$ rpki-client -vvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: PCCLEDVT46gLfJi2gJBpiD5YLkorD21twuE70aAhp1k= Subject key identifier: 0F:06:51:C3:D7:F7:81:AF:11:BB:3F:80:8E:1C:59:9B:F5:1A:45:09 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 1AE0AB3A1ABE7C08B944AF03C2B761FD659E07C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:34:35 +0000 Manifest this update: Fri 19 Jun 2026 19:29:35 +0000 Manifest next update: Sat 20 Jun 2026 20:42:35 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: XhMtVoLAfNXb3HrRqtnI+HKb3M2JRbs48ZN9xygL1Gg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e0:ab:3a:1a:be:7c:08:b9:44:af:03:c2:b7:61:fd:65:9e:07:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Jun 19 19:29:35 2026 GMT Not After : Jun 20 20:42:35 2026 GMT Subject: CN=0F0651C3D7F781AF11BB3F808E1C599BF51A4509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6d:f9:b6:ef:bf:f2:db:c9:7c:91:76:e8:d7: 60:42:ee:28:63:e6:4a:b8:92:70:16:b8:9e:33:33: c5:dc:f8:db:52:9c:23:a2:bb:bf:4e:33:97:5d:64: de:f0:c8:92:5d:51:22:d5:2c:26:6b:28:11:c3:fa: e3:8b:cc:87:a7:8d:c2:00:aa:98:10:c7:2a:86:50: 8c:27:07:9f:54:2e:c8:09:f7:e3:2f:56:47:02:ff: 8f:52:86:90:22:71:78:1f:5c:0d:e6:e4:2b:a8:80: 19:6f:04:a5:5d:96:3a:69:75:de:24:de:aa:80:92: 49:c5:b8:09:7c:47:48:66:50:9f:df:b0:73:0e:5e: de:e9:43:bf:be:ed:3c:4a:99:59:2a:74:0b:ee:61: aa:21:c3:ae:d5:bd:73:1b:11:23:e0:ee:5c:6d:42: a1:c2:45:3f:20:d0:6b:89:92:d5:fc:15:94:d9:fa: 3c:49:0f:14:ff:56:16:cd:90:ba:5b:d3:0d:bf:0a: 95:e6:8c:c6:97:8a:c2:a1:d2:f0:71:9f:5a:45:46: 8b:5a:0e:89:a1:c5:b9:b1:51:4f:6b:32:52:5b:81: 01:2a:82:9d:9e:85:c9:05:df:dd:aa:a6:25:07:6b: 49:e1:07:ae:e0:d4:fa:86:d0:66:e5:de:18:60:27: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:51:C3:D7:F7:81:AF:11:BB:3F:80:8E:1C:59:9B:F5:1A:45:09 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:db:a9:4b:fe:0f:a6:71:c6:c0:da:d5:02:1a:00:36:16:83: e7:fd:4d:1b:76:99:12:af:bc:18:d7:6d:f2:12:2c:18:8d:5d: 77:11:b0:03:58:52:02:85:c5:02:58:ce:0a:27:48:78:8a:7a: 42:cb:3c:1e:00:92:db:b3:4f:39:95:3d:31:ff:6a:87:54:d9: c7:c1:38:08:48:20:60:42:a3:fc:4a:7e:a8:13:be:c2:ec:0d: 85:1a:51:10:9d:9e:b7:a9:97:13:9f:c2:dc:9f:ce:6f:44:c4: 95:d1:cd:4c:7f:69:7a:23:d4:8b:8a:29:86:a3:c1:0f:73:3d: 72:d8:b8:16:e5:f6:b5:64:af:4d:f7:d0:5e:cd:4a:b9:a7:8e: 1c:32:c5:8c:1c:a6:b0:22:bf:a1:4f:b9:94:12:e0:95:28:80: c0:d7:ee:84:85:2b:b3:46:ac:ca:28:55:df:30:6c:26:62:3d: f8:9a:85:b1:ea:65:2b:26:44:5d:12:9b:78:d6:1a:d5:0d:bd: 96:5f:69:b7:09:81:63:66:13:57:f0:5d:d0:35:15:02:e0:ad: 3a:56:6f:cc:06:19:b5:b5:8c:9f:71:38:9c:5c:46:68:0a:f3: 3c:1b:c8:90:ed:e3:b7:4c:b0:3d:ac:08:ab:3f:17:e0:0c:6c: 9f:09:70:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuCrOhq+fAi5RK8Dwrdh/WWeB8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA2MTkxOTI5MzVaFw0yNjA2MjAyMDQyMzVaMDMxMTAvBgNV BAMTKDBGMDY1MUMzRDdGNzgxQUYxMUJCM0Y4MDhFMUM1OTlCRjUxQTQ1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbfm277/y28l8kXbo12BC7ihj 5kq4knAWuJ4zM8Xc+NtSnCOiu79OM5ddZN7wyJJdUSLVLCZrKBHD+uOLzIenjcIA qpgQxyqGUIwnB59ULsgJ9+MvVkcC/49ShpAicXgfXA3m5CuogBlvBKVdljppdd4k 3qqAkknFuAl8R0hmUJ/fsHMOXt7pQ7++7TxKmVkqdAvuYaohw67VvXMbESPg7lxt QqHCRT8g0GuJktX8FZTZ+jxJDxT/VhbNkLpb0w2/CpXmjMaXisKh0vBxn1pFRota DomhxbmxUU9rMlJbgQEqgp2ehckF392qpiUHa0nhB67g1PqG0Gbl3hhgJw/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDwZRw9f3ga8Ruz+AjhxZm/UaRQkwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPbqUv+D6ZxxsDa1QIaADYWg+f9TRt2mRKv vBjXbfISLBiNXXcRsANYUgKFxQJYzgonSHiKekLLPB4AktuzTzmVPTH/aodU2cfB OAhIIGBCo/xKfqgTvsLsDYUaURCdnreplxOfwtyfzm9ExJXRzUx/aXoj1IuKKYaj wQ9zPXLYuBbl9rVkr0330F7NSrmnjhwyxYwcprAiv6FPuZQS4JUogMDX7oSFK7NG rMooVd8wbCZiPfiahbHqZSsmRF0Sm3jWGtUNvZZfabcJgWNmE1fwXdA1FQLgrTpW b8wGGbW1jJ9xOJxcRmgK8zwbyJDt47dMsD2sCKs/F+AMbJ8JcDg= -----END CERTIFICATE-----Generated at Sat Jun 20 08:36:40 2026 by rpki-client