$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: Knym2KQFmjLy3LxufP3jgs2+DBGoAs/UCL5cGe4LyCA= Subject key identifier: F8:EA:22:6E:85:77:88:EB:B0:B0:A1:B8:AB:EB:0E:32:71:DE:3D:6B Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 263613B38053AB876CBDD3267D203525277CC3EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: 0D Signing time: Tue 12 May 2026 01:28:48 +0000 Manifest this update: Tue 12 May 2026 01:23:48 +0000 Manifest next update: Wed 13 May 2026 05:22:48 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: IcK/wqbbM1xGTzHfkGaQtTtbSiEgoPcPrOCM7K2jvq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:36:13:b3:80:53:ab:87:6c:bd:d3:26:7d:20:35:25:27:7c:c3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: May 12 01:23:48 2026 GMT Not After : May 13 05:22:48 2026 GMT Subject: CN=F8EA226E857788EBB0B0A1B8ABEB0E3271DE3D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:af:a4:2d:f3:e9:e7:2e:86:a1:e7:c5:36:fb: 72:fc:22:74:d5:63:19:46:99:1c:29:9c:d4:ae:8b: e8:f1:e1:17:06:8a:55:f6:c0:62:70:16:17:4a:e7: 20:32:46:e5:26:d6:ea:3a:0f:bc:67:a5:2f:0f:73: 2a:df:f0:b7:ef:11:53:93:d9:7d:10:c3:68:01:be: c6:ac:af:8f:28:b5:38:fb:96:ac:6e:00:c6:50:de: 2b:c6:a4:d1:c5:0d:25:8a:91:a5:2b:84:69:30:85: 19:76:a6:6b:19:07:a3:72:0d:47:82:1f:b9:98:6b: 3c:b4:50:1d:a0:cc:ad:25:a1:41:3b:1e:d9:19:ec: f7:f9:53:60:43:5c:dc:3f:b8:c0:2c:23:45:c0:46: 77:23:37:ba:bb:a9:3b:af:61:31:f2:72:45:65:4c: d6:4a:a8:cc:e1:59:f7:03:5e:51:c0:e3:99:56:5f: bc:af:66:b6:a7:d3:62:83:58:e6:3f:79:78:68:ae: d8:44:21:cb:6d:d8:b4:04:43:3b:63:dd:58:91:b8: f3:8e:5f:d6:c2:92:f5:c5:27:7c:24:40:a9:62:e9: 1c:f2:a4:8c:db:a1:d2:8b:71:21:c8:4e:98:6c:d2: fc:84:d0:89:bf:b2:0b:9a:d0:68:fd:27:b6:b0:55: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EA:22:6E:85:77:88:EB:B0:B0:A1:B8:AB:EB:0E:32:71:DE:3D:6B X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:98:a4:de:29:f9:01:60:4b:47:05:02:ac:95:b7:dc:66:e1: 6d:5a:01:4d:a0:57:c1:22:b1:6c:9f:25:01:77:dc:b7:fd:af: 56:f8:72:f8:9d:67:c1:eb:c2:78:61:b3:72:8d:75:02:78:7b: 42:d1:48:05:44:93:e4:15:77:31:2c:61:20:48:56:c0:19:6b: 87:4e:fc:24:dc:91:33:d3:6c:4a:16:f0:32:f3:54:97:86:80: 9b:51:73:43:86:ac:6f:11:f3:6a:18:bc:1e:0d:4c:80:2b:e4: c9:f9:8b:e7:3f:fd:7d:86:55:c3:8e:49:6d:52:8c:d9:3d:1d: 94:5c:bb:79:b6:f1:3a:5e:b7:8e:52:6d:74:fc:fc:2a:ed:45: 2a:f2:5b:a5:57:ed:e0:d3:5f:7d:ed:0b:8f:04:78:c6:b8:56: fc:cd:2d:10:27:50:d2:48:9b:04:b0:92:5e:e3:d5:18:d4:8d: cb:3e:f2:3b:81:9d:c1:ff:88:9b:45:ff:4f:6f:03:7d:65:ab: 52:4c:32:b1:61:89:73:0c:26:a4:b5:e0:ca:d2:7e:8e:0a:ba: 3a:02:fc:ab:b2:44:4a:bb:61:59:de:62:8e:39:6f:7f:2c:9b: 2f:87:22:cd:e6:67:b9:32:f9:e0:2c:8e:80:6d:42:8d:9c:03: 3e:b9:92:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjYTs4BTq4dsvdMmfSA1JSd8w+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA1MTIwMTIzNDhaFw0yNjA1MTMwNTIyNDhaMDMxMTAvBgNV BAMTKEY4RUEyMjZFODU3Nzg4RUJCMEIwQTFCOEFCRUIwRTMyNzFERTNENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwr6Qt8+nnLoah58U2+3L8InTV YxlGmRwpnNSui+jx4RcGilX2wGJwFhdK5yAyRuUm1uo6D7xnpS8Pcyrf8LfvEVOT 2X0Qw2gBvsasr48otTj7lqxuAMZQ3ivGpNHFDSWKkaUrhGkwhRl2pmsZB6NyDUeC H7mYazy0UB2gzK0loUE7HtkZ7Pf5U2BDXNw/uMAsI0XARncjN7q7qTuvYTHyckVl TNZKqMzhWfcDXlHA45lWX7yvZran02KDWOY/eXhorthEIctt2LQEQztj3ViRuPOO X9bCkvXFJ3wkQKli6RzypIzbodKLcSHITphs0vyE0Im/sgua0Gj9J7awVUHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OoiboV3iOuwsKG4q+sOMnHePWswHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKYpN4p+QFgS0cFAqyVt9xm4W1aAU2gV8Ei sWyfJQF33Lf9r1b4cvidZ8Hrwnhhs3KNdQJ4e0LRSAVEk+QVdzEsYSBIVsAZa4dO /CTckTPTbEoW8DLzVJeGgJtRc0OGrG8R82oYvB4NTIAr5Mn5i+c//X2GVcOOSW1S jNk9HZRcu3m28Tpet45SbXT8/CrtRSryW6VX7eDTX33tC48EeMa4VvzNLRAnUNJI mwSwkl7j1RjUjcs+8juBncH/iJtF/09vA31lq1JMMrFhiXMMJqS14MrSfo4KujoC /KuyREq7YVneYo45b38smy+HIs3mZ7ky+eAsjoBtQo2cAz65kkA= -----END CERTIFICATE-----Generated at Tue May 12 22:56:34 2026 by rpki-client