$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: Nfk5sQlesr1XTJ+SdYYgNorL/YP8tBru3SSjkotNfmI= Subject key identifier: 4E:50:24:34:AA:BF:EF:C5:36:DC:90:7C:7E:6F:44:92:F0:5A:8A:F6 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 1EA380D7B7F58B654243BBF8FE989D5FF5080EAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: BF Signing time: Tue 22 Sep 2026 17:12:45 +0000 Manifest this update: Tue 22 Sep 2026 17:07:45 +0000 Manifest next update: Wed 23 Sep 2026 19:12:45 +0000 Files and hashes: 1: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: qKHHrxcARMbWDzpCuzjCBD51ANsa7TGrdo/wo4XDrzM=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 3: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a3:80:d7:b7:f5:8b:65:42:43:bb:f8:fe:98:9d:5f:f5:08:0e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Sep 22 17:07:45 2026 GMT Not After : Sep 23 19:12:45 2026 GMT Subject: CN=4E502434AABFEFC536DC907C7E6F4492F05A8AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:cd:41:81:5c:b0:39:99:3b:40:b7:c2:d6: a9:cb:3c:b3:52:27:2a:fa:7b:90:c4:44:f9:8a:ae: 11:ba:e9:50:a3:cd:7a:8c:c3:46:f1:b8:c7:20:9e: fe:4a:8d:85:d4:61:b7:95:19:45:7c:d4:bf:73:7a: 41:f0:1f:5e:ca:76:84:89:5e:52:07:69:1c:8e:ab: e0:86:5b:f9:68:11:79:40:dc:15:dd:65:b3:01:03: 92:60:f2:4b:96:5a:e1:dc:7a:64:f7:77:64:80:88: 43:d7:dc:e4:3d:4d:5b:5e:31:20:a4:38:9d:fa:71: a3:f1:8c:11:aa:bd:70:95:dc:2b:9e:9b:35:4a:df: fa:c5:dc:9a:93:4f:63:30:fd:e7:f6:7f:1f:93:27: 62:ef:08:3f:0c:49:7b:b3:67:f5:2c:a7:8f:b3:71: 22:b9:01:af:c3:38:1c:a0:58:6b:56:19:6c:0b:56: ee:d4:2c:04:8d:c1:5e:2a:cb:54:90:96:74:3e:ed: d4:c0:ce:40:50:8d:78:51:d0:cd:43:19:a8:20:59: 11:ed:f3:22:48:26:0e:7f:dd:f8:22:50:c4:ef:b2: bf:66:c9:b6:f9:82:93:6e:1e:5c:b0:9e:62:41:f6: 0b:2f:31:50:49:07:9a:ed:2a:3a:32:ed:2f:e1:00: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:50:24:34:AA:BF:EF:C5:36:DC:90:7C:7E:6F:44:92:F0:5A:8A:F6 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:82:f7:11:a6:67:5e:1e:92:e3:8f:b2:fb:26:bf:ae:ab:69: 9a:e7:ec:0d:a5:05:ca:2b:a4:4f:42:5d:0c:e0:74:31:63:4b: 82:8e:91:f3:f4:c3:e2:fa:cf:dd:7f:dd:50:0d:2e:68:14:88: 42:bc:3b:48:8f:28:78:ee:f2:94:5b:8c:8a:30:fa:1a:1d:d5: 8d:7e:3f:c0:57:d9:30:5d:9c:a3:ee:5a:57:97:e0:a6:85:af: 79:05:b1:37:4e:7c:45:b8:3b:6e:12:fd:a5:ff:0c:69:fd:94: c7:c2:71:8e:63:7c:1e:bb:81:61:3e:50:a1:2a:88:38:3b:2e: d6:30:a5:0f:2c:af:c6:55:ff:07:d0:16:d2:2a:a8:d9:81:5c: f2:6d:bd:b7:14:a6:38:3f:53:15:c4:c2:d4:38:c5:06:06:53: 2c:c5:8a:00:34:a7:2c:7d:4a:2f:89:3c:e2:4e:46:15:59:0e: b2:3f:00:a6:8b:c5:5d:53:da:a2:8a:1f:4c:03:34:61:71:c7: c5:d1:52:57:5b:90:ba:00:80:28:e5:be:d3:fd:98:c1:84:82: 24:57:2e:0f:e6:4b:c6:25:bd:82:42:c2:5d:7a:2b:a4:0a:48: 6f:85:6a:37:1f:c0:71:e4:3a:7b:b6:2e:82:81:b9:7b:4f:2a: 0a:74:d0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqOA17f1i2VCQ7v4/pidX/UIDqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA5MjIxNzA3NDVaFw0yNjA5MjMxOTEyNDVaMDMxMTAvBgNV BAMTKDRFNTAyNDM0QUFCRkVGQzUzNkRDOTA3QzdFNkY0NDkyRjA1QThBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2581BgVywOZk7QLfC1qnLPLNS Jyr6e5DERPmKrhG66VCjzXqMw0bxuMcgnv5KjYXUYbeVGUV81L9zekHwH17KdoSJ XlIHaRyOq+CGW/loEXlA3BXdZbMBA5Jg8kuWWuHcemT3d2SAiEPX3OQ9TVteMSCk OJ36caPxjBGqvXCV3CuemzVK3/rF3JqTT2Mw/ef2fx+TJ2LvCD8MSXuzZ/Usp4+z cSK5Aa/DOBygWGtWGWwLVu7ULASNwV4qy1SQlnQ+7dTAzkBQjXhR0M1DGaggWRHt 8yJIJg5/3fgiUMTvsr9mybb5gpNuHlywnmJB9gsvMVBJB5rtKjoy7S/hAA7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTlAkNKq/78U23JB8fm9EkvBaivYwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeC9xGmZ14ekuOPsvsmv66raZrn7A2lBcor pE9CXQzgdDFjS4KOkfP0w+L6z91/3VANLmgUiEK8O0iPKHju8pRbjIow+hod1Y1+ P8BX2TBdnKPuWleX4KaFr3kFsTdOfEW4O24S/aX/DGn9lMfCcY5jfB67gWE+UKEq iDg7LtYwpQ8sr8ZV/wfQFtIqqNmBXPJtvbcUpjg/UxXEwtQ4xQYGUyzFigA0pyx9 Si+JPOJORhVZDrI/AKaLxV1T2qKKH0wDNGFxx8XRUldbkLoAgCjlvtP9mMGEgiRX Lg/mS8YlvYJCwl16K6QKSG+FajcfwHHkOnu2LoKBuXtPKgp00NU= -----END CERTIFICATE-----Generated at Wed Sep 23 01:35:13 2026 by rpki-client