$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft File: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft (raw, json) Hash identifier: hAETRzhjcOfcNhZS7zc6Kn6OzcZXGZZ09Za18yt+Nis= Subject key identifier: D9:90:2D:43:95:A7:FA:D1:7E:F0:CF:AB:D0:F4:DC:87:C4:3D:7D:99 Authority key identifier: 3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 Certificate issuer: /CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Certificate serial: 38D32CEC55925669F7111630FCB23E6B9560BD94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 08:05:49 +0000 Manifest this update: Fri 25 Sep 2026 08:00:49 +0000 Manifest next update: Sat 26 Sep 2026 09:26:49 +0000 Files and hashes: 1: 3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl (hash: wuKzKe/HT4iBI9XHBnCwCYS2bWy7A7JlmHnjZkvoXk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d3:2c:ec:55:92:56:69:f7:11:16:30:fc:b2:3e:6b:95:60:bd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F057C9BEB16CE774FF1483118FCFDD3BC081C99 Validity Not Before: Sep 25 08:00:49 2026 GMT Not After : Sep 26 09:26:49 2026 GMT Subject: CN=D9902D4395A7FAD17EF0CFABD0F4DC87C43D7D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:8b:c9:00:52:64:a4:9d:bf:c0:39:9a:6b: e8:b3:dc:84:8d:8d:02:12:bc:10:6f:84:c2:7b:b5: f1:91:f9:c6:b8:71:90:c5:2e:25:11:4c:b2:43:90: 44:96:07:c0:5d:f9:fc:a4:f5:18:4b:5c:41:35:be: b0:20:86:54:69:90:d4:69:2f:2c:12:0b:14:e9:c4: c9:db:9a:e2:d9:82:ca:32:76:16:6d:81:41:02:72: ba:bd:07:8f:2a:c8:cf:56:1e:75:fe:b9:91:d5:8d: 39:7e:72:57:ad:d6:07:c2:19:1f:53:99:56:c1:32: 0a:c2:b6:b0:1c:0b:bc:52:6f:3c:20:ba:1c:95:d1: 57:70:04:ec:30:b9:9c:d0:a5:76:7c:b9:e0:90:07: fa:21:c7:9d:f3:06:e6:f7:1d:cc:15:12:9e:a5:f9: df:49:cf:ff:ae:9e:6b:0b:37:c8:88:a8:30:22:39: e7:d4:0d:29:b4:81:de:78:f3:b8:91:5b:88:42:0c: e2:12:86:54:5d:3c:42:22:6f:43:54:31:7b:3b:37: bd:06:e3:11:d5:14:f1:96:44:bc:76:e4:76:00:f2: cb:ae:05:e0:3a:7f:09:02:f7:cc:01:98:35:eb:6c: 61:30:64:ed:ac:7c:85:61:f5:ba:e8:8b:f6:45:90: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:2D:43:95:A7:FA:D1:7E:F0:CF:AB:D0:F4:DC:87:C4:3D:7D:99 X509v3 Authority Key Identifier: keyid:3F:05:7C:9B:EB:16:CE:77:4F:F1:48:31:18:FC:FD:D3:BC:08:1C:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3F057C9BEB16CE774FF1483118FCFDD3BC081C99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fa:74:13:73:ef:48:8e:96:ce:c7:9e:0a:70:00:90:17:26: af:70:9c:b2:8f:a1:ca:e1:f7:73:eb:a4:f3:35:18:60:19:2a: 5d:74:a9:6f:9e:0a:0e:e8:d8:1f:7c:88:03:ee:7d:f2:b0:e3: d4:00:02:8e:5f:38:45:ea:4c:dc:7b:71:6d:0d:a6:f5:4f:50: c1:41:a4:e7:53:1c:42:18:5a:a6:03:dc:3a:7f:04:8e:c8:92: 41:a3:b9:09:2c:ab:3f:47:9f:b5:b8:e1:50:42:1d:c3:6d:b3: 4a:b5:07:4b:4a:6a:3c:c9:1d:aa:51:0c:72:b9:55:6f:23:9d: 02:da:4c:68:1f:bd:bf:b8:0f:af:ee:88:0a:29:d7:82:c1:e4: 44:89:e7:0d:8b:7d:a7:2b:23:24:44:93:da:8f:2f:28:a0:59: 21:39:00:68:c5:ce:c5:6e:26:3c:14:c1:46:4b:dc:d7:20:df: 8a:59:99:cb:1c:1a:51:bb:80:d4:a2:f6:21:cc:22:33:aa:f3: 43:e1:34:25:7b:55:b9:3f:84:b1:4e:dc:20:56:ba:55:e1:84: af:47:75:70:5c:a6:53:3d:78:42:aa:2a:0d:89:14:b2:15:0c: 35:58:6b:0b:d0:5e:30:89:c0:4c:5e:af:6d:9a:09:84:d4:2e: 25:d5:3e:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONMs7FWSVmn3ERYw/LI+a5VgvZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNC QzA4MUM5OTAeFw0yNjA5MjUwODAwNDlaFw0yNjA5MjYwOTI2NDlaMDMxMTAvBgNV BAMTKEQ5OTAyRDQzOTVBN0ZBRDE3RUYwQ0ZBQkQwRjREQzg3QzQzRDdEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXYvJAFJkpJ2/wDmaa+iz3ISN jQISvBBvhMJ7tfGR+ca4cZDFLiURTLJDkESWB8Bd+fyk9RhLXEE1vrAghlRpkNRp LywSCxTpxMnbmuLZgsoydhZtgUECcrq9B48qyM9WHnX+uZHVjTl+clet1gfCGR9T mVbBMgrCtrAcC7xSbzwguhyV0VdwBOwwuZzQpXZ8ueCQB/ohx53zBub3HcwVEp6l +d9Jz/+unmsLN8iIqDAiOefUDSm0gd5487iRW4hCDOIShlRdPEIib0NUMXs7N70G 4xHVFPGWRLx25HYA8suuBeA6fwkC98wBmDXrbGEwZO2sfIVh9broi/ZFkLsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZAtQ5Wn+tF+8M+r0PTch8Q9fZkwHwYDVR0j BBgwFoAUPwV8m+sWzndP8UgxGPz907wIHJkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJmMzljMTctNjcyNS00MmJlLWJlZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJF QjE2Q0U3NzRGRjE0ODMxMThGQ0ZERDNCQzA4MUM5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjA1N0M5QkVCMTZDRTc3NEZGMTQ4MzExOEZDRkREM0JDMDgx Qzk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvM0YwNTdDOUJFQjE2Q0U3NzRGRjE0ODMxMThGQ0ZE RDNCQzA4MUM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD6dBNz70iOls7HngpwAJAXJq9wnLKPocrh 93PrpPM1GGAZKl10qW+eCg7o2B98iAPuffKw49QAAo5fOEXqTNx7cW0NpvVPUMFB pOdTHEIYWqYD3Dp/BI7IkkGjuQksqz9Hn7W44VBCHcNts0q1B0tKajzJHapRDHK5 VW8jnQLaTGgfvb+4D6/uiAop14LB5ESJ5w2LfacrIyREk9qPLyigWSE5AGjFzsVu JjwUwUZL3Ncg34pZmcscGlG7gNSi9iHMIjOq80PhNCV7Vbk/hLFO3CBWulXhhK9H dXBcplM9eEKqKg2JFLIVDDVYawvQXjCJwExer22aCYTULiXVPos= -----END CERTIFICATE-----Generated at Sat Sep 26 01:52:52 2026 by rpki-client