$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json) Hash identifier: tVyOERpXVN/D4jK47xAZQG9nvWdJGrDsYzS1mmI3dJw= Subject key identifier: 93:5A:6A:CB:4B:C3:A4:2F:B2:B6:7C:48:E0:75:30:6A:C2:B6:9A:E0 Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Certificate serial: 423E5DEDCB124130C701AD7F413FB5D1C59E7DC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 07:54:03 +0000 Manifest this update: Sun 15 Nov 2026 07:49:03 +0000 Manifest next update: Mon 16 Nov 2026 09:40:03 +0000 Files and hashes: 1: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: nptANh9jVcDrVVemIV4vWmOhLXj/tZdf1DZQz4x1y3Q=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3e:5d:ed:cb:12:41:30:c7:01:ad:7f:41:3f:b5:d1:c5:9e:7d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Validity Not Before: Nov 15 07:49:03 2026 GMT Not After : Nov 16 09:40:03 2026 GMT Subject: CN=935A6ACB4BC3A42FB2B67C48E075306AC2B69AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:c5:e0:d5:e5:5a:78:54:4b:67:f3:df:0d: 1e:e1:5f:17:eb:8e:05:89:26:30:7a:80:d0:dc:44: 9f:71:5b:03:42:29:44:26:e9:cd:a9:1d:4c:e8:13: 02:9f:c0:9e:ca:36:a6:49:9c:2e:d5:d4:49:05:20: a0:19:ee:c2:c5:34:7d:30:e1:3b:28:d6:a6:2e:cf: 47:c6:45:be:9e:b8:09:cd:3b:fd:ae:6e:41:a8:08: bb:87:e3:e3:a9:ca:f6:bb:3c:6f:21:56:05:9f:0b: 6a:87:30:4e:2c:c6:21:36:52:cb:5f:79:ae:37:1c: 3b:65:ee:ca:47:4a:a3:93:94:4e:8a:7b:e2:11:6a: 00:69:06:96:46:35:d2:57:98:c3:31:2a:1b:10:09: 28:b6:d4:92:32:1e:6f:14:f7:92:23:45:96:0e:56: 47:0e:51:91:fd:ce:03:91:5a:74:4d:93:d0:2f:56: 3e:32:14:56:77:3c:03:07:d7:0a:9e:e0:3f:85:55: 23:8f:7c:56:4d:74:bd:32:e7:53:a9:15:85:f4:44: cd:5c:18:fc:b3:a3:a5:ff:50:0e:06:c9:7f:e9:9b: 6e:5a:a9:d9:b1:7b:b1:a2:1c:a8:45:06:85:f6:03: 58:63:58:4e:1f:01:5d:f2:b4:5a:86:c9:9c:27:1e: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:6A:CB:4B:C3:A4:2F:B2:B6:7C:48:E0:75:30:6A:C2:B6:9A:E0 X509v3 Authority Key Identifier: keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:63:f6:53:2e:bf:3a:21:12:b4:bd:85:e1:16:df:b2:54:4f: 86:17:a2:36:92:46:6c:cc:3e:3b:68:98:7b:d5:cb:e9:d2:36: 57:8e:dd:4d:37:f4:6d:c0:85:1f:45:b8:4c:d6:a3:92:7d:d0: 42:7f:91:e8:18:e3:83:36:46:2b:67:b5:91:60:59:69:6b:24: b1:43:a0:6c:55:f6:dc:d5:d8:1d:56:2b:7c:be:5e:68:20:ed: 6b:da:f1:d3:ab:33:e2:54:8e:25:f0:a0:81:c7:b6:da:b2:f1: 0a:f7:2e:51:4b:95:83:88:48:b8:a7:d4:f3:40:c2:96:d7:17: d9:ba:10:bc:de:0b:e0:9b:60:a2:92:a6:d5:8f:00:11:76:cb: d9:8c:31:c0:20:a2:2d:6e:0f:54:c3:f3:da:7b:e8:a2:26:1f: 64:b0:2a:95:2c:b2:eb:03:1d:f7:43:a0:02:cd:d5:1d:dd:90: e6:b0:c2:d5:c5:c7:f0:cc:a0:26:d5:7d:cf:1a:6c:6c:aa:5b: df:c0:8f:d1:3e:f8:13:13:d7:31:61:30:1f:16:dd:be:ec:f0: 4b:61:e4:6e:c3:fd:b3:77:6a:03:65:c1:01:a3:64:78:31:ea: 0b:15:b8:51:90:89:dd:72:d7:4a:6e:a1:fc:ea:bc:51:54:fd: ba:1b:ed:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQj5d7csSQTDHAa1/QT+10cWefcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4 MjQ0Q0ZDRDAeFw0yNjExMTUwNzQ5MDNaFw0yNjExMTYwOTQwMDNaMDMxMTAvBgNV BAMTKDkzNUE2QUNCNEJDM0E0MkZCMkI2N0M0OEUwNzUzMDZBQzJCNjlBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjMXg1eVaeFRLZ/PfDR7hXxfr jgWJJjB6gNDcRJ9xWwNCKUQm6c2pHUzoEwKfwJ7KNqZJnC7V1EkFIKAZ7sLFNH0w 4Tso1qYuz0fGRb6euAnNO/2ubkGoCLuH4+Opyva7PG8hVgWfC2qHME4sxiE2Ustf ea43HDtl7spHSqOTlE6Ke+IRagBpBpZGNdJXmMMxKhsQCSi21JIyHm8U95IjRZYO VkcOUZH9zgORWnRNk9AvVj4yFFZ3PAMH1wqe4D+FVSOPfFZNdL0y51OpFYX0RM1c GPyzo6X/UA4GyX/pm25aqdmxe7GiHKhFBoX2A1hjWE4fAV3ytFqGyZwnHk6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk1pqy0vDpC+ytnxI4HUwasK2muAwHwYDVR0j BBgwFoAUzEo7hlMZEqANz7+UiENp9YJEz80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTExZGMtZmY3MS00ZWQ3LWE2OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1 MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4MjQ0Q0ZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DQzRBM0I4NjUzMTkxMkEwMERDRkJGOTQ4ODQzNjlGNTgyNDRD RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5 RjU4MjQ0Q0ZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlj9lMuvzohErS9heEW37JUT4YXojaSRmzM PjtomHvVy+nSNleO3U039G3AhR9FuEzWo5J90EJ/kegY44M2RitntZFgWWlrJLFD oGxV9tzV2B1WK3y+Xmgg7Wva8dOrM+JUjiXwoIHHttqy8Qr3LlFLlYOISLin1PNA wpbXF9m6ELzeC+CbYKKSptWPABF2y9mMMcAgoi1uD1TD89p76KImH2SwKpUssusD HfdDoALN1R3dkOawwtXFx/DMoCbVfc8abGyqW9/Aj9E++BMT1zFhMB8W3b7s8Eth 5G7D/bN3agNlwQGjZHgx6gsVuFGQid1y10puofzqvFFU/bob7eI= -----END CERTIFICATE-----Generated at Sun Nov 15 12:44:17 2026 by rpki-client