$ rpki-client -vvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: uBwzDrliuxaosn5kSyv/FajhieI8+5Qwm7Ed+0JO1yc= Subject key identifier: 5C:32:B7:A5:F9:90:28:08:1E:2F:C8:4F:8C:C7:84:62:46:33:45:72 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 22990267AB392D915BFFD8B6F2431C81CD7D5A6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 07:46:45 +0000 Manifest this update: Sun 19 Jul 2026 07:41:45 +0000 Manifest next update: Mon 20 Jul 2026 11:12:45 +0000 Files and hashes: 1: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: lisslCKcJyDizIaP9yKJuf/sBYS1xGGVC5z0FysrbaA=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 3: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:99:02:67:ab:39:2d:91:5b:ff:d8:b6:f2:43:1c:81:cd:7d:5a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Jul 19 07:41:45 2026 GMT Not After : Jul 20 11:12:45 2026 GMT Subject: CN=5C32B7A5F99028081E2FC84F8CC7846246334572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:68:49:63:9e:27:4a:46:f3:40:c1:af:fd: d4:60:26:39:6f:f8:2c:28:de:14:f1:98:b2:7f:fc: 77:40:a9:c0:f6:f6:16:58:37:0f:72:4c:4d:c0:24: 07:d8:a8:d3:a9:33:ac:f7:d7:13:b5:73:ab:f9:d5: fe:cc:2a:9b:86:1f:0f:32:ad:c4:ae:6f:59:58:c6: 14:cc:e7:ab:59:fc:d1:cc:f6:85:76:14:98:0e:98: 94:49:ea:a1:0d:31:09:1b:0f:92:cc:de:23:1f:1b: 1c:7e:25:aa:cc:97:d0:61:06:6a:e8:a2:d3:bd:b5: 3e:1a:3e:09:2d:37:4d:05:10:91:b6:09:46:4f:6d: 03:6e:fd:eb:9a:11:c1:0e:92:36:0c:5b:e7:8d:7f: 62:e3:0a:69:14:b8:c1:2c:f5:92:f1:09:3c:e5:2d: e6:6f:e0:15:46:f9:d8:e7:7d:5d:2e:7f:d6:a7:e1: 84:1d:0b:d2:7c:05:72:11:7c:09:aa:20:75:de:a3: 32:10:5f:2f:5b:2c:52:5d:48:67:1d:78:ce:ad:a0: 09:77:9b:7b:ec:e1:b0:3a:1e:21:d2:9a:4b:15:b6: e8:fe:6a:a6:10:50:ae:b8:8e:1d:50:7b:22:14:73: 82:60:9a:97:b6:aa:d1:00:7a:2d:36:b4:67:46:08: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:B7:A5:F9:90:28:08:1E:2F:C8:4F:8C:C7:84:62:46:33:45:72 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:f5:39:45:14:d2:e3:e6:5c:79:c3:a2:f4:68:3b:a1:a7: 3e:d0:10:69:38:cf:3d:b6:f3:bf:5b:f6:5d:33:1d:eb:ae:77: 02:78:2a:1d:e0:8f:52:40:6a:85:42:19:d9:6b:bd:9c:b2:c0: 9e:11:7c:73:71:66:18:d4:f5:4f:14:40:7b:42:af:b4:b3:ac: de:52:e7:30:19:7c:71:ba:08:da:d2:17:82:72:14:42:6e:20: 52:08:78:65:21:c5:86:17:4e:82:6d:4a:db:17:e8:09:0e:c1: 89:74:40:ac:43:28:82:ed:06:ef:fe:16:e2:93:9d:fc:20:3a: 29:ec:f8:b5:19:d8:fb:30:c0:56:80:3a:64:3f:c6:a5:fc:b6: 9c:23:5a:6d:a7:3f:4c:a6:2b:1e:ed:3d:2e:40:fd:26:b0:c1: 21:cc:9a:7e:6d:ed:6d:11:6c:eb:03:25:1b:8f:30:a2:b7:8d: 14:b3:64:a7:86:8d:3f:77:ee:5b:1a:5d:73:98:a4:d0:45:0d: ff:eb:11:e9:99:7b:37:62:f1:c0:43:46:9c:05:03:2b:ce:2f: 2f:e0:b0:e3:9c:49:09:4c:9a:70:fd:e8:49:96:06:8c:6a:69: 16:b3:79:a5:36:7e:8b:1b:24:99:23:52:89:56:4a:99:aa:5d: 37:62:31:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIpkCZ6s5LZFb/9i28kMcgc19WmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA3MTkwNzQxNDVaFw0yNjA3MjAxMTEyNDVaMDMxMTAvBgNV BAMTKDVDMzJCN0E1Rjk5MDI4MDgxRTJGQzg0RjhDQzc4NDYyNDYzMzQ1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYG2hJY54nSkbzQMGv/dRgJjlv +Cwo3hTxmLJ//HdAqcD29hZYNw9yTE3AJAfYqNOpM6z31xO1c6v51f7MKpuGHw8y rcSub1lYxhTM56tZ/NHM9oV2FJgOmJRJ6qENMQkbD5LM3iMfGxx+JarMl9BhBmro otO9tT4aPgktN00FEJG2CUZPbQNu/euaEcEOkjYMW+eNf2LjCmkUuMEs9ZLxCTzl LeZv4BVG+djnfV0uf9an4YQdC9J8BXIRfAmqIHXeozIQXy9bLFJdSGcdeM6toAl3 m3vs4bA6HiHSmksVtuj+aqYQUK64jh1QeyIUc4Jgmpe2qtEAei02tGdGCCcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDK3pfmQKAgeL8hPjMeEYkYzRXIwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbY9TlFFNLj5lx5w6L0aDuhpz7QEGk4zz22 879b9l0zHeuudwJ4Kh3gj1JAaoVCGdlrvZyywJ4RfHNxZhjU9U8UQHtCr7SzrN5S 5zAZfHG6CNrSF4JyFEJuIFIIeGUhxYYXToJtStsX6AkOwYl0QKxDKILtBu/+FuKT nfwgOins+LUZ2PswwFaAOmQ/xqX8tpwjWm2nP0ymKx7tPS5A/SawwSHMmn5t7W0R bOsDJRuPMKK3jRSzZKeGjT937lsaXXOYpNBFDf/rEemZezdi8cBDRpwFAyvOLy/g sOOcSQlMmnD96EmWBoxqaRazeaU2fosbJJkjUolWSpmqXTdiMfo= -----END CERTIFICATE-----Generated at Sun Jul 19 23:02:19 2026 by rpki-client