$ rpki-client -vvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json) Hash identifier: lKkkm84l4OtZngqYlqI8BtRtCJfWDBq3lDA9D+5KSOQ= Subject key identifier: 5E:80:F4:13:6E:2C:BC:DF:B4:A9:2F:4A:58:EB:9E:61:97:03:58:C0 Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Certificate serial: 7D9DBA1698AC2003E80EEE5BC5940ACA2EBBF41D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:06:08 +0000 Manifest this update: Tue 02 Jun 2026 13:01:08 +0000 Manifest next update: Wed 03 Jun 2026 14:41:08 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=) 2: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: BAEmyJp/jDQzCgMs8duJ4zkucZLA3tS5MUQklSahwCg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9d:ba:16:98:ac:20:03:e8:0e:ee:5b:c5:94:0a:ca:2e:bb:f4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Validity Not Before: Jun 2 13:01:08 2026 GMT Not After : Jun 3 14:41:08 2026 GMT Subject: CN=5E80F4136E2CBCDFB4A92F4A58EB9E61970358C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:fc:b2:1b:0e:d9:62:44:8c:55:22:59:50: cc:07:96:fd:e8:b2:d4:76:e3:31:84:cb:7c:32:a6: 68:63:3a:4d:87:e2:43:71:b3:12:da:b6:41:f4:8e: 64:42:00:37:c4:0b:5e:7f:e5:97:cb:44:18:82:fb: ab:bc:1f:9c:c3:6a:c3:53:82:ef:18:46:6b:6c:8b: 6d:8b:76:bb:19:0a:48:dc:cc:8a:21:df:93:0b:95: 49:48:fe:60:6a:bb:d6:83:88:a6:36:03:42:49:fb: 42:a7:27:9b:6c:6e:d6:3c:69:e0:d3:de:e2:96:ec: 88:d3:4a:f5:58:75:bd:a9:53:ec:a6:c2:15:a6:03: 6d:0d:9b:b7:76:a1:ea:c6:dd:68:09:04:42:58:12: 55:67:71:c0:09:2a:59:f0:3c:25:83:97:4c:a5:9b: 6d:4c:34:f1:dc:61:96:32:bb:ef:f0:f6:db:f2:04: 53:73:dc:e7:a4:a9:d1:cc:00:bd:a0:0a:8e:01:36: 28:be:e2:ac:23:36:8c:30:b1:11:6e:a3:6f:44:8f: 7e:ad:aa:f8:2d:5a:be:d1:ae:c1:29:6d:98:86:2c: 4e:82:6a:bb:ac:16:9b:57:33:39:cb:d6:1d:1e:95: 77:04:ef:2e:16:bf:01:3f:36:ba:3c:cb:7c:cb:5e: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:F4:13:6E:2C:BC:DF:B4:A9:2F:4A:58:EB:9E:61:97:03:58:C0 X509v3 Authority Key Identifier: keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:aa:fb:6a:b0:da:20:eb:3f:a3:38:34:95:fd:34:f8:d5:27: b7:cc:71:b1:0c:ac:2a:42:6c:54:a0:35:f9:3e:e3:60:26:6e: 46:b9:39:60:7a:7f:a5:50:35:55:be:52:45:ab:a7:84:83:6b: 24:f1:2f:2e:11:d8:b7:17:06:6a:c1:65:b6:d1:8e:06:34:4e: 04:81:5a:26:e9:b5:70:90:74:6a:1c:0a:f6:01:38:17:86:94: 7b:dd:93:5a:0c:74:8d:89:62:be:70:3f:dc:b3:89:5c:16:fd: 91:c7:fb:d5:39:29:0b:ad:5a:e4:18:91:a2:ae:8c:e5:0f:22: 79:0a:bf:97:b4:76:85:25:81:10:01:2b:01:9f:9a:7a:bb:2e: 80:0d:0a:52:96:27:8c:f2:87:dd:64:96:d0:72:a8:52:b5:e5: 79:c7:fb:a4:0c:ef:c8:77:c9:f0:f1:59:f5:7f:d8:e4:54:db: 97:0a:1a:49:5e:6a:15:eb:4e:a0:d6:78:fd:c0:8f:47:7f:a9: 70:91:cd:a7:39:50:65:36:94:d1:9f:71:24:45:d4:40:5c:b0: 51:73:3e:32:91:f6:26:10:c2:ea:27:6a:35:6e:d6:89:f9:ad: fd:ce:0b:32:51:24:85:e9:97:ef:a3:6f:0c:e6:55:6f:16:ca: 02:2f:4f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZ26FpisIAPoDu5bxZQKyi679B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4 MjQ0Q0ZDRDAeFw0yNjA2MDIxMzAxMDhaFw0yNjA2MDMxNDQxMDhaMDMxMTAvBgNV BAMTKDVFODBGNDEzNkUyQ0JDREZCNEE5MkY0QTU4RUI5RTYxOTcwMzU4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsvyyGw7ZYkSMVSJZUMwHlv3o stR24zGEy3wypmhjOk2H4kNxsxLatkH0jmRCADfEC15/5ZfLRBiC+6u8H5zDasNT gu8YRmtsi22LdrsZCkjczIoh35MLlUlI/mBqu9aDiKY2A0JJ+0KnJ5tsbtY8aeDT 3uKW7IjTSvVYdb2pU+ymwhWmA20Nm7d2oerG3WgJBEJYElVnccAJKlnwPCWDl0yl m21MNPHcYZYyu+/w9tvyBFNz3OekqdHMAL2gCo4BNii+4qwjNowwsRFuo29Ej36t qvgtWr7RrsEpbZiGLE6CarusFptXMznL1h0elXcE7y4WvwE/Nro8y3zLXrmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoD0E24svN+0qS9KWOueYZcDWMAwHwYDVR0j BBgwFoAUzEo7hlMZEqANz7+UiENp9YJEz80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTExZGMtZmY3MS00ZWQ3LWE2OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1 MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4MjQ0Q0ZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DQzRBM0I4NjUzMTkxMkEwMERDRkJGOTQ4ODQzNjlGNTgyNDRD RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5 RjU4MjQ0Q0ZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWq+2qw2iDrP6M4NJX9NPjVJ7fMcbEMrCpC bFSgNfk+42Ambka5OWB6f6VQNVW+UkWrp4SDayTxLy4R2LcXBmrBZbbRjgY0TgSB WibptXCQdGocCvYBOBeGlHvdk1oMdI2JYr5wP9yziVwW/ZHH+9U5KQutWuQYkaKu jOUPInkKv5e0doUlgRABKwGfmnq7LoANClKWJ4zyh91kltByqFK15XnH+6QM78h3 yfDxWfV/2ORU25cKGkleahXrTqDWeP3Aj0d/qXCRzac5UGU2lNGfcSRF1EBcsFFz PjKR9iYQwuonajVu1on5rf3OCzJRJIXpl++jbwzmVW8WygIvT4I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:07 2026 by rpki-client