$ rpki-client -vvvf rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft File: C3BE7E7E490556375A9FEACF8537D887BB733B34.mft (raw, json) Hash identifier: lV47uUcMLcUN3PulOG6s/cWb63eoWchawANsv0L0nD4= Subject key identifier: 2D:5F:F0:B5:12:9D:DD:5D:2B:6E:86:8B:93:02:33:EE:1F:B2:7A:F0 Authority key identifier: C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 Certificate issuer: /CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Certificate serial: 1D54F266146F27F94BEABE691BEF58B4EFBCA9C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:56:02 +0000 Manifest this update: Wed 16 Sep 2026 21:51:02 +0000 Manifest next update: Thu 17 Sep 2026 22:27:02 +0000 Files and hashes: 1: C3BE7E7E490556375A9FEACF8537D887BB733B34.crl (hash: aTdsRyWVb/qH+1A/0ix9c29O5QsZ/EXuMfzr0twxbiM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:54:f2:66:14:6f:27:f9:4b:ea:be:69:1b:ef:58:b4:ef:bc:a9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3BE7E7E490556375A9FEACF8537D887BB733B34 Validity Not Before: Sep 16 21:51:02 2026 GMT Not After : Sep 17 22:27:02 2026 GMT Subject: CN=2D5FF0B5129DDD5D2B6E868B930233EE1FB27AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:2b:c2:1d:5f:af:7e:3d:a3:69:6e:79:d9: d1:18:aa:bc:a4:bd:64:13:8f:91:bf:13:96:59:d1: 45:db:50:95:f4:08:b5:4e:ec:a1:bd:8e:3a:19:a1: 50:d9:92:44:a5:3b:de:5a:d6:ff:c6:db:a3:f1:6c: 3f:d5:3b:46:80:25:30:c7:e2:80:08:00:41:83:a8: 33:71:40:64:33:c3:21:29:56:67:64:2f:5b:1f:5d: d7:90:55:4c:21:b2:2e:60:7b:bb:9d:ce:b1:38:f9: e6:ed:e2:11:8d:cf:af:0c:e4:0e:0b:43:60:0f:37: 5c:ab:15:02:93:3e:1c:97:a7:e7:41:93:40:d9:54: a8:06:6b:f5:65:a2:bb:bc:2c:32:7a:9d:31:23:fb: 28:d1:07:52:0a:6b:96:b6:4c:12:f0:5a:05:7d:37: a3:03:18:a1:78:d6:88:9e:b4:44:b1:53:dd:6e:85: 74:f9:61:c2:21:a3:24:84:9a:01:b5:8a:6d:4f:4b: 24:64:a4:5c:78:1a:b1:27:1d:24:ff:35:5a:9a:62: 8b:32:d2:c7:9f:3b:ec:d8:16:c7:15:d4:35:96:e5: c8:5b:c3:c4:1d:61:82:1b:58:3d:75:24:50:ba:53: 18:58:df:06:b2:44:31:67:55:ab:f4:8a:3a:cb:af: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5F:F0:B5:12:9D:DD:5D:2B:6E:86:8B:93:02:33:EE:1F:B2:7A:F0 X509v3 Authority Key Identifier: keyid:C3:BE:7E:7E:49:05:56:37:5A:9F:EA:CF:85:37:D8:87:BB:73:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3BE7E7E490556375A9FEACF8537D887BB733B34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/C3BE7E7E490556375A9FEACF8537D887BB733B34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4a:38:d5:1e:31:35:49:59:1c:e8:93:41:83:27:a5:20:dd: 62:c1:d0:c7:1d:6e:88:bd:c5:a3:26:0b:4a:aa:49:c4:22:77: 44:cf:d4:50:73:47:84:06:13:7c:92:4a:32:02:11:4a:8d:4b: 3f:01:4f:1c:1d:55:10:08:e2:16:a0:60:ec:d9:2a:8c:cc:54: 44:30:e1:a8:79:77:6d:64:d6:68:94:d0:14:95:9f:78:21:aa: 60:92:5f:a1:66:c8:d9:21:0e:d2:a9:44:67:94:21:43:f2:78: a5:28:c8:e5:e4:b9:14:54:a9:19:ee:90:ec:01:b1:bf:3c:d3: 39:a7:54:66:d8:fc:0c:cb:f6:84:57:47:da:8c:04:79:fd:d3: 56:b5:a1:a5:72:e6:d5:69:45:12:c1:0c:d6:1c:cc:2f:4c:7c: a1:9b:59:0a:f1:a0:86:19:03:d3:9d:b9:99:76:a9:3b:f7:27: 89:29:d6:6b:2f:16:ab:cc:dd:6d:5c:c0:81:f5:b2:09:51:c8: 4b:45:47:8a:7b:d9:4f:58:46:dd:10:c9:bc:57:a8:48:10:ca: 19:7c:4c:ad:3d:e1:89:84:1a:52:ab:ec:97:26:ea:e2:02:73: 1e:42:2a:5b:9a:10:9c:94:f9:78:7c:33:e6:52:50:df:b5:ba: d4:86:5b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVTyZhRvJ/lL6r5pG+9YtO+8qckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdC QjczM0IzNDAeFw0yNjA5MTYyMTUxMDJaFw0yNjA5MTcyMjI3MDJaMDMxMTAvBgNV BAMTKDJENUZGMEI1MTI5RERENUQyQjZFODY4QjkzMDIzM0VFMUZCMjdBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3SvCHV+vfj2jaW552dEYqryk vWQTj5G/E5ZZ0UXbUJX0CLVO7KG9jjoZoVDZkkSlO95a1v/G26PxbD/VO0aAJTDH 4oAIAEGDqDNxQGQzwyEpVmdkL1sfXdeQVUwhsi5ge7udzrE4+ebt4hGNz68M5A4L Q2APN1yrFQKTPhyXp+dBk0DZVKgGa/Vloru8LDJ6nTEj+yjRB1IKa5a2TBLwWgV9 N6MDGKF41oietESxU91uhXT5YcIhoySEmgG1im1PSyRkpFx4GrEnHST/NVqaYosy 0sefO+zYFscV1DWW5chbw8QdYYIbWD11JFC6UxhY3wayRDFnVav0ijrLr5XtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULV/wtRKd3V0rboaLkwIz7h+yevAwHwYDVR0j BBgwFoAUw75+fkkFVjdan+rPhTfYh7tzOzQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIzNTMwZWMtOTkwZS00MWQ3LTlkNzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0 OTA1NTYzNzVBOUZFQUNGODUzN0Q4ODdCQjczM0IzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0JFN0U3RTQ5MDU1NjM3NUE5RkVBQ0Y4NTM3RDg4N0JCNzMz QjM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvQzNCRTdFN0U0OTA1NTYzNzVBOUZFQUNGODUzN0Q4 ODdCQjczM0IzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZKONUeMTVJWRzok0GDJ6Ug3WLB0Mcdboi9 xaMmC0qqScQid0TP1FBzR4QGE3ySSjICEUqNSz8BTxwdVRAI4hagYOzZKozMVEQw 4ah5d21k1miU0BSVn3ghqmCSX6FmyNkhDtKpRGeUIUPyeKUoyOXkuRRUqRnukOwB sb880zmnVGbY/AzL9oRXR9qMBHn901a1oaVy5tVpRRLBDNYczC9MfKGbWQrxoIYZ A9OduZl2qTv3J4kp1msvFqvM3W1cwIH1sglRyEtFR4p72U9YRt0QybxXqEgQyhl8 TK094YmEGlKr7Jcm6uICcx5CKluaEJyU+Xh8M+ZSUN+1utSGW7Q= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:15 2026 by rpki-client