$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: 7z6vlpjOAVgbPuzW290eVbs00aA4k4GTp61uV9AYC+s= Subject key identifier: C8:39:F8:BE:61:29:52:F7:14:B1:CD:2F:CE:FE:85:3A:9C:64:B9:2B Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 0AAB47F7E981D297DE637789AB1C664D2EC3DFAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: BF Signing time: Wed 23 Sep 2026 13:32:49 +0000 Manifest this update: Wed 23 Sep 2026 13:27:49 +0000 Manifest next update: Thu 24 Sep 2026 15:24:49 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: WMssNDkPUpWlB5bqBSyWG7I0BnIKNr+E4hVeYDMLIZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ab:47:f7:e9:81:d2:97:de:63:77:89:ab:1c:66:4d:2e:c3:df:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Sep 23 13:27:49 2026 GMT Not After : Sep 24 15:24:49 2026 GMT Subject: CN=C839F8BE612952F714B1CD2FCEFE853A9C64B92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:a3:e4:40:f3:50:f5:b6:35:a8:f4:8a:08: 2f:da:a2:b4:a8:a4:8e:53:cd:89:e7:e5:53:ba:25: 42:13:37:d4:9b:aa:5c:e6:5b:1e:bd:e4:e9:d0:73: de:1a:96:5d:86:e2:c7:38:46:a3:84:74:d7:2f:66: 75:10:95:8f:94:a5:41:ec:04:29:4b:d8:9f:65:7c: 2a:b7:eb:4a:99:85:60:d6:b9:41:43:81:60:53:89: 81:ff:20:ad:e9:4e:cb:11:3b:2c:a8:bb:36:ed:13: 9b:15:7c:8b:e5:d2:ef:82:a4:a3:14:da:ab:4b:67: d4:f4:e6:12:77:72:39:83:66:91:53:8a:dc:34:ed: f8:71:d4:2c:52:89:9f:f1:9f:8d:49:58:9b:82:28: 5f:d0:8b:46:0c:9d:a2:96:c3:05:d2:b3:81:7d:65: 68:56:22:da:ca:bc:a1:63:f8:cf:06:a9:18:3b:db: 0b:94:ec:02:01:d1:80:6d:16:d9:5e:b2:44:10:30: b7:21:17:3d:1e:02:07:df:0b:77:07:0a:1e:11:8d: 6a:14:ed:e7:1b:00:ba:4d:80:0b:c0:32:b3:6b:03: 91:df:ea:c9:82:2f:01:70:4d:5a:bd:e7:fe:78:52: 3d:d0:6f:2e:9a:fb:e7:b0:76:b6:c8:36:a2:d9:8a: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:39:F8:BE:61:29:52:F7:14:B1:CD:2F:CE:FE:85:3A:9C:64:B9:2B X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5f:ff:8d:58:7e:c7:ce:0d:0e:88:7e:aa:1d:00:34:d7:31: 1b:92:d1:79:b8:9c:f5:e2:0d:01:ab:47:86:9d:ad:84:15:f3: ed:14:59:7f:47:bf:b3:74:29:f3:0b:22:29:f9:14:c9:63:b9: f3:80:c4:88:db:63:ed:3c:1c:03:df:5a:ee:53:12:10:17:8b: 90:43:3d:4c:8d:f3:4c:c3:b8:6f:7a:02:3c:75:87:c6:58:ed: c1:d6:d3:44:e1:9d:72:3a:29:c2:49:c6:e6:ee:2e:a9:99:75: cc:d8:d0:ac:c1:30:01:fc:fc:96:a7:e8:3a:05:30:1f:f3:66: 93:0c:3f:0f:b7:2b:06:0d:9c:c2:db:79:95:43:e7:8f:41:e1: b2:aa:9d:05:a3:04:40:76:92:b8:6d:dc:17:82:e7:80:60:b1: 55:23:db:31:3f:5e:b3:2c:8c:36:a0:40:c3:4f:84:75:fc:fa: 60:fa:d4:dc:1a:8d:f8:a2:2a:29:f0:e0:a2:d7:2d:91:1a:11: c1:b9:8c:27:73:2b:fa:89:37:1d:31:97:c0:b1:1d:89:92:c8: 01:56:97:a6:f3:65:8b:ce:50:4e:cd:f2:b7:4b:95:72:2e:be: 72:44:44:3e:bd:5b:82:19:0a:89:3c:74:de:ce:56:e3:a5:8f: 14:54:7d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqtH9+mB0pfeY3eJqxxmTS7D36swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA5MjMxMzI3NDlaFw0yNjA5MjQxNTI0NDlaMDMxMTAvBgNV BAMTKEM4MzlGOEJFNjEyOTUyRjcxNEIxQ0QyRkNFRkU4NTNBOUM2NEI5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUqPkQPNQ9bY1qPSKCC/aorSo pI5TzYnn5VO6JUITN9SbqlzmWx695OnQc94all2G4sc4RqOEdNcvZnUQlY+UpUHs BClL2J9lfCq360qZhWDWuUFDgWBTiYH/IK3pTssROyyouzbtE5sVfIvl0u+CpKMU 2qtLZ9T05hJ3cjmDZpFTitw07fhx1CxSiZ/xn41JWJuCKF/Qi0YMnaKWwwXSs4F9 ZWhWItrKvKFj+M8GqRg72wuU7AIB0YBtFtleskQQMLchFz0eAgffC3cHCh4RjWoU 7ecbALpNgAvAMrNrA5Hf6smCLwFwTVq95/54Uj3Qby6a++ewdrbINqLZiiDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyDn4vmEpUvcUsc0vzv6FOpxkuSswHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpf/41YfsfODQ6IfqodADTXMRuS0Xm4nPXi DQGrR4adrYQV8+0UWX9Hv7N0KfMLIin5FMljufOAxIjbY+08HAPfWu5TEhAXi5BD PUyN80zDuG96Ajx1h8ZY7cHW00ThnXI6KcJJxubuLqmZdczY0KzBMAH8/Jan6DoF MB/zZpMMPw+3KwYNnMLbeZVD549B4bKqnQWjBEB2krht3BeC54BgsVUj2zE/XrMs jDagQMNPhHX8+mD61NwajfiiKinw4KLXLZEaEcG5jCdzK/qJNx0xl8CxHYmSyAFW l6bzZYvOUE7N8rdLlXIuvnJERD69W4IZCok8dN7OVuOljxRUfcQ= -----END CERTIFICATE-----Generated at Thu Sep 24 01:57:04 2026 by rpki-client