$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft File: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft (raw, json) Hash identifier: Q3Kje19LhO1b66DQ8TZp5EYtwxqNdmms0JICnifcZK0= Subject key identifier: 10:9F:B0:A1:B1:9F:2C:18:A9:E7:2E:E7:B8:85:C8:1F:29:2C:B5:31 Authority key identifier: 3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 Certificate issuer: /CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Certificate serial: 2D74EE7EE587B08D4B8695D5D1EB9C303C27A201 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:18:49 +0000 Manifest this update: Tue 12 May 2026 21:13:49 +0000 Manifest next update: Wed 13 May 2026 22:24:49 +0000 Files and hashes: 1: 3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl (hash: znpn73JP6ApfNftw0iM9EgPYG+qwmslYoZrEkH+3H8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:ee:7e:e5:87:b0:8d:4b:86:95:d5:d1:eb:9c:30:3c:27:a2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5B369EEC6A24B2514BE9658C0D387A95D4AE48 Validity Not Before: May 12 21:13:49 2026 GMT Not After : May 13 22:24:49 2026 GMT Subject: CN=109FB0A1B19F2C18A9E72EE7B885C81F292CB531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:11:ea:19:df:eb:5b:12:00:ab:3d:31:69: a5:8e:c2:0f:b6:d2:79:19:cf:a1:4b:02:3f:2b:7c: 89:eb:9d:46:18:b0:0f:82:e3:02:70:e2:90:4a:64: 18:94:76:f8:90:0c:e0:8b:e6:46:ad:44:3b:a0:5d: 4a:ce:3a:47:74:9c:3c:d1:11:c2:36:7a:92:55:03: 1b:87:71:b9:ca:5e:68:57:46:48:f9:b2:0d:d5:6f: b7:76:87:7a:98:64:31:a0:fa:5a:8f:45:b1:1f:26: 1b:e0:1a:65:96:78:78:59:e1:74:01:b1:54:28:44: e5:f2:fa:11:19:f7:4b:77:d0:89:82:b4:2f:28:5b: 82:04:01:db:09:1f:b9:66:8a:98:bc:6b:39:33:c7: 81:e6:48:96:73:40:54:8e:98:96:1e:d6:86:46:77: df:e4:cf:b5:72:e3:1f:e2:9a:d0:0c:e5:ed:dd:fc: 69:21:2c:3b:34:19:f1:a3:35:37:44:43:f3:93:8d: f5:87:c3:43:03:b8:74:17:fd:31:c2:90:09:22:1e: 73:0d:ed:b9:90:6b:a6:a7:59:2f:97:46:d3:b1:60: 75:29:dc:e8:a2:10:61:66:7b:b0:0e:51:0f:b7:94: c5:d4:a1:d0:8f:3a:5d:6a:89:2f:f4:bb:9a:7a:74: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:B0:A1:B1:9F:2C:18:A9:E7:2E:E7:B8:85:C8:1F:29:2C:B5:31 X509v3 Authority Key Identifier: keyid:3C:5B:36:9E:EC:6A:24:B2:51:4B:E9:65:8C:0D:38:7A:95:D4:AE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/3C5B369EEC6A24B2514BE9658C0D387A95D4AE48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:52:ec:04:15:27:d5:3e:57:14:15:41:c1:0b:55:0e:cb:a7: 10:ae:1b:b4:15:3e:8f:f2:d9:98:66:82:3b:56:b7:81:2e:3a: 94:13:55:5c:d2:ac:02:a9:5a:41:54:72:cf:fb:29:51:e9:b4: e1:1c:ce:6d:53:f5:00:5b:6f:00:57:e1:bf:ce:70:9d:3e:e1: e3:85:65:7d:86:b4:f0:7e:89:1c:3a:27:97:8f:8e:17:24:3c: e0:2c:c4:27:d5:a2:a4:fc:c6:73:4d:93:62:e4:a8:94:a6:46: 5e:49:1a:0c:19:a2:24:da:10:ae:d7:6b:8b:32:4d:3e:86:fb: cf:c7:b7:4b:cf:08:3a:7e:9c:ff:41:a8:db:a8:6f:97:e6:c1: 76:27:cf:13:89:ad:46:4b:41:b7:c3:e0:84:12:2c:95:59:e2: 59:60:14:63:4f:df:1b:76:d7:e3:ec:51:cd:7f:3d:16:10:a1: 1c:54:4f:7d:1e:cd:ee:c6:51:4f:f4:23:55:53:de:df:13:e8: 7d:2c:63:bc:4a:56:d4:c5:c8:b1:fc:89:2a:7c:dd:fc:70:87: 78:c4:a6:da:b6:c1:37:7c:aa:26:8e:b1:95:65:0f:e2:a3:1f: b4:e3:e1:6f:72:5e:cf:96:61:1c:7a:b2:cc:a4:11:53:e5:10: d1:90:47:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXTufuWHsI1LhpXV0eucMDwnogEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5 NUQ0QUU0ODAeFw0yNjA1MTIyMTEzNDlaFw0yNjA1MTMyMjI0NDlaMDMxMTAvBgNV BAMTKDEwOUZCMEExQjE5RjJDMThBOUU3MkVFN0I4ODVDODFGMjkyQ0I1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1BHqGd/rWxIAqz0xaaWOwg+2 0nkZz6FLAj8rfInrnUYYsA+C4wJw4pBKZBiUdviQDOCL5katRDugXUrOOkd0nDzR EcI2epJVAxuHcbnKXmhXRkj5sg3Vb7d2h3qYZDGg+lqPRbEfJhvgGmWWeHhZ4XQB sVQoROXy+hEZ90t30ImCtC8oW4IEAdsJH7lmipi8azkzx4HmSJZzQFSOmJYe1oZG d9/kz7Vy4x/imtAM5e3d/GkhLDs0GfGjNTdEQ/OTjfWHw0MDuHQX/THCkAkiHnMN 7bmQa6anWS+XRtOxYHUp3OiiEGFme7AOUQ+3lMXUodCPOl1qiS/0u5p6dNzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEJ+wobGfLBip5y7nuIXIHykstTEwHwYDVR0j BBgwFoAUPFs2nuxqJLJRS+lljA04epXUrkgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I0M2Y3ODYtODIzNS00YTkwLThhMDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVF QzZBMjRCMjUxNEJFOTY1OEMwRDM4N0E5NUQ0QUU0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVCMzY5RUVDNkEyNEIyNTE0QkU5NjU4QzBEMzg3QTk1RDRB RTQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvM0M1QjM2OUVFQzZBMjRCMjUxNEJFOTY1OEMwRDM4 N0E5NUQ0QUU0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtS7AQVJ9U+VxQVQcELVQ7LpxCuG7QVPo/y 2ZhmgjtWt4EuOpQTVVzSrAKpWkFUcs/7KVHptOEczm1T9QBbbwBX4b/OcJ0+4eOF ZX2GtPB+iRw6J5ePjhckPOAsxCfVoqT8xnNNk2LkqJSmRl5JGgwZoiTaEK7Xa4sy TT6G+8/Ht0vPCDp+nP9BqNuob5fmwXYnzxOJrUZLQbfD4IQSLJVZ4llgFGNP3xt2 1+PsUc1/PRYQoRxUT30eze7GUU/0I1VT3t8T6H0sY7xKVtTFyLH8iSp83fxwh3jE ptq2wTd8qiaOsZVlD+KjH7Tj4W9yXs+WYRx6ssykEVPlENGQRwI= -----END CERTIFICATE-----Generated at Wed May 13 06:58:22 2026 by rpki-client