$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: ATzr3AlVfZAnO45Bou1d21BcKS04lwKm5cgmOsyp8xE= Subject key identifier: B7:43:6D:A9:E1:1D:27:91:31:22:66:60:29:07:F7:BF:B9:7D:80:1F Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 0F719462C1948AFCA77BDF1A75FACD7BC4097D36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 04:04:57 +0000 Manifest this update: Tue 02 Jun 2026 03:59:57 +0000 Manifest next update: Wed 03 Jun 2026 07:11:57 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: l695N6+TpFAiMZVY0CPIUcyi34O7o6P0qm6Kb/Cgwlw=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 07:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:71:94:62:c1:94:8a:fc:a7:7b:df:1a:75:fa:cd:7b:c4:09:7d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Jun 2 03:59:57 2026 GMT Not After : Jun 3 07:11:57 2026 GMT Subject: CN=B7436DA9E11D2791312266602907F7BFB97D801F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:5c:15:e8:03:61:66:00:86:8e:7a:aa:c8: 0b:74:5f:6e:81:2d:af:9b:88:a0:78:fb:37:65:36: fd:58:cf:03:d2:b8:14:1d:c9:cc:af:42:06:e1:60: 5c:09:16:e6:6a:44:f3:6d:5d:3d:f9:6d:97:75:e1: 4a:d1:a5:f4:e3:64:22:66:5a:dd:bc:5a:16:a1:23: e1:c0:f0:72:59:d6:86:5c:43:5a:53:e6:32:ae:5c: 44:29:26:09:53:0a:0b:7d:80:4d:78:51:b7:e0:48: d7:6c:c6:b4:36:9e:76:2a:97:77:8d:68:07:79:6f: 69:8c:c7:5b:e1:05:8b:c3:b0:73:ca:88:ea:8e:99: cd:1e:53:3a:3d:1b:0b:82:d7:07:ac:66:af:a2:82: f5:34:b7:5a:cd:7a:14:03:8d:1c:1a:ba:a8:38:3e: 9d:14:0a:d1:31:5a:f8:57:e0:af:8a:2a:c1:d0:a5: ee:f2:d1:6e:b4:d2:9a:bc:bf:15:ac:5a:cb:6a:6d: f6:41:b2:6f:5f:ed:7f:42:35:76:03:e8:e3:7b:f2: 3b:25:2c:c2:8e:ff:1d:dd:2a:f2:d0:30:23:81:44: 65:6b:be:36:f9:a8:b2:8e:ac:54:c5:e0:ca:cc:f0: 9f:15:64:8e:7d:2e:02:a9:6b:52:73:42:bc:88:7c: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:43:6D:A9:E1:1D:27:91:31:22:66:60:29:07:F7:BF:B9:7D:80:1F X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:f4:e7:df:ec:f2:96:6e:2e:87:8e:2e:a4:8e:43:32:6c: e4:8e:49:88:91:09:1c:54:50:ce:ea:d0:93:d4:3d:3b:de:18: 49:eb:6f:46:ff:5a:e3:ae:25:fb:42:e9:0b:d8:f0:2d:7e:bb: ce:d6:fb:2f:86:7c:1f:09:19:44:35:54:aa:8b:c9:4d:87:05: 08:4a:a8:49:fa:1c:01:a9:b3:18:a7:5b:e9:0a:2c:be:f4:3f: 0b:ba:8c:f5:df:25:e8:db:aa:cc:5a:32:bb:f7:2a:3f:1b:66: a7:d9:b6:83:a8:d3:1d:5b:65:68:04:2b:c6:fd:85:57:d0:cd: d3:75:64:76:5f:e2:ed:2f:82:3e:78:e2:65:c8:90:c7:c0:cf: b8:aa:cf:3c:27:41:12:b7:d6:25:fa:32:de:2b:ef:ab:c1:09: 74:b4:84:ff:e3:22:74:4d:35:61:35:11:8b:46:8c:42:f6:32: ee:ec:e1:4e:42:2f:6f:29:b1:2b:30:02:af:1a:09:00:1b:90: 6c:00:d1:d9:25:04:a1:e7:ec:48:5e:6f:64:4e:40:2d:80:ae: 6b:0b:ce:9d:7b:86:be:52:32:cf:91:b3:bc:bf:f5:75:39:0c: c2:df:35:80:58:60:3b:86:7e:c6:27:4e:96:b4:04:20:d2:bc: 41:e8:7a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3GUYsGUivyne98adfrNe8QJfTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA2MDIwMzU5NTdaFw0yNjA2MDMwNzExNTdaMDMxMTAvBgNV BAMTKEI3NDM2REE5RTExRDI3OTEzMTIyNjY2MDI5MDdGN0JGQjk3RDgwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9lwV6ANhZgCGjnqqyAt0X26B La+biKB4+zdlNv1YzwPSuBQdycyvQgbhYFwJFuZqRPNtXT35bZd14UrRpfTjZCJm Wt28WhahI+HA8HJZ1oZcQ1pT5jKuXEQpJglTCgt9gE14UbfgSNdsxrQ2nnYql3eN aAd5b2mMx1vhBYvDsHPKiOqOmc0eUzo9GwuC1wesZq+igvU0t1rNehQDjRwauqg4 Pp0UCtExWvhX4K+KKsHQpe7y0W600pq8vxWsWstqbfZBsm9f7X9CNXYD6ON78jsl LMKO/x3dKvLQMCOBRGVrvjb5qLKOrFTF4MrM8J8VZI59LgKpa1JzQryIfG6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0NtqeEdJ5ExImZgKQf3v7l9gB8wHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCM9Off7PKWbi6Hji6kjkMybOSOSYiRCRxU UM7q0JPUPTveGEnrb0b/WuOuJftC6QvY8C1+u87W+y+GfB8JGUQ1VKqLyU2HBQhK qEn6HAGpsxinW+kKLL70Pwu6jPXfJejbqsxaMrv3Kj8bZqfZtoOo0x1bZWgEK8b9 hVfQzdN1ZHZf4u0vgj544mXIkMfAz7iqzzwnQRK31iX6Mt4r76vBCXS0hP/jInRN NWE1EYtGjEL2Mu7s4U5CL28psSswAq8aCQAbkGwA0dklBKHn7Eheb2ROQC2ArmsL zp17hr5SMs+Rs7y/9XU5DMLfNYBYYDuGfsYnTpa0BCDSvEHoevY= -----END CERTIFICATE-----Generated at Tue Jun 2 21:36:04 2026 by rpki-client