$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: qdoBLWLdLdXzdt28AKTxwnlt9CIw+tX43Tt+kDw3r4o= Subject key identifier: 0E:E3:C0:E1:72:C5:22:CC:3F:48:D1:C3:9A:63:8F:07:64:E1:38:D1 Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 546EFFC13E35395E85DE7115863B31DB7D23F8DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:35:20 +0000 Manifest this update: Thu 17 Sep 2026 05:30:20 +0000 Manifest next update: Fri 18 Sep 2026 07:32:20 +0000 Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 2: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: wgV2ngQEpurL1yxQEyofN/apWpOKdDVg178786G+d8w=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6e:ff:c1:3e:35:39:5e:85:de:71:15:86:3b:31:db:7d:23:f8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Sep 17 05:30:20 2026 GMT Not After : Sep 18 07:32:20 2026 GMT Subject: CN=0EE3C0E172C522CC3F48D1C39A638F0764E138D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:97:39:76:7c:e2:c0:b3:7a:14:8d:9c:4f: b0:7b:2e:3f:69:39:fe:c6:3e:15:72:7a:6e:d0:52: be:d5:65:ff:d9:25:7c:ec:8e:7a:01:ed:bc:5a:bc: 08:a3:00:0d:db:c9:ae:cc:b2:0a:26:b2:86:07:0a: ae:4d:da:34:e8:0b:a9:01:df:4f:2f:85:8f:f0:38: 67:ee:46:d0:2d:9e:8e:55:7f:d1:53:8b:60:c4:aa: c7:6b:d9:b2:49:a7:0e:54:d8:34:a2:6d:03:b7:c0: 2f:cb:f9:a6:e8:1e:be:00:0f:61:d5:3c:48:96:e5: eb:62:21:74:99:83:58:e9:0e:79:a8:72:dd:43:35: ae:f7:4d:a0:4c:50:9e:bd:45:87:d5:8d:bb:2a:cf: 26:43:3a:c6:92:c7:92:c3:58:7a:fe:4b:50:32:85: 95:4f:85:29:0f:8f:d1:60:a4:7c:d0:a2:a4:13:b0: ab:3c:ad:56:68:f0:1b:9a:97:ac:87:51:94:22:d0: aa:a8:5c:e6:a2:b0:a4:85:d2:a4:d5:25:2a:04:8b: 2f:69:0f:4e:a6:8c:f8:3b:df:ef:3b:20:50:30:cd: 41:f8:fe:03:5a:55:b1:ab:73:48:0e:9d:03:54:9c: f3:55:b4:42:3c:8e:b4:5d:c6:71:cc:b4:82:03:58: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:C0:E1:72:C5:22:CC:3F:48:D1:C3:9A:63:8F:07:64:E1:38:D1 X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:34:55:c5:5f:66:1d:18:f3:aa:d8:d4:2c:60:af:ab:65:e8: ff:ab:db:99:ed:a4:9c:1e:79:22:52:dd:41:ef:db:cb:dd:a3: 09:69:b4:c7:02:f4:05:6a:6c:9d:05:70:de:7f:c0:c6:fb:22: 90:16:53:d7:7f:a4:e4:7c:8f:53:96:a4:10:ab:12:d6:1f:93: 44:bb:5d:aa:21:7a:10:3d:98:5a:aa:0f:0c:9f:19:09:e5:e4: a0:0f:6c:47:4c:60:0a:5f:18:a4:ce:00:e7:12:70:ab:b7:ec: b1:6d:7a:6d:f2:cd:01:0d:b8:41:e8:6f:1c:8f:e5:72:63:a3: 88:61:63:99:44:15:1e:06:70:49:84:8c:e8:9b:25:dd:41:9a: 82:9a:67:0f:ad:b9:47:6d:5c:18:39:19:d2:ee:20:2f:55:1a: 42:32:32:2a:c7:a0:25:8f:58:f0:a6:26:8a:74:0f:00:d6:b6: 6c:0d:c0:6b:89:59:65:34:3b:1d:78:64:79:32:da:5f:60:1e: 54:c9:b8:5c:51:01:c4:15:63:60:13:18:c2:52:f0:80:95:b4: aa:f2:68:cb:8c:bf:09:c6:33:94:cd:ec:f1:1b:e8:9f:6a:d7: 90:14:09:f3:9d:20:e0:d2:38:ba:27:09:06:29:6c:ee:3e:05: 1f:b7:cf:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVG7/wT41OV6F3nEVhjsx230j+NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA5MTcwNTMwMjBaFw0yNjA5MTgwNzMyMjBaMDMxMTAvBgNV BAMTKDBFRTNDMEUxNzJDNTIyQ0MzRjQ4RDFDMzlBNjM4RjA3NjRFMTM4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNW5c5dnziwLN6FI2cT7B7Lj9p Of7GPhVyem7QUr7VZf/ZJXzsjnoB7bxavAijAA3bya7MsgomsoYHCq5N2jToC6kB 308vhY/wOGfuRtAtno5Vf9FTi2DEqsdr2bJJpw5U2DSibQO3wC/L+aboHr4AD2HV PEiW5etiIXSZg1jpDnmoct1DNa73TaBMUJ69RYfVjbsqzyZDOsaSx5LDWHr+S1Ay hZVPhSkPj9FgpHzQoqQTsKs8rVZo8Bual6yHUZQi0KqoXOaisKSF0qTVJSoEiy9p D06mjPg73+87IFAwzUH4/gNaVbGrc0gOnQNUnPNVtEI8jrRdxnHMtIIDWCUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuPA4XLFIsw/SNHDmmOPB2ThONEwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU0VcVfZh0Y86rY1Cxgr6tl6P+r25ntpJwe eSJS3UHv28vdowlptMcC9AVqbJ0FcN5/wMb7IpAWU9d/pOR8j1OWpBCrEtYfk0S7 XaohehA9mFqqDwyfGQnl5KAPbEdMYApfGKTOAOcScKu37LFtem3yzQENuEHobxyP 5XJjo4hhY5lEFR4GcEmEjOibJd1BmoKaZw+tuUdtXBg5GdLuIC9VGkIyMirHoCWP WPCmJop0DwDWtmwNwGuJWWU0Ox14ZHky2l9gHlTJuFxRAcQVY2ATGMJS8ICVtKry aMuMvwnGM5TN7PEb6J9q15AUCfOdIODSOLonCQYpbO4+BR+3zwA= -----END CERTIFICATE-----Generated at Thu Sep 17 08:22:09 2026 by rpki-client