$ rpki-client -vvvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: 3gY8GdU7cGYEWNPB5deXyrwsmVMSabLthTl8xpNawK4= Subject key identifier: C0:E3:35:A5:BA:33:C2:8D:3E:8C:B4:CB:8C:8F:A1:83:41:7D:C5:E2 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 31E1B4C002B47DC7C0263F94F1087CDE46675A05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: A2 Signing time: Tue 01 Sep 2026 01:05:33 +0000 Manifest this update: Tue 01 Sep 2026 01:00:33 +0000 Manifest next update: Wed 02 Sep 2026 01:18:33 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) 2: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: +K0n+ScbaneZoinaATSMvVbxGxi8Qv16cKJXrj/2cfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 01:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e1:b4:c0:02:b4:7d:c7:c0:26:3f:94:f1:08:7c:de:46:67:5a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Sep 1 01:00:33 2026 GMT Not After : Sep 2 01:18:33 2026 GMT Subject: CN=C0E335A5BA33C28D3E8CB4CB8C8FA183417DC5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:ee:c8:d6:9d:57:2a:07:97:0b:a9:52:71: 87:3f:19:3e:9e:cb:6d:5e:d6:ab:72:ce:ee:5a:56: c5:70:5c:f5:a6:d4:d3:1d:a8:af:a5:77:a0:c3:e3: 34:5a:50:60:da:68:4c:e4:33:8b:99:bb:11:b1:ea: 0a:f3:be:3a:b8:e1:a8:70:9d:63:87:6d:41:c7:3f: e3:63:34:6f:0c:43:f5:22:18:3e:2f:78:3e:ef:5d: c5:f3:6f:47:0d:e8:2d:73:91:f8:9b:f1:89:aa:f1: 4e:6f:8b:bd:88:c8:75:1b:38:84:f4:6c:61:8f:c4: cf:04:86:d8:e7:6f:d3:2f:bd:bc:1d:17:b4:ad:03: f0:31:44:cf:83:7b:31:9c:9b:34:23:14:0f:71:c7: 8f:9b:a3:84:9c:0a:8a:ea:01:99:43:ae:b3:32:56: 62:08:0e:60:ff:6a:e6:c2:40:33:71:dc:95:a6:0a: 6b:1e:5b:00:e3:1e:6c:a2:71:d2:d6:56:8a:c4:69: 54:7a:dc:ed:99:35:33:f5:e0:b6:2d:9b:4e:ab:fd: 78:2b:fb:4b:20:7d:30:fe:b8:b0:69:54:6c:34:5a: d3:e9:13:9e:3f:1c:59:f7:f2:c5:8e:ac:ac:60:62: 28:8a:ed:09:33:57:37:78:19:3b:31:23:f9:7b:db: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:35:A5:BA:33:C2:8D:3E:8C:B4:CB:8C:8F:A1:83:41:7D:C5:E2 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b5:f0:29:50:0b:92:a5:7a:8f:c8:f0:0a:1d:0c:c6:61:e6: ce:ee:09:e3:74:91:b2:d7:0b:55:1c:3d:bc:9e:66:92:0e:3e: e8:5c:d2:49:0f:df:e6:5c:e4:5e:5f:b1:f8:cb:bc:5e:81:4b: 53:ed:0a:96:c8:49:55:b9:57:10:72:63:65:12:5e:38:4b:70: 7e:97:56:1e:8d:27:a1:30:a5:0e:01:83:aa:c8:09:44:ab:d4: 37:dc:f2:d6:9c:58:e3:d9:3f:20:1b:8f:bd:e6:11:dd:e5:85: 63:e7:89:74:1b:d6:1d:89:9d:3f:ea:4f:e4:76:fc:07:9e:93: d5:67:1d:d1:0c:35:f2:86:43:bf:0f:2a:9d:90:cc:5b:06:99: 07:4e:1b:99:78:f2:7f:58:8d:55:69:fb:a2:0d:cf:ba:26:46: 82:51:4d:0a:73:4b:cf:29:79:bf:55:2d:8a:41:6c:04:ae:bc: 6d:39:37:04:d7:fb:4a:9e:34:51:22:2c:32:01:55:f8:93:cc: 2a:2e:30:cd:17:a5:eb:d4:a4:b1:b8:42:aa:83:53:d6:ac:e6: 82:84:d8:43:69:92:8c:55:42:46:32:66:69:d9:57:7e:24:5e: 78:83:6e:fc:4f:29:32:db:bf:be:98:b1:e5:dc:07:c9:43:8e: 84:76:82:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeG0wAK0fcfAJj+U8Qh83kZnWgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA5MDEwMTAwMzNaFw0yNjA5MDIwMTE4MzNaMDMxMTAvBgNV BAMTKEMwRTMzNUE1QkEzM0MyOEQzRThDQjRDQjhDOEZBMTgzNDE3REM1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23O7I1p1XKgeXC6lScYc/GT6e y21e1qtyzu5aVsVwXPWm1NMdqK+ld6DD4zRaUGDaaEzkM4uZuxGx6grzvjq44ahw nWOHbUHHP+NjNG8MQ/UiGD4veD7vXcXzb0cN6C1zkfib8Ymq8U5vi72IyHUbOIT0 bGGPxM8Ehtjnb9MvvbwdF7StA/AxRM+DezGcmzQjFA9xx4+bo4ScCorqAZlDrrMy VmIIDmD/aubCQDNx3JWmCmseWwDjHmyicdLWVorEaVR63O2ZNTP14LYtm06r/Xgr +0sgfTD+uLBpVGw0WtPpE54/HFn38sWOrKxgYiiK7QkzVzd4GTsxI/l722MbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOM1pbozwo0+jLTLjI+hg0F9xeIwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS18ClQC5Kleo/I8AodDMZh5s7uCeN0kbLX C1UcPbyeZpIOPuhc0kkP3+Zc5F5fsfjLvF6BS1PtCpbISVW5VxByY2USXjhLcH6X Vh6NJ6EwpQ4Bg6rICUSr1Dfc8tacWOPZPyAbj73mEd3lhWPniXQb1h2JnT/qT+R2 /Aeek9VnHdEMNfKGQ78PKp2QzFsGmQdOG5l48n9YjVVp+6INz7omRoJRTQpzS88p eb9VLYpBbASuvG05NwTX+0qeNFEiLDIBVfiTzCouMM0XpevUpLG4QqqDU9as5oKE 2ENpkoxVQkYyZmnZV34kXniDbvxPKTLbv76YseXcB8lDjoR2gss= -----END CERTIFICATE-----Generated at Tue Sep 1 04:46:19 2026 by rpki-client