$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: nnti4oJvgTx2AMVCGKEUOLeSp630C27E3rGLd9yFia8= Subject key identifier: 85:51:4A:3D:8D:C6:54:85:38:E3:AA:BF:41:A6:FC:37:76:EB:98:1B Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 5B8687D185625853BEC8A1212868D317DB071D6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:25:07 +0000 Manifest this update: Wed 23 Sep 2026 23:20:07 +0000 Manifest next update: Fri 25 Sep 2026 03:15:07 +0000 Files and hashes: 1: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: OeXYoZ9eVDRwWQFK/4up+HYcADBHF7xMpQKKMZGrAW8=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:86:87:d1:85:62:58:53:be:c8:a1:21:28:68:d3:17:db:07:1d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Sep 23 23:20:07 2026 GMT Not After : Sep 25 03:15:07 2026 GMT Subject: CN=85514A3D8DC6548538E3AABF41A6FC3776EB981B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d5:c5:e2:6d:3d:84:9c:b3:7d:20:65:68:ff: 9e:16:b7:5f:fa:8d:b3:c4:0e:1c:75:c9:28:fa:47: 7b:7c:35:40:61:a6:b3:82:ab:a2:e2:6a:08:89:38: eb:70:04:03:06:08:1c:1d:de:79:cb:20:50:47:b0: 40:8e:a3:41:0b:99:dc:3c:86:e7:b4:49:27:ee:6a: bb:61:c3:8c:91:39:82:7b:98:f3:37:4f:83:73:f1: 82:3d:5d:a9:4e:88:1a:9d:38:fb:55:2e:63:21:a4: 93:29:ff:4e:4b:40:e9:db:ef:56:f9:eb:63:4d:a8: 15:25:b4:e0:a3:f2:57:2b:e5:e8:f9:d7:57:42:8f: e1:da:d8:8a:ef:f1:9b:db:74:49:0b:e8:f6:d5:81: 88:6f:c4:f9:7d:29:70:7f:7e:2b:94:12:1e:1d:c2: fa:43:1e:c5:1c:d9:f4:47:0d:c2:78:60:29:09:ea: 48:ea:ca:7d:bf:4c:f2:95:df:f9:b9:1f:a8:49:ca: 61:85:69:3d:4c:14:9e:55:3f:db:69:8c:12:33:fb: 01:78:7d:62:59:ee:cd:27:04:1c:55:97:55:80:1c: 10:c3:9d:5a:d7:ad:99:75:47:a4:05:a7:52:ca:7e: 83:1a:cd:7e:5c:e4:be:e2:1a:5f:8f:19:20:ee:3e: b0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:4A:3D:8D:C6:54:85:38:E3:AA:BF:41:A6:FC:37:76:EB:98:1B X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:a0:22:71:d8:d8:eb:df:50:b9:7b:f3:af:33:1d:59:cc: 70:65:bb:bb:4b:04:db:f6:54:89:c9:b8:6d:41:49:e6:0c:bb: 9c:e3:e8:6f:d2:f9:ac:f7:da:72:56:d9:9e:b5:63:72:f9:0f: 2a:9e:54:01:b1:83:39:01:fe:41:18:67:b3:74:03:2d:9b:ef: 10:44:c3:0e:dd:45:f4:98:7a:5c:01:b1:7b:15:1a:03:f3:cd: a9:b0:91:81:38:74:eb:fa:0d:b3:eb:cf:99:df:0e:25:e4:18: e1:7d:80:3e:3d:54:4d:e4:5c:51:bb:c8:b1:b1:c7:6d:ad:5c: fd:45:b1:ce:63:6f:59:fc:ee:ee:fe:83:f2:57:f9:af:83:12: 68:9d:61:4d:57:7d:c0:af:0c:db:65:b9:86:a1:45:33:9a:2f: fe:e5:76:5c:73:8f:56:c3:b3:47:f9:af:78:d4:ba:3d:75:00: 0e:24:23:25:4a:08:5a:01:bf:40:36:de:fc:71:f4:dc:0f:db: 22:1c:d6:fc:c0:ea:39:30:ca:37:55:4c:48:00:3f:47:3a:b2: 26:e3:1d:e2:05:5c:28:f3:f2:5a:56:f5:7e:95:3d:32:8e:c6: b1:09:1d:6a:5c:b1:bb:38:58:fe:f8:b5:10:6e:9f:89:d2:2a: 4e:72:1c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4aH0YViWFO+yKEhKGjTF9sHHWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA5MjMyMzIwMDdaFw0yNjA5MjUwMzE1MDdaMDMxMTAvBgNV BAMTKDg1NTE0QTNEOERDNjU0ODUzOEUzQUFCRjQxQTZGQzM3NzZFQjk4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx1cXibT2EnLN9IGVo/54Wt1/6 jbPEDhx1ySj6R3t8NUBhprOCq6LiagiJOOtwBAMGCBwd3nnLIFBHsECOo0ELmdw8 hue0SSfuarthw4yROYJ7mPM3T4Nz8YI9XalOiBqdOPtVLmMhpJMp/05LQOnb71b5 62NNqBUltOCj8lcr5ej511dCj+Ha2Irv8ZvbdEkL6PbVgYhvxPl9KXB/fiuUEh4d wvpDHsUc2fRHDcJ4YCkJ6kjqyn2/TPKV3/m5H6hJymGFaT1MFJ5VP9tpjBIz+wF4 fWJZ7s0nBBxVl1WAHBDDnVrXrZl1R6QFp1LKfoMazX5c5L7iGl+PGSDuPrBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVFKPY3GVIU446q/Qab8N3brmBswHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO9oCJx2Njr31C5e/OvMx1ZzHBlu7tLBNv2 VInJuG1BSeYMu5zj6G/S+az32nJW2Z61Y3L5DyqeVAGxgzkB/kEYZ7N0Ay2b7xBE ww7dRfSYelwBsXsVGgPzzamwkYE4dOv6DbPrz5nfDiXkGOF9gD49VE3kXFG7yLGx x22tXP1Fsc5jb1n87u7+g/JX+a+DEmidYU1XfcCvDNtluYahRTOaL/7ldlxzj1bD s0f5r3jUuj11AA4kIyVKCFoBv0A23vxx9NwP2yIc1vzA6jkwyjdVTEgAP0c6sibj HeIFXCjz8lpW9X6VPTKOxrEJHWpcsbs4WP74tRBun4nSKk5yHEc= -----END CERTIFICATE-----Generated at Thu Sep 24 18:49:28 2026 by rpki-client