$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft (raw, json) Hash identifier: dAbQ+wqgSD47vCliEoZfqGxASWZ2XAF3ad2Oy7xdFeo= Subject key identifier: 63:87:34:93:C8:96:4D:BF:5B:7D:CF:68:90:61:EA:BB:73:DD:36:E0 Authority key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Certificate issuer: /CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Certificate serial: 6C44667A29D289012FD0E89E2E67E744BF0898EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:13:55 +0000 Manifest this update: Thu 17 Sep 2026 00:08:55 +0000 Manifest next update: Fri 18 Sep 2026 00:13:55 +0000 Files and hashes: 1: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl (hash: fO6ALMF3239OGGp4RGMTlkqjkCofxrCuxADACKQmYKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:44:66:7a:29:d2:89:01:2f:d0:e8:9e:2e:67:e7:44:bf:08:98:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Validity Not Before: Sep 17 00:08:55 2026 GMT Not After : Sep 18 00:13:55 2026 GMT Subject: CN=63873493C8964DBF5B7DCF689061EABB73DD36E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:07:de:2b:f8:33:26:b5:e6:b5:a6:8b:e3: a8:ca:33:5e:96:5b:9d:0f:12:5c:b6:16:43:29:ea: d7:ca:25:7a:20:0a:d0:29:f7:93:96:6c:60:12:67: 4f:b2:41:e3:b7:4e:30:a8:a7:2d:64:d7:27:8b:ad: 3f:b3:cf:97:f8:93:57:b7:ba:c6:1e:ed:b2:7d:12: 20:04:81:88:c5:3e:17:49:98:fe:be:de:b5:8a:29: 3c:34:b4:d0:90:f7:2e:20:96:8d:35:6a:c0:92:eb: 9d:f7:ab:bc:9d:04:81:5e:eb:80:3b:24:9b:44:32: c6:61:dd:99:b1:11:18:e1:69:9b:81:e3:a9:c0:f4: 45:f0:19:19:b8:19:01:67:c4:d0:b4:9d:e5:d4:c3: 28:e8:33:f8:a6:66:7d:72:02:b7:46:23:73:66:45: 39:f8:44:52:9a:b0:dd:6f:93:a0:33:a4:ad:7c:68: 87:3f:5f:13:7c:1f:98:51:1a:fc:f8:d2:a3:c6:0e: 11:98:63:be:0f:c7:d1:5f:b6:f4:7b:74:2d:e4:11: a7:e8:e6:e5:88:56:e6:53:82:e2:b0:35:57:21:b7: 5f:f4:82:54:9e:48:85:23:c5:3b:5f:87:52:54:00: 86:b4:f0:dc:77:f4:e2:27:b6:1a:43:32:02:fc:a6: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:87:34:93:C8:96:4D:BF:5B:7D:CF:68:90:61:EA:BB:73:DD:36:E0 X509v3 Authority Key Identifier: keyid:C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:4e:0b:62:77:44:97:4f:78:42:34:0b:44:72:8f:7b:0f: 2d:99:4f:ac:0e:6a:d8:02:8e:88:ac:26:f6:57:b2:06:1c:58: c2:96:fa:38:0c:6f:39:0e:c3:f6:64:c6:2f:d8:d5:09:f2:82: 2f:ff:f1:79:5a:6b:45:1a:9c:d4:ea:4c:8d:2b:14:07:28:c7: 1f:91:2a:98:87:4d:a0:c3:0f:3a:97:07:ce:f5:4a:05:c6:98: 58:8a:cb:eb:e0:1e:8e:b0:b6:95:15:65:ef:ba:e6:bc:63:60: ce:5c:59:48:b1:f8:7e:df:75:23:29:78:b4:70:50:1c:ea:16: 3e:ab:f8:8a:1a:80:3c:eb:fd:af:0d:7d:ce:2c:04:3b:3b:54: 60:39:e7:44:24:dc:df:5f:6d:f8:5c:40:46:40:0e:34:0d:18: 7a:97:a8:5b:e9:37:35:68:49:e2:f3:1d:bf:13:e8:65:f0:3d: db:b8:a6:9c:28:91:09:f4:fa:89:b9:b7:ec:07:1c:57:4f:47: 50:22:32:40:b9:cb:6d:34:82:a0:53:25:e8:e0:78:d7:6a:32: ae:21:96:29:4a:f5:60:4e:2c:36:31:6c:21:7c:f6:4a:97:18: 26:1d:07:47:fb:11:3a:4a:4c:f1:5d:5e:fe:b3:05:1f:d5:ee: a0:72:74:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbERmeinSiQEv0OieLmfnRL8ImOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAxMDk1 NkQyN0E4ODAeFw0yNjA5MTcwMDA4NTVaFw0yNjA5MTgwMDEzNTVaMDMxMTAvBgNV BAMTKDYzODczNDkzQzg5NjREQkY1QjdEQ0Y2ODkwNjFFQUJCNzNERDM2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MAfeK/gzJrXmtaaL46jKM16W W50PEly2FkMp6tfKJXogCtAp95OWbGASZ0+yQeO3TjCopy1k1yeLrT+zz5f4k1e3 usYe7bJ9EiAEgYjFPhdJmP6+3rWKKTw0tNCQ9y4glo01asCS6533q7ydBIFe64A7 JJtEMsZh3ZmxERjhaZuB46nA9EXwGRm4GQFnxNC0neXUwyjoM/imZn1yArdGI3Nm RTn4RFKasN1vk6AzpK18aIc/XxN8H5hRGvz40qPGDhGYY74Px9FftvR7dC3kEafo 5uWIVuZTguKwNVcht1/0glSeSIUjxTtfh1JUAIa08Nx39OInthpDMgL8ppQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4c0k8iWTb9bfc9okGHqu3PdNuAwHwYDVR0j BBgwFoAUw7vKxd492iXaXH2o42wBCVbSeogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzN2I2M2MtZTQ5OC00ZTQ3LWI5N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVE RTNEREEyNURBNUM3REE4RTM2QzAxMDk1NkQyN0E4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JCQ0FDNURFM0REQTI1REE1QzdEQThFMzZDMDEwOTU2RDI3 QTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvQzNCQkNBQzVERTNEREEyNURBNUM3REE4RTM2QzAx MDk1NkQyN0E4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnYTgtid0SXT3hCNAtEco97Dy2ZT6wOatgC joisJvZXsgYcWMKW+jgMbzkOw/Zkxi/Y1Qnygi//8Xlaa0UanNTqTI0rFAcoxx+R KpiHTaDDDzqXB871SgXGmFiKy+vgHo6wtpUVZe+65rxjYM5cWUix+H7fdSMpeLRw UBzqFj6r+IoagDzr/a8Nfc4sBDs7VGA550Qk3N9fbfhcQEZADjQNGHqXqFvpNzVo SeLzHb8T6GXwPdu4ppwokQn0+om5t+wHHFdPR1AiMkC5y200gqBTJejgeNdqMq4h lilK9WBOLDYxbCF89kqXGCYdB0f7ETpKTPFdXv6zBR/V7qBydN8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:11 2026 by rpki-client