$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: 3h5fEetMQJkJv4h//Bfi5nHk97GLRqO0R4KbgEEp4c0= Subject key identifier: BA:96:A2:E4:8F:6B:E0:2A:30:0F:EB:EF:D9:EF:23:78:C8:F9:0D:63 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 6C9B59E9BF0D6B87E35673D00027CFD39616C189 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 54 Signing time: Sat 04 Jul 2026 03:16:38 +0000 Manifest this update: Sat 04 Jul 2026 03:11:38 +0000 Manifest next update: Sun 05 Jul 2026 03:18:38 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) 3: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: 9kBkKWXzbgQ9mXYi3cNDqLwkLBfTE1IQpXQMafDIkKM=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 03:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:59:e9:bf:0d:6b:87:e3:56:73:d0:00:27:cf:d3:96:16:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Jul 4 03:11:38 2026 GMT Not After : Jul 5 03:18:38 2026 GMT Subject: CN=BA96A2E48F6BE02A300FEBEFD9EF2378C8F90D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:79:da:22:59:60:9c:27:0c:af:d8:49:2b: f9:82:53:ea:88:10:eb:87:d4:0d:d9:ce:97:1a:e8: 14:c1:8c:61:16:35:da:17:c7:2d:b8:bb:d5:c7:da: 1b:30:7a:3a:f5:f7:79:71:ec:c1:77:06:0a:a2:cf: d6:b8:47:23:b8:ef:c0:44:04:7a:cd:08:87:91:6c: ea:c7:29:05:65:7e:5a:e6:b5:98:ec:2d:2f:f9:ed: 09:2a:e9:58:f5:9b:d1:69:4f:91:e5:30:25:0f:69: a9:70:ef:aa:ac:02:4f:b8:99:15:1d:b3:79:31:ad: cb:ed:0b:14:e2:6f:ed:5b:34:be:d2:fb:b1:5d:fd: 80:1f:21:03:21:73:e1:16:c3:b7:34:64:4a:f9:19: 7f:85:a3:17:16:72:07:0b:77:a4:02:53:26:2a:1e: f1:3f:cc:a8:70:96:a6:2e:74:10:ed:0f:18:3d:43: 85:04:0a:30:2b:61:5c:a1:82:e8:0d:95:18:1c:30: e0:ef:3d:97:bf:05:28:be:af:4d:9f:4b:89:e9:cb: 44:b3:8a:e1:b2:ff:ca:4a:d3:9f:79:c4:9f:d4:6c: 25:37:9c:04:ab:7d:c2:ca:af:a0:c0:d1:33:4c:c3: 35:72:e2:7e:47:8b:82:54:de:16:f6:08:fd:3e:55: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:A2:E4:8F:6B:E0:2A:30:0F:EB:EF:D9:EF:23:78:C8:F9:0D:63 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:11:05:c3:84:a6:97:ef:ef:85:ab:90:b7:08:64:ec:9c:6e: a3:f6:bd:4c:29:41:ad:78:c2:65:df:90:65:88:4f:e3:15:58: 59:b4:42:0e:ab:1b:ad:f8:c4:20:b5:8e:d9:7e:76:12:54:5b: 5a:1c:ae:fe:9b:69:84:c3:ab:cf:df:75:1d:7c:c7:86:4d:95: d5:ae:7f:67:8d:21:76:9d:0c:e3:0f:6a:1b:c0:65:f0:33:14: 47:cd:2e:0b:ee:6d:14:36:76:d2:03:3a:bf:5e:f7:6d:fa:48: 4f:62:6e:10:bb:f5:72:cf:1f:f4:f9:3f:d5:56:02:92:18:8b: 3e:a3:cc:d6:fa:31:d9:1e:82:7b:fd:59:22:71:6e:5f:7e:d0: bd:c8:c9:f0:59:72:d4:94:09:ed:10:48:2c:6e:24:3b:21:a5: 1c:62:de:62:1a:d2:b3:b0:5f:54:8b:37:a4:5e:09:be:7a:88: bf:15:87:ca:3d:d0:3f:e3:c9:f8:7e:fe:cb:71:f6:a5:fd:24: 6f:e6:a3:96:f6:d0:0e:c6:ae:bb:15:ec:a6:e6:7c:58:2c:ec: e8:50:05:f4:9c:55:33:95:56:e1:e1:b3:56:d9:7a:3b:f2:5e: 4a:6a:2a:7e:b5:a8:a1:bc:0e:b8:2d:95:e0:bd:41:cd:bc:2a: f4:a7:da:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJtZ6b8Na4fjVnPQACfP05YWwYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA3MDQwMzExMzhaFw0yNjA3MDUwMzE4MzhaMDMxMTAvBgNV BAMTKEJBOTZBMkU0OEY2QkUwMkEzMDBGRUJFRkQ5RUYyMzc4QzhGOTBENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz3naIllgnCcMr9hJK/mCU+qI EOuH1A3Zzpca6BTBjGEWNdoXxy24u9XH2hswejr193lx7MF3Bgqiz9a4RyO478BE BHrNCIeRbOrHKQVlflrmtZjsLS/57Qkq6Vj1m9FpT5HlMCUPaalw76qsAk+4mRUd s3kxrcvtCxTib+1bNL7S+7Fd/YAfIQMhc+EWw7c0ZEr5GX+FoxcWcgcLd6QCUyYq HvE/zKhwlqYudBDtDxg9Q4UECjArYVyhgugNlRgcMODvPZe/BSi+r02fS4npy0Sz iuGy/8pK0595xJ/UbCU3nASrfcLKr6DA0TNMwzVy4n5Hi4JU3hb2CP0+VdZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupai5I9r4CowD+vv2e8jeMj5DWMwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsRBcOEppfv74WrkLcIZOycbqP2vUwpQa14 wmXfkGWIT+MVWFm0Qg6rG634xCC1jtl+dhJUW1ocrv6baYTDq8/fdR18x4ZNldWu f2eNIXadDOMPahvAZfAzFEfNLgvubRQ2dtIDOr9e9236SE9ibhC79XLPH/T5P9VW ApIYiz6jzNb6Mdkegnv9WSJxbl9+0L3IyfBZctSUCe0QSCxuJDshpRxi3mIa0rOw X1SLN6ReCb56iL8Vh8o90D/jyfh+/stx9qX9JG/mo5b20A7GrrsV7KbmfFgs7OhQ BfScVTOVVuHhs1bZejvyXkpqKn61qKG8DrgtleC9Qc28KvSn2h4= -----END CERTIFICATE-----Generated at Sat Jul 4 11:19:40 2026 by rpki-client