$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft File: 3B0EBC3555958C0C87A0186404B015BFE42B5938.mft (raw, json) Hash identifier: pfisio80Pe2n/z9nJqLWLQ/ubpXPxZ+K24/hgO8e7QQ= Subject key identifier: 00:F3:5E:96:49:19:F0:0B:27:FA:36:F6:DA:A3:F7:EB:9D:29:FC:91 Authority key identifier: 3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 Certificate issuer: /CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Certificate serial: 3D28A6D30666778CBB0E01D9793E39EA46D0294B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:12:56 +0000 Manifest this update: Wed 16 Sep 2026 19:07:56 +0000 Manifest next update: Thu 17 Sep 2026 19:25:56 +0000 Files and hashes: 1: 3B0EBC3555958C0C87A0186404B015BFE42B5938.crl (hash: mjXQ26C1jclNfh3WW2Kia83jIwDuYV4WrLGJnvpbpnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:28:a6:d3:06:66:77:8c:bb:0e:01:d9:79:3e:39:ea:46:d0:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B0EBC3555958C0C87A0186404B015BFE42B5938 Validity Not Before: Sep 16 19:07:56 2026 GMT Not After : Sep 17 19:25:56 2026 GMT Subject: CN=00F35E964919F00B27FA36F6DAA3F7EB9D29FC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:77:f7:c8:21:c7:be:ad:8d:7b:ad:99:df: 15:f8:4e:c0:b7:c5:5e:6c:91:d6:65:45:03:56:aa: 58:bc:25:0a:f9:a8:4d:4d:b4:5e:71:cc:92:df:89: 89:a4:08:1a:ee:ca:cd:7c:94:49:d5:17:86:f2:a8: 45:06:5f:b2:ee:ac:42:57:79:69:a0:48:1a:60:5a: ab:66:e2:ae:12:00:d8:74:5c:cf:62:d7:7f:0a:e1: 42:e4:2b:ea:30:9d:5f:97:8d:c7:90:47:d2:7f:7c: 7c:28:5b:9a:2e:1f:58:d8:90:84:2f:af:76:0d:28: bc:0d:d1:36:a0:71:79:b0:5c:6e:18:65:30:d9:91: 66:b3:6d:b7:7a:ff:4d:b8:b7:be:0e:5a:7a:69:c2: 62:ae:dd:9e:12:7f:ed:60:66:e3:61:7e:ba:18:33: f5:1b:6a:d7:b8:7d:c4:a3:70:4c:6a:16:ec:33:21: 28:4e:2a:fc:65:d9:84:ea:1a:c6:33:5b:cd:63:eb: e6:28:11:4f:40:47:10:f8:32:69:55:d9:ac:da:65: 87:29:e9:5d:86:85:e6:98:ff:f8:41:4c:e9:c4:78: 8a:e2:20:cd:27:50:e4:ff:78:c1:a1:7f:48:b0:63: d1:64:c0:92:dc:f6:1d:20:93:8c:48:1f:0c:a8:64: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F3:5E:96:49:19:F0:0B:27:FA:36:F6:DA:A3:F7:EB:9D:29:FC:91 X509v3 Authority Key Identifier: keyid:3B:0E:BC:35:55:95:8C:0C:87:A0:18:64:04:B0:15:BF:E4:2B:59:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B0EBC3555958C0C87A0186404B015BFE42B5938.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/3B0EBC3555958C0C87A0186404B015BFE42B5938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:3d:94:22:25:83:df:8c:dc:88:ae:3b:e8:16:ef:9b:06: 0f:cf:c4:6f:86:be:2d:ad:d5:dc:44:07:97:43:0f:24:40:b7: f2:d1:67:b1:b0:0b:88:40:2b:c2:54:ff:11:41:b6:d1:f0:19: c5:7a:b3:17:f4:63:86:eb:bb:29:63:19:f1:65:34:44:c5:5a: 8d:9f:f9:50:ac:30:d6:59:dd:53:1a:cf:db:f5:04:55:06:43: 49:80:9c:88:f6:49:da:e6:91:e9:c3:5e:30:19:c9:51:c7:85: 0a:71:4e:dd:b9:19:cb:fd:85:89:20:e4:0a:8c:67:83:39:31: 79:fe:09:c0:d4:e2:e6:72:27:87:94:82:df:b4:4d:ab:3b:78: 99:66:4f:be:0d:be:95:ed:41:df:b2:52:3b:64:46:5a:8f:4b: 77:82:d8:a3:8c:49:f0:5c:9d:02:2d:89:0b:1d:a1:84:6f:fb: fe:19:9e:df:0f:70:53:da:55:bf:9c:55:fb:70:25:50:e0:ff: 92:76:6e:ec:fa:a5:f5:7f:77:83:d7:32:a9:33:6a:46:10:85: 17:18:b0:23:88:e5:df:d1:90:f9:79:af:13:84:ae:8e:a7:63: c0:c7:cf:b5:d3:6d:43:12:63:09:8b:f8:3b:9d:1e:ed:79:37: 52:fc:e8:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSim0wZmd4y7DgHZeT456kbQKUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZF NDJCNTkzODAeFw0yNjA5MTYxOTA3NTZaFw0yNjA5MTcxOTI1NTZaMDMxMTAvBgNV BAMTKDAwRjM1RTk2NDkxOUYwMEIyN0ZBMzZGNkRBQTNGN0VCOUQyOUZDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDXf3yCHHvq2Ne62Z3xX4TsC3 xV5skdZlRQNWqli8JQr5qE1NtF5xzJLfiYmkCBruys18lEnVF4byqEUGX7LurEJX eWmgSBpgWqtm4q4SANh0XM9i138K4ULkK+ownV+XjceQR9J/fHwoW5ouH1jYkIQv r3YNKLwN0TagcXmwXG4YZTDZkWazbbd6/024t74OWnppwmKu3Z4Sf+1gZuNhfroY M/Ubate4fcSjcExqFuwzIShOKvxl2YTqGsYzW81j6+YoEU9ARxD4MmlV2azaZYcp 6V2GheaY//hBTOnEeIriIM0nUOT/eMGhf0iwY9FkwJLc9h0gk4xIHwyoZG+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPNelkkZ8Asn+jb22qP3650p/JEwHwYDVR0j BBgwFoAUOw68NVWVjAyHoBhkBLAVv+QrWTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxYWYwMjEtMWMwMS00YTJlLWI1ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1 NTk1OEMwQzg3QTAxODY0MDRCMDE1QkZFNDJCNTkzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjBFQkMzNTU1OTU4QzBDODdBMDE4NjQwNEIwMTVCRkU0MkI1 OTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvM0IwRUJDMzU1NTk1OEMwQzg3QTAxODY0MDRCMDE1 QkZFNDJCNTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu5PZQiJYPfjNyIrjvoFu+bBg/PxG+Gvi2t 1dxEB5dDDyRAt/LRZ7GwC4hAK8JU/xFBttHwGcV6sxf0Y4bruyljGfFlNETFWo2f +VCsMNZZ3VMaz9v1BFUGQ0mAnIj2SdrmkenDXjAZyVHHhQpxTt25Gcv9hYkg5AqM Z4M5MXn+CcDU4uZyJ4eUgt+0Tas7eJlmT74NvpXtQd+yUjtkRlqPS3eC2KOMSfBc nQItiQsdoYRv+/4Znt8PcFPaVb+cVftwJVDg/5J2buz6pfV/d4PXMqkzakYQhRcY sCOI5d/RkPl5rxOEro6nY8DHz7XTbUMSYwmL+DudHu15N1L86Aw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:54:22 2026 by rpki-client