$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft File: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft (raw, json) Hash identifier: 96dlyq5pmWKgtTMgl+4bK+opLXhp5uTZFbKDjlx+SV4= Subject key identifier: ED:00:5E:46:07:A4:60:BA:55:D0:45:DA:96:34:5D:F7:2D:C8:83:9A Authority key identifier: 3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 Certificate issuer: /CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Certificate serial: 3A3BBEAB2385DC8179CC5CB669462F7E0354D493 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 17:25:45 +0000 Manifest this update: Wed 16 Sep 2026 17:20:45 +0000 Manifest next update: Thu 17 Sep 2026 20:38:45 +0000 Files and hashes: 1: 3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl (hash: 0IXtVH7B6tBdUkpndkOhc3hnujCoHrFJsKgdwjMBQ0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3b:be:ab:23:85:dc:81:79:cc:5c:b6:69:46:2f:7e:03:54:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C211973F6D4DEA0D4F83ABE3A66495F90660355 Validity Not Before: Sep 16 17:20:45 2026 GMT Not After : Sep 17 20:38:45 2026 GMT Subject: CN=ED005E4607A460BA55D045DA96345DF72DC8839A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:29:40:ed:d6:82:bb:fc:5a:a7:37:11:03: 37:ee:46:4f:28:0c:e6:d9:1d:1c:89:1a:74:03:0e: ff:35:82:3a:51:5b:17:57:00:21:29:46:d2:a8:63: 3e:11:40:03:d3:a6:af:8f:7f:24:1b:12:ce:84:9f: fe:f2:96:7a:9a:b5:37:dd:e6:82:49:4f:53:79:0f: 2b:fa:2e:99:cd:f5:53:b9:f0:f0:95:63:76:df:bf: 8c:0f:dc:95:3a:70:a9:53:4f:1c:c6:73:74:1c:be: 93:14:df:7e:86:df:85:44:0a:4a:bb:e3:c9:e2:d1: cb:85:eb:0e:59:d2:73:48:32:3c:c6:b2:45:1a:cc: 40:cf:0d:3c:5f:d8:b7:a8:43:fd:7f:7f:24:91:fa: 71:de:c1:39:99:8e:73:d3:33:21:eb:55:40:61:6e: 15:2e:8e:c3:e8:95:7c:0f:50:4c:79:2c:19:21:55: f5:60:ca:5d:3b:70:b2:ea:2c:c5:5c:60:8f:94:9d: c7:65:4c:b3:e2:64:4d:81:fa:ab:f7:7a:3d:ea:40: 81:44:d2:dc:36:95:be:1c:1d:54:8d:83:e9:bf:34: 62:48:d6:c8:2a:eb:28:35:8f:29:50:55:f1:5e:cb: 29:a7:dd:40:42:13:32:b7:ad:53:ea:7e:e1:26:e8: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:00:5E:46:07:A4:60:BA:55:D0:45:DA:96:34:5D:F7:2D:C8:83:9A X509v3 Authority Key Identifier: keyid:3C:21:19:73:F6:D4:DE:A0:D4:F8:3A:BE:3A:66:49:5F:90:66:03:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C211973F6D4DEA0D4F83ABE3A66495F90660355.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3C211973F6D4DEA0D4F83ABE3A66495F90660355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:61:47:11:66:47:09:5f:29:12:65:30:e2:66:63:d7:a5:3a: 4f:05:f9:f7:71:97:18:ad:29:3d:eb:90:ba:b9:ee:b4:58:02: 60:8d:72:bc:20:50:7d:a4:c1:cc:3d:88:c3:99:1d:eb:6c:b8: f8:38:ea:d4:ee:ee:19:a8:10:72:89:a4:70:a6:b7:f0:18:88: bc:27:cb:0c:8a:ce:b4:b8:f7:e2:f2:bd:db:d6:09:8c:33:b7: fd:9c:1b:5c:15:27:ef:df:ba:ff:a1:dc:a1:0e:82:2c:e4:a4: 15:22:7d:3c:e1:77:71:c9:8d:c0:1a:ee:7d:e9:01:9e:92:e9: bb:6c:6c:f1:a7:78:23:18:f4:1d:1e:7f:44:19:cb:d9:3a:96: a9:b7:e1:6d:1f:71:44:38:d2:f1:78:ce:67:65:65:14:62:7e: f2:b2:a5:95:d1:34:7b:ac:81:b3:66:4d:fc:91:a2:d0:8f:35: 37:7b:01:78:d8:d7:2a:0c:ed:72:8a:37:87:13:be:ef:87:e9: 32:ff:8b:00:0c:b3:5c:85:df:b3:56:bd:da:15:7f:85:38:51: 43:35:a6:71:75:e1:00:ee:9b:ee:f2:e9:7c:3e:9b:06:e4:0c: 42:8b:77:09:f5:b6:d8:3c:1c:cd:34:dc:a3:81:14:3e:0e:ca: fd:6f:1e:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOju+qyOF3IF5zFy2aUYvfgNU1JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5 MDY2MDM1NTAeFw0yNjA5MTYxNzIwNDVaFw0yNjA5MTcyMDM4NDVaMDMxMTAvBgNV BAMTKEVEMDA1RTQ2MDdBNDYwQkE1NUQwNDVEQTk2MzQ1REY3MkRDODgzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5SlA7daCu/xapzcRAzfuRk8o DObZHRyJGnQDDv81gjpRWxdXACEpRtKoYz4RQAPTpq+PfyQbEs6En/7ylnqatTfd 5oJJT1N5Dyv6LpnN9VO58PCVY3bfv4wP3JU6cKlTTxzGc3QcvpMU336G34VECkq7 48ni0cuF6w5Z0nNIMjzGskUazEDPDTxf2LeoQ/1/fySR+nHewTmZjnPTMyHrVUBh bhUujsPolXwPUEx5LBkhVfVgyl07cLLqLMVcYI+UncdlTLPiZE2B+qv3ej3qQIFE 0tw2lb4cHVSNg+m/NGJI1sgq6yg1jylQVfFeyymn3UBCEzK3rVPqfuEm6CljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7QBeRgekYLpV0EXaljRd9y3Ig5owHwYDVR0j BBgwFoAUPCEZc/bU3qDU+Dq+OmZJX5BmA1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBmMjQ3MzMtZThkYS00MmM4LTg0NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNG NkQ0REVBMEQ0RjgzQUJFM0E2NjQ5NUY5MDY2MDM1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIxMTk3M0Y2RDRERUEwRDRGODNBQkUzQTY2NDk1RjkwNjYw MzU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvM0MyMTE5NzNGNkQ0REVBMEQ0RjgzQUJFM0E2NjQ5 NUY5MDY2MDM1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdhRxFmRwlfKRJlMOJmY9elOk8F+fdxlxit KT3rkLq57rRYAmCNcrwgUH2kwcw9iMOZHetsuPg46tTu7hmoEHKJpHCmt/AYiLwn ywyKzrS49+LyvdvWCYwzt/2cG1wVJ+/fuv+h3KEOgizkpBUifTzhd3HJjcAa7n3p AZ6S6btsbPGneCMY9B0ef0QZy9k6lqm34W0fcUQ40vF4zmdlZRRifvKypZXRNHus gbNmTfyRotCPNTd7AXjY1yoM7XKKN4cTvu+H6TL/iwAMs1yF37NWvdoVf4U4UUM1 pnF14QDum+7y6Xw+mwbkDEKLdwn1ttg8HM003KOBFD4Oyv1vHoA= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:13 2026 by rpki-client