$ rpki-client -vvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: 0N8oA78OU1+9w5ngp/CFLCgGp4F3MPTWFrWUsxd6KVw= Subject key identifier: 3D:92:7B:3F:B1:30:37:CC:8A:9C:F7:B3:63:50:EE:E8:0F:31:2E:96 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 749C03BD00E84C714332D4CC5C38EAC2996C438E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:49:26 +0000 Manifest this update: Tue 12 May 2026 18:44:26 +0000 Manifest next update: Wed 13 May 2026 19:06:26 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: lMJQbaJoCPRWH2Z+0APun+H1Nkd8dYx8nGkgEapOJaY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9c:03:bd:00:e8:4c:71:43:32:d4:cc:5c:38:ea:c2:99:6c:43:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: May 12 18:44:26 2026 GMT Not After : May 13 19:06:26 2026 GMT Subject: CN=3D927B3FB13037CC8A9CF7B36350EEE80F312E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:ce:7e:90:62:40:c9:68:08:d6:d3:be:6e: 1a:61:9a:9b:1d:13:69:6d:1c:57:57:5e:0e:d9:b9: f1:e0:31:af:f9:46:52:0f:45:39:67:2b:a9:14:3c: c1:00:26:84:3d:1a:07:db:02:8d:b5:6a:9d:6d:89: 4d:ca:be:8c:f6:df:d8:7e:e0:70:48:81:22:19:a8: 96:84:df:1a:d7:9a:82:c3:ce:9d:43:dd:38:a6:b7: 65:12:fa:a3:ad:49:fb:71:e1:3d:fe:e4:89:12:ca: 87:c3:aa:b6:e1:0e:53:30:30:8a:09:30:a3:3e:03: 9c:01:ba:e1:bc:1b:da:71:92:e8:a8:bb:68:86:b1: 41:29:8f:16:4e:4b:5c:57:b9:2f:f9:4c:f8:3b:b5: aa:25:25:dd:28:4e:bd:49:3c:2e:21:01:99:5d:36: c0:f3:3d:35:87:b4:3a:dc:4a:13:57:16:fb:da:93: 28:51:f6:22:69:41:8d:07:cd:d4:a0:9f:18:56:e7: 48:bf:7e:f4:6d:f7:66:bf:ef:a0:c6:45:15:46:e7: fc:f4:99:a2:4f:c4:18:f5:76:96:db:2c:14:53:f0: f6:7c:a1:fb:a8:2d:d6:ad:b7:83:ba:02:44:13:b4: f3:9a:c6:49:39:1f:59:bb:21:da:dd:3e:3e:62:68: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:7B:3F:B1:30:37:CC:8A:9C:F7:B3:63:50:EE:E8:0F:31:2E:96 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:53:2f:55:5c:25:96:92:9d:4e:72:a2:b1:e3:08:35:c7: 2e:68:86:4c:78:66:fd:14:b4:ff:96:f4:6c:79:dc:ed:da:27: 6e:26:49:00:2b:a2:f7:d0:07:89:b9:b8:10:c0:91:52:b2:5b: 62:44:61:9b:7c:64:83:dc:b2:6f:d2:29:5b:fc:74:9e:47:67: 0d:7d:58:07:8a:c1:d6:98:ee:b0:b6:68:88:e9:e3:74:99:36: 39:6c:77:76:ed:b6:e0:c8:b3:07:35:3a:d7:b6:57:cf:8a:3c: 0b:c8:30:46:7c:d6:1a:4b:74:17:7a:fd:c8:63:c9:e2:9c:9c: 5e:4b:06:7a:1d:48:f3:c5:3b:60:05:39:85:c0:de:bf:6a:44: 6e:d0:5f:be:78:45:a2:3c:3e:3a:0b:36:7d:3b:87:f2:55:17: 47:0f:68:fc:1e:21:b9:c2:a5:2c:73:00:a3:50:08:f6:f4:fd: c7:10:5c:2e:ae:cc:d9:11:05:ce:a4:67:7b:ba:df:41:65:28: e8:c9:69:b2:b4:0d:93:88:1b:b0:cc:d0:e7:d8:52:41:ca:ac: 67:d1:b6:f6:d2:4f:c7:c5:33:ab:5d:3a:45:58:bf:99:c9:60: 1b:4d:f1:65:52:b3:0a:55:f6:7a:bb:90:84:b5:e8:97:c9:97: 9e:01:d0:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJwDvQDoTHFDMtTMXDjqwplsQ44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA1MTIxODQ0MjZaFw0yNjA1MTMxOTA2MjZaMDMxMTAvBgNV BAMTKDNEOTI3QjNGQjEzMDM3Q0M4QTlDRjdCMzYzNTBFRUU4MEYzMTJFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Zc5+kGJAyWgI1tO+bhphmpsd E2ltHFdXXg7ZufHgMa/5RlIPRTlnK6kUPMEAJoQ9GgfbAo21ap1tiU3Kvoz239h+ 4HBIgSIZqJaE3xrXmoLDzp1D3Timt2US+qOtSftx4T3+5IkSyofDqrbhDlMwMIoJ MKM+A5wBuuG8G9pxkuiou2iGsUEpjxZOS1xXuS/5TPg7taolJd0oTr1JPC4hAZld NsDzPTWHtDrcShNXFvvakyhR9iJpQY0HzdSgnxhW50i/fvRt92a/76DGRRVG5/z0 maJPxBj1dpbbLBRT8PZ8ofuoLdatt4O6AkQTtPOaxkk5H1m7IdrdPj5iaEBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZJ7P7EwN8yKnPezY1Du6A8xLpYwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhDUy9VXCWWkp1OcqKx4wg1xy5ohkx4Zv0U tP+W9Gx53O3aJ24mSQArovfQB4m5uBDAkVKyW2JEYZt8ZIPcsm/SKVv8dJ5HZw19 WAeKwdaY7rC2aIjp43SZNjlsd3bttuDIswc1Ote2V8+KPAvIMEZ81hpLdBd6/chj yeKcnF5LBnodSPPFO2AFOYXA3r9qRG7QX754RaI8PjoLNn07h/JVF0cPaPweIbnC pSxzAKNQCPb0/ccQXC6uzNkRBc6kZ3u630FlKOjJabK0DZOIG7DM0OfYUkHKrGfR tvbST8fFM6tdOkVYv5nJYBtN8WVSswpV9nq7kIS16JfJl54B0FE= -----END CERTIFICATE-----Generated at Wed May 13 03:59:52 2026 by rpki-client