$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft File: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft (raw, json) Hash identifier: 4jfdJ1A40SkTyVnJV3QiY7hQTvCPMjQDZAvWKh2/LSw= Subject key identifier: 07:40:A5:43:1D:97:33:BD:93:56:93:D2:65:A9:78:71:F4:60:73:E0 Authority key identifier: 3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 Certificate issuer: /CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Certificate serial: 5D5AF73B80409CC67C68E9BF376924225B790C1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft Manifest number: BF Signing time: Wed 23 Sep 2026 07:20:18 +0000 Manifest this update: Wed 23 Sep 2026 07:15:18 +0000 Manifest next update: Thu 24 Sep 2026 10:18:18 +0000 Files and hashes: 1: 3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl (hash: CAg+D/u8wfDcSbLvGYVttO/RMaQWTuN1pak/q2snzbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5a:f7:3b:80:40:9c:c6:7c:68:e9:bf:37:69:24:22:5b:79:0c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A720CDD09E2F97A912B9B7DF2C33529461EB9B5 Validity Not Before: Sep 23 07:15:18 2026 GMT Not After : Sep 24 10:18:18 2026 GMT Subject: CN=0740A5431D9733BD935693D265A97871F46073E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:be:db:84:1a:75:1e:7a:71:ae:ee:ba:1e: 2d:83:51:76:73:ab:e0:97:ac:71:bc:c6:ee:47:ac: 33:44:01:0b:77:96:f0:15:6c:29:cc:9b:02:e4:03: 23:8f:0f:66:33:12:3b:31:9c:8e:aa:73:3b:0c:2b: 00:9a:0b:85:a3:bc:3f:da:bc:24:38:c1:23:9d:79: ab:dd:36:69:e2:25:2a:b8:ae:ca:d2:fc:bf:76:df: 16:5a:7e:77:16:fc:8e:dd:42:7d:1a:b2:3c:68:5a: bd:09:33:97:03:89:63:7d:e9:ac:33:a1:06:61:c1: bb:f5:21:11:6d:c4:87:fb:00:bb:7b:b3:0e:e9:3d: d4:f8:7b:20:03:64:37:09:ac:ce:2a:bc:b7:00:c0: 25:a6:77:68:92:b7:f5:d7:4b:2f:d0:11:2f:78:af: 33:ba:3e:88:75:57:d8:48:f5:4e:21:7c:ac:11:49: 82:67:b3:9a:80:44:cb:dc:42:e3:97:31:02:09:f3: 50:33:b3:d6:00:8a:ea:fe:16:d6:9b:bd:89:e8:9c: 84:a0:ad:73:35:59:04:69:7c:8f:d9:bb:10:31:69: c4:cb:30:96:66:0f:90:cc:5a:77:1d:bf:a0:0b:5a: 82:2f:32:90:34:e0:94:9e:96:18:cd:5e:a1:a6:f4: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:A5:43:1D:97:33:BD:93:56:93:D2:65:A9:78:71:F4:60:73:E0 X509v3 Authority Key Identifier: keyid:3A:72:0C:DD:09:E2:F9:7A:91:2B:9B:7D:F2:C3:35:29:46:1E:B9:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/3A720CDD09E2F97A912B9B7DF2C33529461EB9B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:e8:31:40:13:52:b7:e1:cc:e3:d3:53:84:f1:32:e9:2c:a7: e3:68:91:b5:6a:6a:e3:70:30:a3:71:33:b5:6d:ec:0f:09:30: 2d:85:2e:a6:2a:da:d0:96:93:c6:61:00:28:11:43:99:c4:1b: a2:1c:81:70:bf:56:57:9e:bf:e9:9e:c4:e7:fe:01:97:dd:95: 2b:87:26:6c:72:8c:d7:a5:23:0f:dd:33:bc:19:a3:18:33:4a: ae:b7:26:11:bc:6d:42:8c:38:fe:68:9e:a9:35:c3:76:e8:b0: 96:45:40:5c:c6:28:3e:0d:d3:ec:25:40:05:73:8f:7e:53:0c: 9f:c4:33:14:a0:b9:c3:7d:68:16:12:75:f5:55:7c:6f:46:d3: b3:e3:d2:4c:e4:d6:39:49:ce:d0:2f:37:6c:11:05:3d:e3:98: c2:c0:2b:36:ab:cb:a8:0e:c4:e2:88:e6:d3:f5:82:c9:65:e6: 00:e0:9a:70:16:19:dd:5f:6d:55:38:7b:9d:50:cf:70:f2:5f: 10:96:a2:e1:34:13:78:de:7b:8f:5b:06:42:b7:54:bd:1b:d4: fa:e3:a3:f6:ee:3d:c3:4e:b2:88:3d:4f:e0:e2:40:41:c6:19: 5b:2e:b6:3a:95:a9:6c:04:90:b7:3f:cc:8c:c7:79:63:c5:f5: 9f:a2:62:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVr3O4BAnMZ8aOm/N2kkIlt5DBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0 NjFFQjlCNTAeFw0yNjA5MjMwNzE1MThaFw0yNjA5MjQxMDE4MThaMDMxMTAvBgNV BAMTKDA3NDBBNTQzMUQ5NzMzQkQ5MzU2OTNEMjY1QTk3ODcxRjQ2MDczRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGb7bhBp1Hnpxru66Hi2DUXZz q+CXrHG8xu5HrDNEAQt3lvAVbCnMmwLkAyOPD2YzEjsxnI6qczsMKwCaC4WjvD/a vCQ4wSOdeavdNmniJSq4rsrS/L923xZafncW/I7dQn0asjxoWr0JM5cDiWN96awz oQZhwbv1IRFtxIf7ALt7sw7pPdT4eyADZDcJrM4qvLcAwCWmd2iSt/XXSy/QES94 rzO6Poh1V9hI9U4hfKwRSYJns5qARMvcQuOXMQIJ81Azs9YAiur+FtabvYnonISg rXM1WQRpfI/ZuxAxacTLMJZmD5DMWncdv6ALWoIvMpA04JSelhjNXqGm9FjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0ClQx2XM72TVpPSZal4cfRgc+AwHwYDVR0j BBgwFoAUOnIM3Qni+XqRK5t98sM1KUYeubUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJhYzYxOWItMjFlNi00MWQ2LThlOTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQw OUUyRjk3QTkxMkI5QjdERjJDMzM1Mjk0NjFFQjlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTcyMENERDA5RTJGOTdBOTEyQjlCN0RGMkMzMzUyOTQ2MUVC OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvM0E3MjBDREQwOUUyRjk3QTkxMkI5QjdERjJDMzM1 Mjk0NjFFQjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANboMUATUrfhzOPTU4TxMuksp+NokbVqauNw MKNxM7Vt7A8JMC2FLqYq2tCWk8ZhACgRQ5nEG6IcgXC/Vleev+mexOf+AZfdlSuH JmxyjNelIw/dM7wZoxgzSq63JhG8bUKMOP5onqk1w3bosJZFQFzGKD4N0+wlQAVz j35TDJ/EMxSgucN9aBYSdfVVfG9G07Pj0kzk1jlJztAvN2wRBT3jmMLAKzary6gO xOKI5tP1gsll5gDgmnAWGd1fbVU4e51Qz3DyXxCWouE0E3jee49bBkK3VL0b1Prj o/buPcNOsog9T+DiQEHGGVsutjqVqWwEkLc/zIzHeWPF9Z+iYo0= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:14 2026 by rpki-client