$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: 1nirSwrNDWFrrLQ5xU/CmFV83tEXLyTHw6999CJyp0c= Subject key identifier: 18:64:C0:21:DA:D9:4B:21:85:5C:DB:F5:12:15:2A:1D:72:0B:C6:78 Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 26C98948B86E778ED07A641F0B91DA1DFD448D18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 19:48:45 +0000 Manifest this update: Wed 04 Nov 2026 19:43:45 +0000 Manifest next update: Thu 05 Nov 2026 23:43:45 +0000 Files and hashes: 1: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: 28sWawkOQxhvgFMbRu4p7J16W+SQIAzMBzC4zxh9fmo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c9:89:48:b8:6e:77:8e:d0:7a:64:1f:0b:91:da:1d:fd:44:8d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Nov 4 19:43:45 2026 GMT Not After : Nov 5 23:43:45 2026 GMT Subject: CN=1864C021DAD94B21855CDBF512152A1D720BC678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:09:bb:f3:43:1a:72:12:4a:f2:6c:40:8c: 04:3a:d7:04:f7:32:88:00:64:69:d6:b9:16:61:7d: 3b:85:04:31:f3:ea:b8:de:65:f7:6e:0a:9c:b4:82: 79:fb:2a:1f:08:0d:cc:0d:a5:1b:b3:f0:fc:35:86: 14:09:ef:fb:50:42:21:cf:e3:21:36:7f:2e:4d:10: 28:71:3d:cb:19:e0:f7:95:34:b9:7b:ee:2c:47:e9: 7b:ae:3b:3b:68:48:69:d9:ae:b5:3b:b1:75:da:2a: b7:c7:15:12:98:c3:af:a0:a9:de:bd:36:a8:9e:be: 8f:f7:8f:33:5d:24:5a:42:77:37:2b:7f:43:11:a6: 34:d4:c1:10:74:48:3d:6f:d8:5e:53:9e:6c:24:33: 64:e6:3d:b7:12:10:a6:80:30:09:8a:39:80:0b:21: a2:b7:3a:bb:d1:ec:dc:ca:12:19:7d:19:ab:08:a3: a4:11:2c:4e:58:32:75:eb:32:65:61:5f:47:06:9c: db:c0:11:ef:24:28:47:1e:75:10:f1:18:a7:9e:7b: f8:7d:ce:c7:b9:c3:77:54:50:e8:fc:3d:e8:6e:3e: a4:fc:ec:53:64:a7:b2:83:ef:4f:ab:26:b6:81:20: 48:87:7c:56:39:99:9f:33:ef:9e:26:1b:08:0e:f4: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:64:C0:21:DA:D9:4B:21:85:5C:DB:F5:12:15:2A:1D:72:0B:C6:78 X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1b:0b:99:c6:8c:36:c4:32:41:7a:d6:7b:03:8d:fa:a4:6a: d3:06:21:7e:65:1d:f0:bc:bc:83:35:fc:f7:a5:b5:d7:c0:04: 4a:5b:fe:eb:f6:e8:a1:b9:ed:7a:43:05:9b:69:a3:46:18:dc: 11:b4:83:cc:7d:7e:25:3e:a0:5e:5d:76:20:a3:f6:f7:13:30: f1:8e:f9:9c:b0:c1:71:d6:5d:b3:a9:20:11:7a:d8:0a:2b:19: 8a:4a:1e:b3:dd:24:39:d5:72:30:a2:38:48:45:8d:86:44:6f: 3d:d5:12:b2:f2:79:b2:4f:89:76:ea:b5:f1:d2:ef:27:86:0f: 4d:d2:3d:8d:ff:31:68:ea:52:58:1a:b2:cd:d8:8f:50:1b:36: 8b:e4:71:78:51:70:4f:d2:c4:8b:e1:54:75:80:c7:ac:0e:67: c5:28:02:6d:a5:9d:44:0f:65:70:f1:fc:fd:60:89:f9:e9:ec: 26:ae:7d:63:36:63:02:58:f0:83:31:b8:7c:a5:c3:50:6b:0c: 63:b9:de:1c:67:5e:19:d0:cc:21:47:97:ca:a6:10:a0:a2:30: 32:b2:b5:0c:cc:a2:3d:5d:ba:43:83:8e:55:5f:e1:9e:ba:7d: 70:30:4b:0e:db:ce:1d:ae:5a:8c:70:ea:76:ee:0a:dc:2f:f3: 62:e8:bf:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsmJSLhud47QemQfC5HaHf1EjRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjExMDQxOTQzNDVaFw0yNjExMDUyMzQzNDVaMDMxMTAvBgNV BAMTKDE4NjRDMDIxREFEOTRCMjE4NTVDREJGNTEyMTUyQTFENzIwQkM2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF5wm780MachJK8mxAjAQ61wT3 MogAZGnWuRZhfTuFBDHz6rjeZfduCpy0gnn7Kh8IDcwNpRuz8Pw1hhQJ7/tQQiHP 4yE2fy5NEChxPcsZ4PeVNLl77ixH6XuuOztoSGnZrrU7sXXaKrfHFRKYw6+gqd69 Nqievo/3jzNdJFpCdzcrf0MRpjTUwRB0SD1v2F5TnmwkM2TmPbcSEKaAMAmKOYAL IaK3OrvR7NzKEhl9GasIo6QRLE5YMnXrMmVhX0cGnNvAEe8kKEcedRDxGKeee/h9 zse5w3dUUOj8PehuPqT87FNkp7KD70+rJraBIEiHfFY5mZ8z754mGwgO9OHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGTAIdrZSyGFXNv1EhUqHXILxngwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8bC5nGjDbEMkF61nsDjfqkatMGIX5lHfC8 vIM1/PeltdfABEpb/uv26KG57XpDBZtpo0YY3BG0g8x9fiU+oF5ddiCj9vcTMPGO +ZywwXHWXbOpIBF62AorGYpKHrPdJDnVcjCiOEhFjYZEbz3VErLyebJPiXbqtfHS 7yeGD03SPY3/MWjqUlgass3Yj1AbNovkcXhRcE/SxIvhVHWAx6wOZ8UoAm2lnUQP ZXDx/P1gifnp7CaufWM2YwJY8IMxuHylw1BrDGO53hxnXhnQzCFHl8qmEKCiMDKy tQzMoj1dukODjlVf4Z66fXAwSw7bzh2uWoxw6nbuCtwv82Lovyw= -----END CERTIFICATE-----Generated at Thu Nov 5 02:42:26 2026 by rpki-client