$ rpki-client -vvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: sIHfzAUfodT4rLZqM45b3tYzOFdZD6U8HDKN1N3eQmg= Subject key identifier: 0E:1B:45:4D:79:B5:23:AA:16:8D:CB:02:5A:B3:34:AE:46:67:0E:84 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 5EBB82B322FD5ECEC4E646809D930D3171BF2C2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 20:29:07 +0000 Manifest this update: Sat 13 Jun 2026 20:24:07 +0000 Manifest next update: Mon 15 Jun 2026 00:09:07 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 2: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: xCKm64iL2cjdsUz+RU2M2r6qivhVdmDRNMlEj+Bgzk8=) 3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bb:82:b3:22:fd:5e:ce:c4:e6:46:80:9d:93:0d:31:71:bf:2c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Jun 13 20:24:07 2026 GMT Not After : Jun 15 00:09:07 2026 GMT Subject: CN=0E1B454D79B523AA168DCB025AB334AE46670E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:92:bd:c9:9a:56:48:5d:f0:00:78:ed:22: f5:7a:dd:a1:02:36:bb:5b:fa:1d:05:0f:57:b9:b9: 86:ec:a1:af:a2:68:80:e1:1e:6a:62:b8:32:10:b3: 9f:24:86:5f:2c:16:bf:c1:cc:53:02:c2:5e:4a:e2: 12:2c:bc:71:78:fb:2e:4e:e8:d5:d7:3f:ce:f7:ee: 25:17:e4:1c:06:37:09:f7:84:f1:f8:58:20:31:b8: 8b:36:3f:02:db:b8:79:3d:bd:75:04:c5:60:36:d9: cb:90:91:88:e1:ba:c4:de:78:a4:e3:3a:f2:34:76: b2:04:13:d9:ce:ea:83:f1:dc:e5:fc:b1:75:23:19: 9e:c4:d0:ad:70:b3:2b:f5:cb:7e:90:99:fb:ec:78: 5f:5f:9e:6f:d8:ea:ce:9e:3d:c0:7b:c0:3e:f0:97: 82:6f:ae:05:30:7f:da:2f:4d:c7:8b:71:b9:b6:c6: 55:2a:f2:be:eb:8a:46:1f:33:c5:d5:d0:b4:95:c0: ba:d5:8a:09:0b:27:08:15:a2:c2:69:be:95:d7:04: aa:15:c3:8d:80:c9:73:ad:af:24:48:18:79:72:cd: b1:38:c8:62:9e:86:d7:7f:07:38:36:07:3d:83:ab: ff:85:54:ff:26:d3:96:cb:96:6e:b8:cd:4e:c3:7c: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1B:45:4D:79:B5:23:AA:16:8D:CB:02:5A:B3:34:AE:46:67:0E:84 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e9:95:17:24:f7:05:00:f0:29:f1:e2:e3:78:fc:6f:8c:57: 2e:94:6c:bd:f4:0c:ae:bb:b0:e9:f6:ed:92:19:a3:48:b0:4b: c0:f0:f4:cf:e6:78:b6:15:8e:5a:74:ba:2e:d4:16:22:47:3b: e0:c9:cd:fc:47:87:cf:8e:eb:d0:45:45:cc:6e:fd:44:f1:58: ed:cd:29:fe:f2:97:c4:ec:b4:7f:df:41:74:9d:08:97:d0:37: 8a:83:1f:de:19:28:d8:e1:40:bd:57:ed:09:ed:bf:51:34:1b: 0b:a3:7d:d5:25:4c:61:d2:ab:32:40:aa:b6:86:a8:fc:0a:c4: 3e:90:6f:02:b4:64:8b:89:49:8b:9a:b7:fc:08:06:ad:30:18: b3:b6:89:ff:f8:cd:6d:2c:2a:98:2a:0e:b4:cc:fa:67:f2:29: 3e:1c:44:43:45:0f:f3:1a:66:36:e1:c9:8a:20:aa:07:ee:72: f7:79:b6:2b:6b:0b:3a:f9:aa:b5:d8:15:a3:76:12:f6:3c:74: d7:a6:f7:3f:1f:86:d4:a3:91:9e:96:9f:cb:66:33:cd:6b:b8: 09:80:dd:ec:41:9b:cf:03:77:d4:63:af:8b:fb:2f:88:0d:94: bd:ff:08:c0:e3:4b:cb:87:7e:3d:f7:6b:b1:b6:c0:fd:82:65: db:d9:24:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXruCsyL9Xs7E5kaAnZMNMXG/LCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA2MTMyMDI0MDdaFw0yNjA2MTUwMDA5MDdaMDMxMTAvBgNV BAMTKDBFMUI0NTRENzlCNTIzQUExNjhEQ0IwMjVBQjMzNEFFNDY2NzBFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHZK9yZpWSF3wAHjtIvV63aEC Nrtb+h0FD1e5uYbsoa+iaIDhHmpiuDIQs58khl8sFr/BzFMCwl5K4hIsvHF4+y5O 6NXXP8737iUX5BwGNwn3hPH4WCAxuIs2PwLbuHk9vXUExWA22cuQkYjhusTeeKTj OvI0drIEE9nO6oPx3OX8sXUjGZ7E0K1wsyv1y36QmfvseF9fnm/Y6s6ePcB7wD7w l4JvrgUwf9ovTceLcbm2xlUq8r7rikYfM8XV0LSVwLrVigkLJwgVosJpvpXXBKoV w42AyXOtryRIGHlyzbE4yGKehtd/Bzg2Bz2Dq/+FVP8m05bLlm64zU7DfH5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhtFTXm1I6oWjcsCWrM0rkZnDoQwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTplRck9wUA8Cnx4uN4/G+MVy6UbL30DK67 sOn27ZIZo0iwS8Dw9M/meLYVjlp0ui7UFiJHO+DJzfxHh8+O69BFRcxu/UTxWO3N Kf7yl8TstH/fQXSdCJfQN4qDH94ZKNjhQL1X7Qntv1E0GwujfdUlTGHSqzJAqraG qPwKxD6QbwK0ZIuJSYuat/wIBq0wGLO2if/4zW0sKpgqDrTM+mfyKT4cRENFD/Ma ZjbhyYogqgfucvd5titrCzr5qrXYFaN2EvY8dNem9z8fhtSjkZ6Wn8tmM81ruAmA 3exBm88Dd9Rjr4v7L4gNlL3/CMDjS8uHfj33a7G2wP2CZdvZJPc= -----END CERTIFICATE-----Generated at Sun Jun 14 03:23:35 2026 by rpki-client