$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: KKqtoxkMeGEse34K2X+6e+4qyR17GxRw6bqXx1v0am0= Subject key identifier: 34:9E:B2:EA:E3:5B:9A:67:28:D7:0E:5F:0B:A0:EB:84:17:03:2C:14 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 2404B995427AF5BBDB09727E1B69C4F00B6B50F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 05:32:48 +0000 Manifest this update: Wed 23 Sep 2026 05:27:48 +0000 Manifest next update: Thu 24 Sep 2026 08:50:48 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: ECv7PB5eGoBjr3JNRL/T63OeyEcmYSPUBXG9OcJeaFQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:04:b9:95:42:7a:f5:bb:db:09:72:7e:1b:69:c4:f0:0b:6b:50:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Sep 23 05:27:48 2026 GMT Not After : Sep 24 08:50:48 2026 GMT Subject: CN=349EB2EAE35B9A6728D70E5F0BA0EB8417032C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:0f:db:1e:c1:fa:8a:26:ce:87:d7:5a:d6: d8:97:ce:4c:1c:8c:4f:91:3e:5c:e0:67:ec:c1:f8: 19:34:e6:4b:f7:5d:21:a8:1d:4f:c6:5c:b3:79:64: d4:b3:b2:fb:f4:61:83:5f:e0:36:ac:6f:07:02:fa: 37:33:f6:49:12:47:2e:89:5d:55:ab:b4:9b:31:65: 04:5c:e2:df:66:3c:88:ca:d6:06:7a:8d:02:2d:90: 04:d1:1b:3b:71:ee:e3:96:34:d4:e6:c5:cc:b0:00: 0d:0a:34:21:16:a7:34:88:12:10:db:42:a8:5f:a0: 2c:e0:ea:06:b0:51:c8:3b:8d:7c:1c:e8:16:ea:5c: 0a:b2:0a:43:b8:39:96:87:7b:bf:bf:9f:4c:70:08: 93:d4:dc:64:be:42:04:d2:08:93:51:8c:f6:37:a3: a7:8f:23:71:20:67:6e:e1:1b:b8:79:6a:78:65:ee: 00:29:02:b0:cb:5c:37:0d:12:b3:97:40:f4:fb:58: bd:4b:91:42:41:37:7b:0d:e9:b6:57:b9:6b:86:43: 7e:f9:af:9b:05:0d:a9:d1:18:a4:e3:ee:97:0c:15: 35:b2:e4:2d:80:6b:09:ce:32:7a:fb:2c:0c:16:a0: 7e:18:2a:b2:0f:dc:d0:1a:9a:95:31:a0:9b:89:54: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9E:B2:EA:E3:5B:9A:67:28:D7:0E:5F:0B:A0:EB:84:17:03:2C:14 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:63:fa:8e:02:e8:26:90:b2:83:00:39:11:14:59:55:b6: cd:6c:c6:3d:de:35:e9:8a:28:75:50:65:9f:ba:9f:b0:7d:2f: a6:ca:6b:89:8a:17:fc:9e:b6:14:00:18:91:8b:66:00:2b:b8: c0:5f:1a:66:84:12:37:b3:ea:13:ad:3c:83:9f:0d:ee:57:e3: 22:b2:91:71:07:4c:08:ef:06:8e:e1:f5:e5:62:5d:d0:fd:54: 9a:c4:b0:d8:b5:34:71:de:c1:d1:10:7c:99:ae:d5:16:4a:f4: bf:41:b0:0f:79:99:e4:2d:34:7c:5d:eb:84:37:20:69:28:a4: ad:0f:5a:3f:91:f5:82:64:fb:8e:85:14:92:ec:43:de:3a:05: c8:de:5a:30:b6:67:09:20:bc:97:20:06:28:ce:81:fc:d8:77: ae:3f:76:48:99:a0:c1:fd:d8:78:e3:03:f9:08:d7:06:fd:90: fc:1b:14:48:3b:db:bc:93:fb:2f:b7:bd:98:a5:5d:a8:ec:50: 4d:24:35:89:c1:12:f4:88:16:33:59:7d:ae:40:4b:cf:93:19: 66:4c:d1:c3:be:a6:12:52:95:f7:60:3c:83:d1:7f:2c:9f:29: 92:d9:ad:9c:b0:23:f8:00:b1:24:d9:68:05:ac:a3:73:28:06: f0:c6:94:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAS5lUJ69bvbCXJ+G2nE8AtrUPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA5MjMwNTI3NDhaFw0yNjA5MjQwODUwNDhaMDMxMTAvBgNV BAMTKDM0OUVCMkVBRTM1QjlBNjcyOEQ3MEU1RjBCQTBFQjg0MTcwMzJDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPQ/bHsH6iibOh9da1tiXzkwc jE+RPlzgZ+zB+Bk05kv3XSGoHU/GXLN5ZNSzsvv0YYNf4DasbwcC+jcz9kkSRy6J XVWrtJsxZQRc4t9mPIjK1gZ6jQItkATRGztx7uOWNNTmxcywAA0KNCEWpzSIEhDb QqhfoCzg6gawUcg7jXwc6BbqXAqyCkO4OZaHe7+/n0xwCJPU3GS+QgTSCJNRjPY3 o6ePI3EgZ27hG7h5anhl7gApArDLXDcNErOXQPT7WL1LkUJBN3sN6bZXuWuGQ375 r5sFDanRGKTj7pcMFTWy5C2AawnOMnr7LAwWoH4YKrIP3NAampUxoJuJVEL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJ6y6uNbmmco1w5fC6DrhBcDLBQwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2AY/qOAugmkLKDADkRFFlVts1sxj3eNemK KHVQZZ+6n7B9L6bKa4mKF/yethQAGJGLZgAruMBfGmaEEjez6hOtPIOfDe5X4yKy kXEHTAjvBo7h9eViXdD9VJrEsNi1NHHewdEQfJmu1RZK9L9BsA95meQtNHxd64Q3 IGkopK0PWj+R9YJk+46FFJLsQ946BcjeWjC2ZwkgvJcgBijOgfzYd64/dkiZoMH9 2HjjA/kI1wb9kPwbFEg727yT+y+3vZilXajsUE0kNYnBEvSIFjNZfa5AS8+TGWZM 0cO+phJSlfdgPIPRfyyfKZLZrZywI/gAsSTZaAWso3MoBvDGlC8= -----END CERTIFICATE-----Generated at Wed Sep 23 21:35:49 2026 by rpki-client