$ rpki-client -vvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: 3lxf/hI5aRsQPSlvGqnqdzat06TYnaYcyEE5CgHRwtg= Subject key identifier: E6:F4:55:94:58:C5:AD:E5:D0:1F:D4:7F:BC:30:C8:AB:21:93:DE:C1 Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 2B7BA88C1959D6C7791765BD1945C9DC7EC1548E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:35:37 +0000 Manifest this update: Tue 02 Jun 2026 08:30:37 +0000 Manifest next update: Wed 03 Jun 2026 10:40:37 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) 2: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: c5C6BwXQ5YwEbIR4cjORYK4RuO3jevGnBXacJsDG16Y=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7b:a8:8c:19:59:d6:c7:79:17:65:bd:19:45:c9:dc:7e:c1:54:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Jun 2 08:30:37 2026 GMT Not After : Jun 3 10:40:37 2026 GMT Subject: CN=E6F4559458C5ADE5D01FD47FBC30C8AB2193DEC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:7b:49:d2:e3:83:b6:a2:a2:78:b2:7f:4c: 0a:49:86:46:52:d2:ca:19:cc:33:e6:ad:2a:f4:18: 8f:78:88:7e:bd:4e:82:4c:5d:83:fe:d9:db:c4:aa: f7:e9:17:3a:d4:1b:f3:78:8f:76:39:66:8b:4a:2c: 57:c1:a6:7f:65:29:a7:c6:e9:7e:67:74:0c:58:03: 51:7a:63:5c:cc:3f:43:8b:96:d4:f7:18:dd:89:18: aa:a8:34:8b:c2:09:3d:30:50:f4:7e:0d:4b:e0:a9: 77:71:9f:47:10:87:7b:aa:32:14:11:ad:e6:8a:99: 47:9d:ca:12:81:2e:83:8d:69:3d:6c:b1:88:bd:1d: ac:ae:81:fc:e0:79:f0:32:c3:88:42:d3:d4:1f:6c: 95:c9:ee:ae:f4:ff:34:54:a5:b0:59:f0:44:b1:68: e4:24:a0:19:28:08:91:9a:26:e6:b8:d7:f1:1b:31: 0a:1d:df:91:47:6b:48:de:31:19:85:a9:c4:e1:9e: 83:70:fb:42:d3:62:1a:68:96:12:8a:2d:4e:1f:65: 0e:ab:11:5c:61:db:68:7b:27:49:ae:de:d0:8e:cb: 68:94:5d:dd:7a:08:1d:a7:e1:bd:20:ff:78:eb:3e: c6:da:31:63:a9:fd:ea:ab:60:2e:54:4d:cf:0a:44: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:55:94:58:C5:AD:E5:D0:1F:D4:7F:BC:30:C8:AB:21:93:DE:C1 X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:3d:ec:37:91:20:aa:d0:dc:33:b6:15:9f:eb:9d:53:a7: 07:49:c2:d3:90:ae:6f:f6:0e:2f:96:98:4e:1c:49:f9:64:b9: 25:d6:52:76:88:cd:66:10:39:7f:f3:6e:f0:a0:85:63:38:d5: a8:22:2b:16:b9:57:49:8f:6d:c2:04:37:3f:43:e7:d4:ae:fd: b7:c4:8d:77:56:a6:b2:70:eb:75:7b:10:92:4c:f0:40:b7:71: f3:ab:3c:55:d7:02:b4:3a:f7:d1:c6:78:7c:fc:23:e1:1a:bd: 01:6f:92:b0:82:b4:92:99:e2:ac:b2:6c:7d:db:a9:b2:24:59: 02:78:2b:76:a3:42:ad:24:6a:83:75:ad:28:12:1d:35:3f:db: 10:a6:64:ee:6d:8b:0f:8e:34:2c:d5:aa:ef:72:ff:87:0d:56: f0:06:bd:6d:2b:7a:44:cb:7b:e4:c1:ed:4f:e8:1c:a7:d1:13: 93:d1:9c:9b:11:12:ad:1a:f3:f6:58:44:40:53:8b:79:9b:7f: 5b:a7:ad:a7:96:d6:68:31:69:76:99:b7:7e:4e:a3:27:75:43: 93:61:9f:bb:9b:e8:8c:c2:2b:2e:55:a8:52:c4:cb:45:18:79: 17:79:50:e2:87:e6:67:22:e0:52:f2:60:40:4a:6a:74:c8:0b: b6:43:3e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3uojBlZ1sd5F2W9GUXJ3H7BVI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA2MDIwODMwMzdaFw0yNjA2MDMxMDQwMzdaMDMxMTAvBgNV BAMTKEU2RjQ1NTk0NThDNUFERTVEMDFGRDQ3RkJDMzBDOEFCMjE5M0RFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiXtJ0uODtqKieLJ/TApJhkZS 0soZzDPmrSr0GI94iH69ToJMXYP+2dvEqvfpFzrUG/N4j3Y5ZotKLFfBpn9lKafG 6X5ndAxYA1F6Y1zMP0OLltT3GN2JGKqoNIvCCT0wUPR+DUvgqXdxn0cQh3uqMhQR reaKmUedyhKBLoONaT1ssYi9HayugfzgefAyw4hC09QfbJXJ7q70/zRUpbBZ8ESx aOQkoBkoCJGaJua41/EbMQod35FHa0jeMRmFqcThnoNw+0LTYhpolhKKLU4fZQ6r EVxh22h7J0mu3tCOy2iUXd16CB2n4b0g/3jrPsbaMWOp/eqrYC5UTc8KRFwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vRVlFjFreXQH9R/vDDIqyGT3sEwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrVPew3kSCq0NwzthWf651TpwdJwtOQrm/2 Di+WmE4cSflkuSXWUnaIzWYQOX/zbvCghWM41agiKxa5V0mPbcIENz9D59Su/bfE jXdWprJw63V7EJJM8EC3cfOrPFXXArQ699HGeHz8I+EavQFvkrCCtJKZ4qyybH3b qbIkWQJ4K3ajQq0kaoN1rSgSHTU/2xCmZO5tiw+ONCzVqu9y/4cNVvAGvW0rekTL e+TB7U/oHKfRE5PRnJsREq0a8/ZYREBTi3mbf1unraeW1mgxaXaZt35Ooyd1Q5Nh n7ub6IzCKy5VqFLEy0UYeRd5UOKH5mci4FLyYEBKanTIC7ZDPoU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:48 2026 by rpki-client