$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: HM0hQFvcSS50lHK6vjQ0drFzKCpZIZghmSD4Yf7nGqE= Subject key identifier: 09:64:EC:79:49:23:0C:FC:A7:E4:E4:8E:EF:A4:66:69:94:28:B4:FE Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 7E9D0EA4D4BF32D5C0BE205C12547FE40C581644 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 02:41:12 +0000 Manifest this update: Thu 03 Sep 2026 02:36:12 +0000 Manifest next update: Fri 04 Sep 2026 06:36:12 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) 2: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: QY2XWsADMYbDDa6SfLwBVwuI9k1Yeb98NGcXrtXb/Wg=) 3: 3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa (hash: 5hNgNzCE1uulr0uDc5RCxjLA0Zo4ik7pC2wAL54DJWs=) 4: 3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa (hash: i09Z8Tx2AGUJCoOM8U7S48IwaKRFx1XbdhDarsrxQWY=) 5: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 6: 3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa (hash: 7OHSfmWI/nR+ShqhwFBj8vsSyoyMS+f+Xt96lod6jAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9d:0e:a4:d4:bf:32:d5:c0:be:20:5c:12:54:7f:e4:0c:58:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Sep 3 02:36:12 2026 GMT Not After : Sep 4 06:36:12 2026 GMT Subject: CN=0964EC7949230CFCA7E4E48EEFA466699428B4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:eb:c5:30:5b:56:d8:1d:f8:dc:f2:eb:c4: c3:a4:5b:a9:38:a8:fc:f4:9b:77:31:cd:23:a4:fc: 7d:4a:ba:6f:cd:91:cd:17:ae:23:b3:0c:44:f4:13: 1c:98:29:b0:b9:f2:86:a9:e1:40:e6:e2:74:92:d0: 04:65:01:a2:04:7f:ff:b5:53:6c:b4:c7:0e:43:a1: 00:aa:b4:a1:d6:bd:f7:8a:1a:ad:af:05:13:91:2e: 2f:b5:b4:42:c5:6f:56:2e:8c:39:38:c2:00:52:65: 0c:99:0e:cd:a8:c0:8d:24:24:e2:9c:39:87:52:3d: 95:d8:b8:12:44:a4:2a:73:67:c7:d1:44:b9:30:42: ae:33:75:fc:ef:62:36:bd:90:bf:19:7f:17:6e:ee: 9b:08:ff:8d:66:0d:8d:76:e7:66:f6:76:16:bb:43: 4c:8f:b4:a5:94:37:7b:b2:e9:12:7f:69:69:57:a3: 4c:5b:03:00:f6:66:d4:95:b2:11:b2:70:50:4d:4d: f1:58:35:a6:89:5c:87:5a:af:f2:e2:19:f5:34:09: b3:72:eb:d3:38:dc:33:ca:d9:4a:0a:32:74:1b:ac: b8:ad:0f:c7:82:f8:45:c7:29:37:b0:60:fc:f9:a9: e5:69:bf:d1:46:f1:6a:95:1f:d8:f8:84:49:67:d4: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:64:EC:79:49:23:0C:FC:A7:E4:E4:8E:EF:A4:66:69:94:28:B4:FE X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a3:3d:9b:29:fe:47:22:3d:89:33:18:b5:2e:26:c3:a7:35: 3c:4b:ee:81:a7:16:3b:ef:ae:67:a9:1b:09:8c:b4:84:0d:bc: 66:87:56:f7:2c:33:15:a1:d3:ea:c3:68:19:20:02:97:3c:10: 4e:31:ec:58:b8:88:19:12:36:c9:93:a9:4d:a5:93:12:57:49: 2e:98:fd:bf:66:6a:d9:38:bf:5b:f4:4f:d4:c4:5b:ec:79:f2: 8a:90:22:6e:b0:6b:22:8e:13:83:9d:14:6c:da:5d:18:3e:20: bd:ff:6f:dd:7e:cb:1a:52:00:8a:ca:8b:08:09:07:ef:e2:37: 06:d0:14:5b:51:42:5e:dd:2f:a2:b8:1a:86:a4:3e:1c:5b:6d: 91:2b:f1:49:4a:0a:ff:b7:15:db:17:7c:8c:52:42:02:9f:2d: 80:6f:13:6c:25:a2:fe:13:21:7f:ce:25:2c:45:1e:fc:25:a8: a3:88:6f:c8:14:f0:99:b2:8a:95:0a:38:46:5b:23:a8:38:43: 8e:03:ac:03:61:25:6c:1b:2f:11:bb:c2:39:6b:6a:a6:4e:d1: 37:10:59:71:9b:02:57:04:82:06:65:9c:cc:dc:0b:a1:62:c6: be:37:5d:ba:14:72:ab:25:ab:8c:e0:e4:de:b3:c5:4a:37:2d: 98:f7:87:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfp0OpNS/MtXAviBcElR/5AxYFkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA5MDMwMjM2MTJaFw0yNjA5MDQwNjM2MTJaMDMxMTAvBgNV BAMTKDA5NjRFQzc5NDkyMzBDRkNBN0U0RTQ4RUVGQTQ2NjY5OTQyOEI0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJ+vFMFtW2B343PLrxMOkW6k4 qPz0m3cxzSOk/H1Kum/Nkc0XriOzDET0ExyYKbC58oap4UDm4nSS0ARlAaIEf/+1 U2y0xw5DoQCqtKHWvfeKGq2vBRORLi+1tELFb1YujDk4wgBSZQyZDs2owI0kJOKc OYdSPZXYuBJEpCpzZ8fRRLkwQq4zdfzvYja9kL8Zfxdu7psI/41mDY1252b2dha7 Q0yPtKWUN3uy6RJ/aWlXo0xbAwD2ZtSVshGycFBNTfFYNaaJXIdar/LiGfU0CbNy 69M43DPK2UoKMnQbrLitD8eC+EXHKTewYPz5qeVpv9FG8WqVH9j4hEln1MDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWTseUkjDPyn5OSO76RmaZQotP4wHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+jPZsp/kciPYkzGLUuJsOnNTxL7oGnFjvv rmepGwmMtIQNvGaHVvcsMxWh0+rDaBkgApc8EE4x7Fi4iBkSNsmTqU2lkxJXSS6Y /b9matk4v1v0T9TEW+x58oqQIm6wayKOE4OdFGzaXRg+IL3/b91+yxpSAIrKiwgJ B+/iNwbQFFtRQl7dL6K4GoakPhxbbZEr8UlKCv+3FdsXfIxSQgKfLYBvE2wlov4T IX/OJSxFHvwlqKOIb8gU8JmyipUKOEZbI6g4Q44DrANhJWwbLxG7wjlraqZO0TcQ WXGbAlcEggZlnMzcC6Fixr43XboUcqslq4zg5N6zxUo3LZj3h+I= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:16 2026 by rpki-client