$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: xQ0gS77MN03CJMi+EbR6XIY/g6JZWwjt+1+uIZqljpI= Subject key identifier: D3:0A:55:26:C3:ED:61:59:5F:93:30:AA:54:C0:3B:2E:12:16:E1:FB Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 1CD2281F8590BA3561866009E7FAE014EB849A4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:05:51 +0000 Manifest this update: Wed 23 Sep 2026 20:00:51 +0000 Manifest next update: Thu 24 Sep 2026 23:34:51 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: d07/EYKlXR3cVw0j1mMi5/x3SnKN0+WJpwP/K817vWU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d2:28:1f:85:90:ba:35:61:86:60:09:e7:fa:e0:14:eb:84:9a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Sep 23 20:00:51 2026 GMT Not After : Sep 24 23:34:51 2026 GMT Subject: CN=D30A5526C3ED61595F9330AA54C03B2E1216E1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:dd:33:fd:1a:04:94:f2:d6:c5:3e:ab:ce: c2:c5:d5:d6:35:d7:a5:63:d7:0c:ed:bf:2b:ae:13: 04:71:74:3e:d0:a7:89:c8:c8:0a:24:49:48:d1:1b: 04:bf:c1:d9:08:5f:70:b9:ec:f6:b2:74:97:3e:86: 5e:84:6a:af:23:5a:5c:5e:9e:28:88:57:d7:2c:d9: fb:6e:32:3d:da:00:1f:b9:49:37:92:dc:a0:a2:31: 23:dd:fc:60:81:19:52:6a:85:fb:86:49:4a:ed:7c: 72:4f:81:63:74:0b:c8:58:5b:65:d8:cc:ab:95:d9: 19:b2:4f:fe:25:7b:51:31:2e:61:f9:be:42:1b:15: 44:ce:ec:b7:01:a5:7c:21:be:84:41:6f:16:2b:37: eb:c1:a3:86:4e:a7:d6:b5:cd:82:60:45:b1:eb:9e: f1:e9:df:b9:a6:bc:55:99:24:b3:22:0e:92:88:df: f7:02:19:38:b7:fd:40:4c:71:44:1a:48:71:eb:38: d1:59:43:0a:36:48:3c:42:62:5c:1a:a7:a5:08:63: 3e:b6:35:8b:3f:ce:6f:c0:60:82:90:89:16:91:bb: 1a:30:15:af:4f:30:9f:9f:43:8e:66:24:74:5b:b0: ca:cc:04:51:74:ac:ae:65:aa:08:bb:5d:81:2e:3d: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:55:26:C3:ED:61:59:5F:93:30:AA:54:C0:3B:2E:12:16:E1:FB X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:82:7a:16:62:e8:28:76:03:1f:6d:a4:71:25:fa:79:92:8f: 8e:d1:b7:95:4b:5d:dc:4e:c6:83:6b:56:31:4d:ef:dd:a2:6a: bd:7e:01:75:a9:12:84:3f:a3:e5:eb:85:63:10:d1:f6:f2:b8: b8:d7:a7:43:d5:4f:4a:25:19:0a:e3:3d:1d:a5:22:3a:f9:87: eb:85:b1:5c:e5:cd:13:89:a2:70:b0:3e:78:04:08:ac:5b:d7: 32:75:e3:4a:cb:fc:fb:7d:d1:1a:d4:4d:34:44:69:2c:61:76: f2:72:7d:d2:ca:9e:a0:39:92:8c:89:4e:bf:58:8d:e5:09:8e: 9f:7e:ba:1f:5b:77:35:6d:a4:8d:3e:29:71:b5:e4:a3:7f:6d: ae:bf:50:31:cf:eb:ae:08:84:c3:f9:df:9d:bf:d0:9c:51:a6: 0d:50:93:2c:b6:f9:dd:0a:49:f6:61:f0:01:db:a2:05:1a:98: 3f:23:b0:ec:cf:bf:b4:98:8f:05:f0:27:ad:08:f2:79:51:66: b9:c4:64:cd:a4:5d:4f:bc:c1:1b:c8:ab:39:c3:8d:03:96:b0: 25:e2:f1:cc:96:9e:a5:17:ad:98:fc:d0:07:fa:45:b1:ce:34: a6:00:f2:15:9b:d6:80:de:e9:d9:45:82:44:79:0e:7c:24:8e: a4:33:4b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNIoH4WQujVhhmAJ5/rgFOuEmk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA5MjMyMDAwNTFaFw0yNjA5MjQyMzM0NTFaMDMxMTAvBgNV BAMTKEQzMEE1NTI2QzNFRDYxNTk1RjkzMzBBQTU0QzAzQjJFMTIxNkUxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNgN0z/RoElPLWxT6rzsLF1dY1 16Vj1wztvyuuEwRxdD7Qp4nIyAokSUjRGwS/wdkIX3C57PaydJc+hl6Eaq8jWlxe niiIV9cs2ftuMj3aAB+5STeS3KCiMSPd/GCBGVJqhfuGSUrtfHJPgWN0C8hYW2XY zKuV2RmyT/4le1ExLmH5vkIbFUTO7LcBpXwhvoRBbxYrN+vBo4ZOp9a1zYJgRbHr nvHp37mmvFWZJLMiDpKI3/cCGTi3/UBMcUQaSHHrONFZQwo2SDxCYlwap6UIYz62 NYs/zm/AYIKQiRaRuxowFa9PMJ+fQ45mJHRbsMrMBFF0rK5lqgi7XYEuPbdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wpVJsPtYVlfkzCqVMA7LhIW4fswHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISCehZi6Ch2Ax9tpHEl+nmSj47Rt5VLXdxO xoNrVjFN792iar1+AXWpEoQ/o+XrhWMQ0fbyuLjXp0PVT0olGQrjPR2lIjr5h+uF sVzlzROJonCwPngECKxb1zJ140rL/Pt90RrUTTREaSxhdvJyfdLKnqA5koyJTr9Y jeUJjp9+uh9bdzVtpI0+KXG15KN/ba6/UDHP664IhMP5352/0JxRpg1Qkyy2+d0K SfZh8AHbogUamD8jsOzPv7SYjwXwJ60I8nlRZrnEZM2kXU+8wRvIqznDjQOWsCXi 8cyWnqUXrZj80Af6RbHONKYA8hWb1oDe6dlFgkR5DnwkjqQzS9o= -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:54 2026 by rpki-client