$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft File: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft (raw, json) Hash identifier: NzZOlsJHpCJNDFVyGMWhZ5wj2NJq27a68FDX47IRcJw= Subject key identifier: 52:87:C6:DD:49:8E:52:4C:FA:00:EE:29:7C:DD:59:71:F6:ED:27:F5 Authority key identifier: 3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 Certificate issuer: /CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Certificate serial: 5E5CAC245EDFC26BE56081727275DF1CF092CC3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:52:03 +0000 Manifest this update: Thu 17 Sep 2026 06:47:03 +0000 Manifest next update: Fri 18 Sep 2026 07:17:03 +0000 Files and hashes: 1: 3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl (hash: Y37Kn35Sw6d7TlqyTCL1OK5bsV0fEuac8Vfiorogv6w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5c:ac:24:5e:df:c2:6b:e5:60:81:72:72:75:df:1c:f0:92:cc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AD599AAE96EE16A5D8218FAF9406675FAF70B24 Validity Not Before: Sep 17 06:47:03 2026 GMT Not After : Sep 18 07:17:03 2026 GMT Subject: CN=5287C6DD498E524CFA00EE297CDD5971F6ED27F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:71:e2:69:7f:c7:24:e5:42:fb:8a:ff:a2: 22:d9:55:f0:f6:29:4d:e0:65:ab:ec:fb:13:37:f6: b9:5e:e6:41:71:80:a3:b2:34:65:e4:26:eb:90:47: 74:6d:99:fc:f5:1e:d7:d5:b6:f8:35:6e:29:55:1e: 10:61:84:1f:f3:fd:dd:fd:4e:86:ef:62:e9:7f:da: 31:01:94:f1:1a:a3:40:e3:f5:89:33:df:3d:bc:3e: 3f:71:8b:37:f5:63:89:37:41:e8:0c:67:ac:38:98: 4a:82:e2:4f:e7:26:6d:42:64:c9:04:df:b4:89:24: 1d:15:d6:a4:27:99:62:39:ca:29:ce:88:3d:4b:bc: 65:45:ba:64:49:96:86:3b:3b:0e:3a:aa:88:cf:c1: 09:38:a9:df:f1:24:f6:76:82:94:19:59:82:0f:65: 92:18:cb:c9:e5:6f:c4:d5:2f:57:41:a8:66:ed:de: c3:ff:92:4d:c9:e7:7d:19:50:c8:26:5c:4e:06:f2: a7:89:4d:9d:60:e3:d6:ee:a7:48:cb:66:ac:13:e2: 7c:49:46:77:04:93:ce:c4:1b:6d:cf:df:87:97:a6: af:4a:07:88:56:69:6e:f1:8a:73:f7:db:ce:7a:73: 3b:f9:7c:68:4e:b9:cf:f5:ce:26:1b:e0:e9:2d:9c: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:C6:DD:49:8E:52:4C:FA:00:EE:29:7C:DD:59:71:F6:ED:27:F5 X509v3 Authority Key Identifier: keyid:3A:D5:99:AA:E9:6E:E1:6A:5D:82:18:FA:F9:40:66:75:FA:F7:0B:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/3AD599AAE96EE16A5D8218FAF9406675FAF70B24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:d9:56:83:62:82:9c:eb:fc:ab:99:85:95:02:64:dd:69: bf:44:01:a4:b8:c3:b7:f6:78:d6:6e:b0:eb:9f:3a:b7:e5:f9: c6:a4:f4:bf:1f:7e:c4:de:38:24:a1:c9:68:e9:d5:fb:b8:91: a8:c4:9f:00:29:71:db:ac:33:98:db:14:3b:90:9f:dd:4c:50: ab:75:4f:c2:ec:c1:68:96:dd:31:70:cc:4b:44:01:78:b1:11: 03:b1:d0:78:9a:a2:ac:9a:0b:16:c6:34:3a:64:c3:9a:0d:0e: 72:87:2e:da:57:44:13:cd:5b:9f:0f:8b:28:f3:96:64:cc:e0: 3c:92:60:6f:0c:c7:dc:1c:b4:49:ef:9b:f1:aa:22:f2:10:d7: 0d:37:c2:01:d4:26:92:07:0d:dd:93:ed:05:af:fb:42:7d:4f: 31:96:8c:c5:23:c6:d0:de:2f:68:ab:8c:73:d7:f4:ef:a2:15: d3:1e:ff:32:3c:b3:f8:b9:e2:08:79:4b:57:1d:a2:62:d5:79: 72:7c:bc:3a:ba:75:73:d2:7a:63:28:d3:5b:0c:d3:f9:d3:90: a5:86:63:15:19:39:2b:f9:08:8d:94:14:fb:7d:c9:1a:a7:9f: 81:68:d3:c7:cd:9c:7a:82:cc:34:28:db:7a:69:00:33:1c:4c: 44:0d:56:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlysJF7fwmvlYIFycnXfHPCSzD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2NzVG QUY3MEIyNDAeFw0yNjA5MTcwNjQ3MDNaFw0yNjA5MTgwNzE3MDNaMDMxMTAvBgNV BAMTKDUyODdDNkRENDk4RTUyNENGQTAwRUUyOTdDREQ1OTcxRjZFRDI3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcn3HiaX/HJOVC+4r/oiLZVfD2 KU3gZavs+xM39rle5kFxgKOyNGXkJuuQR3Rtmfz1HtfVtvg1bilVHhBhhB/z/d39 TobvYul/2jEBlPEao0Dj9Ykz3z28Pj9xizf1Y4k3QegMZ6w4mEqC4k/nJm1CZMkE 37SJJB0V1qQnmWI5yinOiD1LvGVFumRJloY7Ow46qojPwQk4qd/xJPZ2gpQZWYIP ZZIYy8nlb8TVL1dBqGbt3sP/kk3J530ZUMgmXE4G8qeJTZ1g49bup0jLZqwT4nxJ RncEk87EG23P34eXpq9KB4hWaW7xinP32856czv5fGhOuc/1ziYb4OktnDi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUofG3UmOUkz6AO4pfN1ZcfbtJ/UwHwYDVR0j BBgwFoAUOtWZqulu4Wpdghj6+UBmdfr3CyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3YzJiN2UtMjY2My00ZDY4LWIyNWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFF OTZFRTE2QTVEODIxOEZBRjk0MDY2NzVGQUY3MEIyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUQ1OTlBQUU5NkVFMTZBNUQ4MjE4RkFGOTQwNjY3NUZBRjcw QjI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvM0FENTk5QUFFOTZFRTE2QTVEODIxOEZBRjk0MDY2 NzVGQUY3MEIyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh72VaDYoKc6/yrmYWVAmTdab9EAaS4w7f2 eNZusOufOrfl+cak9L8ffsTeOCShyWjp1fu4kajEnwApcdusM5jbFDuQn91MUKt1 T8LswWiW3TFwzEtEAXixEQOx0HiaoqyaCxbGNDpkw5oNDnKHLtpXRBPNW58Piyjz lmTM4DySYG8Mx9wctEnvm/GqIvIQ1w03wgHUJpIHDd2T7QWv+0J9TzGWjMUjxtDe L2irjHPX9O+iFdMe/zI8s/i54gh5S1cdomLVeXJ8vDq6dXPSemMo01sM0/nTkKWG YxUZOSv5CI2UFPt9yRqnn4Fo08fNnHqCzDQo23ppADMcTEQNVhM= -----END CERTIFICATE-----Generated at Thu Sep 17 15:49:18 2026 by rpki-client