$ rpki-client -vvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: hioMVisBidl1cTLnY196OluA01lsfton4UZmnLpsU7o= Subject key identifier: 52:19:A0:01:95:1F:B6:A4:CB:32:D7:E5:62:33:A1:85:CE:96:ED:05 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 7D3D7BFE32851F0A7914C7E4C4EEF371A997A51D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:14:42 +0000 Manifest this update: Tue 12 May 2026 08:09:42 +0000 Manifest next update: Wed 13 May 2026 08:51:42 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 2: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: 3i2ruhsTRVrZWpqhXj6/U8hb8fGY6CjCA4orTfvqIC4=) 3: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3d:7b:fe:32:85:1f:0a:79:14:c7:e4:c4:ee:f3:71:a9:97:a5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: May 12 08:09:42 2026 GMT Not After : May 13 08:51:42 2026 GMT Subject: CN=5219A001951FB6A4CB32D7E56233A185CE96ED05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:94:34:55:9f:f9:60:7a:5a:14:f2:52:d8: fb:92:fb:21:5e:b2:dc:34:28:16:e5:fd:20:e3:49: 2e:a9:44:f6:b5:2a:59:3e:20:9d:b8:a9:52:e0:3b: 6a:a0:00:ec:b9:48:49:55:f7:e9:03:4a:b1:ee:6b: e6:f8:0f:d7:5c:0c:b1:9b:18:ec:5e:ab:78:fa:8a: 41:b4:6b:b9:30:ef:33:bc:f2:e1:94:a6:fe:52:b3: b9:68:3e:b4:62:a4:8b:6f:6a:b3:2b:1a:ed:03:45: 6c:41:f9:b9:08:82:8e:d9:40:d5:c0:bd:bd:98:a3: 05:50:5b:c8:2e:16:a6:4b:e0:1f:92:cf:a1:c8:70: 32:e2:8b:b6:a0:fc:71:72:f6:b7:5d:fc:7d:1e:fa: d7:25:e9:5e:67:e7:77:1e:2c:82:e4:4c:18:7b:5c: f0:6e:bf:7a:80:4d:12:e8:ab:55:d2:55:85:9e:11: f8:c8:f2:7e:87:3c:d8:64:8b:82:73:7c:a7:c0:9c: cd:4f:b3:57:ff:29:4e:fe:14:ec:7f:7c:95:ae:52: 2f:06:1d:17:7d:c0:81:bc:1e:0f:a4:3c:19:41:17: 3c:c6:b1:01:52:ef:f1:a0:71:7a:b9:d4:6b:93:27: 00:8e:a5:b7:67:ce:82:c2:0e:2b:1d:d3:c9:c8:34: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:A0:01:95:1F:B6:A4:CB:32:D7:E5:62:33:A1:85:CE:96:ED:05 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:55:37:d2:bb:de:ca:c9:a6:f2:9c:06:8e:34:63:98:0d:5c: 3b:8d:d8:a3:91:72:6f:48:f3:32:ce:2c:1f:2f:5f:6a:cd:67: b4:e9:f0:13:a0:87:aa:d4:81:08:be:bd:76:ea:28:93:9a:30: c1:2f:81:b8:e3:1c:8d:f5:80:88:92:45:03:70:d4:6f:49:11: e1:6f:95:38:10:43:fd:85:b0:8e:12:4a:41:2a:12:0d:aa:37: d8:94:01:fa:07:b6:af:f8:5b:72:6f:0a:0f:6e:89:c3:31:46: cb:6f:fb:37:39:2e:fd:4d:6d:6c:91:8b:04:f3:9c:4a:ee:aa: 8b:d4:ff:f3:6b:f6:d1:4c:95:2d:7a:7a:6a:99:dc:e0:25:88: c6:af:d6:ee:46:51:59:b7:a5:15:15:52:e1:70:f1:4c:06:47: 54:78:46:c6:ad:43:16:5b:1e:e0:40:ae:0d:9c:44:f6:56:15: cd:c9:a5:6f:8a:58:2a:1f:e9:77:03:b1:dc:de:50:bd:36:dc: 94:d6:af:75:de:7d:6c:25:37:35:ae:b5:8f:f9:89:b7:a1:ca: 0c:37:b5:b3:27:f6:16:c7:ec:7b:39:52:86:0f:bd:0d:2c:d4: 59:4d:21:c6:fe:54:83:10:4e:75:75:94:73:1d:76:0c:1e:22: 0f:4d:32:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfT17/jKFHwp5FMfkxO7zcamXpR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA1MTIwODA5NDJaFw0yNjA1MTMwODUxNDJaMDMxMTAvBgNV BAMTKDUyMTlBMDAxOTUxRkI2QTRDQjMyRDdFNTYyMzNBMTg1Q0U5NkVEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEJQ0VZ/5YHpaFPJS2PuS+yFe stw0KBbl/SDjSS6pRPa1Klk+IJ24qVLgO2qgAOy5SElV9+kDSrHua+b4D9dcDLGb GOxeq3j6ikG0a7kw7zO88uGUpv5Ss7loPrRipItvarMrGu0DRWxB+bkIgo7ZQNXA vb2YowVQW8guFqZL4B+Sz6HIcDLii7ag/HFy9rdd/H0e+tcl6V5n53ceLILkTBh7 XPBuv3qATRLoq1XSVYWeEfjI8n6HPNhki4JzfKfAnM1Ps1f/KU7+FOx/fJWuUi8G HRd9wIG8Hg+kPBlBFzzGsQFS7/GgcXq51GuTJwCOpbdnzoLCDisd08nIND9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhmgAZUftqTLMtflYjOhhc6W7QUwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxVN9K73srJpvKcBo40Y5gNXDuN2KORcm9I 8zLOLB8vX2rNZ7Tp8BOgh6rUgQi+vXbqKJOaMMEvgbjjHI31gIiSRQNw1G9JEeFv lTgQQ/2FsI4SSkEqEg2qN9iUAfoHtq/4W3JvCg9uicMxRstv+zc5Lv1NbWyRiwTz nEruqovU//Nr9tFMlS16emqZ3OAliMav1u5GUVm3pRUVUuFw8UwGR1R4RsatQxZb HuBArg2cRPZWFc3JpW+KWCof6XcDsdzeUL023JTWr3XefWwlNzWutY/5ibehygw3 tbMn9hbH7Hs5UoYPvQ0s1FlNIcb+VIMQTnV1lHMddgweIg9NMgo= -----END CERTIFICATE-----Generated at Wed May 13 02:50:49 2026 by rpki-client