$ rpki-client -vvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: a9RyA+Zel0MOloPqWbGLc21UZKVVZIx1fFl9KvKpLvc= Subject key identifier: 71:D1:73:65:CA:14:EE:F1:B1:47:DF:0D:61:FA:3C:58:C2:7E:04:A6 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 459FA03FCB5E91168041CA28C63ED610070FFEF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:39:52 +0000 Manifest this update: Fri 24 Jul 2026 00:34:52 +0000 Manifest next update: Sat 25 Jul 2026 02:47:52 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: qbVF3wOPyD5+DJtkp3EJsd5X9V5/YXJkUBCZDZ7rOCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9f:a0:3f:cb:5e:91:16:80:41:ca:28:c6:3e:d6:10:07:0f:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Jul 24 00:34:52 2026 GMT Not After : Jul 25 02:47:52 2026 GMT Subject: CN=71D17365CA14EEF1B147DF0D61FA3C58C27E04A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:20:a9:ef:de:f1:45:a4:95:bb:bc:48:6d: 38:74:83:13:83:fb:2a:7d:e9:f3:b9:84:c2:d6:a0: be:29:2a:94:1d:69:f3:9a:a0:31:3e:a5:7e:1d:50: 9c:c2:17:3f:f8:2e:a5:c9:ff:68:df:9d:c2:c9:fe: e9:18:c1:c3:f4:ff:98:a0:e6:b7:df:cb:e3:90:c8: f4:c8:4a:1f:be:54:11:11:75:2c:2c:0d:22:70:7e: ca:97:25:29:a1:63:e7:0b:b5:5b:21:45:cd:c3:f7: c5:08:ba:35:35:9d:b7:d4:48:7c:9f:b2:0c:6d:e7: 4e:26:c7:b4:55:42:95:f1:c2:ef:09:a0:e6:7e:a7: be:f4:e4:7c:0c:dd:69:11:fd:b2:42:0a:68:58:0c: 30:19:31:2f:e1:d5:10:d4:a2:b5:21:ee:f0:34:7a: 38:ec:d9:3b:42:b0:ea:47:db:69:18:22:32:16:75: 66:61:5d:28:66:74:9e:97:df:e1:b5:05:b5:4e:8f: 3f:9f:51:6e:2b:90:cb:87:26:e4:92:48:8b:d0:3a: db:e5:cb:b3:e4:f5:bf:26:3b:d9:d8:c6:0d:dc:6c: a7:47:00:bf:2a:38:3c:78:23:c5:55:30:25:c0:77: cc:b8:45:7b:16:63:72:a0:b5:83:82:b1:56:9a:da: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:73:65:CA:14:EE:F1:B1:47:DF:0D:61:FA:3C:58:C2:7E:04:A6 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f2:e5:0c:bb:31:a9:37:97:3b:a7:28:ee:b1:38:7c:79:fb: 5c:47:e8:de:11:83:87:75:fe:17:6b:b8:cc:dc:7d:51:35:c2: 24:f7:29:a5:58:f7:e1:7a:3e:54:c1:db:56:14:6c:30:cf:97: b0:e6:46:f7:69:54:f0:34:40:2e:6b:c3:d8:53:7e:61:21:a6: fe:95:7a:6a:73:58:39:82:a1:29:36:85:a3:3d:98:f2:88:aa: 7b:95:79:4f:e7:09:c8:9d:37:77:c4:2e:2d:5b:78:9e:97:dc: 0f:b9:98:e7:03:b6:fa:3e:8e:ad:a6:3b:16:2c:1e:9a:82:3a: 95:fc:11:87:27:dd:3c:08:98:3c:32:c5:0d:9b:48:7a:b1:c4: f4:8d:85:1f:dd:9d:e2:0f:c0:50:22:6c:c5:a0:f6:d1:fe:e0: 0f:ea:99:ba:4b:2b:0a:b3:79:4d:3f:9e:84:87:f9:60:4e:df: 4e:d6:52:17:ac:e9:ed:9c:40:74:7c:8e:de:55:70:a4:c2:bf: 2e:b5:82:68:bb:fa:7c:cc:bc:15:f4:71:a2:f0:a3:f5:b3:1e: 2d:01:f3:09:11:9b:32:88:64:25:6e:62:9a:3e:46:ee:de:d5: 14:58:d0:7f:a2:9b:2b:1b:4f:33:cb:1a:00:3e:eb:9b:9f:23: 67:e2:73:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ+gP8tekRaAQcooxj7WEAcP/vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA3MjQwMDM0NTJaFw0yNjA3MjUwMjQ3NTJaMDMxMTAvBgNV BAMTKDcxRDE3MzY1Q0ExNEVFRjFCMTQ3REYwRDYxRkEzQzU4QzI3RTA0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDCCp797xRaSVu7xIbTh0gxOD +yp96fO5hMLWoL4pKpQdafOaoDE+pX4dUJzCFz/4LqXJ/2jfncLJ/ukYwcP0/5ig 5rffy+OQyPTISh++VBERdSwsDSJwfsqXJSmhY+cLtVshRc3D98UIujU1nbfUSHyf sgxt504mx7RVQpXxwu8JoOZ+p7705HwM3WkR/bJCCmhYDDAZMS/h1RDUorUh7vA0 ejjs2TtCsOpH22kYIjIWdWZhXShmdJ6X3+G1BbVOjz+fUW4rkMuHJuSSSIvQOtvl y7Pk9b8mO9nYxg3cbKdHAL8qODx4I8VVMCXAd8y4RXsWY3KgtYOCsVaa2nYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdFzZcoU7vGxR98NYfo8WMJ+BKYwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvy5Qy7Mak3lzunKO6xOHx5+1xH6N4Rg4d1 /hdruMzcfVE1wiT3KaVY9+F6PlTB21YUbDDPl7DmRvdpVPA0QC5rw9hTfmEhpv6V empzWDmCoSk2haM9mPKIqnuVeU/nCcidN3fELi1beJ6X3A+5mOcDtvo+jq2mOxYs HpqCOpX8EYcn3TwImDwyxQ2bSHqxxPSNhR/dneIPwFAibMWg9tH+4A/qmbpLKwqz eU0/noSH+WBO307WUhes6e2cQHR8jt5VcKTCvy61gmi7+nzMvBX0caLwo/WzHi0B 8wkRmzKIZCVuYpo+Ru7e1RRY0H+imysbTzPLGgA+65ufI2fic/o= -----END CERTIFICATE-----Generated at Fri Jul 24 03:45:45 2026 by rpki-client