$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: QTAUpi2yGMXZ6MDO0bCLDRxD1xItQH+BU2l8nislg84= Subject key identifier: 7C:1B:48:0E:FD:B9:C9:BE:08:A9:16:7F:8D:03:12:01:8F:FA:D6:03 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 4E1EE32F450EEB69913297F3EED320C59A77B588 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 12:47:35 +0000 Manifest this update: Thu 03 Sep 2026 12:42:35 +0000 Manifest next update: Fri 04 Sep 2026 14:52:35 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 2: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 3: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 4: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: J5/xXMXhYbL+bWIjlxlCTqp95omDb1fEmIbRJ8dqxhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1e:e3:2f:45:0e:eb:69:91:32:97:f3:ee:d3:20:c5:9a:77:b5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Sep 3 12:42:35 2026 GMT Not After : Sep 4 14:52:35 2026 GMT Subject: CN=7C1B480EFDB9C9BE08A9167F8D0312018FFAD603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:af:fe:51:35:93:a9:8e:66:85:94:b0:af: 32:92:ac:89:35:4f:13:74:61:8c:e5:3c:52:91:74: 94:bf:76:0b:5c:3b:9f:03:33:58:ac:61:5e:3a:bf: cd:16:6e:57:2e:c6:30:d2:05:bb:80:c5:02:c3:be: fd:cf:67:7e:e3:b7:7f:6c:da:c1:df:0e:60:0b:db: 58:33:25:7b:b1:ea:83:8c:68:7b:61:73:01:04:2a: ef:22:c5:2c:ef:b5:a6:34:95:0a:ed:9c:ac:0e:96: dd:60:77:04:9a:41:cb:40:61:e7:e0:65:bb:c3:ae: 66:cc:7f:bd:6b:2c:41:bc:2d:e1:9d:39:16:00:fc: 28:07:0e:68:3b:2d:2d:a2:17:47:1a:e0:2c:b3:97: b3:bb:e4:e9:6d:18:74:ce:4c:b4:f4:ac:54:5e:cf: 86:f8:0e:d3:d1:5d:93:f6:4f:eb:da:bf:86:1b:e5: b4:2d:09:68:d0:48:b9:31:13:c7:b1:3d:63:b4:3f: 47:3b:09:df:5a:7e:d6:bb:fe:a3:3c:70:69:38:1a: 60:c0:d6:80:9b:59:36:07:3e:0e:34:3a:c4:ea:30: af:d6:fd:28:3a:1b:a0:bd:fa:86:8a:72:56:71:89: cc:eb:46:5e:c0:40:92:00:bf:c7:33:c1:92:d6:82: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1B:48:0E:FD:B9:C9:BE:08:A9:16:7F:8D:03:12:01:8F:FA:D6:03 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0e:25:33:db:34:c9:7c:55:04:86:c4:06:c0:7b:67:b7:2b: 61:d8:be:b9:80:eb:83:e3:a2:bf:2b:b3:51:6c:50:b7:2f:93: 27:aa:3e:28:19:74:15:e8:8f:e6:8b:62:41:ce:0a:49:08:b9: 80:75:63:72:0a:c5:fd:aa:3a:7f:32:d1:bf:44:ec:2f:8e:d6: c9:8f:d0:6e:d3:d5:68:b3:be:27:12:74:bb:ec:65:3a:87:27: ac:89:c1:9c:0a:19:85:2e:75:e7:6d:7e:4e:06:0c:f6:bd:d1: af:48:a8:cb:b1:66:fb:58:f8:4f:cc:e3:6f:43:42:04:96:d7: 39:d7:3c:cb:69:c5:08:5b:d4:a5:79:6c:50:70:62:15:73:f4: 8f:26:7f:17:30:d4:41:4c:4a:51:c8:24:86:5d:f4:1d:49:61: b5:4b:59:d7:b0:c1:f0:4c:49:87:01:32:b1:ad:cb:64:48:c8: bb:b9:20:83:be:eb:2e:f1:12:10:9a:10:99:83:56:55:aa:57: 10:2e:17:9d:8e:67:57:62:2e:19:13:bf:cb:66:48:33:8c:ef: a2:f2:3b:d5:88:f5:d6:97:a6:91:bd:3d:7e:de:1d:1d:62:cc: 84:b9:5c:65:36:0d:0f:ef:03:43:b8:96:9e:29:78:81:37:8b: ff:d8:63:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTh7jL0UO62mRMpfz7tMgxZp3tYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA5MDMxMjQyMzVaFw0yNjA5MDQxNDUyMzVaMDMxMTAvBgNV BAMTKDdDMUI0ODBFRkRCOUM5QkUwOEE5MTY3RjhEMDMxMjAxOEZGQUQ2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoz6/+UTWTqY5mhZSwrzKSrIk1 TxN0YYzlPFKRdJS/dgtcO58DM1isYV46v80WblcuxjDSBbuAxQLDvv3PZ37jt39s 2sHfDmAL21gzJXux6oOMaHthcwEEKu8ixSzvtaY0lQrtnKwOlt1gdwSaQctAYefg ZbvDrmbMf71rLEG8LeGdORYA/CgHDmg7LS2iF0ca4Cyzl7O75OltGHTOTLT0rFRe z4b4DtPRXZP2T+vav4Yb5bQtCWjQSLkxE8exPWO0P0c7Cd9afta7/qM8cGk4GmDA 1oCbWTYHPg40OsTqMK/W/Sg6G6C9+oaKclZxiczrRl7AQJIAv8czwZLWgnXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfBtIDv25yb4IqRZ/jQMSAY/61gMwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4OJTPbNMl8VQSGxAbAe2e3K2HYvrmA64Pj or8rs1FsULcvkyeqPigZdBXoj+aLYkHOCkkIuYB1Y3IKxf2qOn8y0b9E7C+O1smP 0G7T1WizvicSdLvsZTqHJ6yJwZwKGYUudedtfk4GDPa90a9IqMuxZvtY+E/M429D QgSW1znXPMtpxQhb1KV5bFBwYhVz9I8mfxcw1EFMSlHIJIZd9B1JYbVLWdewwfBM SYcBMrGty2RIyLu5IIO+6y7xEhCaEJmDVlWqVxAuF52OZ1diLhkTv8tmSDOM76Ly O9WI9daXppG9PX7eHR1izIS5XGU2DQ/vA0O4lp4peIE3i//YYy4= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:00 2026 by rpki-client