$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft File: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft (raw, json) Hash identifier: kl5J7J44HbIXZS4p+r5RSoCHCri6COVhNsOBhYlZpDo= Subject key identifier: E6:65:F9:57:6A:F0:B1:07:8A:9E:CD:48:19:84:69:C0:6B:6C:A2:68 Authority key identifier: 3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC Certificate issuer: /CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Certificate serial: 69388E498355B2899857F9B9218E7598D26CF204 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 19:09:12 +0000 Manifest this update: Fri 25 Sep 2026 19:04:12 +0000 Manifest next update: Sat 26 Sep 2026 19:54:12 +0000 Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: rgzG3kznE/vX9Snz2lJ8VJAkEg2Libw6TWafKzP37ss=) 2: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: 3z6xC7mDZEVUoiHBWH1yfMZkJC18ePTT0olulGHFsLw=) 3: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: F3z8OOMOsJtcWjGeLHsHVs7N5l91Q4XrvRTX+FkSuoU=) 4: 3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl (hash: S8ccQqU4VNbj5uJW6COEfJnlfW+YEojVuljMG7y2YnA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:38:8e:49:83:55:b2:89:98:57:f9:b9:21:8e:75:98:d2:6c:f2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3A3124EFBB050A42375C8461F1E336F6982FC Validity Not Before: Sep 25 19:04:12 2026 GMT Not After : Sep 26 19:54:12 2026 GMT Subject: CN=E665F9576AF0B1078A9ECD48198469C06B6CA268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:9d:cc:1f:37:82:e1:98:7f:b7:e3:a8:9e: 3f:f9:60:e5:cc:8a:03:39:a0:f4:d8:09:a1:34:e2: 53:9a:ea:c8:4f:ac:f0:14:60:76:8a:8d:63:af:1e: fd:a1:b1:dd:c4:34:6d:11:51:39:3e:5f:1b:04:29: f3:de:9e:17:40:df:89:c5:68:2c:81:4a:33:e6:81: 8a:9f:6a:ce:2c:94:71:80:33:fa:49:55:b3:f6:4e: d8:1f:9c:b5:3b:12:37:cf:3e:90:0f:ff:5f:63:29: c7:dc:37:f9:f9:b3:a0:a4:d3:19:d5:51:d6:c0:87: 1f:8d:ac:88:a3:43:23:40:4a:24:5c:6a:a3:5e:09: ca:48:7c:28:52:ef:12:8c:4e:18:31:2b:98:ff:56: ab:06:ce:70:95:8d:d8:e9:28:f5:61:20:e7:e4:49: ea:81:fa:a7:f1:52:87:a9:46:46:66:d1:31:e8:ac: e4:1c:ad:a8:83:1c:27:13:65:07:96:3e:fa:65:5b: 69:28:73:58:1f:53:cd:43:b2:e2:4b:42:5e:9a:bf: c9:c6:aa:9d:3c:13:7e:9c:cd:57:8f:77:39:9d:61: 09:ba:65:27:ed:68:78:a6:63:3f:d1:f9:23:ad:d2: 08:fa:f6:f1:ec:3b:2a:ed:97:42:83:f5:b5:ea:0c: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:F9:57:6A:F0:B1:07:8A:9E:CD:48:19:84:69:C0:6B:6C:A2:68 X509v3 Authority Key Identifier: keyid:3C:C3:A3:12:4E:FB:B0:50:A4:23:75:C8:46:1F:1E:33:6F:69:82:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CC3A3124EFBB050A42375C8461F1E336F6982FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3CC3A3124EFBB050A42375C8461F1E336F6982FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:af:47:c4:fb:ea:71:76:a1:a6:39:b2:ea:06:3b:26:a3:08: 92:34:8a:9a:f2:74:fc:5f:ab:b3:c9:53:aa:97:8a:34:37:3e: c1:62:5a:51:9b:62:28:28:f8:7f:3a:6d:43:7f:cf:97:0b:3d: 45:3a:8c:ee:6f:66:8b:5e:52:e7:9b:c5:3f:e3:67:82:7e:89: f4:e0:19:61:80:50:9b:61:83:90:08:df:f4:06:cc:73:86:de: 8c:a8:65:6d:89:17:c4:bb:e8:c5:25:9e:71:63:f0:93:4a:ae: ba:d6:b0:e2:18:56:d6:45:c5:53:e5:6b:14:3e:8e:38:66:da: 11:b0:d2:71:24:61:88:39:00:0c:8c:13:b6:2e:01:c7:6c:f5: 58:f5:09:19:b4:de:5a:63:10:89:a7:ce:d0:7a:cb:c8:9a:21: 3f:ed:53:46:b3:06:8e:18:ff:bd:18:0d:a5:d8:d7:5b:e9:28: da:ec:00:a1:04:6a:a8:fc:d3:91:2a:39:04:ee:de:ed:b5:49: 7b:94:c1:33:a3:eb:a0:8d:03:ed:bb:78:66:c6:c4:2f:53:b6: e2:8d:9d:cc:19:d3:a9:74:7f:e9:74:af:e9:3d:d5:0b:2e:e5: 2f:f2:22:25:19:81:30:5e:29:51:a3:a9:2e:8b:96:85:84:47: a0:46:da:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTiOSYNVsomYV/m5IY51mNJs8gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2 RjY5ODJGQzAeFw0yNjA5MjUxOTA0MTJaFw0yNjA5MjYxOTU0MTJaMDMxMTAvBgNV BAMTKEU2NjVGOTU3NkFGMEIxMDc4QTlFQ0Q0ODE5ODQ2OUMwNkI2Q0EyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sp3MHzeC4Zh/t+Oonj/5YOXM igM5oPTYCaE04lOa6shPrPAUYHaKjWOvHv2hsd3ENG0RUTk+XxsEKfPenhdA34nF aCyBSjPmgYqfas4slHGAM/pJVbP2TtgfnLU7EjfPPpAP/19jKcfcN/n5s6Ck0xnV UdbAhx+NrIijQyNASiRcaqNeCcpIfChS7xKMThgxK5j/VqsGznCVjdjpKPVhIOfk SeqB+qfxUoepRkZm0THorOQcraiDHCcTZQeWPvplW2koc1gfU81DsuJLQl6av8nG qp08E36czVePdzmdYQm6ZSftaHimYz/R+SOt0gj69vHsOyrtl0KD9bXqDOgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5mX5V2rwsQeKns1IGYRpwGtsomgwHwYDVR0j BBgwFoAUPMOjEk77sFCkI3XIRh8eM29pgvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTU5MWI1OWItMWNhNS00NDY0LTk5ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0 RUZCQjA1MEE0MjM3NUM4NDYxRjFFMzM2RjY5ODJGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0MzQTMxMjRFRkJCMDUwQTQyMzc1Qzg0NjFGMUUzMzZGNjk4 MkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvM0NDM0EzMTI0RUZCQjA1MEE0MjM3NUM4NDYxRjFF MzM2RjY5ODJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSvR8T76nF2oaY5suoGOyajCJI0iprydPxf q7PJU6qXijQ3PsFiWlGbYigo+H86bUN/z5cLPUU6jO5vZoteUuebxT/jZ4J+ifTg GWGAUJthg5AI3/QGzHOG3oyoZW2JF8S76MUlnnFj8JNKrrrWsOIYVtZFxVPlaxQ+ jjhm2hGw0nEkYYg5AAyME7YuAcds9Vj1CRm03lpjEImnztB6y8iaIT/tU0azBo4Y /70YDaXY11vpKNrsAKEEaqj805EqOQTu3u21SXuUwTOj66CNA+27eGbGxC9TtuKN ncwZ06l0f+l0r+k91Qsu5S/yIiUZgTBeKVGjqS6LloWER6BG2mM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:55:12 2026 by rpki-client