$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json) Hash identifier: bxFVKF/o04mpVOVBHfI1VfVvsT8fLlwERASYi3EYFN0= Subject key identifier: 87:15:C6:6B:35:5A:95:AF:72:22:AE:C4:E5:F1:AE:7B:6C:22:D8:9C Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Certificate serial: 1036F6F467172B0BCCBDE70FBBD92A6E2CB8C359 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 13:35:04 +0000 Manifest this update: Wed 02 Sep 2026 13:30:04 +0000 Manifest next update: Thu 03 Sep 2026 16:48:04 +0000 Files and hashes: 1: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: UOht+5u4dqkr7Oyag8orkLSpTSd8EjFq/qQKb/08XC8=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:36:f6:f4:67:17:2b:0b:cc:bd:e7:0f:bb:d9:2a:6e:2c:b8:c3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Validity Not Before: Sep 2 13:30:04 2026 GMT Not After : Sep 3 16:48:04 2026 GMT Subject: CN=8715C66B355A95AF7222AEC4E5F1AE7B6C22D89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:52:74:41:3e:c0:19:9d:48:1a:92:24:29: c2:28:36:d8:cb:d5:11:57:3b:b3:7a:dd:00:2e:a8: 2e:95:d0:9c:00:6a:11:ff:cc:38:0c:0a:a5:f9:0a: 37:f7:a4:7b:59:1e:28:ef:5a:f6:d5:52:46:d1:93: 08:48:40:03:33:01:33:3b:c5:c9:cb:6a:2d:81:a7: 61:b3:c1:f6:81:e7:3c:5b:ec:50:13:21:10:80:d5: 60:71:4a:bd:0a:c2:2a:12:5c:ab:38:b5:48:77:d2: a6:59:f0:87:cb:6c:20:9e:4b:8e:3e:3a:78:40:55: bc:0a:bc:94:b7:5f:d3:a1:eb:c2:b4:57:99:e4:5d: 71:f9:50:3a:c1:87:8f:fb:75:b6:21:78:de:fd:c5: 92:bd:db:64:4c:9f:35:2b:90:cd:45:32:99:98:24: e4:02:15:97:1e:f6:62:de:37:77:5b:18:5e:ce:c7: 1d:2c:c9:86:9b:0e:42:eb:11:8c:db:7e:50:07:82: 6b:ce:8c:f5:ef:7a:7f:db:9f:cb:18:6d:83:6a:e7: 06:5c:81:2d:61:c9:a7:e7:cd:c6:cb:d1:d3:02:ee: 66:ed:45:11:b9:19:78:71:e4:f1:86:72:41:bc:05: 2a:d4:fe:46:8c:c3:8e:4a:3d:b2:e0:a5:79:84:de: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:C6:6B:35:5A:95:AF:72:22:AE:C4:E5:F1:AE:7B:6C:22:D8:9C X509v3 Authority Key Identifier: keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:40:f9:ac:35:9b:31:8d:f4:40:77:53:e3:58:9f:1e:c7:6f: b5:a8:4f:89:1d:36:25:de:95:c2:d5:9e:b4:3d:20:12:e1:ec: fc:85:fd:3d:65:7b:85:39:ac:1d:f6:71:61:91:32:9a:f6:b4: b5:42:25:36:a6:52:d6:d5:81:a6:d9:1c:39:c2:fd:2a:a2:58: 65:02:07:c5:d2:c3:fc:30:ab:16:57:8d:c0:c2:dd:92:0d:65: 91:e5:88:5a:85:41:5b:d1:db:d0:07:7d:b2:9e:a0:2d:8b:86: 13:09:b1:79:46:87:ad:0b:9a:19:c5:64:d5:d8:19:8d:aa:9c: c1:5a:51:88:c9:ce:1c:e4:93:aa:30:20:9f:5f:cf:ac:bf:e9: b8:31:50:81:8a:59:c5:9e:82:04:3c:6c:52:a3:22:d8:96:b4: 37:af:f6:e7:5f:f3:71:e2:34:88:db:a4:16:e8:df:97:1e:cf: cd:8a:e3:b4:f4:61:30:9f:0b:c2:52:20:51:61:1c:98:b8:ea: b5:7e:8c:23:d8:14:11:90:f3:50:e2:89:88:b8:c8:f9:ca:e7: 6e:75:ab:4c:cc:78:26:06:4e:d1:18:be:61:c9:63:f7:19:dc: 4c:7e:53:31:a5:86:41:24:29:6a:99:2a:12:4b:fd:a0:87:57: d2:fc:3d:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDb29GcXKwvMvecPu9kqbiy4w1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4 MjQ0Q0ZDRDAeFw0yNjA5MDIxMzMwMDRaFw0yNjA5MDMxNjQ4MDRaMDMxMTAvBgNV BAMTKDg3MTVDNjZCMzU1QTk1QUY3MjIyQUVDNEU1RjFBRTdCNkMyMkQ4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KlJ0QT7AGZ1IGpIkKcIoNtjL 1RFXO7N63QAuqC6V0JwAahH/zDgMCqX5Cjf3pHtZHijvWvbVUkbRkwhIQAMzATM7 xcnLai2Bp2GzwfaB5zxb7FATIRCA1WBxSr0KwioSXKs4tUh30qZZ8IfLbCCeS44+ OnhAVbwKvJS3X9Oh68K0V5nkXXH5UDrBh4/7dbYheN79xZK922RMnzUrkM1FMpmY JOQCFZce9mLeN3dbGF7Oxx0syYabDkLrEYzbflAHgmvOjPXven/bn8sYbYNq5wZc gS1hyafnzcbL0dMC7mbtRRG5GXhx5PGGckG8BSrU/kaMw45KPbLgpXmE3sQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxXGazVala9yIq7E5fGue2wi2JwwHwYDVR0j BBgwFoAUzEo7hlMZEqANz7+UiENp9YJEz80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTExZGMtZmY3MS00ZWQ3LWE2OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1 MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4MjQ0Q0ZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DQzRBM0I4NjUzMTkxMkEwMERDRkJGOTQ4ODQzNjlGNTgyNDRD RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5 RjU4MjQ0Q0ZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpA+aw1mzGN9EB3U+NYnx7Hb7WoT4kdNiXe lcLVnrQ9IBLh7PyF/T1le4U5rB32cWGRMpr2tLVCJTamUtbVgabZHDnC/SqiWGUC B8XSw/wwqxZXjcDC3ZINZZHliFqFQVvR29AHfbKeoC2LhhMJsXlGh60LmhnFZNXY GY2qnMFaUYjJzhzkk6owIJ9fz6y/6bgxUIGKWcWeggQ8bFKjItiWtDev9udf83Hi NIjbpBbo35cez82K47T0YTCfC8JSIFFhHJi46rV+jCPYFBGQ81DiiYi4yPnK5251 q0zMeCYGTtEYvmHJY/cZ3Ex+UzGlhkEkKWqZKhJL/aCHV9L8PXY= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:31 2026 by rpki-client