$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: FcIulrMA0YLBFIPaT3ZJkBOfSFmrHm8rTnL06HkpBqc= Subject key identifier: 2D:A5:49:7C:C6:F6:4C:E0:F5:7C:AB:9F:DB:F1:5B:DD:91:14:DD:96 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 632B4E6A5EB9ED0910203CF78857E826A2852629 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:08:24 +0000 Manifest this update: Thu 23 Jul 2026 15:03:24 +0000 Manifest next update: Fri 24 Jul 2026 17:37:24 +0000 Files and hashes: 1: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: 70+R8l3TLiCDXBJfH/thZdTxhvdf4VfQrQmycnNmflw=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2b:4e:6a:5e:b9:ed:09:10:20:3c:f7:88:57:e8:26:a2:85:26:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Jul 23 15:03:24 2026 GMT Not After : Jul 24 17:37:24 2026 GMT Subject: CN=2DA5497CC6F64CE0F57CAB9FDBF15BDD9114DD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:87:60:9e:87:9d:97:e8:c6:00:cc:c3:96: 22:a5:ec:1c:e2:6d:7a:52:0f:0c:45:ab:b8:9e:02: 1d:3b:68:60:91:28:1c:d4:81:af:3b:8f:95:1d:0d: 06:27:45:46:68:c7:12:7d:2a:9b:c2:5a:ba:a4:f1: a4:5e:23:09:b7:18:5d:d5:f3:df:81:1d:45:df:c7: c5:8b:ad:69:8a:1e:73:46:12:b6:51:82:ac:d4:5d: 64:69:a2:2e:b3:2a:e4:7e:f8:e2:aa:f2:9e:d1:5e: d5:01:1e:52:0b:a4:03:cf:df:ae:93:31:95:2b:f2: a0:ae:bf:c1:ba:0b:be:f3:32:67:88:da:5d:56:cc: d5:28:33:8e:b2:c6:f2:cb:cb:5d:71:92:22:df:58: 38:20:04:38:d8:67:73:83:15:2f:91:1d:75:ab:7a: 04:d6:5a:44:1c:d1:04:17:e5:38:c4:33:24:50:8d: bb:8f:9f:24:89:19:3c:1d:c6:3a:ff:df:03:c0:9e: 08:d6:4d:52:84:c6:c0:46:f2:49:54:0a:2c:35:5a: b5:ff:77:f9:f7:c2:b0:d0:c2:6d:6f:ab:39:a9:16: a4:51:32:50:63:a3:98:d4:33:6c:a0:d1:43:9a:60: fe:43:9d:60:12:03:f6:fd:b4:14:60:be:5a:35:15: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:49:7C:C6:F6:4C:E0:F5:7C:AB:9F:DB:F1:5B:DD:91:14:DD:96 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2b:e6:8c:96:6b:e5:87:6b:96:58:d9:12:72:b4:96:94:b6: 64:76:b4:54:1d:b6:f3:ea:8b:ee:d4:25:79:b7:01:82:60:a1: ad:cd:45:d2:36:b3:e8:63:ef:f2:90:1a:b6:47:5a:22:ac:b1: 3a:5f:4d:eb:01:02:ed:a8:04:b3:a6:2b:79:fe:55:06:8e:23: 90:d3:04:bc:c6:f4:c7:9c:2d:7a:7d:d0:30:92:b2:c2:5d:49: 63:b1:74:f5:c2:5a:39:8c:ab:32:78:2f:91:70:07:ee:dc:8f: f7:65:17:28:6c:d6:f3:8d:be:21:f8:f7:54:01:23:48:3a:e3: 3e:c1:0b:1f:72:20:5c:bd:13:18:2b:e2:0d:f7:21:e7:bf:ce: 98:eb:10:0b:99:2c:62:af:75:a1:be:47:25:80:95:b3:f0:f1: 71:90:58:58:d9:1f:05:f4:c1:32:84:89:93:21:8d:6f:b6:3c: 50:3a:42:4b:1d:ed:b5:a0:ec:c0:45:2c:c3:5e:b8:f3:1c:a8: d5:11:21:e6:e0:12:35:78:c1:15:62:14:1b:9c:34:ec:71:e4: 7c:b5:59:58:2b:02:53:da:62:5e:d5:81:f9:a4:19:6c:7c:d8: e8:4d:24:4d:a1:a1:29:59:60:50:de:88:58:e0:3a:cb:35:f3: 3b:fe:5d:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYytOal657QkQIDz3iFfoJqKFJikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA3MjMxNTAzMjRaFw0yNjA3MjQxNzM3MjRaMDMxMTAvBgNV BAMTKDJEQTU0OTdDQzZGNjRDRTBGNTdDQUI5RkRCRjE1QkREOTExNEREOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsYdgnoedl+jGAMzDliKl7Bzi bXpSDwxFq7ieAh07aGCRKBzUga87j5UdDQYnRUZoxxJ9KpvCWrqk8aReIwm3GF3V 89+BHUXfx8WLrWmKHnNGErZRgqzUXWRpoi6zKuR++OKq8p7RXtUBHlILpAPP366T MZUr8qCuv8G6C77zMmeI2l1WzNUoM46yxvLLy11xkiLfWDggBDjYZ3ODFS+RHXWr egTWWkQc0QQX5TjEMyRQjbuPnySJGTwdxjr/3wPAngjWTVKExsBG8klUCiw1WrX/ d/n3wrDQwm1vqzmpFqRRMlBjo5jUM2yg0UOaYP5DnWASA/b9tBRgvlo1FTn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaVJfMb2TOD1fKuf2/Fb3ZEU3ZYwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkr5oyWa+WHa5ZY2RJytJaUtmR2tFQdtvPq i+7UJXm3AYJgoa3NRdI2s+hj7/KQGrZHWiKssTpfTesBAu2oBLOmK3n+VQaOI5DT BLzG9MecLXp90DCSssJdSWOxdPXCWjmMqzJ4L5FwB+7cj/dlFyhs1vONviH491QB I0g64z7BCx9yIFy9Exgr4g33Iee/zpjrEAuZLGKvdaG+RyWAlbPw8XGQWFjZHwX0 wTKEiZMhjW+2PFA6Qksd7bWg7MBFLMNeuPMcqNURIebgEjV4wRViFBucNOxx5Hy1 WVgrAlPaYl7VgfmkGWx82OhNJE2hoSlZYFDeiFjgOss18zv+XZY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:38:45 2026 by rpki-client