$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: +uQjs44ZUj3XhO8h2jjY1C28t+wafTg/ZbFhivbwLoE= Subject key identifier: 3E:29:60:53:01:B2:77:0E:26:10:96:21:19:A0:B3:D5:11:E4:96:05 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 4089ECDD38CDD0084765CC1ED17A37FE18AF72D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:32:25 +0000 Manifest this update: Fri 24 Jul 2026 02:27:25 +0000 Manifest next update: Sat 25 Jul 2026 06:11:25 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: mj3d/VxJWyDlbSQXd6Tvr5osh5fSaEKRp1q4Iq97FAc=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:89:ec:dd:38:cd:d0:08:47:65:cc:1e:d1:7a:37:fe:18:af:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Jul 24 02:27:25 2026 GMT Not After : Jul 25 06:11:25 2026 GMT Subject: CN=3E29605301B2770E2610962119A0B3D511E49605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:80:e1:25:28:13:5c:04:4c:98:bf:0e:16: 13:df:9b:ef:fe:72:57:03:3d:6c:e5:ca:e6:71:be: c1:ff:89:b3:11:2e:48:b0:c4:7c:73:f4:e5:43:5e: 57:3a:c7:a1:ad:b8:da:cc:1e:e7:78:4e:d0:02:96: 0b:c0:75:7d:93:31:d5:6a:41:2b:56:cd:a0:1e:02: c4:81:b4:79:3a:f1:a9:47:c1:19:c5:6a:a4:e8:f3: 70:d3:c5:12:32:3e:8d:8b:31:09:59:cd:2a:ce:87: ee:39:7c:d8:6e:ba:98:39:93:23:ee:e8:8d:6c:ab: d7:4c:ef:0d:ed:20:cf:40:aa:83:16:ae:79:8e:cd: a9:2a:83:1b:96:cd:fa:82:47:f0:e3:85:8e:f5:f2: 25:d0:64:6f:8a:e9:9a:65:a9:a6:74:2f:ed:3c:3f: 85:d9:34:5f:a0:bc:d8:f6:80:72:8d:52:49:de:17: 41:01:58:f4:29:f1:07:69:6a:4f:e1:9a:7b:23:55: 7a:83:30:b7:76:a8:b6:44:aa:b8:00:79:77:6a:52: 7f:d8:c7:91:89:ab:54:a1:57:22:bc:49:74:d3:0b: 15:4a:69:fd:d8:77:cd:6f:00:43:73:f8:72:37:f6: 06:b0:b2:a9:67:d0:98:3c:05:3d:39:65:9b:8f:2e: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:29:60:53:01:B2:77:0E:26:10:96:21:19:A0:B3:D5:11:E4:96:05 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d8:10:4d:8c:a6:f7:75:98:7e:56:c2:fe:ed:dc:03:7d:95: f8:d0:e5:fe:35:79:23:37:6c:83:db:4c:cc:43:25:b6:52:44: cc:aa:8a:98:9c:c9:c6:0c:ab:6b:a0:e0:43:5e:0d:db:92:23: 93:f1:53:b8:a4:23:eb:43:eb:f3:38:57:fb:42:8b:7a:02:f2: 6a:5d:8d:f1:be:6a:7f:9d:58:0e:79:10:3c:2e:78:4d:f9:ff: be:d6:55:fa:0e:bf:e4:60:a5:91:26:ab:b2:b0:2c:65:b9:3a: ad:57:8e:ab:12:b7:3d:b8:03:0c:17:dc:92:c6:e0:c3:60:3f: fb:a2:15:8d:fc:15:ee:f0:0b:e5:7b:25:4b:b3:36:55:90:73: db:3b:af:84:4a:0d:20:0a:63:14:39:43:ed:fb:73:21:81:38: 62:98:88:51:ba:ec:36:c7:7b:d5:06:48:d3:6a:9d:84:4d:8b: e4:4f:4c:0a:bc:05:28:35:19:cd:87:c3:f8:d4:09:d5:c5:12: c1:3f:cd:86:73:97:86:62:e5:90:73:da:72:de:34:dd:3e:c2: 99:73:24:03:61:8b:f6:c3:35:af:9d:90:2d:4b:4d:43:23:69: d3:d8:58:a1:00:83:26:39:17:89:d7:fe:e0:d4:a7:f5:9a:08: e9:d7:ea:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIns3TjN0AhHZcwe0Xo3/hivctMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA3MjQwMjI3MjVaFw0yNjA3MjUwNjExMjVaMDMxMTAvBgNV BAMTKDNFMjk2MDUzMDFCMjc3MEUyNjEwOTYyMTE5QTBCM0Q1MTFFNDk2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD14DhJSgTXARMmL8OFhPfm+/+ clcDPWzlyuZxvsH/ibMRLkiwxHxz9OVDXlc6x6GtuNrMHud4TtAClgvAdX2TMdVq QStWzaAeAsSBtHk68alHwRnFaqTo83DTxRIyPo2LMQlZzSrOh+45fNhuupg5kyPu 6I1sq9dM7w3tIM9AqoMWrnmOzakqgxuWzfqCR/DjhY718iXQZG+K6ZplqaZ0L+08 P4XZNF+gvNj2gHKNUkneF0EBWPQp8Qdpak/hmnsjVXqDMLd2qLZEqrgAeXdqUn/Y x5GJq1ShVyK8SXTTCxVKaf3Yd81vAENz+HI39gawsqln0Jg8BT05ZZuPLnTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPilgUwGydw4mEJYhGaCz1RHklgUwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPYEE2Mpvd1mH5Wwv7t3AN9lfjQ5f41eSM3 bIPbTMxDJbZSRMyqipicycYMq2ug4ENeDduSI5PxU7ikI+tD6/M4V/tCi3oC8mpd jfG+an+dWA55EDwueE35/77WVfoOv+RgpZEmq7KwLGW5Oq1XjqsStz24AwwX3JLG 4MNgP/uiFY38Fe7wC+V7JUuzNlWQc9s7r4RKDSAKYxQ5Q+37cyGBOGKYiFG67DbH e9UGSNNqnYRNi+RPTAq8BSg1Gc2Hw/jUCdXFEsE/zYZzl4Zi5ZBz2nLeNN0+wplz JANhi/bDNa+dkC1LTUMjadPYWKEAgyY5F4nX/uDUp/WaCOnX6q8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:06 2026 by rpki-client