$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: Su1fo/V6O2i2G9wnsMeZFAzPop/6/uzbMV2xtFMHqgE= Subject key identifier: 9A:A4:B0:85:C6:C3:1C:7B:2B:88:C3:13:85:B6:5F:DD:11:E8:E1:D1 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 1DCAA52A8B074E48E4C191FDCB9BCA39EA34D493 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 14 Signing time: Sat 16 May 2026 18:28:24 +0000 Manifest this update: Sat 16 May 2026 18:23:24 +0000 Manifest next update: Sun 17 May 2026 22:20:24 +0000 Files and hashes: 1: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: DC/UKopJ1fF9B6nDFilVon+6EgjtXQklEvmh5ZUzFVs=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 22:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ca:a5:2a:8b:07:4e:48:e4:c1:91:fd:cb:9b:ca:39:ea:34:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: May 16 18:23:24 2026 GMT Not After : May 17 22:20:24 2026 GMT Subject: CN=9AA4B085C6C31C7B2B88C31385B65FDD11E8E1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:8b:ff:c7:07:f0:9c:a0:ba:65:0f:99:33: db:1a:ee:99:0a:72:23:01:a2:28:3f:26:0c:d5:74: 7f:55:f0:ad:21:d0:fd:8d:72:37:62:61:8a:70:98: 52:23:34:c8:74:00:95:c5:ce:bc:24:4b:77:2c:15: 43:59:92:3f:4c:5d:71:ee:bb:b6:26:b5:44:fd:e5: f7:91:ad:cf:0b:b9:b2:ae:3b:3b:34:51:25:00:09: 61:80:e6:82:ba:c2:50:ba:7d:6a:3d:15:3c:08:19: db:1b:d2:d1:07:62:c5:e9:85:21:e5:e4:08:c0:48: c9:70:c9:a3:90:d4:a4:70:9d:a5:b4:28:69:f4:c5: 54:d6:89:a7:d6:7b:19:67:40:e2:bc:51:37:32:fe: 4d:29:09:b8:ca:09:2d:d6:64:1e:05:ef:25:cd:88: 8e:03:c5:9f:a5:08:9f:64:75:81:85:4d:a1:5c:29: 7e:1f:92:ea:b6:f7:50:e5:3c:8a:46:b7:68:b4:9d: d2:9e:54:d7:69:b2:f0:15:29:7e:d3:13:3d:55:42: 77:30:21:c2:22:74:00:c6:a1:28:7e:7b:a8:b2:5f: 68:36:68:6c:af:94:a0:95:90:92:3a:ed:86:96:7f: 5e:91:49:ee:bb:44:72:c7:89:d0:9a:cc:e9:79:40: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A4:B0:85:C6:C3:1C:7B:2B:88:C3:13:85:B6:5F:DD:11:E8:E1:D1 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:57:1a:ec:17:06:88:29:07:73:e3:68:2e:49:70:18:f9: a7:1c:c4:fd:e9:10:35:64:07:49:b6:cd:2a:9c:5f:24:d1:5e: 65:ac:a4:9c:77:9a:94:af:d3:ec:85:f5:da:1c:88:f7:6d:e1: 9a:3b:40:8a:8b:98:03:1f:e0:99:e3:7f:0d:e1:f1:4e:af:a2: 06:87:ff:e9:be:b0:9b:0c:46:e7:e4:8f:ce:da:c9:18:2e:1d: 89:94:c6:27:00:7b:ba:ab:1d:73:6f:89:07:9c:3e:40:78:a6: 36:36:d2:fd:e8:58:fb:b5:9f:a2:b5:57:64:14:a3:70:83:9c: b4:0f:5a:6c:ac:63:fc:9a:61:45:83:ac:c8:8a:c7:bd:30:5a: cd:9c:ee:ea:1e:2c:cc:c2:70:1d:61:fe:fd:6b:22:a2:ac:ab: 1c:2a:fe:2c:6a:5e:47:ae:d0:77:db:ca:fd:49:e6:06:3b:af: 2f:33:fd:63:ff:bd:4c:81:7e:9d:df:38:0a:6c:4e:ba:b5:f9: 61:c5:b3:b3:0b:23:f6:2c:28:eb:22:88:11:99:5d:c0:97:4d: 43:fd:ad:5e:1e:93:04:ef:26:f4:15:f3:6a:bf:cc:87:f2:1c: 41:c9:fb:44:bb:57:ec:01:c7:71:b8:5e:01:6e:a0:e1:a4:c3: f7:9e:ba:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcqlKosHTkjkwZH9y5vKOeo01JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA1MTYxODIzMjRaFw0yNjA1MTcyMjIwMjRaMDMxMTAvBgNV BAMTKDlBQTRCMDg1QzZDMzFDN0IyQjg4QzMxMzg1QjY1RkREMTFFOEUxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZIv/xwfwnKC6ZQ+ZM9sa7pkK ciMBoig/JgzVdH9V8K0h0P2NcjdiYYpwmFIjNMh0AJXFzrwkS3csFUNZkj9MXXHu u7YmtUT95feRrc8LubKuOzs0USUACWGA5oK6wlC6fWo9FTwIGdsb0tEHYsXphSHl 5AjASMlwyaOQ1KRwnaW0KGn0xVTWiafWexlnQOK8UTcy/k0pCbjKCS3WZB4F7yXN iI4DxZ+lCJ9kdYGFTaFcKX4fkuq291DlPIpGt2i0ndKeVNdpsvAVKX7TEz1VQncw IcIidADGoSh+e6iyX2g2aGyvlKCVkJI67YaWf16RSe67RHLHidCazOl5QH+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqSwhcbDHHsriMMThbZf3RHo4dEwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1LVxrsFwaIKQdz42guSXAY+accxP3pEDVk B0m2zSqcXyTRXmWspJx3mpSv0+yF9dociPdt4Zo7QIqLmAMf4Jnjfw3h8U6vogaH /+m+sJsMRufkj87ayRguHYmUxicAe7qrHXNviQecPkB4pjY20v3oWPu1n6K1V2QU o3CDnLQPWmysY/yaYUWDrMiKx70wWs2c7uoeLMzCcB1h/v1rIqKsqxwq/ixqXkeu 0Hfbyv1J5gY7ry8z/WP/vUyBfp3fOApsTrq1+WHFs7MLI/YsKOsiiBGZXcCXTUP9 rV4ekwTvJvQV82q/zIfyHEHJ+0S7V+wBx3G4XgFuoOGkw/eeui4= -----END CERTIFICATE-----Generated at Sun May 17 10:55:36 2026 by rpki-client