$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft (raw, json) Hash identifier: ZMjUmwxE7PMOkUol23abttEAMPlXIX1zZrnqXxqVs3s= Subject key identifier: 12:72:43:40:2C:CD:0E:4E:02:F4:6A:33:F0:29:C0:93:7B:C4:97:62 Authority key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Certificate issuer: /CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Certificate serial: 320F639B8FCC486E52994391E58EB9257CDA3792 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 01:10:36 +0000 Manifest this update: Fri 24 Jul 2026 01:05:36 +0000 Manifest next update: Sat 25 Jul 2026 03:21:36 +0000 Files and hashes: 1: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl (hash: KYx0XDMm+x3rVVwDeL5tskq7XWVApOlpFBd1/L+fAjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0f:63:9b:8f:cc:48:6e:52:99:43:91:e5:8e:b9:25:7c:da:37:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Validity Not Before: Jul 24 01:05:36 2026 GMT Not After : Jul 25 03:21:36 2026 GMT Subject: CN=127243402CCD0E4E02F46A33F029C0937BC49762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:2a:b7:0c:6a:72:1c:90:a8:6a:d8:19:40: 78:ac:5d:89:e9:13:26:c8:f3:af:c0:1f:cc:d8:a0: ce:69:66:53:05:26:b0:ce:bb:6e:52:ec:1e:ac:f6: 87:f5:1b:90:50:b7:5a:f2:0a:37:f0:0c:6d:a8:ab: 94:b7:39:0a:6d:d4:25:76:e2:d0:f2:87:aa:6b:99: 30:60:a9:fa:fe:2a:ab:09:a4:6b:09:bf:f2:7f:47: 38:fb:ff:b6:33:14:da:53:38:29:d6:22:59:85:5b: a7:9f:dd:b4:a5:d9:62:64:81:a3:c4:f6:3a:2b:bc: af:3c:4e:d6:59:cc:75:d6:cf:2f:6f:7f:60:e8:d8: 2f:46:ab:3d:34:c3:cb:f2:9b:d3:d7:3f:33:50:97: f4:37:55:e1:f8:ce:74:b8:82:b7:64:f0:b9:46:68: ef:e6:f9:92:6e:6c:7e:dc:1b:da:36:97:29:d1:ae: 99:2a:70:aa:60:53:6c:58:a9:99:2f:56:55:6f:e0: 2d:55:e6:c8:40:db:91:36:0e:0c:1e:fb:e7:a7:28: ea:94:fe:6c:b9:25:9c:7a:7b:2f:33:61:a8:7f:2c: eb:ce:d5:f4:3b:3f:32:4a:0b:64:6b:2b:45:d3:fe: 21:0e:7e:34:0e:14:f7:59:97:ad:eb:a8:ea:cf:86: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:43:40:2C:CD:0E:4E:02:F4:6A:33:F0:29:C0:93:7B:C4:97:62 X509v3 Authority Key Identifier: keyid:3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:b3:5f:3d:07:a7:90:14:5a:f3:25:b2:a5:c1:08:ad:c7: 36:7a:b8:70:40:71:4b:59:99:c3:f5:93:86:b6:18:07:25:69: 85:aa:dc:3b:84:78:3f:d7:ae:dc:d4:a4:4b:97:6a:49:ed:98: 2b:5d:2f:94:70:d3:08:08:a8:0b:71:7d:9d:72:cb:07:f8:e3: 64:29:8f:8d:a8:8a:1f:89:28:9d:80:f2:31:8f:52:ac:7d:b2: 92:45:80:cd:aa:80:b4:c2:b7:96:12:98:a7:9d:3d:79:52:76: e8:de:1c:36:dc:76:fc:c2:7a:93:e1:aa:f4:93:60:98:a1:d0: 48:39:27:9b:4d:2c:a2:73:97:8b:e7:2a:3e:1a:9c:8f:bd:f9: 09:2b:14:82:39:e3:76:93:12:ae:78:44:21:0c:63:ec:9f:d7: e7:90:8d:58:97:36:02:e7:18:32:ce:41:e2:59:10:7d:ea:25: c9:45:be:8e:57:6d:0e:a4:94:a5:e5:5e:e7:c0:00:5b:34:ab: bc:43:85:dc:f9:ad:e9:90:23:8e:f6:18:9d:2f:87:7d:d8:a3: a4:7f:ff:1a:a3:b5:bf:38:1b:32:d5:00:06:ea:0e:6c:a7:f0: 72:55:37:8b:6f:8d:c7:a4:41:81:af:27:b1:ab:b7:5b:a2:84: 43:08:8f:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMg9jm4/MSG5SmUOR5Y65JXzaN5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5 NUQ0QUU0ODAeFw0yNjA3MjQwMTA1MzZaFw0yNjA3MjUwMzIxMzZaMDMxMTAvBgNV BAMTKDEyNzI0MzQwMkNDRDBFNEUwMkY0NkEzM0YwMjlDMDkzN0JDNDk3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VSq3DGpyHJCoatgZQHisXYnp EybI86/AH8zYoM5pZlMFJrDOu25S7B6s9of1G5BQt1ryCjfwDG2oq5S3OQpt1CV2 4tDyh6prmTBgqfr+KqsJpGsJv/J/Rzj7/7YzFNpTOCnWIlmFW6ef3bSl2WJkgaPE 9jorvK88TtZZzHXWzy9vf2Do2C9Gqz00w8vym9PXPzNQl/Q3VeH4znS4grdk8LlG aO/m+ZJubH7cG9o2lynRrpkqcKpgU2xYqZkvVlVv4C1V5shA25E2Dgwe++enKOqU /my5JZx6ey8zYah/LOvO1fQ7PzJKC2RrK0XT/iEOfjQOFPdZl63rqOrPhusFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnJDQCzNDk4C9Goz8CnAk3vEl2IwHwYDVR0j BBgwFoAUPFs2nuxqJLJRS+lljA04epXUrkgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0M2Y3ODYtODIzNS00YTkwLThhMDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVF QzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5NUQ0QUU0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVCMzY5RUVDNkEyNEIyNTE0QkU5NjU4QzBEMzg3QTk1RDRB RTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4 N0E5NUQ0QUU0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERZs189B6eQFFrzJbKlwQitxzZ6uHBAcUtZ mcP1k4a2GAclaYWq3DuEeD/XrtzUpEuXakntmCtdL5Rw0wgIqAtxfZ1yywf442Qp j42oih+JKJ2A8jGPUqx9spJFgM2qgLTCt5YSmKedPXlSdujeHDbcdvzCepPhqvST YJih0Eg5J5tNLKJzl4vnKj4anI+9+QkrFII543aTEq54RCEMY+yf1+eQjViXNgLn GDLOQeJZEH3qJclFvo5XbQ6klKXlXufAAFs0q7xDhdz5remQI472GJ0vh33Yo6R/ /xqjtb84GzLVAAbqDmyn8HJVN4tvjcekQYGvJ7Grt1uihEMIj+0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:54:51 2026 by rpki-client