$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: +vvKW2cUu6ndxrXXDNX0gxJ7Vbkw2y63sojMA2M/zS4= Subject key identifier: B7:8D:88:1C:59:37:0E:0D:0E:3C:5D:0B:F7:BB:8F:79:24:80:4A:71 Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 11DB1FC9BF3C9056AD966C5B22D6E8B31619358A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 02:42:28 +0000 Manifest this update: Sun 27 Sep 2026 02:37:28 +0000 Manifest next update: Mon 28 Sep 2026 06:25:28 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: anyvklEDX/J1KPNol7X6WcTK1RG3e0DRTLB4EekKWxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:db:1f:c9:bf:3c:90:56:ad:96:6c:5b:22:d6:e8:b3:16:19:35:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Sep 27 02:37:28 2026 GMT Not After : Sep 28 06:25:28 2026 GMT Subject: CN=B78D881C59370E0D0E3C5D0BF7BB8F7924804A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:c1:f3:eb:a5:91:04:8e:8e:86:a8:66:f3: 42:26:3d:59:f0:aa:99:a8:2d:95:80:61:64:d5:1d: ca:43:a5:48:40:9e:b8:91:fa:53:f6:b8:9f:79:3d: 17:1a:c9:b3:be:b0:5d:02:d7:01:17:b8:cf:a1:61: f1:0d:ab:6b:12:86:4e:12:0d:0b:6a:0f:1e:64:4f: ca:e6:cd:0b:c5:f6:4a:9b:15:5b:03:e1:27:33:e7: fe:8e:8e:9d:db:77:1b:fb:c9:91:aa:ce:19:1b:b0: 65:65:10:ea:8a:53:11:54:f8:f9:0b:89:1a:3b:a9: 1d:80:a0:3e:cc:10:3e:40:07:23:b6:bd:ca:bc:af: 13:91:79:ff:1a:a4:c6:40:d6:85:e2:6a:d7:6e:d7: 9b:c2:eb:87:fd:73:2f:05:b3:5c:d8:da:cd:ef:aa: df:ea:d1:4e:ce:31:59:2c:47:c5:54:08:42:7f:61: 4c:25:fa:24:17:11:0d:1b:e0:a5:19:d8:58:ef:c1: c4:42:fc:4c:d9:2d:8e:8f:4f:47:11:88:d6:9b:15: 41:2f:c0:1e:0b:59:15:d5:f9:a1:64:0e:fe:d8:ad: e3:56:86:72:d9:79:01:fb:fe:a5:dc:e9:d1:6f:e0: 5f:84:d0:28:33:df:13:b3:3b:4b:20:a9:d8:7b:10: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8D:88:1C:59:37:0E:0D:0E:3C:5D:0B:F7:BB:8F:79:24:80:4A:71 X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:bc:34:8d:19:0b:08:20:a9:7a:70:f8:e1:d6:6a:17:6c: 55:05:6d:8e:7c:96:3d:eb:17:04:9c:42:5f:93:bb:3c:31:70: 52:8c:d4:d0:b5:5d:2e:9e:4f:c1:25:d1:49:b1:69:4b:25:86: a8:11:cb:4f:37:c2:2e:23:1c:e5:dc:e6:4d:6c:85:fa:15:23: 97:0a:ae:18:eb:7c:20:be:43:22:6b:01:ed:69:31:02:5c:35: 26:7a:eb:53:0f:57:30:65:db:e8:b7:97:76:08:e9:ee:9b:cd: b4:37:d7:e8:6b:10:ba:06:69:46:2e:68:48:d6:71:17:b1:12: f1:f4:ac:fe:41:b5:8c:55:44:e0:ff:2c:02:a1:49:8f:63:a4: b1:c6:2a:f4:ac:23:91:ac:af:de:34:a3:b7:f8:0e:63:bd:bd: 4c:19:99:46:68:f3:37:f1:a8:2f:21:1b:fc:6b:7e:32:55:f6: 2a:16:90:3b:18:30:5a:a6:1e:10:aa:91:70:c9:51:70:e6:2f: 67:e8:81:e9:57:cb:e6:44:45:e6:67:37:f9:7c:f4:b2:38:f1: 7f:91:0f:e1:6b:ce:8e:79:2e:df:09:8f:c6:79:bc:81:a8:ce: 0f:16:8b:c9:72:32:45:a1:56:7c:70:cd:98:67:83:2d:ac:66: 09:bc:b5:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdsfyb88kFatlmxbItbosxYZNYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA5MjcwMjM3MjhaFw0yNjA5MjgwNjI1MjhaMDMxMTAvBgNV BAMTKEI3OEQ4ODFDNTkzNzBFMEQwRTNDNUQwQkY3QkI4Rjc5MjQ4MDRBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gMHz66WRBI6Ohqhm80ImPVnw qpmoLZWAYWTVHcpDpUhAnriR+lP2uJ95PRcaybO+sF0C1wEXuM+hYfENq2sShk4S DQtqDx5kT8rmzQvF9kqbFVsD4Scz5/6Ojp3bdxv7yZGqzhkbsGVlEOqKUxFU+PkL iRo7qR2AoD7MED5AByO2vcq8rxORef8apMZA1oXiatdu15vC64f9cy8Fs1zY2s3v qt/q0U7OMVksR8VUCEJ/YUwl+iQXEQ0b4KUZ2FjvwcRC/EzZLY6PT0cRiNabFUEv wB4LWRXV+aFkDv7YreNWhnLZeQH7/qXc6dFv4F+E0Cgz3xOzO0sgqdh7EJ15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt42IHFk3Dg0OPF0L97uPeSSASnEwHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8dvDSNGQsIIKl6cPjh1moXbFUFbY58lj3r FwScQl+TuzwxcFKM1NC1XS6eT8El0UmxaUslhqgRy083wi4jHOXc5k1shfoVI5cK rhjrfCC+QyJrAe1pMQJcNSZ661MPVzBl2+i3l3YI6e6bzbQ31+hrELoGaUYuaEjW cRexEvH0rP5BtYxVROD/LAKhSY9jpLHGKvSsI5Gsr940o7f4DmO9vUwZmUZo8zfx qC8hG/xrfjJV9ioWkDsYMFqmHhCqkXDJUXDmL2fogelXy+ZEReZnN/l89LI48X+R D+Frzo55Lt8Jj8Z5vIGozg8Wi8lyMkWhVnxwzZhngy2sZgm8tYY= -----END CERTIFICATE-----Generated at Sun Sep 27 14:08:10 2026 by rpki-client