$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: 91wqImao5rtxLtthKU3ugAlVQkCM/INOAopFS+1dDz8= Subject key identifier: 8D:8C:63:0E:C4:B3:8E:51:EF:DB:F3:0D:0E:7A:E4:D5:49:A1:69:96 Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 621CAA12DE165F914DD695D836754373EF205396 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 16:56:10 +0000 Manifest this update: Fri 19 Jun 2026 16:51:10 +0000 Manifest next update: Sat 20 Jun 2026 19:53:10 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: 3ycQRuYY7Tm9zmRhTdhL1eUlTXY38sDbaRKj9UIq2rA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1c:aa:12:de:16:5f:91:4d:d6:95:d8:36:75:43:73:ef:20:53:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: Jun 19 16:51:10 2026 GMT Not After : Jun 20 19:53:10 2026 GMT Subject: CN=8D8C630EC4B38E51EFDBF30D0E7AE4D549A16996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:e8:2c:40:ea:c7:f5:6c:a6:c2:c3:7c:93: cc:68:3d:b7:5b:51:db:aa:d9:5e:09:a4:21:e6:b9: 87:07:2e:ca:7e:b5:00:15:b8:86:59:cf:5f:eb:d0: 98:b1:d2:be:2d:82:34:70:6c:90:af:c6:23:e5:e1: 5b:a5:13:28:dd:57:ed:e8:89:93:f5:68:aa:36:11: 2d:42:d2:ac:a0:de:7a:0a:eb:f0:bd:09:c8:74:3a: 4b:42:52:75:ae:91:af:27:36:5e:d7:25:9b:49:ce: 41:03:d1:36:b9:14:54:ed:5e:da:c1:80:c3:00:8d: 4c:37:c1:0d:33:d2:b7:d0:50:59:bf:43:2b:37:fa: 10:b8:a8:43:6c:91:e7:f0:65:d4:cc:fe:c4:c2:bb: eb:35:e2:f7:67:dd:19:8f:ca:d1:cc:b9:ac:4f:70: cf:57:a7:07:63:31:4f:de:de:95:d8:0a:c5:10:0f: 93:0a:85:52:13:89:d8:f8:2f:2b:5d:75:44:f4:fb: bd:2c:8b:3c:56:2d:9e:b3:bf:51:84:9a:e5:49:e1: a2:db:c9:79:32:68:9d:93:af:2f:2b:eb:8c:7d:80: ef:49:de:73:7c:e0:da:b8:a5:cd:c2:e6:13:14:82: 93:e3:c4:9b:b9:28:bc:81:eb:98:3f:5a:87:9c:c1: ad:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:63:0E:C4:B3:8E:51:EF:DB:F3:0D:0E:7A:E4:D5:49:A1:69:96 X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:74:fb:2c:b3:ba:f1:1e:ea:2a:10:d8:49:43:75:1b:57:4b: 17:f8:d8:f1:44:f3:ab:e2:8f:35:cd:29:c9:60:2f:9c:0e:a7: f7:36:61:ca:4c:c0:a8:c3:9a:d6:4b:cd:d8:e8:62:8b:08:c0: 50:ad:9d:39:14:f0:73:c3:18:6a:f4:b3:89:ec:dc:d4:7b:ae: ef:2b:1e:a6:62:a6:e4:2e:a2:0c:13:2c:a6:e3:66:f6:ad:dc: c8:21:c3:05:18:75:28:e7:60:0f:03:ab:92:b9:d8:69:eb:0b: 1b:5e:17:81:ca:8a:5a:98:93:0f:c1:6d:ec:1c:10:02:cb:8b: 3c:7d:eb:e7:59:e8:ca:22:ce:94:f4:74:83:8d:f8:97:3c:c6: 2f:51:f5:aa:10:35:45:ab:c1:e6:47:b7:25:91:bf:bf:d8:85: 7d:e5:a8:d5:25:2d:51:38:2f:f0:58:43:e1:52:e9:a7:2b:8c: 1d:9b:dc:12:a7:71:f0:b0:73:5e:c1:32:d5:f2:44:72:ca:38: fd:5e:39:0c:b2:a2:f5:15:37:b4:cd:ea:26:5b:c1:e2:57:b6: 0b:aa:2e:1f:70:72:0d:2f:a4:b9:fb:7a:c2:66:97:8b:04:8e: 67:e1:4c:d2:72:06:c9:6a:f2:6b:1d:c6:a8:6b:f7:46:a5:60: ed:3b:1e:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhyqEt4WX5FN1pXYNnVDc+8gU5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA2MTkxNjUxMTBaFw0yNjA2MjAxOTUzMTBaMDMxMTAvBgNV BAMTKDhEOEM2MzBFQzRCMzhFNTFFRkRCRjMwRDBFN0FFNEQ1NDlBMTY5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWq+gsQOrH9WymwsN8k8xoPbdb Uduq2V4JpCHmuYcHLsp+tQAVuIZZz1/r0Jix0r4tgjRwbJCvxiPl4VulEyjdV+3o iZP1aKo2ES1C0qyg3noK6/C9Cch0OktCUnWuka8nNl7XJZtJzkED0Ta5FFTtXtrB gMMAjUw3wQ0z0rfQUFm/Qys3+hC4qENskefwZdTM/sTCu+s14vdn3RmPytHMuaxP cM9XpwdjMU/e3pXYCsUQD5MKhVITidj4LytddUT0+70sizxWLZ6zv1GEmuVJ4aLb yXkyaJ2Try8r64x9gO9J3nN84Nq4pc3C5hMUgpPjxJu5KLyB65g/Woecwa0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYxjDsSzjlHv2/MNDnrk1UmhaZYwHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV0+yyzuvEe6ioQ2ElDdRtXSxf42PFE86vi jzXNKclgL5wOp/c2YcpMwKjDmtZLzdjoYosIwFCtnTkU8HPDGGr0s4ns3NR7ru8r HqZipuQuogwTLKbjZvat3MghwwUYdSjnYA8Dq5K52GnrCxteF4HKilqYkw/Bbewc EALLizx96+dZ6MoizpT0dION+Jc8xi9R9aoQNUWrweZHtyWRv7/YhX3lqNUlLVE4 L/BYQ+FS6acrjB2b3BKncfCwc17BMtXyRHLKOP1eOQyyovUVN7TN6iZbweJXtguq Lh9wcg0vpLn7esJml4sEjmfhTNJyBslq8msdxqhr90alYO07HlM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:47:07 2026 by rpki-client