFimDGmxC+4pa+w+xHwejkdy4M9/ JNYjpP/H4zxMyCMq4ZFeD99WcpO5CYQQvrTWVkiA/e4Qj3R/vZw= -----END CERTIFICATE-----Generated at Tue May 12 22:52:40 2026 by rpki-client