$ rpki-client -vvvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: NgjNhb1OnNcnQKR5FIhYMzq7mc+gIHPGVwYpSiXuyP8= Subject key identifier: AB:1E:EB:22:3B:5D:BE:D7:13:6B:7D:6D:11:07:38:C7:E9:45:21:86 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 2B1BE2484A04653C07684E77EFF1FC4AF05ED563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:28:51 +0000 Manifest this update: Wed 23 Sep 2026 22:23:51 +0000 Manifest next update: Thu 24 Sep 2026 23:35:51 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) 2: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: NgP1E6z28M30/+nIqZRavpgqXZkE8RHyAZ3hTvDA4Xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1b:e2:48:4a:04:65:3c:07:68:4e:77:ef:f1:fc:4a:f0:5e:d5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Sep 23 22:23:51 2026 GMT Not After : Sep 24 23:35:51 2026 GMT Subject: CN=AB1EEB223B5DBED7136B7D6D110738C7E9452186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:1f:a2:a2:53:56:95:4a:fd:c2:5a:c1:b8: bd:5e:c2:7a:a7:a7:48:9d:63:32:43:ab:e2:70:ab: 62:fa:e6:a5:2a:46:f4:81:ae:58:c3:6b:46:88:0b: c2:d9:09:96:d2:53:17:0a:e1:e0:20:d6:77:ee:5f: 77:9c:ee:ef:05:bd:44:eb:89:27:34:9e:1d:00:fe: 9d:f5:56:fb:89:72:cf:b3:a3:5a:20:94:84:19:9e: c4:68:91:9b:50:e5:14:60:3d:e6:bc:b8:c3:6f:db: a1:28:c7:f4:e0:63:7f:78:d0:4b:66:3b:b5:ac:a5: 13:35:2c:cf:f4:6d:e7:96:c3:d7:2d:aa:f6:89:81: b5:3c:d1:8a:a0:a8:b0:21:78:ff:06:9e:a8:f1:6c: 7d:76:c5:5c:2e:76:86:9b:68:e3:66:ec:27:c4:cd: aa:1d:5f:49:0c:71:26:d3:cd:d4:6a:fe:68:96:63: f5:81:73:5b:0d:d7:a2:87:89:7f:31:58:2d:6f:7d: 3f:e1:98:56:20:e9:69:f0:11:ce:76:28:e7:43:c7: fe:df:2e:ae:c6:88:83:05:3b:2f:23:a7:1f:67:be: 9a:2c:da:bb:a4:4c:2d:59:7a:a5:fa:a5:4e:10:66: e7:12:02:8f:2c:de:e7:06:b9:a7:8c:58:04:01:4f: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:EB:22:3B:5D:BE:D7:13:6B:7D:6D:11:07:38:C7:E9:45:21:86 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ec:48:a1:00:06:7a:02:4e:4a:b2:a2:fe:44:6f:8e:37:8b: ef:8c:cf:95:40:26:ee:46:cf:e6:06:1b:e0:e7:eb:ac:90:ae: 1c:51:99:06:16:fe:ac:0d:4f:24:52:da:94:f7:63:36:e2:84: 7b:c3:0c:c6:ab:a4:2e:05:f0:cd:00:31:1b:46:84:f0:e0:5b: e5:8c:d5:c3:e9:85:7c:6e:93:46:7a:8b:c3:93:27:92:62:ad: 9b:24:6f:c0:22:c5:30:41:9c:66:ee:2c:60:6d:fc:69:9c:e7: 26:f3:c8:7a:2b:d6:08:b6:b3:6c:5c:23:55:ea:35:a7:02:bf: 8c:2b:9d:a4:b6:66:b3:01:90:94:e5:76:09:25:54:aa:83:27: d1:e1:a7:21:50:16:b3:06:16:ef:e4:0e:43:6e:1d:88:28:90: 04:99:5a:61:49:a7:03:76:37:ed:5f:de:07:7d:96:60:56:43: a6:46:f6:c2:82:ca:9d:d4:6a:25:5c:3d:b3:dc:83:bd:d7:ba: 02:06:7b:95:93:3e:64:1a:e6:3b:d3:5e:9c:a3:b4:53:a8:05: b5:d6:31:90:58:99:a9:9d:0b:2f:79:34:f8:a0:dc:e1:98:b5: c6:d4:3c:03:78:64:b5:e6:6f:f4:12:4b:6d:28:ce:1e:5e:b9: 9a:1e:cb:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxviSEoEZTwHaE537/H8SvBe1WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA5MjMyMjIzNTFaFw0yNjA5MjQyMzM1NTFaMDMxMTAvBgNV BAMTKEFCMUVFQjIyM0I1REJFRDcxMzZCN0Q2RDExMDczOEM3RTk0NTIxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdax+iolNWlUr9wlrBuL1ewnqn p0idYzJDq+Jwq2L65qUqRvSBrljDa0aIC8LZCZbSUxcK4eAg1nfuX3ec7u8FvUTr iSc0nh0A/p31VvuJcs+zo1oglIQZnsRokZtQ5RRgPea8uMNv26Eox/TgY3940Etm O7WspRM1LM/0beeWw9ctqvaJgbU80YqgqLAheP8GnqjxbH12xVwudoabaONm7CfE zaodX0kMcSbTzdRq/miWY/WBc1sN16KHiX8xWC1vfT/hmFYg6WnwEc52KOdDx/7f Lq7GiIMFOy8jpx9nvpos2rukTC1ZeqX6pU4QZucSAo8s3ucGuaeMWAQBT4k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqx7rIjtdvtcTa31tEQc4x+lFIYYwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzsSKEABnoCTkqyov5Eb443i++Mz5VAJu5G z+YGG+Dn66yQrhxRmQYW/qwNTyRS2pT3YzbihHvDDMarpC4F8M0AMRtGhPDgW+WM 1cPphXxuk0Z6i8OTJ5JirZskb8AixTBBnGbuLGBt/Gmc5ybzyHor1gi2s2xcI1Xq NacCv4wrnaS2ZrMBkJTldgklVKqDJ9HhpyFQFrMGFu/kDkNuHYgokASZWmFJpwN2 N+1f3gd9lmBWQ6ZG9sKCyp3UaiVcPbPcg73XugIGe5WTPmQa5jvTXpyjtFOoBbXW MZBYmamdCy95NPig3OGYtcbUPAN4ZLXmb/QSS20ozh5euZoey+0= -----END CERTIFICATE-----Generated at Thu Sep 24 05:40:03 2026 by rpki-client