$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft File: 3C5C511E08C317C505BE5E9896AB0020B121C70C.mft (raw, json) Hash identifier: O1YGgRI1fEftoct+Se8Aauo08VuqHhH+VoPxStHvc2c= Subject key identifier: 80:44:CD:58:4A:75:75:24:BE:D4:6E:A0:47:B4:2C:F3:15:A7:DF:F2 Authority key identifier: 3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C Certificate issuer: /CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Certificate serial: 4B219A0A1B17C5ED4795DF5BEFAF44F1FF6AE2AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:33:22 +0000 Manifest this update: Wed 16 Sep 2026 15:28:22 +0000 Manifest next update: Thu 17 Sep 2026 18:50:22 +0000 Files and hashes: 1: 3C5C511E08C317C505BE5E9896AB0020B121C70C.crl (hash: ZNPzZgTQb5fNReU5AMIZ2SIHGWwoux8+EbYbw6IGc78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:9a:0a:1b:17:c5:ed:47:95:df:5b:ef:af:44:f1:ff:6a:e2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5C511E08C317C505BE5E9896AB0020B121C70C Validity Not Before: Sep 16 15:28:22 2026 GMT Not After : Sep 17 18:50:22 2026 GMT Subject: CN=8044CD584A757524BED46EA047B42CF315A7DFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:3c:24:cb:e8:ae:95:46:67:1c:bb:2e:54: a2:c8:59:b7:ca:b4:94:86:b7:d0:90:96:e5:6a:59: f5:8f:b7:75:d0:ac:ae:5c:80:fd:59:df:28:7d:8c: bd:f7:a6:64:36:4a:2f:db:69:c8:45:49:83:7e:e5: a5:4c:41:20:8d:e8:7c:9d:2c:38:0c:ff:31:d3:f3: 2b:52:f4:ca:d6:cd:97:30:fa:01:8c:e0:29:c6:4a: 61:20:de:2c:53:00:ac:ec:d0:d1:14:92:2c:14:3d: 6a:31:48:e9:7e:2c:99:fe:5a:d3:6f:13:29:7f:60: 28:ed:b7:86:f7:b8:fe:6b:20:1b:c8:66:1a:ae:1d: 8d:93:e3:9b:65:fe:b2:81:0e:a4:2f:e2:72:05:fd: 4f:04:4a:5d:8c:ce:a8:da:cf:5b:f5:a9:e0:8d:dd: ea:35:c0:6e:97:00:f2:b4:ae:92:9e:a2:ed:86:00: bb:0f:3b:7a:fd:70:58:12:3d:6e:2b:64:cb:f6:89: 2a:d2:65:cb:99:ed:2a:94:7e:bd:a5:31:51:cd:de: 33:51:b4:d9:4c:d3:77:ec:31:8d:ab:26:35:0f:5e: 00:06:69:15:97:8d:fa:52:19:3f:c7:72:ff:55:14: c5:35:9a:19:a0:39:fe:be:54:10:90:5e:f0:f3:70: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:44:CD:58:4A:75:75:24:BE:D4:6E:A0:47:B4:2C:F3:15:A7:DF:F2 X509v3 Authority Key Identifier: keyid:3C:5C:51:1E:08:C3:17:C5:05:BE:5E:98:96:AB:00:20:B1:21:C7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C5C511E08C317C505BE5E9896AB0020B121C70C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/3C5C511E08C317C505BE5E9896AB0020B121C70C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:83:8c:a5:21:e7:eb:55:bc:7d:f1:1e:7b:d6:b1:2f:00:22: fa:f9:6e:5d:ac:67:6e:72:ea:9f:09:23:f4:05:06:ea:a4:72: b1:d4:f5:af:94:54:fd:56:3b:d2:7c:51:4d:76:f0:9d:b9:cb: 80:df:d6:2b:6a:a3:2d:99:f7:81:2c:a8:e3:fa:73:30:9e:8b: 16:7d:57:5f:f3:fe:a3:50:0f:ba:63:76:14:af:06:6c:2a:2a: d1:25:88:a7:49:cb:15:50:c9:f0:9b:bf:b6:2c:9f:e1:b7:4b: ba:ad:b6:2a:52:ce:be:64:61:a7:3d:21:9c:d4:7d:cb:3c:ed: b3:43:c9:61:d5:de:37:9e:a7:2f:c0:4c:9e:36:11:b6:59:fe: 9f:58:a3:96:6a:13:62:a9:23:c2:b2:40:74:b1:d5:26:9e:f2: 5f:ad:6c:c2:57:ce:83:86:75:9c:c3:93:ee:7e:09:bb:ee:11: ab:6a:3c:fa:f4:07:39:c3:a7:a9:98:7f:d4:51:b0:1f:67:d3: be:50:c7:23:5c:fb:78:16:bf:df:25:a8:27:5b:11:ea:cf:ce: 6e:08:a5:ee:fb:6c:38:b2:2a:0d:c8:a4:cf:bc:c6:30:fc:71: df:4d:23:77:de:d5:55:ff:83:86:e8:de:42:e5:f8:6c:59:98: 9d:a3:1a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyGaChsXxe1Hld9b769E8f9q4qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBC MTIxQzcwQzAeFw0yNjA5MTYxNTI4MjJaFw0yNjA5MTcxODUwMjJaMDMxMTAvBgNV BAMTKDgwNDRDRDU4NEE3NTc1MjRCRUQ0NkVBMDQ3QjQyQ0YzMTVBN0RGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrDwky+iulUZnHLsuVKLIWbfK tJSGt9CQluVqWfWPt3XQrK5cgP1Z3yh9jL33pmQ2Si/bachFSYN+5aVMQSCN6Hyd LDgM/zHT8ytS9MrWzZcw+gGM4CnGSmEg3ixTAKzs0NEUkiwUPWoxSOl+LJn+WtNv Eyl/YCjtt4b3uP5rIBvIZhquHY2T45tl/rKBDqQv4nIF/U8ESl2Mzqjaz1v1qeCN 3eo1wG6XAPK0rpKeou2GALsPO3r9cFgSPW4rZMv2iSrSZcuZ7SqUfr2lMVHN3jNR tNlM03fsMY2rJjUPXgAGaRWXjfpSGT/Hcv9VFMU1mhmgOf6+VBCQXvDzcJ13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgETNWEp1dSS+1G6gR7Qs8xWn3/IwHwYDVR0j BBgwFoAUPFxRHgjDF8UFvl6YlqsAILEhxwwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE4MGVhOTEtMmNjNy00ZWM5LWIyNjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUw OEMzMTdDNTA1QkU1RTk4OTZBQjAwMjBCMTIxQzcwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzVDNTExRTA4QzMxN0M1MDVCRTVFOTg5NkFCMDAyMEIxMjFD NzBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE4MGVhOTEtMmNjNy00ZWM5LWIy NjctNDM0YTMwYzllZTQ5LzAvM0M1QzUxMUUwOEMzMTdDNTA1QkU1RTk4OTZBQjAw MjBCMTIxQzcwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmDjKUh5+tVvH3xHnvWsS8AIvr5bl2sZ25y 6p8JI/QFBuqkcrHU9a+UVP1WO9J8UU128J25y4Df1itqoy2Z94EsqOP6czCeixZ9 V1/z/qNQD7pjdhSvBmwqKtEliKdJyxVQyfCbv7Ysn+G3S7qttipSzr5kYac9IZzU fcs87bNDyWHV3jeepy/ATJ42EbZZ/p9Yo5ZqE2KpI8KyQHSx1Sae8l+tbMJXzoOG dZzDk+5+CbvuEatqPPr0BznDp6mYf9RRsB9n075QxyNc+3gWv98lqCdbEerPzm4I pe77bDiyKg3IpM+8xjD8cd9NI3fe1VX/g4bo3kLl+GxZmJ2jGkw= -----END CERTIFICATE-----Generated at Thu Sep 17 13:05:11 2026 by rpki-client