$ rpki-client -vvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: 11uhAI0NWew2/TdSD82nIihJ22MHxxI7N8BtyPe1JWg= Subject key identifier: 8F:58:02:64:34:6F:84:1A:51:B5:98:8B:00:50:01:EF:2E:B9:16:2C Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 391198913FA3180B994CAD187ACC779723B59408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:25:26 +0000 Manifest this update: Tue 02 Jun 2026 12:20:26 +0000 Manifest next update: Wed 03 Jun 2026 13:22:26 +0000 Files and hashes: 1: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: TjAIg6C15pi+ca/3jLRi6YGvKkcg/LRnhdkQcnNU9ZM=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 3: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:11:98:91:3f:a3:18:0b:99:4c:ad:18:7a:cc:77:97:23:b5:94:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Jun 2 12:20:26 2026 GMT Not After : Jun 3 13:22:26 2026 GMT Subject: CN=8F580264346F841A51B5988B005001EF2EB9162C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:26:9a:2e:d7:b5:52:d8:db:7e:96:90:9f:3b: 32:e2:72:39:99:39:8e:e2:41:e2:06:13:f1:ae:3b: 78:53:ca:d6:0d:b4:57:db:43:d3:a3:4a:43:a1:2c: b6:f2:0b:05:35:87:ab:f2:1b:47:d1:62:3f:f2:1c: 8d:cc:c2:c9:f6:97:87:05:09:95:59:a1:96:04:fb: 0d:98:db:da:02:4b:7f:05:3a:ef:37:d8:a0:ce:ef: ee:5c:03:4c:ea:ce:9c:99:e5:81:21:0b:fb:51:58: 37:35:84:fa:c7:5c:53:94:c8:c8:ec:93:76:7e:06: 1c:ee:4c:c6:2f:68:e8:ec:a6:8d:3b:8a:71:cb:12: 18:05:ed:da:4f:01:9f:44:00:d6:97:9f:ca:75:a3: 2e:67:f9:ed:b3:d6:07:69:b3:45:b9:33:c5:ed:c1: 6c:98:88:74:a4:37:42:e2:f3:e5:f9:cc:0a:36:fc: b0:28:66:b2:01:dd:13:81:0d:52:d6:b7:cc:f9:38: e8:1d:ee:56:fe:d1:a0:23:c4:36:1f:31:10:89:69: 9f:e4:75:9b:fb:84:3d:2a:27:d1:15:8d:2e:89:67: 5f:d5:0b:e1:d4:b4:8e:3d:0b:01:25:d0:f9:a5:c4: ba:08:ed:c8:05:c2:65:63:19:cf:4d:12:9b:f1:69: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:02:64:34:6F:84:1A:51:B5:98:8B:00:50:01:EF:2E:B9:16:2C X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fa:d9:fd:bb:f5:00:84:84:10:3d:1c:d9:d9:69:fb:12:e6: 6e:e3:9f:83:41:01:f8:1f:91:30:37:b8:b3:4e:d0:e5:61:df: 12:fa:3d:e0:f9:22:2a:91:d1:fa:d5:3d:c2:3d:ee:79:8d:19: f7:64:ac:57:b6:9a:80:22:34:13:d2:57:75:02:48:45:1b:c1: f4:89:96:29:7e:d7:17:f4:33:24:67:50:e7:f5:17:5b:41:7b: d4:e4:09:68:30:6a:3c:71:76:a6:55:83:ef:d2:aa:5e:31:ae: 19:1b:4d:10:9b:ab:59:ad:7b:42:41:6a:a1:8d:d9:c6:5d:60: 56:c2:27:5b:e3:8b:4b:af:2e:c7:89:50:14:95:ed:61:a9:5c: 46:52:20:3b:91:35:c4:d8:37:8e:e5:a3:14:8a:60:69:f4:72: 35:13:43:55:83:12:74:3c:34:07:54:bd:71:9f:2c:f5:96:f3: 2a:a9:aa:3c:da:76:56:fc:a4:80:38:1b:72:9d:1e:3d:74:67: 25:b2:67:32:24:72:54:ff:00:23:2d:88:fd:1c:a6:bd:25:97: 4e:b8:42:9f:a7:d1:38:82:87:3a:30:fe:cc:c5:3b:cd:af:c3: 7d:7d:8b:09:28:63:5a:7d:5f:98:cc:90:3d:37:0f:6a:18:f3: 16:7d:89:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORGYkT+jGAuZTK0Yesx3lyO1lAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA2MDIxMjIwMjZaFw0yNjA2MDMxMzIyMjZaMDMxMTAvBgNV BAMTKDhGNTgwMjY0MzQ2Rjg0MUE1MUI1OTg4QjAwNTAwMUVGMkVCOTE2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJpou17VS2Nt+lpCfOzLicjmZ OY7iQeIGE/GuO3hTytYNtFfbQ9OjSkOhLLbyCwU1h6vyG0fRYj/yHI3Mwsn2l4cF CZVZoZYE+w2Y29oCS38FOu832KDO7+5cA0zqzpyZ5YEhC/tRWDc1hPrHXFOUyMjs k3Z+BhzuTMYvaOjspo07inHLEhgF7dpPAZ9EANaXn8p1oy5n+e2z1gdps0W5M8Xt wWyYiHSkN0Li8+X5zAo2/LAoZrIB3ROBDVLWt8z5OOgd7lb+0aAjxDYfMRCJaZ/k dZv7hD0qJ9EVjS6JZ1/VC+HUtI49CwEl0PmlxLoI7cgFwmVjGc9NEpvxaUKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1gCZDRvhBpRtZiLAFAB7y65FiwwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX62f279QCEhBA9HNnZafsS5m7jn4NBAfgf kTA3uLNO0OVh3xL6PeD5IiqR0frVPcI97nmNGfdkrFe2moAiNBPSV3UCSEUbwfSJ lil+1xf0MyRnUOf1F1tBe9TkCWgwajxxdqZVg+/Sql4xrhkbTRCbq1mte0JBaqGN 2cZdYFbCJ1vji0uvLseJUBSV7WGpXEZSIDuRNcTYN47loxSKYGn0cjUTQ1WDEnQ8 NAdUvXGfLPWW8yqpqjzadlb8pIA4G3KdHj10ZyWyZzIkclT/ACMtiP0cpr0ll064 Qp+n0TiChzow/szFO82vw319iwkoY1p9X5jMkD03D2oY8xZ9ibo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:21:00 2026 by rpki-client