$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft File: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft (raw, json) Hash identifier: MtIzem3uWNOdxvPPlyqszwxFWs+mXvd+iPCvLuHrSo8= Subject key identifier: 44:52:6A:36:C1:55:58:7B:D9:BD:25:BA:12:B6:79:CA:28:E4:B9:60 Authority key identifier: A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B Certificate issuer: /CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Certificate serial: 685839AAC3B35D1C0A3FA42966D6F0A63D109263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 22:48:30 +0000 Manifest this update: Fri 19 Jun 2026 22:43:30 +0000 Manifest next update: Sat 20 Jun 2026 23:07:30 +0000 Files and hashes: 1: A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl (hash: Cz2JDtj8+IQaAMMBNwtCzFZpHbcEANFZsWzRNEC9L/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:58:39:aa:c3:b3:5d:1c:0a:3f:a4:29:66:d6:f0:a6:3d:10:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3C2E3B214E2545C4D37DCC1978E271012D54D2B Validity Not Before: Jun 19 22:43:30 2026 GMT Not After : Jun 20 23:07:30 2026 GMT Subject: CN=44526A36C155587BD9BD25BA12B679CA28E4B960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:da:a3:fb:46:02:2e:14:3f:c4:c5:e2:2c: 93:4b:08:9f:7c:19:b4:67:f9:e0:6a:fa:24:68:b3: 91:96:f1:f6:e1:8a:02:2d:95:63:8a:3c:5b:24:43: 3f:c5:c8:3e:81:7e:bd:07:f2:c3:df:62:d3:02:04: e1:cc:ff:16:18:db:78:94:6d:38:32:ad:4b:b7:79: 61:ae:90:db:4b:6d:f6:1a:3c:3a:20:62:c0:14:b2: aa:7a:c7:dd:06:e1:f1:c4:6a:3e:0e:6d:34:93:1f: ae:aa:fa:b6:45:be:f7:ca:2b:02:fa:1e:e5:b7:b9: 14:f7:b6:61:7b:1d:cf:64:e2:08:7a:a0:8a:e1:35: 94:ca:ca:1c:44:6b:24:1e:e6:c8:c0:78:e5:a0:3e: 65:7a:de:13:9a:29:91:fd:b0:31:0f:fe:e1:02:1d: 30:21:01:f9:c3:8b:2c:ba:b6:c6:1a:80:d6:19:24: 1e:0e:87:33:dc:93:ab:5b:17:ce:67:03:91:67:d1: c9:5f:70:5b:a2:4f:c5:b9:4c:93:da:ce:f8:15:76: 01:e7:21:bb:53:91:bc:42:a8:f6:e2:38:2d:41:f5: 9b:27:56:53:a4:a8:10:d0:7f:e6:c2:75:3e:ac:1e: e4:df:54:e1:d2:0c:ce:32:34:b8:3c:a1:b7:f6:2b: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:6A:36:C1:55:58:7B:D9:BD:25:BA:12:B6:79:CA:28:E4:B9:60 X509v3 Authority Key Identifier: keyid:A3:C2:E3:B2:14:E2:54:5C:4D:37:DC:C1:97:8E:27:10:12:D5:4D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/A3C2E3B214E2545C4D37DCC1978E271012D54D2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d0:cb:23:7d:c1:57:6f:9a:9c:44:8c:ad:86:bc:5f:ac:c7: 49:d9:b1:48:9b:eb:09:96:21:96:e2:91:39:9e:73:be:e5:dc: 37:1f:13:59:41:2f:3a:68:dc:31:35:b1:8f:2a:f0:49:ef:70: bb:ee:10:f2:48:f7:68:82:b6:9b:68:21:24:43:08:e0:1d:47: ac:a1:01:b9:f2:ec:5b:1c:6b:4b:1d:48:2c:36:61:1a:ad:6a: fe:9a:f3:7b:ae:40:a8:74:b7:ed:5f:a8:ed:95:4e:aa:87:5a: e7:95:fe:d6:6e:2e:c9:f6:9b:5d:e3:2d:a5:ca:43:0a:a7:53: a4:44:f5:64:86:b6:74:42:4f:b3:63:fa:fe:d3:c8:6f:93:ea: 23:1a:81:0c:71:bd:90:3b:2e:2a:7f:a4:08:49:1d:18:26:cf: ee:17:ae:13:89:b5:26:94:57:a6:f4:d4:0b:a2:e0:e3:4b:a7: 60:e1:dc:16:c3:9d:67:f4:a6:5d:7a:c9:d9:5d:31:3a:24:b5: 0d:17:5c:75:6a:45:e3:a3:79:54:08:19:eb:95:f4:2d:a4:ec: 33:88:84:78:7e:18:7e:02:78:7f:5c:67:90:70:d9:6c:c1:f8: f9:87:bf:4f:8b:6a:7e:ea:ff:26:29:9e:aa:04:a5:7c:a8:09: cd:6b:72:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFg5qsOzXRwKP6QpZtbwpj0QkmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAx MkQ1NEQyQjAeFw0yNjA2MTkyMjQzMzBaFw0yNjA2MjAyMzA3MzBaMDMxMTAvBgNV BAMTKDQ0NTI2QTM2QzE1NTU4N0JEOUJEMjVCQTEyQjY3OUNBMjhFNEI5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwy9qj+0YCLhQ/xMXiLJNLCJ98 GbRn+eBq+iRos5GW8fbhigItlWOKPFskQz/FyD6Bfr0H8sPfYtMCBOHM/xYY23iU bTgyrUu3eWGukNtLbfYaPDogYsAUsqp6x90G4fHEaj4ObTSTH66q+rZFvvfKKwL6 HuW3uRT3tmF7Hc9k4gh6oIrhNZTKyhxEayQe5sjAeOWgPmV63hOaKZH9sDEP/uEC HTAhAfnDiyy6tsYagNYZJB4OhzPck6tbF85nA5Fn0clfcFuiT8W5TJPazvgVdgHn IbtTkbxCqPbiOC1B9ZsnVlOkqBDQf+bCdT6sHuTfVOHSDM4yNLg8obf2K16jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFJqNsFVWHvZvSW6ErZ5yijkuWAwHwYDVR0j BBgwFoAUo8LjshTiVFxNN9zBl44nEBLVTSswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIx NEUyNTQ1QzREMzdEQ0MxOTc4RTI3MTAxMkQ1NEQyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0MyRTNCMjE0RTI1NDVDNEQzN0RDQzE5NzhFMjcxMDEyRDU0 RDJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvQTNDMkUzQjIxNEUyNTQ1QzREMzdEQ0MxOTc4RTI3 MTAxMkQ1NEQyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHQyyN9wVdvmpxEjK2GvF+sx0nZsUib6wmW IZbikTmec77l3DcfE1lBLzpo3DE1sY8q8EnvcLvuEPJI92iCtptoISRDCOAdR6yh Abny7Fsca0sdSCw2YRqtav6a83uuQKh0t+1fqO2VTqqHWueV/tZuLsn2m13jLaXK QwqnU6RE9WSGtnRCT7Nj+v7TyG+T6iMagQxxvZA7Lip/pAhJHRgmz+4XrhOJtSaU V6b01Aui4ONLp2Dh3BbDnWf0pl16ydldMToktQ0XXHVqReOjeVQIGeuV9C2k7DOI hHh+GH4CeH9cZ5Bw2WzB+PmHv0+Lan7q/yYpnqoEpXyoCc1rcvk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:43 2026 by rpki-client