$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: Pn3JGxvNlWWKKjYy7LK5N8Un8mt/u7T5gfdFXw0pZT8= Subject key identifier: 77:29:00:6C:D1:DC:8E:C1:D6:5B:DA:43:85:D8:7A:9E:6C:99:C2:84 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 054A3340185347249DDEE68C7BE97190CF853950 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: C6 Signing time: Fri 25 Sep 2026 21:27:06 +0000 Manifest this update: Fri 25 Sep 2026 21:22:06 +0000 Manifest next update: Sun 27 Sep 2026 01:11:06 +0000 Files and hashes: 1: 3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa (hash: i09Z8Tx2AGUJCoOM8U7S48IwaKRFx1XbdhDarsrxQWY=) 2: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: c8pzMXwyGVBP9AnqMxlnGosKQfo2QsMh5JHrQVkBims=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 4: 3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa (hash: 7OHSfmWI/nR+ShqhwFBj8vsSyoyMS+f+Xt96lod6jAU=) 5: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) 6: 3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa (hash: 5hNgNzCE1uulr0uDc5RCxjLA0Zo4ik7pC2wAL54DJWs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4a:33:40:18:53:47:24:9d:de:e6:8c:7b:e9:71:90:cf:85:39:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Sep 25 21:22:06 2026 GMT Not After : Sep 27 01:11:06 2026 GMT Subject: CN=7729006CD1DC8EC1D65BDA4385D87A9E6C99C284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:97:09:a4:76:73:78:58:b9:bf:ed:97:52: db:5c:f6:12:d4:91:1a:5b:d6:15:7b:4b:c5:a3:80: f2:35:50:ae:35:b3:67:e5:83:fb:5e:c8:17:73:58: fa:21:e8:55:8e:c6:8a:7f:70:b8:94:98:cd:e6:f3: 52:db:23:09:be:c4:b1:8c:9f:d9:d9:ee:5e:84:50: 61:a2:04:80:5a:6f:05:7f:8a:33:2d:9d:7a:93:36: 5a:2d:8f:0e:ef:0b:3e:0c:b8:75:d3:e7:c6:a9:c7: 3f:c3:17:e6:7c:0d:4b:b3:b7:c9:99:e3:e3:3e:2b: d8:ad:6a:09:1c:a0:03:4f:8e:5b:9b:d8:f1:41:f6: f2:c9:68:3f:7c:a6:00:73:6f:0a:1f:68:13:cc:e4: 3f:be:af:7f:3b:ff:fa:3e:eb:bd:d0:d5:46:1f:04: 96:8a:f6:0e:b3:37:e7:eb:d1:84:b6:25:2f:43:8f: 2d:9d:04:12:48:45:81:08:bd:b7:68:e2:21:ef:f4: e4:77:f9:e8:4e:e1:9f:f7:99:fe:f5:f0:2d:bf:8b: a7:63:95:a1:55:b1:09:7e:e2:7c:6c:3d:fb:75:61: 37:ff:06:2a:70:01:e0:34:f9:91:c3:fe:16:e3:8e: b9:23:eb:3e:9c:d8:20:5c:44:5f:82:fc:c5:3f:b7: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:00:6C:D1:DC:8E:C1:D6:5B:DA:43:85:D8:7A:9E:6C:99:C2:84 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2b:a4:d9:a4:44:60:f1:b8:c2:f4:ed:80:8d:b2:33:a7:4a: a0:84:ff:3d:33:4f:94:29:45:6f:63:41:9a:50:38:1a:1a:6e: 6d:e7:0e:64:67:a4:98:3c:f2:90:de:d6:e7:21:54:3b:6f:9f: 6d:92:04:b6:e6:bd:f4:8c:9f:30:3d:00:6c:73:93:ab:f7:36: 46:82:79:c9:b4:66:f7:21:c6:f2:69:9e:76:a3:26:56:d1:59: a0:90:7b:d9:a2:02:82:a4:b5:c8:66:21:44:d9:a4:2a:0e:47: c2:b1:81:61:fb:bb:9b:f5:f8:65:72:7e:f1:ec:0e:bb:e0:78: e2:44:09:0d:84:06:bd:bb:7c:72:f6:39:13:ce:f7:4c:2d:9f: e2:d0:30:5e:0e:12:f7:c1:60:f2:58:dd:e2:81:14:45:52:16: 01:97:e9:3d:a8:22:2b:60:56:86:c7:f4:2f:9b:2b:4c:37:ce: 78:cd:a3:2c:d2:20:f7:d6:02:7a:42:b6:62:8a:48:e5:7e:b4: d3:2e:4f:77:1c:8c:fe:b2:a2:f1:f2:80:df:52:08:7e:52:7f: 35:3a:74:5b:76:a1:db:56:6c:48:ff:5c:12:26:cf:c7:60:36: e4:1d:72:b2:d1:fe:7e:f0:76:ca:66:f4:2c:35:64:f6:85:e5: b6:f6:8f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUozQBhTRySd3uaMe+lxkM+FOVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA5MjUyMTIyMDZaFw0yNjA5MjcwMTExMDZaMDMxMTAvBgNV BAMTKDc3MjkwMDZDRDFEQzhFQzFENjVCREE0Mzg1RDg3QTlFNkM5OUMyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5spcJpHZzeFi5v+2XUttc9hLU kRpb1hV7S8WjgPI1UK41s2flg/teyBdzWPoh6FWOxop/cLiUmM3m81LbIwm+xLGM n9nZ7l6EUGGiBIBabwV/ijMtnXqTNlotjw7vCz4MuHXT58apxz/DF+Z8DUuzt8mZ 4+M+K9itagkcoANPjlub2PFB9vLJaD98pgBzbwofaBPM5D++r387//o+673Q1UYf BJaK9g6zN+fr0YS2JS9Djy2dBBJIRYEIvbdo4iHv9OR3+ehO4Z/3mf718C2/i6dj laFVsQl+4nxsPft1YTf/BipwAeA0+ZHD/hbjjrkj6z6c2CBcRF+C/MU/t3J1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdykAbNHcjsHWW9pDhdh6nmyZwoQwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkrpNmkRGDxuML07YCNsjOnSqCE/z0zT5Qp RW9jQZpQOBoabm3nDmRnpJg88pDe1uchVDtvn22SBLbmvfSMnzA9AGxzk6v3NkaC ecm0ZvchxvJpnnajJlbRWaCQe9miAoKktchmIUTZpCoOR8KxgWH7u5v1+GVyfvHs DrvgeOJECQ2EBr27fHL2ORPO90wtn+LQMF4OEvfBYPJY3eKBFEVSFgGX6T2oIitg VobH9C+bK0w3znjNoyzSIPfWAnpCtmKKSOV+tNMuT3ccjP6yovHygN9SCH5SfzU6 dFt2odtWbEj/XBImz8dgNuQdcrLR/n7wdspm9Cw1ZPaF5bb2j80= -----END CERTIFICATE-----Generated at Sat Sep 26 03:58:44 2026 by rpki-client