$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: SAqabFYaIKy6HnMptw6OidswNOMOIyh8xo4Su0VpW7E= Subject key identifier: 03:43:BD:2D:5E:16:9C:A7:A6:F4:4E:6E:4C:5B:E8:28:4F:A8:D0:4E Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 5720EBE0B05B8CE6B75E14CC02BFE0B1E0796A6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:08:29 +0000 Manifest this update: Wed 13 May 2026 00:03:29 +0000 Manifest next update: Thu 14 May 2026 00:34:29 +0000 Files and hashes: 1: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) 2: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: nEHrJwfUimzvjjceQW+Zm6igyA+ry/HsoJhk3Q0hPTg=) 3: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) 4: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:20:eb:e0:b0:5b:8c:e6:b7:5e:14:cc:02:bf:e0:b1:e0:79:6a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: May 13 00:03:29 2026 GMT Not After : May 14 00:34:29 2026 GMT Subject: CN=0343BD2D5E169CA7A6F44E6E4C5BE8284FA8D04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e3:92:9c:fb:c2:9f:cb:74:d1:f4:73:aa:ac: 09:f2:7e:f0:f5:54:05:b0:5c:ca:75:57:bb:ec:a8: a9:1c:57:dd:fa:2c:f8:77:5c:50:d6:2b:93:20:0b: b7:9b:32:ef:08:8e:e7:7d:36:a9:42:29:99:45:7d: 3a:82:47:12:08:44:f5:62:7a:fa:7c:c7:91:2b:26: e6:7c:26:89:a6:c0:73:01:fa:c2:ce:4f:d3:d6:ab: 7c:06:eb:a9:cf:52:b2:71:2e:c1:81:80:3b:1e:05: 4a:80:72:fa:1c:74:02:2c:c8:50:c5:f9:4c:21:39: 39:72:e9:76:1d:bb:2d:72:c9:a3:39:cf:51:de:38: e1:ab:47:95:6d:b7:cd:f7:79:5b:c3:68:27:84:46: 7e:b0:c6:2e:72:86:27:38:9a:2f:a5:18:fe:3d:45: 83:07:0f:54:96:d0:e1:88:81:0c:cd:a5:3b:72:f2: 32:bc:84:22:a1:7a:5b:3d:b4:60:5f:d0:50:a3:79: a8:6e:cf:21:42:11:5e:1d:a5:ba:2e:66:25:2f:ca: 57:16:a4:84:88:6c:14:ba:63:3f:8b:05:89:e6:77: 1c:ec:72:dd:a7:a9:37:c3:35:c4:74:c2:0c:45:f5: 65:3d:12:22:ab:ec:e9:42:ed:bf:7f:e4:9d:1c:7a: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:43:BD:2D:5E:16:9C:A7:A6:F4:4E:6E:4C:5B:E8:28:4F:A8:D0:4E X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:94:dc:a1:e2:4e:96:64:a0:bb:46:4e:b3:9d:7e:cd:7a:35: 02:e8:bd:9e:35:98:26:4a:59:32:f7:40:60:0f:09:05:03:7c: 0f:0e:13:a8:8f:d1:8e:94:db:29:3e:c3:3f:1e:f9:17:17:80: 94:c1:42:e7:34:48:51:97:3d:d1:c2:10:4b:bb:4a:85:14:69: be:d4:9b:81:ca:43:2f:da:b6:8c:95:59:0c:24:65:d5:7e:18: f8:1a:cd:ed:50:51:f2:82:5a:cb:9d:1b:6c:6a:bf:bf:31:c2: f9:04:8a:82:4e:39:f5:7f:9a:6c:46:95:c3:8f:ce:0f:6d:9c: 67:62:86:a7:d1:1e:5f:7c:80:cc:13:6c:f2:23:33:4e:f9:1d: 7b:ec:89:43:e2:4a:d0:a3:10:eb:54:db:0b:13:cb:f8:80:ed: 6b:80:95:76:a0:74:44:03:63:20:9f:42:47:b9:2f:d0:29:c1: f2:7f:a8:a1:c3:72:a7:5c:87:17:7e:d8:e5:4e:48:f5:7e:40: cf:67:25:32:66:ce:e1:0f:0a:76:ba:96:bb:e4:18:01:8f:c7: 5f:9a:95:3d:57:3a:4e:47:ad:cf:7f:12:65:75:8e:f7:56:76: 80:47:50:02:c7:54:11:71:28:fd:68:58:d0:e4:d1:99:ec:7b: 96:91:ea:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyDr4LBbjOa3XhTMAr/gseB5am8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA1MTMwMDAzMjlaFw0yNjA1MTQwMDM0MjlaMDMxMTAvBgNV BAMTKDAzNDNCRDJENUUxNjlDQTdBNkY0NEU2RTRDNUJFODI4NEZBOEQwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt45Kc+8Kfy3TR9HOqrAnyfvD1 VAWwXMp1V7vsqKkcV936LPh3XFDWK5MgC7ebMu8Ijud9NqlCKZlFfTqCRxIIRPVi evp8x5ErJuZ8JommwHMB+sLOT9PWq3wG66nPUrJxLsGBgDseBUqAcvocdAIsyFDF +UwhOTly6XYduy1yyaM5z1HeOOGrR5Vtt833eVvDaCeERn6wxi5yhic4mi+lGP49 RYMHD1SW0OGIgQzNpTty8jK8hCKhels9tGBf0FCjeahuzyFCEV4dpbouZiUvylcW pISIbBS6Yz+LBYnmdxzsct2nqTfDNcR0wgxF9WU9EiKr7OlC7b9/5J0cegR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0O9LV4WnKem9E5uTFvoKE+o0E4wHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiU3KHiTpZkoLtGTrOdfs16NQLovZ41mCZK WTL3QGAPCQUDfA8OE6iP0Y6U2yk+wz8e+RcXgJTBQuc0SFGXPdHCEEu7SoUUab7U m4HKQy/atoyVWQwkZdV+GPgaze1QUfKCWsudG2xqv78xwvkEioJOOfV/mmxGlcOP zg9tnGdihqfRHl98gMwTbPIjM075HXvsiUPiStCjEOtU2wsTy/iA7WuAlXagdEQD YyCfQke5L9ApwfJ/qKHDcqdchxd+2OVOSPV+QM9nJTJmzuEPCna6lrvkGAGPx1+a lT1XOk5Hrc9/EmV1jvdWdoBHUALHVBFxKP1oWNDk0Znse5aR6j8= -----END CERTIFICATE-----Generated at Wed May 13 04:54:51 2026 by rpki-client