$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json) Hash identifier: Gsh3o2SVUvdm3LW0W+vb6A+FNaXGp4SVL6DSt6ekqVU= Subject key identifier: 5D:16:07:B6:3F:63:E5:BD:F7:E8:4A:FC:58:3B:4F:30:A8:29:1D:2D Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Certificate serial: 080C852871B3CB739CF29AF756CA2FEEB5307DF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:13:11 +0000 Manifest this update: Thu 24 Sep 2026 18:08:11 +0000 Manifest next update: Fri 25 Sep 2026 18:28:11 +0000 Files and hashes: 1: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: 6rATdYnUuPf2FGbSCfjTe4fr7zlTVCyM9cAVAgyGHKw=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:85:28:71:b3:cb:73:9c:f2:9a:f7:56:ca:2f:ee:b5:30:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Validity Not Before: Sep 24 18:08:11 2026 GMT Not After : Sep 25 18:28:11 2026 GMT Subject: CN=5D1607B63F63E5BDF7E84AFC583B4F30A8291D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:f3:79:58:23:fa:66:f2:95:85:21:da:28: f1:5f:01:7e:b2:19:20:3a:d2:d1:22:3f:f5:3c:4e: 68:0e:e2:d6:a1:80:b7:f2:dc:e1:b2:e0:04:f6:f0: 05:50:59:dd:bd:5b:c9:d5:26:d0:5e:32:fc:91:5d: 17:0a:6d:dd:93:2e:d3:09:73:92:2c:d2:e5:05:ee: 0d:1f:1a:2a:4c:70:d3:4d:0b:a8:38:5f:0f:f5:b2: 66:ab:eb:86:3a:b6:e4:4b:91:e5:2b:2a:95:30:bf: 55:2b:a9:dc:d7:12:6a:20:e0:d3:2b:f5:b1:56:ee: 24:f5:5c:29:84:c1:72:ec:c7:a3:4b:40:f2:bb:db: fe:58:9d:a8:93:32:f2:80:56:1e:35:7b:09:d6:ec: 2b:90:56:c6:d0:b9:3a:8f:2b:6a:42:ee:08:53:cd: bc:82:2d:11:03:4a:d3:8c:cd:5f:0d:44:b9:0a:33: 2c:9d:b9:32:af:12:4d:32:1e:70:5f:29:90:d4:15: e2:e6:f4:07:d3:c5:c2:c6:7c:be:69:33:17:50:c7: 9d:42:d1:27:03:95:ca:6f:45:e3:04:a3:4d:04:fa: 65:36:31:38:26:d9:58:df:d4:63:40:67:8c:e9:06: 36:36:a3:61:b6:19:21:e6:69:14:47:ef:b5:a7:19: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:16:07:B6:3F:63:E5:BD:F7:E8:4A:FC:58:3B:4F:30:A8:29:1D:2D X509v3 Authority Key Identifier: keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:be:8d:7e:c9:47:36:da:f4:14:58:73:bd:b4:24:07:c5: c0:18:a9:d7:bd:2e:72:a5:46:14:b6:b4:4a:d1:41:e6:f2:a7: 56:d4:cf:2e:dc:1d:19:d7:fa:f8:ea:b5:79:c5:97:aa:41:05: 46:b8:f8:86:8b:0a:97:0b:4c:b2:04:75:6f:71:0f:37:ae:e3: c6:00:5d:8e:47:32:a6:b6:23:1f:a1:0d:5e:9c:d2:9e:0d:3d: f5:d8:5f:fd:f4:85:a4:19:76:1b:d1:a6:8b:d3:c7:59:78:e2: 9c:e6:bd:ec:bd:47:ae:bf:3a:82:56:67:06:53:9c:30:54:01: b4:77:94:14:77:42:05:b6:87:71:57:75:62:b3:1b:3f:de:db: 7d:d2:db:94:52:b3:46:3c:1e:9a:35:19:84:46:63:52:70:fe: 78:bc:37:f9:6b:cb:14:8b:3f:09:a6:42:40:dd:d1:a6:47:6e: f0:ec:ea:aa:1f:c0:d1:ac:89:6c:e8:c1:8a:37:19:ce:e9:5b: 60:c3:0a:60:ba:6b:de:3f:3c:b5:19:28:50:db:b5:dc:b2:ac: d5:25:8e:37:86:6a:11:50:b2:96:3b:a9:8e:9b:b0:2a:dd:69: dc:4c:ee:35:4b:53:2d:d0:8d:77:ca:e9:6d:4e:eb:39:a9:72: ec:d7:da:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAyFKHGzy3Oc8pr3Vsov7rUwffUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4 MjQ0Q0ZDRDAeFw0yNjA5MjQxODA4MTFaFw0yNjA5MjUxODI4MTFaMDMxMTAvBgNV BAMTKDVEMTYwN0I2M0Y2M0U1QkRGN0U4NEFGQzU4M0I0RjMwQTgyOTFEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EvN5WCP6ZvKVhSHaKPFfAX6y GSA60tEiP/U8TmgO4tahgLfy3OGy4AT28AVQWd29W8nVJtBeMvyRXRcKbd2TLtMJ c5Is0uUF7g0fGipMcNNNC6g4Xw/1smar64Y6tuRLkeUrKpUwv1UrqdzXEmog4NMr 9bFW7iT1XCmEwXLsx6NLQPK72/5YnaiTMvKAVh41ewnW7CuQVsbQuTqPK2pC7ghT zbyCLREDStOMzV8NRLkKMyyduTKvEk0yHnBfKZDUFeLm9AfTxcLGfL5pMxdQx51C 0ScDlcpvReMEo00E+mU2MTgm2Vjf1GNAZ4zpBjY2o2G2GSHmaRRH77WnGR4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRYHtj9j5b336Er8WDtPMKgpHS0wHwYDVR0j BBgwFoAUzEo7hlMZEqANz7+UiENp9YJEz80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTExZGMtZmY3MS00ZWQ3LWE2OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1 MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4MjQ0Q0ZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DQzRBM0I4NjUzMTkxMkEwMERDRkJGOTQ4ODQzNjlGNTgyNDRD RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5 RjU4MjQ0Q0ZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB9vo1+yUc22vQUWHO9tCQHxcAYqde9LnKl RhS2tErRQebyp1bUzy7cHRnX+vjqtXnFl6pBBUa4+IaLCpcLTLIEdW9xDzeu48YA XY5HMqa2Ix+hDV6c0p4NPfXYX/30haQZdhvRpovTx1l44pzmvey9R66/OoJWZwZT nDBUAbR3lBR3QgW2h3FXdWKzGz/e233S25RSs0Y8Hpo1GYRGY1Jw/ni8N/lryxSL PwmmQkDd0aZHbvDs6qofwNGsiWzowYo3Gc7pW2DDCmC6a94/PLUZKFDbtdyyrNUl jjeGahFQspY7qY6bsCrdadxM7jVLUy3QjXfK6W1O6zmpcuzX2rw= -----END CERTIFICATE-----Generated at Thu Sep 24 21:41:24 2026 by rpki-client