$ rpki-client -vvvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: +IiCqxyp6UlTO3WgjynOq2V3k46z5JFHfsYWifbuZUM= Subject key identifier: 1F:B6:C5:FF:3A:FC:88:FD:F6:21:DA:35:74:EE:97:9B:8F:4B:02:E8 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 0AFED90226E81DBC47932CC026BC83D007023A06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 03:39:48 +0000 Manifest this update: Fri 25 Sep 2026 03:34:48 +0000 Manifest next update: Sat 26 Sep 2026 07:02:48 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: 53PaYza7ixXuYObLQZdXStUOAWoNEKXPcsHNq2i2vx8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fe:d9:02:26:e8:1d:bc:47:93:2c:c0:26:bc:83:d0:07:02:3a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Sep 25 03:34:48 2026 GMT Not After : Sep 26 07:02:48 2026 GMT Subject: CN=1FB6C5FF3AFC88FDF621DA3574EE979B8F4B02E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:84:cd:a2:21:49:ed:1c:9b:b9:cb:e4:e2:a2: eb:13:77:11:8a:d7:ae:a0:02:5a:af:6b:9b:81:43: 6b:1d:32:d1:89:1a:f4:f3:dd:c1:eb:83:27:05:d6: b1:6f:ae:44:6c:71:ca:c5:ca:51:27:2f:b8:c7:90: 21:78:92:00:45:4b:93:93:61:e8:c3:db:8a:93:c8: 28:9f:9e:13:15:dd:cf:57:19:a4:94:c8:09:b2:43: e2:16:4d:35:59:e9:be:e8:b1:d9:a3:a4:1d:b1:a2: 65:4b:b0:3d:d1:ec:c4:61:05:a9:6e:52:da:e2:e2: dc:39:8d:92:29:c7:ee:dc:19:92:e8:13:93:e4:16: 95:82:47:67:c3:71:98:a9:29:b7:e4:7e:36:40:1e: 31:a2:b2:4c:d8:ec:ef:dd:2f:6b:ea:e9:a9:6a:07: 0c:3a:d1:0d:28:40:38:a6:19:58:1c:fd:fa:43:f2: c5:60:8a:e3:39:95:7d:f2:3b:d9:30:2f:d4:be:84: 02:89:31:16:85:2a:79:0d:6e:31:db:00:ed:f5:06: f4:9e:f4:4f:14:55:5f:07:3b:79:6b:0b:8a:6f:d8: 52:2c:79:64:42:e2:e5:f8:81:7a:9e:f0:d8:ca:ee: d0:c0:c4:39:0f:fb:31:2c:2a:07:e3:dd:c6:eb:15: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:C5:FF:3A:FC:88:FD:F6:21:DA:35:74:EE:97:9B:8F:4B:02:E8 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:42:c2:79:a6:5f:c3:51:dc:ac:9e:3d:88:9e:f2:fb:98:a2: d1:88:23:51:a9:54:44:ec:43:6b:ac:7b:0e:04:57:51:b6:72: 57:43:0c:7c:69:67:42:11:28:7b:da:e7:99:84:8e:43:26:93: 0c:53:5d:c6:22:4f:7e:ff:b6:53:bc:25:20:57:43:66:38:36: 22:6d:7e:6a:7f:6b:82:a5:e6:ac:f0:44:9c:4c:44:f0:64:f4: 94:9f:76:03:e5:10:eb:7b:57:ae:53:d9:39:1f:53:ef:25:fb: a8:ad:d9:bb:e7:1c:ab:0b:54:18:9f:a8:80:f2:64:15:3a:02: be:47:9b:a0:51:02:ab:57:87:25:f0:8a:f1:6b:4c:30:06:61: 87:56:62:68:fb:09:6c:fe:77:2b:83:ba:d0:c7:bd:f0:f5:28: 11:11:63:58:0c:ed:e7:2c:a8:99:74:5d:81:6e:72:2f:38:8e: 7f:f2:55:a6:56:3f:f0:83:c3:c3:ff:b8:90:3a:c3:59:17:f2: a4:0e:a6:96:f3:1e:cb:a1:eb:ce:7b:0b:6e:65:28:8f:09:4f: 0e:ca:2d:3c:01:50:a8:5e:e1:bc:0d:fc:65:f1:7f:d2:1a:26: fc:4d:b1:5a:8c:4b:20:7f:6d:b9:8f:b9:2a:04:4b:10:06:6d: 16:01:93:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv7ZAiboHbxHkyzAJryD0AcCOgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA5MjUwMzM0NDhaFw0yNjA5MjYwNzAyNDhaMDMxMTAvBgNV BAMTKDFGQjZDNUZGM0FGQzg4RkRGNjIxREEzNTc0RUU5NzlCOEY0QjAyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvhM2iIUntHJu5y+TiousTdxGK 166gAlqva5uBQ2sdMtGJGvTz3cHrgycF1rFvrkRsccrFylEnL7jHkCF4kgBFS5OT YejD24qTyCifnhMV3c9XGaSUyAmyQ+IWTTVZ6b7osdmjpB2xomVLsD3R7MRhBalu Utri4tw5jZIpx+7cGZLoE5PkFpWCR2fDcZipKbfkfjZAHjGiskzY7O/dL2vq6alq Bww60Q0oQDimGVgc/fpD8sVgiuM5lX3yO9kwL9S+hAKJMRaFKnkNbjHbAO31BvSe 9E8UVV8HO3lrC4pv2FIseWRC4uX4gXqe8NjK7tDAxDkP+zEsKgfj3cbrFa15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7bF/zr8iP32Ido1dO6Xm49LAugwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdCwnmmX8NR3KyePYie8vuYotGII1GpVETs Q2usew4EV1G2cldDDHxpZ0IRKHva55mEjkMmkwxTXcYiT37/tlO8JSBXQ2Y4NiJt fmp/a4Kl5qzwRJxMRPBk9JSfdgPlEOt7V65T2TkfU+8l+6it2bvnHKsLVBifqIDy ZBU6Ar5Hm6BRAqtXhyXwivFrTDAGYYdWYmj7CWz+dyuDutDHvfD1KBERY1gM7ecs qJl0XYFuci84jn/yVaZWP/CDw8P/uJA6w1kX8qQOppbzHsuh6857C25lKI8JTw7K LTwBUKhe4bwN/GXxf9IaJvxNsVqMSyB/bbmPuSoESxAGbRYBk1U= -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:01 2026 by rpki-client