$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: ghPYiYo8LsrGLlnplF75hswmZDK1V74e/qk8PBl2u0E= Subject key identifier: 73:E8:2B:D4:A4:2E:01:7D:71:8E:64:D2:81:E9:C9:76:17:48:9B:C4 Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 67F0077DD5DABE201A3A103BB027D77F9F5FEBA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:13:46 +0000 Manifest this update: Wed 23 Sep 2026 10:08:46 +0000 Manifest next update: Thu 24 Sep 2026 11:24:46 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: 3tUWsVOkxKRlxK4zTKo58tqwqFy9UYyWnTrtb0gaND8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f0:07:7d:d5:da:be:20:1a:3a:10:3b:b0:27:d7:7f:9f:5f:eb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: Sep 23 10:08:46 2026 GMT Not After : Sep 24 11:24:46 2026 GMT Subject: CN=73E82BD4A42E017D718E64D281E9C97617489BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:a7:13:14:a1:f0:a5:a7:0c:e6:38:80:1d: 3e:50:82:33:b6:30:ed:f9:a4:bf:84:25:b5:95:d7: 89:d5:08:2b:98:8d:ec:a9:02:10:66:bb:3e:44:a0: f6:ab:05:fd:f4:f5:8d:1d:0a:9a:3a:54:50:a6:d6: 3f:2c:f2:16:86:70:b3:ca:07:b4:df:e3:65:55:83: b2:fd:47:e9:e3:d1:b0:e4:5f:b0:b0:03:d0:a1:0e: 99:e0:18:45:f2:85:a1:f6:86:f5:f6:e5:7e:a6:42: 23:7a:cb:c6:7f:6b:a5:e3:0f:72:d0:8b:bf:b8:94: bd:0a:c6:33:d3:3c:d5:ea:42:e9:41:ac:c3:96:07: 02:dc:0c:4c:a3:d3:e3:d0:63:02:09:81:9d:bc:f6: ad:8e:5e:92:66:0f:99:d2:db:ac:93:a3:86:e6:26: 37:de:fe:2c:7c:9b:c7:22:c2:b5:5b:63:cd:e1:09: e4:91:a1:cc:1f:4e:70:10:d6:2e:01:bc:56:a4:a2: 73:ea:d6:71:ed:f5:99:3f:b6:44:24:72:2a:4c:ce: 21:59:9c:b6:76:8a:cf:26:05:8b:78:92:bf:64:76: 8e:60:69:c8:04:ea:b2:1d:9e:de:35:e2:00:0d:a3: 9f:dd:07:5e:7b:db:c9:0e:17:4e:03:93:6c:7c:b0: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:2B:D4:A4:2E:01:7D:71:8E:64:D2:81:E9:C9:76:17:48:9B:C4 X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ca:85:c2:88:fb:a7:e2:a0:ae:76:43:3b:e0:b5:95:28:aa: 08:ef:95:d3:e8:6d:c8:21:e9:d2:07:48:4b:bb:98:06:26:71: cd:48:25:99:3c:03:3d:e4:38:25:9b:2e:df:83:85:d9:fc:f5: 11:5c:31:5f:9e:07:03:fa:cb:8e:5e:13:a4:6d:43:53:37:40: 0e:61:3c:49:6b:f3:b9:6b:19:23:62:a3:9f:da:bd:e7:cb:ba: 36:25:c4:15:38:d2:1e:4f:72:e2:02:6a:e6:bc:8e:98:69:a0: bd:6e:8e:30:c0:ab:96:a6:4b:59:c2:ab:03:63:46:2c:0c:d7: 41:fd:fd:1d:ce:39:2c:2b:a6:71:a2:a5:66:86:dd:b4:2c:05: 5f:fb:dc:03:dc:af:fa:7e:2a:e0:36:c3:8a:d8:44:65:4e:1b: 75:cc:0f:2a:af:57:ad:90:0b:3c:b1:3f:2e:13:bb:82:9b:41: 75:b4:84:d9:8c:3e:bf:c4:47:3a:16:b1:79:9e:e1:1b:8c:d2: 8a:14:81:0c:60:41:9b:66:a8:94:7c:90:f9:40:df:89:d8:84: 29:89:e8:c4:78:80:75:d8:64:a7:85:72:48:eb:e6:63:e1:0d: 95:35:95:84:40:0e:1d:f6:7a:e3:15:1f:e6:41:0d:31:b8:62: 5b:8d:b1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/AHfdXaviAaOhA7sCfXf59f66UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA5MjMxMDA4NDZaFw0yNjA5MjQxMTI0NDZaMDMxMTAvBgNV BAMTKDczRTgyQkQ0QTQyRTAxN0Q3MThFNjREMjgxRTlDOTc2MTc0ODlCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVBKcTFKHwpacM5jiAHT5QgjO2 MO35pL+EJbWV14nVCCuYjeypAhBmuz5EoParBf309Y0dCpo6VFCm1j8s8haGcLPK B7Tf42VVg7L9R+nj0bDkX7CwA9ChDpngGEXyhaH2hvX25X6mQiN6y8Z/a6XjD3LQ i7+4lL0KxjPTPNXqQulBrMOWBwLcDEyj0+PQYwIJgZ289q2OXpJmD5nS26yTo4bm Jjfe/ix8m8ciwrVbY83hCeSRocwfTnAQ1i4BvFakonPq1nHt9Zk/tkQkcipMziFZ nLZ2is8mBYt4kr9kdo5gacgE6rIdnt414gANo5/dB15728kOF04Dk2x8sPRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+gr1KQuAX1xjmTSgenJdhdIm8QwHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLKhcKI+6fioK52QzvgtZUoqgjvldPobcgh 6dIHSEu7mAYmcc1IJZk8Az3kOCWbLt+Dhdn89RFcMV+eBwP6y45eE6RtQ1M3QA5h PElr87lrGSNio5/avefLujYlxBU40h5PcuICaua8jphpoL1ujjDAq5amS1nCqwNj RiwM10H9/R3OOSwrpnGipWaG3bQsBV/73APcr/p+KuA2w4rYRGVOG3XMDyqvV62Q CzyxPy4Tu4KbQXW0hNmMPr/ERzoWsXme4RuM0ooUgQxgQZtmqJR8kPlA34nYhCmJ 6MR4gHXYZKeFckjr5mPhDZU1lYRADh32euMVH+ZBDTG4YluNseU= -----END CERTIFICATE-----Generated at Thu Sep 24 02:02:13 2026 by rpki-client