$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: QFAVEwOydfxZxMpvlA+mV7snzuDBadJluwiTxekKdTc= Subject key identifier: 50:A3:0D:F3:27:E4:EC:AF:93:B7:66:8E:BA:F0:06:EA:78:03:D1:03 Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 28EF07C9895DC29B07C3127C7621331D5E326732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:53:59 +0000 Manifest this update: Thu 24 Sep 2026 18:48:59 +0000 Manifest next update: Fri 25 Sep 2026 19:39:59 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: v2z+NlDqXb1HkgpHHAiQ95bF/DAj0txScjWuKI0fyYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ef:07:c9:89:5d:c2:9b:07:c3:12:7c:76:21:33:1d:5e:32:67:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Sep 24 18:48:59 2026 GMT Not After : Sep 25 19:39:59 2026 GMT Subject: CN=50A30DF327E4ECAF93B7668EBAF006EA7803D103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:98:d1:d0:9d:88:86:16:d7:09:cf:02:05: 50:62:b1:a3:ac:22:9a:25:3e:52:1a:b7:f9:b9:a9: 23:4b:39:7b:e6:a9:f3:da:e9:ba:33:e6:58:b6:a8: a5:68:7e:f2:c7:50:81:b8:77:e4:8c:3f:1a:90:6f: 63:22:67:3e:b7:a1:81:bb:1a:cf:30:e3:df:a0:cb: 9e:5a:a7:c8:98:00:bc:5b:5d:17:49:aa:51:e5:44: 90:47:12:90:ef:0f:d9:d6:db:48:f2:de:74:64:45: 01:94:6c:d8:b4:d0:e8:67:04:09:46:fd:79:fa:c8: f3:42:b3:b3:ab:d0:85:96:15:fc:37:d5:d8:d5:35: 95:c2:7c:28:d0:7c:0b:55:fa:53:b3:96:9e:ea:7d: 9b:34:08:ef:d6:db:19:34:35:f1:77:98:42:61:c0: 95:dc:c8:9e:b2:03:b2:b8:fd:40:81:72:30:52:02: a7:a1:9e:b5:1b:f3:0c:76:2e:8c:de:8e:4e:85:47: 9e:40:0d:0d:26:55:57:07:7b:c5:5b:6b:6d:dc:95: c3:d0:80:57:bd:3c:a1:01:90:b6:d2:99:92:94:c8: f8:96:05:5b:ff:ee:2d:00:03:4e:db:84:ba:00:1a: 75:a9:2f:18:58:e3:ca:d9:8d:96:64:9d:65:a5:ce: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A3:0D:F3:27:E4:EC:AF:93:B7:66:8E:BA:F0:06:EA:78:03:D1:03 X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:e3:f6:f4:a9:82:9d:6c:a5:fc:15:a6:99:38:35:05:93: de:08:b8:ef:4e:93:43:3f:ed:b7:8e:ca:3f:21:04:80:1a:fb: 1d:a4:34:0a:38:b7:38:fa:92:d0:2d:1d:1d:50:8d:f8:1b:56: 3a:ae:7f:94:ad:08:e2:34:86:08:52:4c:18:4c:af:63:c8:af: 20:7d:97:55:2b:cc:c6:e4:9a:1f:24:c7:f0:0f:31:f8:38:e0: 7c:27:d6:f2:36:63:2a:e0:fa:e0:95:73:88:9e:22:f0:a7:b0: 4f:b2:44:1b:22:75:9a:8e:17:82:ef:7a:0e:3d:30:61:5b:57: 42:a2:9b:07:8d:8d:ff:b3:71:bc:6b:b6:c9:a2:44:31:59:6f: 3b:6d:d6:6c:f0:12:bb:66:b4:6c:d0:4e:cd:7b:0e:15:9a:c1: 19:91:06:03:f6:28:d8:2d:88:9f:b6:75:c4:0e:1c:43:57:b3: 35:32:fd:16:fe:81:07:00:39:d6:2f:1c:be:64:34:b6:bd:f0: c8:7e:18:f2:bb:08:14:ad:95:f1:22:f9:6c:d8:2e:1d:e6:bb: e5:d2:a9:83:82:53:37:a8:62:23:70:9b:51:b3:d2:dc:17:b3: e6:73:9c:6b:4a:03:19:82:94:27:de:98:69:74:17:93:7e:8b: 91:19:e5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKO8HyYldwpsHwxJ8diEzHV4yZzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA5MjQxODQ4NTlaFw0yNjA5MjUxOTM5NTlaMDMxMTAvBgNV BAMTKDUwQTMwREYzMjdFNEVDQUY5M0I3NjY4RUJBRjAwNkVBNzgwM0QxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkJjR0J2IhhbXCc8CBVBisaOs IpolPlIat/m5qSNLOXvmqfPa6boz5li2qKVofvLHUIG4d+SMPxqQb2MiZz63oYG7 Gs8w49+gy55ap8iYALxbXRdJqlHlRJBHEpDvD9nW20jy3nRkRQGUbNi00OhnBAlG /Xn6yPNCs7Or0IWWFfw31djVNZXCfCjQfAtV+lOzlp7qfZs0CO/W2xk0NfF3mEJh wJXcyJ6yA7K4/UCBcjBSAqehnrUb8wx2Lozejk6FR55ADQ0mVVcHe8Vba23clcPQ gFe9PKEBkLbSmZKUyPiWBVv/7i0AA07bhLoAGnWpLxhY48rZjZZknWWlzkr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKMN8yfk7K+Tt2aOuvAG6ngD0QMwHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYq4/b0qYKdbKX8FaaZODUFk94IuO9Ok0M/ 7beOyj8hBIAa+x2kNAo4tzj6ktAtHR1QjfgbVjquf5StCOI0hghSTBhMr2PIryB9 l1UrzMbkmh8kx/APMfg44Hwn1vI2Yyrg+uCVc4ieIvCnsE+yRBsidZqOF4Lveg49 MGFbV0KimweNjf+zcbxrtsmiRDFZbztt1mzwErtmtGzQTs17DhWawRmRBgP2KNgt iJ+2dcQOHENXszUy/Rb+gQcAOdYvHL5kNLa98Mh+GPK7CBStlfEi+WzYLh3mu+XS qYOCUzeoYiNwm1Gz0twXs+ZznGtKAxmClCfemGl0F5N+i5EZ5U4= -----END CERTIFICATE-----Generated at Fri Sep 25 13:03:21 2026 by rpki-client