$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft (raw, json) Hash identifier: wBa57HvY6Rhjm88KNBnbjnaD1Wjh+xks2xBpBznTXp8= Subject key identifier: 91:AD:25:DF:9A:7C:EC:6E:85:D9:D2:54:88:6D:11:EB:2E:C1:3B:20 Authority key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Certificate issuer: /CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Certificate serial: 1455E1EB5905205F7EE4F5EEFC17210DAAD4D57E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 09:06:58 +0000 Manifest this update: Fri 25 Sep 2026 09:01:58 +0000 Manifest next update: Sat 26 Sep 2026 12:43:58 +0000 Files and hashes: 1: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl (hash: ZD9uFTVi8ks2UjvffOxH5bdNSqQjACAF1VU+SPJUgas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:55:e1:eb:59:05:20:5f:7e:e4:f5:ee:fc:17:21:0d:aa:d4:d5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Validity Not Before: Sep 25 09:01:58 2026 GMT Not After : Sep 26 12:43:58 2026 GMT Subject: CN=91AD25DF9A7CEC6E85D9D254886D11EB2EC13B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:e2:cd:a7:ff:3d:5e:b2:fa:b1:6a:3e:e2: 60:e1:a2:3d:e1:0b:a4:eb:89:f2:f0:8d:1b:44:bb: 65:30:42:45:03:a8:c3:b8:24:93:cf:99:94:3d:72: 87:84:6b:cd:3a:f9:0b:60:89:5c:f3:6f:e8:b8:bd: 04:b6:43:33:4f:ae:5c:04:52:fb:4b:7c:12:80:24: 74:fc:3c:e5:14:41:c7:34:1d:4d:5e:6f:2a:b6:ff: d7:89:98:4c:5b:67:44:b6:3c:8e:38:8b:5f:b6:56: 75:cb:a9:60:f0:c3:4a:ca:ee:e7:39:eb:7a:b9:0f: b1:0d:d4:95:b2:44:25:c3:a4:9b:d9:b7:45:98:ba: 74:8a:e0:06:99:d6:0c:9f:0a:c5:e9:fe:45:77:b7: 67:66:98:e6:46:b5:d2:1d:08:f9:66:57:9a:d7:74: b4:69:6a:cc:45:6a:fc:38:f8:96:de:dc:a8:6c:23: d5:80:81:7b:d9:f4:19:c3:35:55:f5:75:7f:a1:9c: 1d:6e:9d:d7:1d:b4:a9:55:48:c0:f1:ff:04:d9:11: a2:35:9f:91:47:3a:81:a4:e1:73:e1:24:2b:09:48: 60:6e:c9:98:08:36:2f:1a:51:58:4e:66:d1:79:7d: 0f:5c:5b:38:04:63:23:c4:7b:61:11:6e:cf:99:dc: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:25:DF:9A:7C:EC:6E:85:D9:D2:54:88:6D:11:EB:2E:C1:3B:20 X509v3 Authority Key Identifier: keyid:3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c3:2c:80:8d:aa:04:77:b5:85:af:7a:f1:4b:80:db:ea:83: 31:35:41:6d:54:75:22:21:a3:9e:1b:1f:e8:6a:e7:e5:0b:de: 81:45:7e:e0:96:9e:37:d2:4c:13:d2:78:0f:be:b7:e5:65:df: 9f:13:b0:45:39:87:ef:95:2d:18:4e:b2:47:a3:50:e8:7a:4d: 6f:5f:28:c0:a3:69:9b:6a:b3:72:5a:74:bb:d4:77:36:86:a8: f8:81:2c:14:ef:d6:dd:2e:ba:43:6b:c0:71:e7:02:8d:ba:28: 71:b1:0b:bf:dd:5c:14:7e:a4:48:dd:be:a3:42:24:a8:c6:90: 2f:46:b5:fb:49:31:c7:61:10:0e:dd:cf:eb:6f:7a:60:3e:82: fa:e2:44:16:94:0b:69:ac:d8:32:51:b1:39:c0:d9:55:e9:77: 05:28:1e:19:2d:5e:21:6e:13:69:9f:58:5d:fb:74:5b:20:f0: 35:df:e5:5c:5f:5c:53:d0:53:59:2d:de:da:f5:5a:61:f4:49: be:23:98:3e:a9:08:f9:e6:2c:7c:2d:62:c4:6a:58:2a:e9:9a: 14:99:f5:9c:04:73:1e:24:d2:2d:1d:27:04:07:c4:8a:ee:1c: 06:d7:66:6e:0f:39:a3:c8:ea:06:72:33:8c:61:48:0f:97:11: 92:ff:bb:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFXh61kFIF9+5PXu/BchDarU1X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5 NUQ0QUU0ODAeFw0yNjA5MjUwOTAxNThaFw0yNjA5MjYxMjQzNThaMDMxMTAvBgNV BAMTKDkxQUQyNURGOUE3Q0VDNkU4NUQ5RDI1NDg4NkQxMUVCMkVDMTNCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbeLNp/89XrL6sWo+4mDhoj3h C6TrifLwjRtEu2UwQkUDqMO4JJPPmZQ9coeEa806+QtgiVzzb+i4vQS2QzNPrlwE UvtLfBKAJHT8POUUQcc0HU1ebyq2/9eJmExbZ0S2PI44i1+2VnXLqWDww0rK7uc5 63q5D7EN1JWyRCXDpJvZt0WYunSK4AaZ1gyfCsXp/kV3t2dmmOZGtdIdCPlmV5rX dLRpasxFavw4+Jbe3KhsI9WAgXvZ9BnDNVX1dX+hnB1undcdtKlVSMDx/wTZEaI1 n5FHOoGk4XPhJCsJSGBuyZgINi8aUVhOZtF5fQ9cWzgEYyPEe2ERbs+Z3Ej5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUka0l35p87G6F2dJUiG0R6y7BOyAwHwYDVR0j BBgwFoAUPFs2nuxqJLJRS+lljA04epXUrkgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0M2Y3ODYtODIzNS00YTkwLThhMDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVF QzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5NUQ0QUU0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVCMzY5RUVDNkEyNEIyNTE0QkU5NjU4QzBEMzg3QTk1RDRB RTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4 N0E5NUQ0QUU0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbDLICNqgR3tYWvevFLgNvqgzE1QW1UdSIh o54bH+hq5+UL3oFFfuCWnjfSTBPSeA++t+Vl358TsEU5h++VLRhOskejUOh6TW9f KMCjaZtqs3JadLvUdzaGqPiBLBTv1t0uukNrwHHnAo26KHGxC7/dXBR+pEjdvqNC JKjGkC9GtftJMcdhEA7dz+tvemA+gvriRBaUC2ms2DJRsTnA2VXpdwUoHhktXiFu E2mfWF37dFsg8DXf5VxfXFPQU1kt3tr1WmH0Sb4jmD6pCPnmLHwtYsRqWCrpmhSZ 9ZwEcx4k0i0dJwQHxIruHAbXZm4POaPI6gZyM4xhSA+XEZL/u64= -----END CERTIFICATE-----Generated at Sat Sep 26 04:21:47 2026 by rpki-client