$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: azGJZHNrZE9Q0iKF/tfXZYsHsRGtjSJ0TGyFqxuKHtA= Subject key identifier: 96:24:D8:F2:07:88:76:DD:40:9C:81:8C:0F:46:F0:5F:93:02:34:F5 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 0BB38DAB56FB30B8BEED925E0F5FFB059E9996A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 23:47:10 +0000 Manifest this update: Fri 17 Jul 2026 23:42:10 +0000 Manifest next update: Sun 19 Jul 2026 02:29:10 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: GOqbuoEWbSl5v8xeOPB/yMZ9+zJSk/8h8vTKOQxUN7M=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b3:8d:ab:56:fb:30:b8:be:ed:92:5e:0f:5f:fb:05:9e:99:96:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Jul 17 23:42:10 2026 GMT Not After : Jul 19 02:29:10 2026 GMT Subject: CN=9624D8F2078876DD409C818C0F46F05F930234F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:d8:80:88:eb:64:e7:ca:5d:f7:dc:bf:55: 2c:16:3e:69:84:44:3e:4d:37:6b:41:c7:64:05:70: 8d:19:ae:8c:fa:59:c1:63:d2:64:c3:28:59:58:91: 4f:f9:c4:d2:ca:1c:cc:f2:b3:23:24:b4:46:ee:b0: 64:55:0b:e5:2e:64:db:67:c2:a1:dd:75:28:dc:4b: aa:11:11:fb:b3:c6:5a:2c:13:87:66:46:b8:8c:ae: 5f:4e:e5:b9:a7:09:25:fd:85:dc:f0:5f:5d:50:61: 46:d6:97:a9:37:5f:bc:37:04:92:8b:66:cc:75:35: 2a:59:d9:bc:e2:3b:eb:00:b7:ce:ba:d6:45:cc:f1: f7:fc:95:18:c7:0a:ae:d0:d3:93:42:01:35:35:47: 3f:f7:e2:4f:96:b2:61:f6:a8:8d:a2:be:34:b2:3f: ca:04:a8:3b:aa:3f:f3:9c:8e:12:fb:8f:b4:04:aa: b6:9a:5b:d5:a4:06:dd:a4:ed:f8:53:69:66:b4:c7: 2d:4d:47:f7:0e:76:50:73:f8:8a:24:2b:c0:53:1c: fa:18:20:a6:de:e8:57:49:a9:db:41:7b:c5:32:d6: a4:5e:ce:f3:d6:29:fd:a3:5e:de:c1:14:82:a5:55: 6e:3e:0f:c3:d7:dd:67:f1:5f:95:16:d1:d9:61:e6: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:24:D8:F2:07:88:76:DD:40:9C:81:8C:0F:46:F0:5F:93:02:34:F5 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:a1:59:cb:91:a6:7d:63:a7:e4:d1:a3:65:70:0f:74:f1:ba: a0:cd:21:fe:78:1b:90:5c:01:d4:90:9d:bc:89:05:4b:23:82: 5d:ba:f4:4f:13:ed:2c:6a:20:6b:de:bf:86:ab:eb:25:99:fe: 19:c3:9d:2e:a0:f3:cb:b1:02:0c:82:be:1d:b1:41:03:b1:84: 3a:71:40:6a:d5:56:3e:48:64:a2:f0:d7:4e:a0:4e:97:22:ab: 51:70:d8:87:b6:61:f9:8b:be:4f:8a:8a:3b:dd:3f:cc:66:23: 67:1b:ba:5f:bc:fe:c8:d4:dd:d3:5a:b5:fb:3c:37:5c:dd:86: 4d:81:a3:84:54:f3:2a:07:15:2e:28:4d:10:6d:7a:99:75:81: 18:92:91:41:82:38:f1:a8:63:16:3b:c3:47:a0:47:61:f3:b0: 81:42:83:ce:4e:34:ea:06:67:80:09:2a:ff:cf:f7:59:43:05: 2b:ce:9d:c3:94:02:84:26:64:a5:99:8b:8b:f8:6c:ef:ad:51: 32:d1:4c:22:e1:96:ed:2e:c1:40:18:8c:06:e8:ed:67:0a:fd: 8c:7d:49:98:19:2c:cc:6a:ce:30:2f:cf:e2:e3:ee:b9:39:4f: f3:35:d9:20:d0:66:14:1a:09:8d:49:b9:12:87:9c:d8:0e:87: 92:f7:10:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7ONq1b7MLi+7ZJeD1/7BZ6ZlqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA3MTcyMzQyMTBaFw0yNjA3MTkwMjI5MTBaMDMxMTAvBgNV BAMTKDk2MjREOEYyMDc4ODc2REQ0MDlDODE4QzBGNDZGMDVGOTMwMjM0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBr9iAiOtk58pd99y/VSwWPmmE RD5NN2tBx2QFcI0Zroz6WcFj0mTDKFlYkU/5xNLKHMzysyMktEbusGRVC+UuZNtn wqHddSjcS6oREfuzxlosE4dmRriMrl9O5bmnCSX9hdzwX11QYUbWl6k3X7w3BJKL Zsx1NSpZ2bziO+sAt8661kXM8ff8lRjHCq7Q05NCATU1Rz/34k+WsmH2qI2ivjSy P8oEqDuqP/OcjhL7j7QEqraaW9WkBt2k7fhTaWa0xy1NR/cOdlBz+IokK8BTHPoY IKbe6FdJqdtBe8Uy1qRezvPWKf2jXt7BFIKlVW4+D8PX3WfxX5UW0dlh5iRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUliTY8geIdt1AnIGMD0bwX5MCNPUwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqhWcuRpn1jp+TRo2VwD3TxuqDNIf54G5Bc AdSQnbyJBUsjgl269E8T7SxqIGvev4ar6yWZ/hnDnS6g88uxAgyCvh2xQQOxhDpx QGrVVj5IZKLw106gTpciq1Fw2Ie2YfmLvk+KijvdP8xmI2cbul+8/sjU3dNatfs8 N1zdhk2Bo4RU8yoHFS4oTRBtepl1gRiSkUGCOPGoYxY7w0egR2HzsIFCg85ONOoG Z4AJKv/P91lDBSvOncOUAoQmZKWZi4v4bO+tUTLRTCLhlu0uwUAYjAbo7WcK/Yx9 SZgZLMxqzjAvz+Lj7rk5T/M12SDQZhQaCY1JuRKHnNgOh5L3ELc= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:17 2026 by rpki-client