$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: 4pFxcMKSHXas3gemMdBECyx0oZjU1VlbU+KW8ZpCf54= Subject key identifier: DB:97:54:81:4A:32:74:65:40:A3:D2:82:3B:91:33:99:86:07:8A:47 Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 018928F2006729734BBD433E598ED9241E2FEADE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:01:43 +0000 Manifest this update: Fri 24 Jul 2026 01:56:43 +0000 Manifest next update: Sat 25 Jul 2026 03:13:43 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: iznZnN+lVrzKvk077bAchtgylk5uFuzdOeeT8u9BZfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:28:f2:00:67:29:73:4b:bd:43:3e:59:8e:d9:24:1e:2f:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Jul 24 01:56:43 2026 GMT Not After : Jul 25 03:13:43 2026 GMT Subject: CN=DB9754814A32746540A3D2823B91339986078A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:9e:c3:e7:84:b4:e6:11:ce:9d:cf:db:04: 4b:84:85:37:6d:42:82:a0:54:28:ee:cf:62:60:2e: bf:6c:20:b1:27:19:5d:e4:ea:c7:a4:e8:2a:a6:81: 93:44:1c:63:22:cf:11:68:71:ea:c2:e4:74:ed:a9: 89:13:96:b9:cd:80:50:67:82:6c:b5:8e:2c:f3:8b: 55:93:3a:8d:5f:85:53:72:02:23:9b:2f:3d:1f:d2: c9:90:60:ba:2e:e8:5f:5a:20:80:79:73:51:53:80: aa:d9:af:0e:c3:4b:0d:86:87:4c:28:98:ef:c0:f8: 2f:62:ef:a4:6f:8b:3e:44:d2:82:96:b6:8f:83:57: a7:11:80:e1:66:a6:71:50:ba:36:cd:d0:02:df:c5: 35:6f:1e:9c:5f:c8:f1:52:92:47:cc:d9:5f:44:01: ea:0c:c9:f8:5d:8e:00:c9:e5:56:9e:73:49:e6:5a: 3b:4f:4f:b8:5d:35:d3:1b:4c:57:71:96:ca:34:49: 12:8b:f7:94:34:dc:59:ec:a5:f3:ab:f7:34:61:e6: 4a:23:32:64:b5:69:cd:3b:6e:1b:d7:2c:4a:7e:f5: 02:1b:d2:69:9d:3c:9d:d9:e9:f0:b3:fd:67:3c:69: c6:c8:c8:54:7d:c7:da:83:dc:3c:47:9f:98:78:9c: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:97:54:81:4A:32:74:65:40:A3:D2:82:3B:91:33:99:86:07:8A:47 X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8c:b4:00:1d:65:c8:70:6a:63:85:5e:ba:47:ae:c5:f5:9b: 31:4b:4d:6d:25:c9:64:6b:4d:bd:89:09:7f:53:be:6f:5c:84: 21:0a:b7:15:07:2e:2e:03:84:15:a1:24:99:c6:05:2e:c1:f1: f4:cb:4e:7c:7b:45:60:83:eb:63:32:2e:ea:ce:78:a5:bc:25: 36:82:7f:71:28:c8:01:df:e0:25:cc:28:24:85:b5:91:6a:58: 09:4d:79:a8:13:c6:0e:ed:80:7e:31:c5:f8:7d:a0:82:7e:14: 37:41:7b:1b:da:26:a8:9c:4b:c2:f1:8c:4c:1a:96:c4:15:7d: 8c:dd:e9:31:56:bc:9f:e9:c0:57:03:a6:c2:09:a5:a7:0d:c3: b0:e7:87:4c:4a:15:2c:e3:2c:d6:31:44:3f:c4:1b:27:15:d7: d2:c0:07:ac:1a:d4:78:81:54:84:02:a1:88:19:fb:5c:f8:b0: c5:0b:75:ae:f7:57:78:8c:ac:cc:3a:07:fc:4b:bd:50:53:93: 73:d4:74:0f:bd:12:31:ad:e1:37:c4:22:86:5a:b9:9b:71:60: 43:2c:33:eb:1d:7c:ab:6e:3d:be:cf:75:a6:3c:6f:ef:98:89: 6a:f6:4d:9c:39:cb:6a:3c:0d:36:c8:27:50:af:00:8a:ad:44: 94:8f:be:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYko8gBnKXNLvUM+WY7ZJB4v6t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA3MjQwMTU2NDNaFw0yNjA3MjUwMzEzNDNaMDMxMTAvBgNV BAMTKERCOTc1NDgxNEEzMjc0NjU0MEEzRDI4MjNCOTEzMzk5ODYwNzhBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwJ7D54S05hHOnc/bBEuEhTdt QoKgVCjuz2JgLr9sILEnGV3k6sek6CqmgZNEHGMizxFocerC5HTtqYkTlrnNgFBn gmy1jizzi1WTOo1fhVNyAiObLz0f0smQYLou6F9aIIB5c1FTgKrZrw7DSw2Gh0wo mO/A+C9i76Rviz5E0oKWto+DV6cRgOFmpnFQujbN0ALfxTVvHpxfyPFSkkfM2V9E AeoMyfhdjgDJ5Vaec0nmWjtPT7hdNdMbTFdxlso0SRKL95Q03FnspfOr9zRh5koj MmS1ac07bhvXLEp+9QIb0mmdPJ3Z6fCz/Wc8acbIyFR9x9qD3DxHn5h4nMaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25dUgUoydGVAo9KCO5EzmYYHikcwHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmMtAAdZchwamOFXrpHrsX1mzFLTW0lyWRr Tb2JCX9Tvm9chCEKtxUHLi4DhBWhJJnGBS7B8fTLTnx7RWCD62MyLurOeKW8JTaC f3EoyAHf4CXMKCSFtZFqWAlNeagTxg7tgH4xxfh9oIJ+FDdBexvaJqicS8LxjEwa lsQVfYzd6TFWvJ/pwFcDpsIJpacNw7Dnh0xKFSzjLNYxRD/EGycV19LAB6wa1HiB VIQCoYgZ+1z4sMULda73V3iMrMw6B/xLvVBTk3PUdA+9EjGt4TfEIoZauZtxYEMs M+sdfKtuPb7PdaY8b++YiWr2TZw5y2o8DTbIJ1CvAIqtRJSPvlE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:53 2026 by rpki-client