$ rpki-client -vvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: KCwXI3Kz8V1EZOk98zSrdD2qtbaUh10oDXnMu0GkTr8= Subject key identifier: 4F:B7:E9:5D:0C:24:98:79:B5:A7:6A:87:79:B8:F4:F6:23:10:87:8D Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 74B91F26FA28AFCB2DA4A17A88B2273F4B01F615 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:27:18 +0000 Manifest this update: Fri 24 Jul 2026 02:22:18 +0000 Manifest next update: Sat 25 Jul 2026 02:28:18 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: w9nb4UCoENy04h2BoPgtIg/CMhcPzqQx8ZhFTRy8SDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b9:1f:26:fa:28:af:cb:2d:a4:a1:7a:88:b2:27:3f:4b:01:f6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Jul 24 02:22:18 2026 GMT Not After : Jul 25 02:28:18 2026 GMT Subject: CN=4FB7E95D0C249879B5A76A8779B8F4F62310878D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:b5:e1:e0:d4:14:f2:4e:bd:bd:c7:b4:0b: 3d:4d:a4:32:48:4c:72:af:39:a4:cc:33:19:3c:26: 60:f9:36:0b:4b:9b:48:e9:2a:9e:81:04:7f:5b:91: 72:3a:9c:ee:9b:b1:e3:ef:61:f5:32:28:7c:67:79: ab:71:9d:c9:f8:3f:6f:22:a7:b4:cf:cc:39:65:0f: ff:8d:c7:2f:60:dc:ed:11:48:71:71:b5:5e:19:23: 9e:4f:91:1e:3a:24:45:76:39:88:9a:7e:58:83:1b: 74:50:d6:80:1f:80:d5:0a:8a:54:10:e9:30:74:5c: 26:4d:7c:3b:d1:bc:10:1f:66:30:98:d4:3b:e6:b4: a7:95:78:6b:46:77:e7:5c:44:ae:3d:29:0c:2a:cf: 42:fa:d0:0c:f5:d4:22:c3:c8:02:2b:d1:95:44:16: ae:2d:48:6b:57:c4:c8:b4:4c:e4:e1:4e:34:f9:09: 32:5b:72:f0:df:92:45:33:6b:7c:d5:d5:f0:1a:4d: 22:c9:e6:7e:0f:cc:c2:2a:09:00:a8:69:90:97:c4: f1:c9:8f:51:a6:d2:35:9e:25:54:2e:de:67:5e:05: d0:de:62:0c:82:21:ff:28:6e:8f:9e:f0:cf:ef:b8: 74:12:da:ec:58:a9:79:ae:7a:1d:49:5d:f9:20:25: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B7:E9:5D:0C:24:98:79:B5:A7:6A:87:79:B8:F4:F6:23:10:87:8D X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:54:93:bf:e1:09:73:ee:ed:0f:89:7f:e3:df:29:29:03:11: 18:4d:c5:de:df:54:2f:44:00:e2:98:97:5c:0c:74:b8:17:87: e2:82:be:5f:98:70:40:c1:64:e9:3b:2b:9b:f7:d6:df:2e:2a: ef:cf:b8:ed:06:7c:12:9f:13:05:82:45:23:cf:b1:67:ed:84: dc:19:54:22:f2:fd:19:fc:53:68:6a:9d:64:7a:10:c4:eb:73: bc:d8:da:9c:51:1f:6e:26:42:d2:18:6a:3e:51:a7:87:2a:85: 4e:c6:7f:37:97:4b:e5:87:c2:5f:e1:e6:b9:ef:cd:42:11:f1: 41:fd:b3:4f:50:a7:44:f8:79:0d:f7:ba:6c:70:2f:a2:0b:98: f1:48:85:46:29:9c:d3:5f:3b:95:92:28:c8:48:1f:d4:ff:0f: a8:67:b3:f2:da:c8:21:fa:37:99:98:43:b0:7f:40:7b:73:61: 14:a0:0c:0e:1e:1f:cf:fc:80:48:02:ab:1f:52:93:7c:74:99: 69:df:9b:81:b9:01:45:fd:60:65:1c:b3:db:50:df:a5:cb:dc: 37:3b:a1:ba:a3:f1:7a:37:f8:81:7d:74:5b:7b:94:55:fe:a8: 10:77:bf:3d:9b:db:cb:b1:d7:2e:3c:bc:7c:a9:69:0a:e6:60: 89:e9:bd:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLkfJvoor8stpKF6iLInP0sB9hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA3MjQwMjIyMThaFw0yNjA3MjUwMjI4MThaMDMxMTAvBgNV BAMTKDRGQjdFOTVEMEMyNDk4NzlCNUE3NkE4Nzc5QjhGNEY2MjMxMDg3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT7Xh4NQU8k69vce0Cz1NpDJI THKvOaTMMxk8JmD5NgtLm0jpKp6BBH9bkXI6nO6bsePvYfUyKHxneatxncn4P28i p7TPzDllD/+Nxy9g3O0RSHFxtV4ZI55PkR46JEV2OYiafliDG3RQ1oAfgNUKilQQ 6TB0XCZNfDvRvBAfZjCY1DvmtKeVeGtGd+dcRK49KQwqz0L60Az11CLDyAIr0ZVE Fq4tSGtXxMi0TOThTjT5CTJbcvDfkkUza3zV1fAaTSLJ5n4PzMIqCQCoaZCXxPHJ j1Gm0jWeJVQu3mdeBdDeYgyCIf8obo+e8M/vuHQS2uxYqXmueh1JXfkgJX2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7fpXQwkmHm1p2qHebj09iMQh40wHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNUk7/hCXPu7Q+Jf+PfKSkDERhNxd7fVC9E AOKYl1wMdLgXh+KCvl+YcEDBZOk7K5v31t8uKu/PuO0GfBKfEwWCRSPPsWfthNwZ VCLy/Rn8U2hqnWR6EMTrc7zY2pxRH24mQtIYaj5Rp4cqhU7GfzeXS+WHwl/h5rnv zUIR8UH9s09Qp0T4eQ33umxwL6ILmPFIhUYpnNNfO5WSKMhIH9T/D6hns/LayCH6 N5mYQ7B/QHtzYRSgDA4eH8/8gEgCqx9Sk3x0mWnfm4G5AUX9YGUcs9tQ36XL3Dc7 obqj8Xo3+IF9dFt7lFX+qBB3vz2b28ux1y48vHypaQrmYInpvQ8= -----END CERTIFICATE-----Generated at Fri Jul 24 05:44:47 2026 by rpki-client