$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json) Hash identifier: QeyWTlu/uFKPfgLU/PRqOmIJhGQP87BRXEXOWQ1q3gE= Subject key identifier: 85:40:7B:71:16:77:E1:A9:B2:8B:BC:64:71:4B:D9:E2:66:52:FE:3E Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Certificate serial: 0E32B015E6248EF70B40D259C56896D1495388F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:58:26 +0000 Manifest this update: Thu 17 Sep 2026 03:53:26 +0000 Manifest next update: Fri 18 Sep 2026 07:13:26 +0000 Files and hashes: 1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=) 2: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: 8PffMYADEaitQeoeVbNHw/uo7rIs8DsqKMj0IjYzDAk=) 3: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:b0:15:e6:24:8e:f7:0b:40:d2:59:c5:68:96:d1:49:53:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Validity Not Before: Sep 17 03:53:26 2026 GMT Not After : Sep 18 07:13:26 2026 GMT Subject: CN=85407B711677E1A9B28BBC64714BD9E26652FE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:52:9f:01:df:cc:1a:10:f4:7c:cf:45:53: 5d:4d:91:a4:56:12:76:d9:2f:49:ad:22:84:52:4b: d0:8e:33:c7:35:f0:c2:82:9c:9e:29:05:8b:1e:e9: 63:03:2b:cd:14:7b:e3:fc:a7:fc:6b:ca:cf:29:b8: fe:aa:7a:f7:20:a0:d6:6c:bf:8c:76:59:ab:b4:b2: 32:b1:f9:ad:7f:f8:73:55:52:1f:47:1d:bf:fc:2f: a4:85:2c:b8:e7:5d:4d:c0:4a:ce:4f:59:3f:5c:2c: c5:b2:ac:21:6d:ea:6b:6d:7d:db:77:47:56:30:71: 7c:83:18:dc:07:bf:a9:dd:c2:0b:72:e7:54:67:ab: cc:cb:cd:95:96:29:4d:04:5e:8a:34:16:87:bb:17: ea:df:26:1c:28:ca:43:79:3b:e2:f0:5b:18:c4:48: 03:ba:e4:c8:58:a3:49:98:d2:89:93:ed:4c:85:f4: df:53:e1:67:65:50:ad:6b:43:55:ea:7a:35:70:22: 65:0a:1b:dc:d3:db:b9:da:92:73:d7:fa:74:d6:45: 4f:59:89:e2:31:28:be:f4:ed:81:a6:72:65:fe:01: 38:13:81:8b:fd:aa:a5:9f:c0:ac:ee:20:a6:8c:29: c7:e6:1c:29:4b:f3:8f:d7:cf:73:be:1a:ba:a4:03: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:40:7B:71:16:77:E1:A9:B2:8B:BC:64:71:4B:D9:E2:66:52:FE:3E X509v3 Authority Key Identifier: keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3e:2d:68:06:0c:7c:db:f2:fd:95:8f:be:f1:f8:9b:fc:9e: 0c:f9:59:95:e1:49:51:4d:5d:06:68:43:09:d7:2d:af:0b:55: 69:1e:e6:3d:9f:e4:60:0f:87:61:d4:b7:4a:5e:b6:d3:d6:83: 4f:40:89:6f:65:f9:8a:72:f7:01:16:d6:8c:76:69:58:e1:05: 9f:a3:f6:a0:73:ef:b3:a7:f2:0b:3a:d4:bd:c3:b4:b8:0e:26: 1c:96:74:b3:fb:39:0f:f5:24:f9:31:e3:52:08:bb:33:38:19: c2:6d:68:08:be:3b:c8:ea:c3:2c:14:dc:92:8b:09:a9:13:73: 4a:21:6f:62:be:8b:aa:e7:20:6a:a9:0f:9f:34:45:74:bc:fe: 30:33:07:ea:87:65:e2:00:65:54:a2:25:fc:28:7f:dc:70:cc: 72:bb:87:32:fc:d1:78:aa:15:a0:34:d3:de:c8:d7:e1:27:f4: 1a:07:2c:6f:6f:05:f7:52:98:07:f4:32:16:d8:0b:40:4d:c6: b7:82:d1:e2:14:24:e1:ed:3b:f0:45:92:17:a2:55:f6:fc:08: 91:25:59:e7:d2:dc:4e:02:d7:ef:06:ab:78:38:b5:0d:d4:70: eb:74:2f:a2:96:12:4e:34:2e:26:fc:88:86:8f:55:ce:32:23: f1:02:b1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjKwFeYkjvcLQNJZxWiW0UlTiPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3 RDQxOTc4MzAeFw0yNjA5MTcwMzUzMjZaFw0yNjA5MTgwNzEzMjZaMDMxMTAvBgNV BAMTKDg1NDA3QjcxMTY3N0UxQTlCMjhCQkM2NDcxNEJEOUUyNjY1MkZFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGlKfAd/MGhD0fM9FU11NkaRW EnbZL0mtIoRSS9COM8c18MKCnJ4pBYse6WMDK80Ue+P8p/xrys8puP6qevcgoNZs v4x2Wau0sjKx+a1/+HNVUh9HHb/8L6SFLLjnXU3ASs5PWT9cLMWyrCFt6mttfdt3 R1YwcXyDGNwHv6ndwgty51Rnq8zLzZWWKU0EXoo0Foe7F+rfJhwoykN5O+LwWxjE SAO65MhYo0mY0omT7UyF9N9T4WdlUK1rQ1XqejVwImUKG9zT27naknPX+nTWRU9Z ieIxKL707YGmcmX+ATgTgYv9qqWfwKzuIKaMKcfmHClL84/Xz3O+GrqkA8h1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUB7cRZ34amyi7xkcUvZ4mZS/j4wHwYDVR0j BBgwFoAUDM+Ujz2izAjwYt/LV8oHBn1Bl4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZmOGY0YWItMWFiOC00ODk0LWI3NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYz REEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3RDQxOTc4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NGOTQ4RjNEQTJDQzA4RjA2MkRGQ0I1N0NBMDcwNjdENDE5 NzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3 MDY3RDQxOTc4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGY+LWgGDHzb8v2Vj77x+Jv8ngz5WZXhSVFN XQZoQwnXLa8LVWke5j2f5GAPh2HUt0pettPWg09AiW9l+Ypy9wEW1ox2aVjhBZ+j 9qBz77On8gs61L3DtLgOJhyWdLP7OQ/1JPkx41IIuzM4GcJtaAi+O8jqwywU3JKL CakTc0ohb2K+i6rnIGqpD580RXS8/jAzB+qHZeIAZVSiJfwof9xwzHK7hzL80Xiq FaA0097I1+En9BoHLG9vBfdSmAf0MhbYC0BNxreC0eIUJOHtO/BFkheiVfb8CJEl WefS3E4C1+8Gq3g4tQ3UcOt0L6KWEk40Lib8iIaPVc4yI/ECsVs= -----END CERTIFICATE-----Generated at Thu Sep 17 08:27:57 2026 by rpki-client