$ rpki-client -vvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: U18Qda3f6t+UNAIXIHzc4dfAXd0v3WNLpvgvkrjOJGI= Subject key identifier: 9A:C4:8C:3B:BF:4E:3C:5E:F5:4F:2E:81:9B:4E:DF:D5:AE:50:F1:B8 Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 6FEE1BDA8E3298A248B4F5375F1503CF88055DEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:10:14 +0000 Manifest this update: Tue 12 May 2026 02:05:14 +0000 Manifest next update: Wed 13 May 2026 05:04:14 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 3: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: g987dKu8HMkF0CL3Hzz1ohzYHzdZbd/fJKSZIIeHKKI=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:1b:da:8e:32:98:a2:48:b4:f5:37:5f:15:03:cf:88:05:5d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: May 12 02:05:14 2026 GMT Not After : May 13 05:04:14 2026 GMT Subject: CN=9AC48C3BBF4E3C5EF54F2E819B4EDFD5AE50F1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:f9:c3:92:d8:8c:db:51:dd:4e:24:37:91: d3:ad:f7:d4:1c:c3:e4:fd:0c:d8:0f:8a:56:c3:78: 4f:8c:4f:dd:a8:bb:6b:2f:b1:3c:70:41:11:52:59: 8b:35:59:19:dd:b4:2e:6b:62:fe:45:c8:60:e1:61: 9d:9e:79:14:83:ad:cb:1f:b9:72:ab:28:26:af:a8: df:15:74:9d:c7:8a:48:52:33:56:0f:5c:99:53:1b: b1:28:53:7c:5e:cb:26:f8:06:2d:cd:92:8b:59:ac: 08:63:06:cd:55:2c:dd:76:e4:9d:d3:f4:7f:7d:4c: 06:36:a5:b0:b9:a7:e4:7e:5a:4f:39:53:31:70:1a: 6e:b6:71:2c:08:b3:a8:4d:c1:d8:01:f5:ed:e8:bc: 26:4c:75:75:a4:a6:27:33:6b:f6:63:73:db:43:ca: d8:d6:cb:91:0e:3f:a9:72:59:d2:5f:d1:5b:00:4e: 1b:33:74:0f:39:7a:e2:bb:e0:ed:94:5e:27:30:fe: 6f:4a:bf:fb:5e:b4:fb:98:d3:b9:b7:45:81:94:7a: 80:15:49:be:64:b0:67:12:3a:c4:6c:3f:99:06:bb: cd:ed:fd:61:12:75:70:2a:3a:51:e7:44:50:f1:bc: db:c6:8b:4f:3b:8b:62:0b:24:db:52:29:17:be:0d: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C4:8C:3B:BF:4E:3C:5E:F5:4F:2E:81:9B:4E:DF:D5:AE:50:F1:B8 X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:38:44:78:03:98:93:46:72:59:f3:f3:f2:6f:b5:f1:9d:3f: cb:41:73:43:89:bb:af:7e:91:d2:16:91:ec:11:89:6c:6f:5e: c7:9c:b5:24:93:5d:3e:e0:47:d3:83:60:f2:c1:2c:7b:10:91: e1:25:cb:f2:e6:0e:2f:a8:be:a9:53:6a:ec:41:07:a4:3c:f3: 08:77:e0:cc:d0:cb:6d:c6:a4:4b:b5:3d:87:57:29:68:de:f6: d0:3b:70:d3:54:fb:31:76:cc:be:9e:ea:a9:5c:c6:f0:5f:8a: f0:fe:0a:36:ff:af:d4:41:15:2e:e1:26:09:68:26:b1:97:e2: 84:e7:f0:80:f2:fa:75:24:2b:5e:01:b4:28:a3:16:c0:74:a1: 7d:29:a3:8f:4d:ec:0a:61:9d:8d:9f:c2:9a:a7:31:87:6e:47: 01:6e:93:d4:07:82:38:7e:40:97:2e:42:6e:66:cd:b5:11:e2: e0:6b:01:71:51:18:71:00:c5:10:c0:82:f6:ab:fc:16:fc:83: ac:01:6c:81:35:8a:a7:28:df:45:08:14:bd:54:fa:20:ac:55: 2a:b8:bd:18:00:3d:3d:8e:08:28:6b:39:43:a0:d8:d4:cb:fb: 92:4d:19:c7:d3:4f:f8:f1:a6:ee:17:1b:65:b3:87:5c:25:c1: ab:93:a9:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+4b2o4ymKJItPU3XxUDz4gFXe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjA1MTIwMjA1MTRaFw0yNjA1MTMwNTA0MTRaMDMxMTAvBgNV BAMTKDlBQzQ4QzNCQkY0RTNDNUVGNTRGMkU4MTlCNEVERkQ1QUU1MEYxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCfnDktiM21HdTiQ3kdOt99Qc w+T9DNgPilbDeE+MT92ou2svsTxwQRFSWYs1WRndtC5rYv5FyGDhYZ2eeRSDrcsf uXKrKCavqN8VdJ3HikhSM1YPXJlTG7EoU3xeyyb4Bi3NkotZrAhjBs1VLN125J3T 9H99TAY2pbC5p+R+Wk85UzFwGm62cSwIs6hNwdgB9e3ovCZMdXWkpicza/Zjc9tD ytjWy5EOP6lyWdJf0VsAThszdA85euK74O2UXicw/m9Kv/tetPuY07m3RYGUeoAV Sb5ksGcSOsRsP5kGu83t/WESdXAqOlHnRFDxvNvGi087i2ILJNtSKRe+DfzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsSMO79OPF71Ty6Bm07f1a5Q8bgwHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw4RHgDmJNGclnz8/JvtfGdP8tBc0OJu69+ kdIWkewRiWxvXsectSSTXT7gR9ODYPLBLHsQkeEly/LmDi+ovqlTauxBB6Q88wh3 4MzQy23GpEu1PYdXKWje9tA7cNNU+zF2zL6e6qlcxvBfivD+Cjb/r9RBFS7hJglo JrGX4oTn8IDy+nUkK14BtCijFsB0oX0po49N7AphnY2fwpqnMYduRwFuk9QHgjh+ QJcuQm5mzbUR4uBrAXFRGHEAxRDAgvar/Bb8g6wBbIE1iqco30UIFL1U+iCsVSq4 vRgAPT2OCChrOUOg2NTL+5JNGcfTT/jxpu4XG2Wzh1wlwauTqVQ= -----END CERTIFICATE-----Generated at Tue May 12 22:39:31 2026 by rpki-client