$ rpki-client -vvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: CLEXVRLXhoD/G2Od4VmiSTrxa6pymJfqp4slNVh7/Lc= Subject key identifier: 99:18:00:CA:C0:BF:A8:94:F6:3C:2C:2F:BF:61:F3:0A:19:CA:70:84 Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 1B743396FE00E75A007C5C296D2AA6492394E290 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:48:31 +0000 Manifest this update: Mon 20 Jul 2026 17:43:31 +0000 Manifest next update: Tue 21 Jul 2026 18:59:31 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 3: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: QZXNtCWtpe63+3ir2bSshgG4A1v2FreEftfx6iyvroY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:74:33:96:fe:00:e7:5a:00:7c:5c:29:6d:2a:a6:49:23:94:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Jul 20 17:43:31 2026 GMT Not After : Jul 21 18:59:31 2026 GMT Subject: CN=991800CAC0BFA894F63C2C2FBF61F30A19CA7084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:7b:71:bf:81:af:cd:94:09:f9:fb:6e:f7: c4:ef:47:a2:bd:bc:cd:22:27:8c:34:4e:f8:e2:53: df:4c:50:06:3b:eb:b9:b6:b4:4f:b2:49:dc:e3:d1: af:0e:9c:a3:f0:16:42:75:70:21:c2:12:e9:a6:88: a1:90:71:d5:1b:37:74:13:f6:ee:6a:1d:f3:96:31: 43:fb:fa:e1:98:27:a8:06:a8:ab:8e:fa:c5:1b:ff: 79:0b:ea:fc:b6:28:12:f9:33:3c:f5:21:33:73:41: f6:99:2b:55:87:a4:45:47:e3:fa:1a:e3:56:fd:6c: 3e:d3:ef:9b:17:9c:6f:2d:38:ac:61:99:df:8f:74: 71:9e:4b:9b:a2:0d:0f:59:bf:17:52:73:e7:1d:55: dc:dc:b5:d8:13:d7:e7:1b:eb:bd:8e:b9:03:18:49: 36:5c:63:e7:54:6e:9a:d0:7b:56:a4:fc:fd:e8:02: c3:b2:40:26:3c:18:81:7a:8d:ea:02:f3:b3:ea:4e: 9e:d8:d7:45:ac:38:66:a4:1d:98:31:09:a7:d6:c9: 09:6a:68:1d:b5:e9:37:9d:d9:b7:0a:90:0a:95:76: cc:f0:b8:db:63:a8:00:eb:e2:ed:ca:1b:85:f0:cd: ff:bf:52:cf:90:21:f0:05:b0:02:c8:a6:c2:0d:63: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:00:CA:C0:BF:A8:94:F6:3C:2C:2F:BF:61:F3:0A:19:CA:70:84 X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2a:fc:15:fc:79:d9:ba:03:e2:89:e1:c1:a0:7b:1d:b8:32: 3c:77:31:60:5f:38:cd:26:33:9c:ef:e2:93:5e:20:67:a8:4b: 9f:e6:71:4e:a5:22:c1:13:d7:05:8e:9e:1b:7a:98:6e:db:65: dd:1d:af:b8:f9:85:93:f6:bb:20:6b:02:52:a4:b1:e2:06:39: 04:56:f8:26:ee:d4:0e:4c:20:ad:9a:fd:43:8c:16:60:5d:d1: 66:90:10:08:e6:b5:75:a8:42:6c:4c:ed:2e:cc:94:ee:f6:ba: 36:07:ba:f2:f8:06:f7:63:c8:9c:1a:0d:91:03:95:c2:cc:1f: d2:28:96:2d:39:6f:3b:97:6a:ec:42:ba:1e:bb:c8:89:f7:8c: d9:d8:9b:1f:74:ac:eb:34:ec:4c:50:56:79:22:b2:db:0c:b3: 7c:42:b2:85:63:f8:33:c3:b4:11:74:64:e7:6a:75:20:27:b7: 84:12:a3:44:91:58:3e:98:e4:6c:1f:8b:5d:0c:51:e9:bc:0b: 5d:fc:00:60:c9:8e:af:54:3a:26:49:f9:e0:b5:cc:8a:2e:54: 2e:0b:52:8a:89:98:d2:33:9e:63:47:49:42:69:42:d5:47:a5: 0d:a4:56:08:1e:91:cb:58:90:6e:d9:0c:01:1d:05:88:24:ea: 1a:43:51:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3Qzlv4A51oAfFwpbSqmSSOU4pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA3MjAxNzQzMzFaFw0yNjA3MjExODU5MzFaMDMxMTAvBgNV BAMTKDk5MTgwMENBQzBCRkE4OTRGNjNDMkMyRkJGNjFGMzBBMTlDQTcwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRXtxv4GvzZQJ+ftu98TvR6K9 vM0iJ4w0TvjiU99MUAY767m2tE+ySdzj0a8OnKPwFkJ1cCHCEummiKGQcdUbN3QT 9u5qHfOWMUP7+uGYJ6gGqKuO+sUb/3kL6vy2KBL5Mzz1ITNzQfaZK1WHpEVH4/oa 41b9bD7T75sXnG8tOKxhmd+PdHGeS5uiDQ9ZvxdSc+cdVdzctdgT1+cb672OuQMY STZcY+dUbprQe1ak/P3oAsOyQCY8GIF6jeoC87PqTp7Y10WsOGakHZgxCafWyQlq aB216Ted2bcKkAqVdszwuNtjqADr4u3KG4Xwzf+/Us+QIfAFsALIpsINY0GBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRgAysC/qJT2PCwvv2HzChnKcIQwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwq/BX8edm6A+KJ4cGgex24Mjx3MWBfOM0m M5zv4pNeIGeoS5/mcU6lIsET1wWOnht6mG7bZd0dr7j5hZP2uyBrAlKkseIGOQRW +Cbu1A5MIK2a/UOMFmBd0WaQEAjmtXWoQmxM7S7MlO72ujYHuvL4BvdjyJwaDZED lcLMH9Ioli05bzuXauxCuh67yIn3jNnYmx90rOs07ExQVnkistsMs3xCsoVj+DPD tBF0ZOdqdSAnt4QSo0SRWD6Y5Gwfi10MUem8C138AGDJjq9UOiZJ+eC1zIouVC4L UoqJmNIznmNHSUJpQtVHpQ2kVggekctYkG7ZDAEdBYgk6hpDUUA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:08:03 2026 by rpki-client