$ rpki-client -vvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: R0y5QAmuJ2l1KGoQbUY2S9Dq0kjNs/CQxTBWZ2VBcjs= Subject key identifier: 91:47:D4:BA:0F:8E:41:43:78:67:DF:84:2A:26:85:DC:A3:E2:AA:E7 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 72184C6F9B9E732F157A90DA238E6EFAB38FDF06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:13:40 +0000 Manifest this update: Sat 20 Jun 2026 03:08:40 +0000 Manifest next update: Sun 21 Jun 2026 03:35:40 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: TXBAEQph6o/SE4D7fKziUCToM/2bJB4K9fXom9yEaro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:18:4c:6f:9b:9e:73:2f:15:7a:90:da:23:8e:6e:fa:b3:8f:df:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Jun 20 03:08:40 2026 GMT Not After : Jun 21 03:35:40 2026 GMT Subject: CN=9147D4BA0F8E41437867DF842A2685DCA3E2AAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:9d:bd:56:65:b3:1e:73:bd:de:b3:3a:5b: 9d:a2:97:91:bc:24:a1:41:a9:01:f4:d6:13:7f:fd: f7:f6:45:f8:5e:20:ea:73:57:ba:75:b7:09:a9:32: b8:1f:df:ae:fd:72:ba:90:55:fa:82:fd:b6:e7:8f: 00:a7:29:dd:d9:be:36:2f:f5:cd:c3:74:7d:76:c6: b2:9a:fa:9d:c9:30:de:a1:fa:68:f0:f5:31:e0:f5: f3:0f:a8:d1:9d:3b:53:49:da:0b:f6:91:78:90:bc: 05:52:3d:c0:8b:14:9f:6d:09:2c:bd:20:e2:7d:e2: 26:52:ff:36:7b:00:d3:c7:2a:43:0d:f9:f8:51:9e: 64:f6:9a:10:0b:74:ae:71:9d:e8:f8:8d:21:b5:0b: 5d:86:51:a1:92:f7:64:ea:84:2a:f9:66:7b:3c:82: cc:d0:a8:c2:fa:78:59:57:c3:55:0a:3f:d6:66:5a: 0d:b4:98:61:85:a9:d1:6a:63:75:10:a3:9e:f2:8d: a4:d9:9d:ac:32:02:d6:2b:ff:62:2d:2e:30:2b:1f: 0f:cc:94:38:07:5d:2c:dd:96:04:d1:e5:4b:45:d5: e6:a2:6a:b3:81:96:84:f2:3c:27:89:e2:4b:08:96: 29:cc:1f:69:28:cc:44:7a:2d:16:8f:64:67:c4:f1: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:D4:BA:0F:8E:41:43:78:67:DF:84:2A:26:85:DC:A3:E2:AA:E7 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:09:9d:c0:3a:f4:3d:ad:07:1f:a3:87:30:0b:eb:30:80:7a: 49:aa:b6:df:b7:b8:fa:5c:a0:46:ef:0d:59:29:fb:30:e6:fe: a0:6f:db:0b:1f:e9:91:54:74:74:c4:73:b7:cd:af:53:91:63: d3:21:dd:28:0e:80:1f:69:46:12:05:0e:de:04:00:e5:15:d8: da:61:8d:cb:4f:94:c3:85:90:46:79:23:b8:6e:95:c4:0a:35: b3:e9:e5:99:a0:db:60:7a:8f:d5:16:86:4f:d0:e7:08:5c:70: 25:40:99:30:1c:3a:87:3f:a1:30:0c:cd:38:d8:e6:61:23:c3: 10:e9:e2:29:0d:2b:20:ba:89:e4:95:34:86:ea:29:23:93:2e: 0a:e3:5f:9a:b6:15:70:18:90:5b:3a:b3:07:1b:68:3f:29:a2: dc:4e:a1:60:1e:d3:f8:4d:1b:74:48:77:49:1b:e6:ab:91:c7: 53:e8:82:cd:c8:71:37:58:44:57:b0:3a:4e:d2:88:63:5f:05: 7e:5a:6d:8b:e1:c3:f5:84:55:9a:3b:d8:a0:cc:d2:c5:30:ae: 72:51:ac:08:bd:43:a4:aa:b7:b9:97:e9:ba:f0:53:84:78:7f: 54:0e:de:20:32:ba:07:da:43:b6:83:8b:87:3c:11:fb:c7:54: bb:4f:60:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchhMb5uecy8VepDaI45u+rOP3wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA2MjAwMzA4NDBaFw0yNjA2MjEwMzM1NDBaMDMxMTAvBgNV BAMTKDkxNDdENEJBMEY4RTQxNDM3ODY3REY4NDJBMjY4NURDQTNFMkFBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmZ29VmWzHnO93rM6W52il5G8 JKFBqQH01hN//ff2RfheIOpzV7p1twmpMrgf3679crqQVfqC/bbnjwCnKd3ZvjYv 9c3DdH12xrKa+p3JMN6h+mjw9THg9fMPqNGdO1NJ2gv2kXiQvAVSPcCLFJ9tCSy9 IOJ94iZS/zZ7ANPHKkMN+fhRnmT2mhALdK5xnej4jSG1C12GUaGS92TqhCr5Zns8 gszQqML6eFlXw1UKP9ZmWg20mGGFqdFqY3UQo57yjaTZnawyAtYr/2ItLjArHw/M lDgHXSzdlgTR5UtF1eaiarOBloTyPCeJ4ksIlinMH2kozER6LRaPZGfE8RPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUfUug+OQUN4Z9+EKiaF3KPiqucwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAJncA69D2tBx+jhzAL6zCAekmqtt+3uPpc oEbvDVkp+zDm/qBv2wsf6ZFUdHTEc7fNr1ORY9Mh3SgOgB9pRhIFDt4EAOUV2Nph jctPlMOFkEZ5I7hulcQKNbPp5Zmg22B6j9UWhk/Q5whccCVAmTAcOoc/oTAMzTjY 5mEjwxDp4ikNKyC6ieSVNIbqKSOTLgrjX5q2FXAYkFs6swcbaD8potxOoWAe0/hN G3RId0kb5quRx1Pogs3IcTdYRFewOk7SiGNfBX5abYvhw/WEVZo72KDM0sUwrnJR rAi9Q6Sqt7mX6brwU4R4f1QO3iAyugfaQ7aDi4c8EfvHVLtPYCg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:14 2026 by rpki-client