$ rpki-client -vvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: 2gOYciaoGxeSFJhHCMvcf6+yaQScTqBEYBkbRsgkY0Q= Subject key identifier: 67:43:27:90:76:7B:E4:65:9C:64:B4:0B:6C:49:6C:A3:4D:1E:B7:BC Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 2F53CF093FA4CBD7D6F5D59469D54915318106DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:05:55 +0000 Manifest this update: Thu 23 Jul 2026 17:00:55 +0000 Manifest next update: Fri 24 Jul 2026 20:55:55 +0000 Files and hashes: 1: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: pAiJHzm4cTX5r/HN3jrLsZF2IxIQih/9zv8YGnrYfCs=) 2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:53:cf:09:3f:a4:cb:d7:d6:f5:d5:94:69:d5:49:15:31:81:06:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Jul 23 17:00:55 2026 GMT Not After : Jul 24 20:55:55 2026 GMT Subject: CN=67432790767BE4659C64B40B6C496CA34D1EB7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:a6:3c:fd:cc:3a:2b:86:95:08:f2:0c:a5: 9a:8f:a1:95:98:fa:a3:00:d7:62:78:0b:df:70:7a: 9d:10:72:08:54:9d:61:81:b0:93:20:26:0c:a3:60: 4f:4a:b9:35:79:54:4c:99:10:11:66:04:88:4b:2d: 60:31:e2:58:f7:53:c8:3c:11:bc:ac:d3:87:13:37: e3:82:95:69:75:a6:56:18:ab:6e:6b:06:78:48:77: 2c:1e:05:ae:8c:78:d1:12:7f:33:e6:d9:ae:ba:6c: 46:a6:75:b6:15:c5:8e:1a:4c:d6:05:dd:fa:21:26: 9a:1f:cd:f7:90:a3:9c:61:f3:09:84:90:f0:e8:36: da:ca:32:50:b9:23:8e:83:d4:5e:f2:7d:f0:8a:90: 42:6b:36:7a:01:d5:77:85:62:15:de:b0:57:02:19: f9:32:b0:e8:37:41:af:f8:f8:3b:e1:6e:1a:4d:46: a5:f2:8f:b8:cb:4b:1a:67:c4:9f:38:69:f8:b7:01: 60:d9:1d:83:95:8c:d4:21:c2:48:85:23:a3:05:e7: 47:6d:25:96:e1:c3:e4:94:8d:64:4f:6e:0c:e5:39: a9:7b:2a:15:db:4f:36:e6:bb:7a:11:26:ac:63:72: cc:85:27:62:38:ba:a3:31:69:64:6c:ea:e0:05:2f: bf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:27:90:76:7B:E4:65:9C:64:B4:0B:6C:49:6C:A3:4D:1E:B7:BC X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:29:15:42:73:89:7d:dd:ac:22:0d:3e:9a:8a:f4:e9:fe: 62:cb:e0:11:96:72:4d:a4:38:ff:b2:16:88:3e:0a:58:17:2d: 21:b5:3c:26:10:c3:0a:e5:06:7e:dc:ef:09:b8:ac:cb:d0:08: d1:cc:75:e3:cd:88:51:b9:d7:62:cb:b2:13:d0:eb:6e:4a:b0: 10:91:db:df:52:19:97:33:f6:bc:f7:dd:7d:a8:eb:49:87:c1: e0:06:05:93:d1:ff:e7:05:50:f7:ef:dc:62:48:01:54:da:04: 8a:77:89:47:c0:d4:e0:e6:34:63:a1:3b:e7:f0:a8:5a:2a:54: 42:f7:95:67:73:33:08:7e:08:a7:7b:b4:3b:28:f8:c1:4e:a8: 3c:0f:f8:28:5a:33:69:d4:0b:2d:4b:3f:f5:e0:15:7c:77:41: a2:8e:87:71:c5:fd:9e:a9:56:96:dd:6a:85:4a:e7:d0:8d:32: 9c:2e:fd:b5:36:88:b9:1d:96:b8:3b:b6:ad:7e:2f:10:f5:13: 64:4f:72:72:73:f7:da:bb:74:df:fe:e7:cd:76:df:05:e9:06: 1d:11:96:41:ab:33:fc:87:be:27:c7:b6:cd:c5:23:a5:7c:7a: f3:e8:81:18:15:84:ad:f3:66:42:df:84:37:76:e5:05:da:9b: 9f:cd:b1:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1PPCT+ky9fW9dWUadVJFTGBBtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA3MjMxNzAwNTVaFw0yNjA3MjQyMDU1NTVaMDMxMTAvBgNV BAMTKDY3NDMyNzkwNzY3QkU0NjU5QzY0QjQwQjZDNDk2Q0EzNEQxRUI3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSaY8/cw6K4aVCPIMpZqPoZWY +qMA12J4C99wep0QcghUnWGBsJMgJgyjYE9KuTV5VEyZEBFmBIhLLWAx4lj3U8g8 Ebys04cTN+OClWl1plYYq25rBnhIdyweBa6MeNESfzPm2a66bEamdbYVxY4aTNYF 3fohJpofzfeQo5xh8wmEkPDoNtrKMlC5I46D1F7yffCKkEJrNnoB1XeFYhXesFcC GfkysOg3Qa/4+DvhbhpNRqXyj7jLSxpnxJ84afi3AWDZHYOVjNQhwkiFI6MF50dt JZbhw+SUjWRPbgzlOal7KhXbTzbmu3oRJqxjcsyFJ2I4uqMxaWRs6uAFL78LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ0MnkHZ75GWcZLQLbElso00et7wwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsJKRVCc4l93awiDT6aivTp/mLL4BGWck2k OP+yFog+ClgXLSG1PCYQwwrlBn7c7wm4rMvQCNHMdePNiFG512LLshPQ625KsBCR 299SGZcz9rz33X2o60mHweAGBZPR/+cFUPfv3GJIAVTaBIp3iUfA1ODmNGOhO+fw qFoqVEL3lWdzMwh+CKd7tDso+MFOqDwP+ChaM2nUCy1LP/XgFXx3QaKOh3HF/Z6p VpbdaoVK59CNMpwu/bU2iLkdlrg7tq1+LxD1E2RPcnJz99q7dN/+58123wXpBh0R lkGrM/yHvifHts3FI6V8evPogRgVhK3zZkLfhDd25QXam5/NsVI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:28:55 2026 by rpki-client