$ rpki-client -vvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: 1xdjoM/Mthd15IIA0MKz31W9ohqmZmSAnmReLF3VhQI= Subject key identifier: DE:13:E6:FF:AF:DF:B3:44:18:82:4A:4C:13:E1:99:94:D9:CE:47:E2 Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 35BF9462C257708A8C985DE19D3073E5E689F4F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: 0D Signing time: Tue 12 May 2026 03:01:46 +0000 Manifest this update: Tue 12 May 2026 02:56:46 +0000 Manifest next update: Wed 13 May 2026 05:56:46 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: /75MLdFn3VDRO6F8Kr0erxo2uwK+npEfrWKzdxHq264=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bf:94:62:c2:57:70:8a:8c:98:5d:e1:9d:30:73:e5:e6:89:f4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: May 12 02:56:46 2026 GMT Not After : May 13 05:56:46 2026 GMT Subject: CN=DE13E6FFAFDFB34418824A4C13E19994D9CE47E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:44:0d:3e:6e:ce:5a:36:09:99:a3:5c:8e: b6:eb:13:5f:c6:af:bc:a7:c1:ba:40:cf:ac:26:ed: fc:8a:fb:2d:bd:4f:ff:11:fa:49:b9:28:f4:20:2b: 42:28:cd:52:b7:89:ff:e9:94:76:02:7c:a1:b2:88: 26:d9:a9:1c:a6:88:a6:97:58:55:46:2f:4c:50:77: 26:60:a5:31:ea:71:fc:9e:d2:5d:7a:79:23:9c:6e: 91:65:84:04:6d:34:6a:ac:6b:8b:c2:3c:5d:4e:4d: cd:4a:1d:18:de:e1:71:f7:5a:49:6f:27:c6:56:58: e8:06:97:a7:02:cb:22:68:85:c9:18:4c:54:27:0e: c0:5e:45:75:29:d8:aa:8a:4a:02:60:54:a2:31:7c: dd:fe:66:8a:23:ce:a1:27:67:15:ac:dc:e3:1a:74: 08:a6:a0:40:bb:6b:98:46:54:94:d6:77:62:13:fd: f9:5b:82:ba:11:2f:f8:c1:35:cb:50:5c:b2:ce:36: 2c:82:09:6a:d7:0e:f3:25:be:0a:e1:78:38:aa:f7: 0f:83:3d:ee:54:bb:ac:db:fa:4f:94:81:a8:ed:12: f7:e9:ac:a4:38:3b:d5:a7:38:a5:ac:56:c4:0f:dd: 5f:c6:3b:6f:7b:1b:58:3f:77:91:83:41:80:c5:ef: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:13:E6:FF:AF:DF:B3:44:18:82:4A:4C:13:E1:99:94:D9:CE:47:E2 X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d0:9a:b3:bb:ea:a5:a9:92:84:e3:43:2f:1b:3b:e2:b6:aa: 67:ab:16:45:8f:3b:7a:38:d8:56:76:b1:40:73:78:b1:13:38: b5:b8:ca:f6:6a:c6:90:5b:87:a3:e9:74:1a:ab:27:fd:51:b2: a6:b0:6c:dc:60:3b:f5:af:d5:c4:bc:ef:47:6d:d9:ab:c0:76: 97:ed:35:22:ff:15:92:ce:04:85:fb:1b:51:b5:a0:8c:e1:41: 9b:07:32:f4:dc:fa:bf:4f:a5:ba:9c:bc:71:1c:eb:56:bf:c0: aa:33:cc:8f:97:4f:5f:55:c5:87:06:ad:0f:b9:f6:95:30:7b: c4:10:8e:87:45:52:15:56:81:75:72:f0:b0:21:9a:2a:f3:7c: 81:fe:ea:0c:b7:75:81:ef:22:6d:9f:a0:00:81:02:0c:70:e5: b4:6d:99:4c:7b:e4:3d:19:e4:a7:d3:21:bd:aa:e2:a6:c8:17: 3a:0d:68:52:3f:6a:86:6b:05:ba:26:f7:bf:40:35:80:7f:53: 07:ee:fb:6f:67:18:7c:7e:59:ef:e2:df:ed:4c:a9:88:1c:f9: 31:a1:eb:b2:8f:37:a4:22:d3:bf:cd:d3:08:5c:33:26:5a:8a: e2:58:6c:2e:39:2a:5e:e6:c2:7d:a9:d2:8b:d1:14:c3:7e:c8: e0:99:47:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNb+UYsJXcIqMmF3hnTBz5eaJ9PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA1MTIwMjU2NDZaFw0yNjA1MTMwNTU2NDZaMDMxMTAvBgNV BAMTKERFMTNFNkZGQUZERkIzNDQxODgyNEE0QzEzRTE5OTk0RDlDRTQ3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztEQNPm7OWjYJmaNcjrbrE1/G r7ynwbpAz6wm7fyK+y29T/8R+km5KPQgK0IozVK3if/plHYCfKGyiCbZqRymiKaX WFVGL0xQdyZgpTHqcfye0l16eSOcbpFlhARtNGqsa4vCPF1OTc1KHRje4XH3Wklv J8ZWWOgGl6cCyyJohckYTFQnDsBeRXUp2KqKSgJgVKIxfN3+ZoojzqEnZxWs3OMa dAimoEC7a5hGVJTWd2IT/flbgroRL/jBNctQXLLONiyCCWrXDvMlvgrheDiq9w+D Pe5Uu6zb+k+UgajtEvfprKQ4O9WnOKWsVsQP3V/GO297G1g/d5GDQYDF71SjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hPm/6/fs0QYgkpME+GZlNnOR+IwHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7QmrO76qWpkoTjQy8bO+K2qmerFkWPO3o4 2FZ2sUBzeLETOLW4yvZqxpBbh6PpdBqrJ/1RsqawbNxgO/Wv1cS870dt2avAdpft NSL/FZLOBIX7G1G1oIzhQZsHMvTc+r9PpbqcvHEc61a/wKozzI+XT19VxYcGrQ+5 9pUwe8QQjodFUhVWgXVy8LAhmirzfIH+6gy3dYHvIm2foACBAgxw5bRtmUx75D0Z 5KfTIb2q4qbIFzoNaFI/aoZrBbom979ANYB/Uwfu+29nGHx+We/i3+1MqYgc+TGh 67KPN6Qi07/N0whcMyZaiuJYbC45Kl7mwn2p0ovRFMN+yOCZR3I= -----END CERTIFICATE-----Generated at Tue May 12 22:13:47 2026 by rpki-client