$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: Oncv8llsunaQO0QZQuF5dPMnrfbsLa1U/UAZGjVOmZc= Subject key identifier: 7A:00:DD:7B:63:63:39:4F:93:F9:4E:87:A8:8C:B4:93:15:DC:CB:1F Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 7D91ACC40CEB05F2293DD7F6C539AE330880EBD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 03:38:43 +0000 Manifest this update: Sat 24 Oct 2026 03:33:43 +0000 Manifest next update: Sun 25 Oct 2026 07:16:43 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 2: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 4: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: Xx52VioSbntd1SqLlv0x4hiE92KtyVoz2Z2IkWphQEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:91:ac:c4:0c:eb:05:f2:29:3d:d7:f6:c5:39:ae:33:08:80:eb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Oct 24 03:33:43 2026 GMT Not After : Oct 25 07:16:43 2026 GMT Subject: CN=7A00DD7B6363394F93F94E87A88CB49315DCCB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:cc:65:af:61:bd:72:ad:c7:04:f7:c6:53: 83:ad:e4:bc:bf:cd:e7:c4:12:0e:1d:d2:0b:95:d0: 66:06:df:2e:2d:30:4e:c3:2e:92:35:03:d2:b4:c6: 46:1e:60:27:17:ea:cf:4f:33:22:cc:8a:ca:bf:40: 89:db:1b:87:78:78:54:18:b1:ca:c6:39:35:95:76: 21:66:0d:f7:52:ea:65:b7:a6:5b:d6:c2:6d:bb:2a: c1:e8:5f:3e:b5:1f:cc:1c:97:10:35:58:fd:e0:d3: f1:b5:29:a8:cd:ad:93:ec:6e:dc:d9:9d:f5:bc:b7: bd:d6:9b:d8:bc:a3:41:80:d7:86:93:fb:56:f9:ca: 6a:07:52:38:a7:0f:1d:6f:08:dd:d4:c6:c7:30:5f: 50:78:1c:9a:f5:99:56:7e:bb:28:28:b7:61:30:7e: 0c:c7:12:39:95:f2:93:27:2b:42:75:ce:d0:0a:18: 5d:2e:9a:29:aa:d6:79:a0:c4:ed:ce:92:84:0f:bd: 6f:49:38:69:21:e8:c6:04:a4:30:40:ee:ec:c8:da: 88:b1:f1:ef:de:cc:da:16:ae:ae:70:60:9c:3d:31: d8:85:15:35:2f:42:33:5d:c7:08:1c:37:21:2a:be: 62:84:8f:55:cc:26:d7:6a:80:d2:e5:2d:a5:85:6c: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:00:DD:7B:63:63:39:4F:93:F9:4E:87:A8:8C:B4:93:15:DC:CB:1F X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:46:b3:9e:a6:b6:1e:92:17:4b:4d:f8:3f:10:ca:ea:11:50: 17:5c:43:8d:38:c1:36:2d:bd:e3:2f:01:36:b9:19:bd:d2:25: df:67:10:18:dc:09:7a:0e:2f:74:24:b5:61:eb:4d:6f:f5:8e: 10:cf:f7:42:14:e7:6c:3c:8f:a6:99:d5:79:12:ca:17:69:b3: 0e:7d:8a:16:aa:3a:10:2d:31:5c:af:6f:c4:7a:d6:c4:98:88: 4c:81:d1:8e:4a:87:41:70:b8:a8:48:f6:11:b2:df:56:d6:b7: 29:9a:be:f5:29:fe:49:91:f9:e8:cf:07:cc:f5:73:15:c1:1e: f6:bb:45:48:9c:64:1b:b6:39:8b:e0:f3:d9:3e:39:c4:d0:0e: f4:6b:d7:ae:02:32:72:ba:a7:8a:29:9c:b5:00:0a:b1:c3:86: 14:90:46:b1:0a:2f:80:94:fe:30:cf:77:45:8a:8c:bf:fa:17: eb:bd:2c:30:49:8a:03:43:bb:fb:9b:0e:fc:ce:5b:e5:d8:b7: f7:b5:65:c0:f5:ee:b3:38:4a:3c:46:2a:9d:83:4a:ff:57:a7: 80:f4:14:e3:f3:67:df:1d:f9:e0:82:7c:f1:01:2b:6d:b2:06: a8:65:53:6c:70:96:dd:62:9b:da:2b:2a:27:cd:02:22:b2:eb: ec:4a:33:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZGsxAzrBfIpPdf2xTmuMwiA69kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjEwMjQwMzMzNDNaFw0yNjEwMjUwNzE2NDNaMDMxMTAvBgNV BAMTKDdBMDBERDdCNjM2MzM5NEY5M0Y5NEU4N0E4OENCNDkzMTVEQ0NCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Qcxlr2G9cq3HBPfGU4Ot5Ly/ zefEEg4d0guV0GYG3y4tME7DLpI1A9K0xkYeYCcX6s9PMyLMisq/QInbG4d4eFQY scrGOTWVdiFmDfdS6mW3plvWwm27KsHoXz61H8wclxA1WP3g0/G1KajNrZPsbtzZ nfW8t73Wm9i8o0GA14aT+1b5ymoHUjinDx1vCN3UxscwX1B4HJr1mVZ+uygot2Ew fgzHEjmV8pMnK0J1ztAKGF0umimq1nmgxO3OkoQPvW9JOGkh6MYEpDBA7uzI2oix 8e/ezNoWrq5wYJw9MdiFFTUvQjNdxwgcNyEqvmKEj1XMJtdqgNLlLaWFbI8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUegDde2NjOU+T+U6HqIy0kxXcyx8wHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5Gs56mth6SF0tN+D8QyuoRUBdcQ404wTYt veMvATa5Gb3SJd9nEBjcCXoOL3QktWHrTW/1jhDP90IU52w8j6aZ1XkSyhdpsw59 ihaqOhAtMVyvb8R61sSYiEyB0Y5Kh0FwuKhI9hGy31bWtymavvUp/kmR+ejPB8z1 cxXBHva7RUicZBu2OYvg89k+OcTQDvRr164CMnK6p4opnLUACrHDhhSQRrEKL4CU /jDPd0WKjL/6F+u9LDBJigNDu/ubDvzOW+XYt/e1ZcD17rM4SjxGKp2DSv9Xp4D0 FOPzZ98d+eCCfPEBK22yBqhlU2xwlt1im9orKifNAiKy6+xKM3k= -----END CERTIFICATE-----Generated at Sat Oct 24 10:38:35 2026 by rpki-client