$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: A4xmPrMlEhA/hX7f8uiJxtuU7C4SRiib4fEMo0iHjB8= Subject key identifier: 15:66:93:71:0D:20:61:03:B2:3C:7B:C8:3C:2F:38:88:A7:82:2A:61 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 0E8154191EEA8AF2E5731F139C37EAB19BDA9CCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:42:51 +0000 Manifest this update: Tue 12 May 2026 23:37:51 +0000 Manifest next update: Thu 14 May 2026 02:59:51 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: SbAMLCYhep7sI3dE/QBhlAJZG6E5yNseiLu3VKZpvKo=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:81:54:19:1e:ea:8a:f2:e5:73:1f:13:9c:37:ea:b1:9b:da:9c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: May 12 23:37:51 2026 GMT Not After : May 14 02:59:51 2026 GMT Subject: CN=156693710D206103B23C7BC83C2F3888A7822A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:4b:66:c3:7b:45:db:30:d3:8c:af:e1:e7: 68:a8:34:40:e6:3b:c7:89:4e:3f:27:7d:33:bd:8d: 91:0f:36:54:f5:a3:e4:e1:14:ee:79:77:70:50:8c: 3d:2e:81:6b:fb:58:7b:28:09:cf:9f:6e:bf:15:ee: 94:56:49:75:25:b6:ca:d4:b5:68:36:b0:7c:80:36: 49:85:38:93:e6:be:ef:fb:ca:a2:e4:af:af:1d:65: af:68:b8:5f:62:a3:46:82:ba:7d:c8:ad:2a:9e:28: 8e:4b:d7:26:cf:9b:50:40:37:41:6b:be:15:b7:4a: 1e:99:69:34:f6:48:2a:e7:39:1c:ba:0c:e4:74:b4: 43:b3:f3:35:cc:9e:e5:16:60:6a:ec:cb:4e:fc:fe: b5:eb:0a:81:21:5d:3f:04:a1:cc:14:78:56:50:5d: df:a3:37:fc:4c:80:00:03:1c:32:8a:5b:9d:4a:ac: d0:a8:22:2d:ca:30:3d:c4:e1:a9:61:2b:96:4d:24: 14:4b:93:0c:bf:fd:18:3c:63:77:cd:3a:1c:1b:9d: 5f:b4:da:12:aa:bd:29:50:e5:17:78:bc:38:6b:48: ff:4f:0e:89:1e:ae:e3:92:c8:31:ba:7b:5a:8a:a7: 54:b1:de:6c:a6:c4:de:9b:1b:ee:5c:24:e4:75:81: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:93:71:0D:20:61:03:B2:3C:7B:C8:3C:2F:38:88:A7:82:2A:61 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a5:f2:a5:69:2c:6b:c2:ce:03:91:c7:0f:04:a6:42:cf:0f: 29:3a:06:59:00:a8:ff:ed:4c:1c:10:87:a2:92:0e:a1:62:22: e7:a8:bb:28:b1:7b:61:a0:9c:0f:0d:70:9d:33:12:1f:b1:bb: 8a:0c:47:28:7c:0f:97:0c:ce:82:29:5f:e5:a9:96:51:27:54: d4:06:8a:37:02:d5:eb:54:91:e9:75:d8:89:66:cf:5a:d8:49: ed:3d:91:cb:16:73:a4:ca:f9:49:52:8e:35:c2:52:a9:cb:1d: eb:87:f5:44:a0:09:75:cd:66:86:9b:f9:4d:bd:e2:ba:0f:4d: 9c:3b:ab:02:44:fc:1d:20:d4:94:76:1e:be:42:50:6c:22:f8: 4b:c6:61:ed:14:65:18:ee:17:2a:47:81:a3:00:14:71:29:c4: 3f:72:6f:1f:e8:e6:1b:7f:f9:a6:05:17:cb:d0:28:68:9f:ff: 85:cf:96:c3:8a:0c:8a:18:0b:e7:57:d1:52:e4:0f:2f:3e:6e: 44:ad:a2:99:f2:f1:99:3c:7b:05:5c:43:b0:7a:77:0c:16:52: 09:93:97:d6:fa:d1:da:99:ab:61:b6:07:50:3d:98:d5:e3:02: d4:2b:d5:95:03:c0:78:19:d2:15:32:cf:67:81:83:4e:8f:73: 04:7a:68:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoFUGR7qivLlcx8TnDfqsZvanMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA1MTIyMzM3NTFaFw0yNjA1MTQwMjU5NTFaMDMxMTAvBgNV BAMTKDE1NjY5MzcxMEQyMDYxMDNCMjNDN0JDODNDMkYzODg4QTc4MjJBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQI0tmw3tF2zDTjK/h52ioNEDm O8eJTj8nfTO9jZEPNlT1o+ThFO55d3BQjD0ugWv7WHsoCc+fbr8V7pRWSXUltsrU tWg2sHyANkmFOJPmvu/7yqLkr68dZa9ouF9io0aCun3IrSqeKI5L1ybPm1BAN0Fr vhW3Sh6ZaTT2SCrnORy6DOR0tEOz8zXMnuUWYGrsy078/rXrCoEhXT8EocwUeFZQ Xd+jN/xMgAADHDKKW51KrNCoIi3KMD3E4alhK5ZNJBRLkwy//Rg8Y3fNOhwbnV+0 2hKqvSlQ5Rd4vDhrSP9PDokeruOSyDG6e1qKp1Sx3mymxN6bG+5cJOR1gYkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWaTcQ0gYQOyPHvIPC84iKeCKmEwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSl8qVpLGvCzgORxw8EpkLPDyk6BlkAqP/t TBwQh6KSDqFiIueouyixe2GgnA8NcJ0zEh+xu4oMRyh8D5cMzoIpX+WpllEnVNQG ijcC1etUkel12Ilmz1rYSe09kcsWc6TK+UlSjjXCUqnLHeuH9USgCXXNZoab+U29 4roPTZw7qwJE/B0g1JR2Hr5CUGwi+EvGYe0UZRjuFypHgaMAFHEpxD9ybx/o5ht/ +aYFF8vQKGif/4XPlsOKDIoYC+dX0VLkDy8+bkStopny8Zk8ewVcQ7B6dwwWUgmT l9b60dqZq2G2B1A9mNXjAtQr1ZUDwHgZ0hUyz2eBg06PcwR6aA0= -----END CERTIFICATE-----Generated at Wed May 13 04:16:02 2026 by rpki-client