$ rpki-client -vvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: FG4c3MeplvAtBuwCpuV99Ea3Uc1BjIlmO7P03szC68k= Subject key identifier: 8A:6B:98:E3:48:CD:17:3F:E9:39:A0:1B:0A:8E:D5:0D:DE:16:3D:DB Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 33EA206EDAA9C18833A41F26BA5CC8F08598B2E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:16:11 +0000 Manifest this update: Thu 23 Jul 2026 17:11:11 +0000 Manifest next update: Fri 24 Jul 2026 20:57:11 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 2: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: Ud+0CI5JSXp+3DFaOO8wlZYiZOcIIqyKa/PegXVbIp8=) 3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 4: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ea:20:6e:da:a9:c1:88:33:a4:1f:26:ba:5c:c8:f0:85:98:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Jul 23 17:11:11 2026 GMT Not After : Jul 24 20:57:11 2026 GMT Subject: CN=8A6B98E348CD173FE939A01B0A8ED50DDE163DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:c8:22:11:75:c4:b9:a5:c2:f7:33:1e:dc: 0e:9b:8b:6d:8e:aa:e7:34:de:d2:42:21:29:1e:8e: bc:ae:ab:11:af:dd:d7:31:bb:72:ae:42:81:ab:ca: e9:c7:41:ff:91:c7:c0:c7:88:be:c8:fd:9d:f1:bf: 70:59:14:35:52:6a:7a:35:86:bc:2c:7d:d4:c4:7e: a1:8e:c6:45:05:33:38:2f:e6:ea:a7:88:3b:fa:b1: f1:f5:8c:90:57:7b:5f:bb:87:1a:40:a2:b2:e9:c5: bc:9e:f0:ae:d5:0b:62:44:19:9e:38:7b:42:6d:8f: ff:0b:2c:03:01:74:2e:fd:6b:6b:c1:dd:10:00:6f: 3a:21:09:c3:3c:5c:1e:6f:4e:f2:e1:d5:01:29:d7: 48:b5:22:a8:d0:a4:85:bb:c5:eb:30:e8:b0:6a:c0: 32:80:38:44:d7:f0:96:a2:c7:c6:0e:2c:bf:4e:8e: 39:60:af:7b:a3:7a:4c:22:9b:d5:1c:66:14:20:8b: 2e:5e:7e:58:2e:dd:af:61:1a:32:a6:af:6a:17:be: 00:01:ab:1a:dd:ab:bd:d0:fb:c0:dd:f8:24:7c:98: 28:9d:56:95:30:d0:91:90:a9:23:d7:50:24:b5:ee: 70:96:f8:e2:a7:06:12:2e:77:f0:2e:c1:d3:fb:d8: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6B:98:E3:48:CD:17:3F:E9:39:A0:1B:0A:8E:D5:0D:DE:16:3D:DB X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0e:cd:ba:30:3f:d2:e5:51:8b:04:dc:90:7c:0a:c4:ab:49: 1d:d0:7c:5d:df:fa:24:75:46:37:02:a3:bf:1c:b7:37:94:34: 66:53:1f:80:78:93:2d:63:9a:0e:ba:a8:f3:97:4a:3c:06:61: 26:bb:3c:d7:c8:f6:32:fe:3f:e9:58:a5:0a:6b:f4:a9:01:3a: 7c:4a:34:a9:7d:b9:7c:f1:e9:82:05:3f:a4:bd:14:d2:b1:9c: 9b:f8:57:30:43:1e:5b:c0:b1:60:d3:45:eb:c9:99:ab:e2:2a: ed:3e:70:8c:6b:ee:2e:f9:fb:c9:0c:2d:a4:d6:a9:11:25:cb: c6:9b:2b:d3:6b:66:15:20:47:6f:23:3c:00:aa:6c:09:e6:18: aa:bd:4d:06:67:f8:a2:8d:95:94:f0:72:45:1a:12:86:42:51: 47:ef:b9:fe:8a:5f:4a:27:2b:4a:83:bb:67:33:3a:d3:f9:42: 97:ae:5d:13:37:66:88:57:c5:be:c4:b1:e0:92:6c:9d:57:07: 5c:d5:6a:61:c6:75:d7:2e:55:2d:4b:4f:af:d7:7d:b5:73:e9: 78:3d:ff:db:17:2f:52:92:b1:e6:e7:c8:01:4b:82:fc:1f:43: c5:e4:22:e5:d2:a7:95:33:9e:90:2b:52:99:d0:5b:cb:cd:25: 77:84:12:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+ogbtqpwYgzpB8mulzI8IWYsuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA3MjMxNzExMTFaFw0yNjA3MjQyMDU3MTFaMDMxMTAvBgNV BAMTKDhBNkI5OEUzNDhDRDE3M0ZFOTM5QTAxQjBBOEVENTBEREUxNjNEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLcgiEXXEuaXC9zMe3A6bi22O quc03tJCISkejryuqxGv3dcxu3KuQoGryunHQf+Rx8DHiL7I/Z3xv3BZFDVSano1 hrwsfdTEfqGOxkUFMzgv5uqniDv6sfH1jJBXe1+7hxpAorLpxbye8K7VC2JEGZ44 e0Jtj/8LLAMBdC79a2vB3RAAbzohCcM8XB5vTvLh1QEp10i1IqjQpIW7xesw6LBq wDKAOETX8Jaix8YOLL9Ojjlgr3ujekwim9UcZhQgiy5eflgu3a9hGjKmr2oXvgAB qxrdq73Q+8Dd+CR8mCidVpUw0JGQqSPXUCS17nCW+OKnBhIud/AuwdP72DSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUimuY40jNFz/pOaAbCo7VDd4WPdswHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMOzbowP9LlUYsE3JB8CsSrSR3QfF3f+iR1 RjcCo78ctzeUNGZTH4B4ky1jmg66qPOXSjwGYSa7PNfI9jL+P+lYpQpr9KkBOnxK NKl9uXzx6YIFP6S9FNKxnJv4VzBDHlvAsWDTRevJmaviKu0+cIxr7i75+8kMLaTW qREly8abK9NrZhUgR28jPACqbAnmGKq9TQZn+KKNlZTwckUaEoZCUUfvuf6KX0on K0qDu2czOtP5QpeuXRM3ZohXxb7EseCSbJ1XB1zVamHGddcuVS1LT6/XfbVz6Xg9 /9sXL1KSsebnyAFLgvwfQ8XkIuXSp5UznpArUpnQW8vNJXeEEtg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:31:25 2026 by rpki-client