$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: XXhune7ToZwCZllS1VslGZtmUdlUFGhRm84uW1TzvsM= Subject key identifier: 3C:6F:EA:56:49:8F:4A:9C:5D:23:FF:1C:45:5C:87:AB:03:6E:FF:BF Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 6C030C78A06BF23D09F211A15F00EF5AFF453A2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:18:48 +0000 Manifest this update: Thu 17 Sep 2026 04:13:48 +0000 Manifest next update: Fri 18 Sep 2026 05:29:48 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: ijL0JIskiC+F2yAVBo4gV1ETU1pkOzt9CTPK0Af+hZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:03:0c:78:a0:6b:f2:3d:09:f2:11:a1:5f:00:ef:5a:ff:45:3a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Sep 17 04:13:48 2026 GMT Not After : Sep 18 05:29:48 2026 GMT Subject: CN=3C6FEA56498F4A9C5D23FF1C455C87AB036EFFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:ba:b0:af:79:17:0c:5a:7e:de:b7:fa:92: 3c:86:ba:28:f4:3b:9e:51:cc:41:d6:f2:a6:33:b8: 19:3d:d6:0d:94:9b:cd:46:a4:88:af:dc:6a:96:19: 08:98:46:d6:16:74:a3:1d:6b:91:75:53:e9:20:4f: 7f:7f:ae:a4:0e:a1:16:43:3e:7f:32:24:55:ca:d6: 90:f5:74:73:34:47:f2:4a:91:86:1e:22:72:01:f8: 87:b8:52:59:83:f7:80:f6:5f:97:e7:43:08:da:89: b7:12:5d:74:05:42:cb:57:a1:e1:47:a2:a8:3b:68: aa:9e:38:25:b9:2b:ec:ff:9c:0b:c9:9a:ba:d1:d9: 01:3f:2d:c3:f8:9b:f1:d7:2c:ab:b6:ef:f1:42:5e: 56:f2:8c:41:c8:99:1d:45:b8:51:50:52:1c:29:24: cc:57:95:1f:ef:73:88:40:44:e2:bf:a9:f8:21:e3: ed:55:2c:13:88:09:f7:5c:e7:a5:6c:9a:2d:81:d1: 9f:c6:c2:4a:22:cf:c0:aa:89:f2:a2:5e:a9:c6:95: d7:e2:2a:70:87:18:b2:8e:eb:0e:1e:20:ca:87:b8: 7f:88:ae:60:ee:6d:6b:c9:87:e1:ee:6d:11:f6:ab: 1b:ec:91:ed:98:08:4e:a7:3d:b0:0e:b6:12:86:27: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:EA:56:49:8F:4A:9C:5D:23:FF:1C:45:5C:87:AB:03:6E:FF:BF X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:be:aa:e0:a2:c5:c8:59:49:d6:ac:29:b9:cf:39:da:0c:5f: 5b:d2:f6:8e:9e:e4:bf:58:21:9d:c4:72:5a:62:c7:c5:80:89: ca:de:24:4e:ac:3b:e9:3b:06:91:92:bf:68:23:c9:8d:83:b7: 3c:6b:8e:e1:77:0d:67:a0:04:2f:7f:f2:89:4e:cb:1c:a5:ad: f2:9a:82:0c:fd:4e:29:bc:c1:a3:3a:c7:2f:a3:a6:2a:84:58: 46:f3:e9:d6:31:db:4d:22:d4:b5:bc:93:e2:23:bc:cb:48:5c: 43:97:ff:68:3f:42:1e:3c:25:e7:13:f9:0d:d7:dc:92:12:9a: fe:96:05:6f:9a:83:f0:f1:2c:96:b5:30:6b:9b:0a:44:26:a4: 02:b1:a8:73:99:ec:99:48:d8:27:74:87:c2:d2:9c:76:58:02: aa:e8:b4:33:e5:a2:da:ed:21:ee:a9:5e:2c:a8:74:9a:6b:56: f8:23:d5:9f:6c:3a:84:f7:f2:2b:30:a2:ef:c4:44:75:84:69: cd:8f:9f:4c:49:3f:8c:91:f6:50:63:a8:2d:7d:2a:7d:83:9a: 3a:da:2a:82:06:01:03:17:90:77:51:c0:53:f1:2c:57:b6:7f: d4:18:82:37:83:6c:3d:07:40:40:fc:7b:86:10:4d:4b:6d:fe: 4c:46:cc:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAMMeKBr8j0J8hGhXwDvWv9FOiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA5MTcwNDEzNDhaFw0yNjA5MTgwNTI5NDhaMDMxMTAvBgNV BAMTKDNDNkZFQTU2NDk4RjRBOUM1RDIzRkYxQzQ1NUM4N0FCMDM2RUZGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDrqwr3kXDFp+3rf6kjyGuij0 O55RzEHW8qYzuBk91g2Um81GpIiv3GqWGQiYRtYWdKMda5F1U+kgT39/rqQOoRZD Pn8yJFXK1pD1dHM0R/JKkYYeInIB+Ie4UlmD94D2X5fnQwjaibcSXXQFQstXoeFH oqg7aKqeOCW5K+z/nAvJmrrR2QE/LcP4m/HXLKu27/FCXlbyjEHImR1FuFFQUhwp JMxXlR/vc4hAROK/qfgh4+1VLBOICfdc56Vsmi2B0Z/Gwkoiz8CqifKiXqnGldfi KnCHGLKO6w4eIMqHuH+IrmDubWvJh+HubRH2qxvske2YCE6nPbAOthKGJ8IxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPG/qVkmPSpxdI/8cRVyHqwNu/78wHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu+quCixchZSdasKbnPOdoMX1vS9o6e5L9Y IZ3Eclpix8WAicreJE6sO+k7BpGSv2gjyY2DtzxrjuF3DWegBC9/8olOyxylrfKa ggz9Tim8waM6xy+jpiqEWEbz6dYx200i1LW8k+IjvMtIXEOX/2g/Qh48JecT+Q3X 3JISmv6WBW+ag/DxLJa1MGubCkQmpAKxqHOZ7JlI2Cd0h8LSnHZYAqrotDPlotrt Ie6pXiyodJprVvgj1Z9sOoT38iswou/ERHWEac2Pn0xJP4yR9lBjqC19Kn2Dmjra KoIGAQMXkHdRwFPxLFe2f9QYgjeDbD0HQED8e4YQTUtt/kxGzBI= -----END CERTIFICATE-----Generated at Thu Sep 17 13:50:29 2026 by rpki-client