$ rpki-client -vvvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: P6SBC3OXWK7Jy+wwQHOhW3ybcMYIHYcaDASniKw4qAE= Subject key identifier: 92:52:BE:EE:87:DC:4F:FD:86:59:C9:7B:EA:4B:7D:D7:46:AB:AC:51 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 491C61286B12B75BEEDD99B2414A080A11D6E259 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: E3 Signing time: Mon 19 Oct 2026 09:10:54 +0000 Manifest this update: Mon 19 Oct 2026 09:05:54 +0000 Manifest next update: Tue 20 Oct 2026 12:55:54 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: x0pJJCYVpFxV8RJ7zRb3en8RjN80Tzd1GLQBaz5Dg1I=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 12:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1c:61:28:6b:12:b7:5b:ee:dd:99:b2:41:4a:08:0a:11:d6:e2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Oct 19 09:05:54 2026 GMT Not After : Oct 20 12:55:54 2026 GMT Subject: CN=9252BEEE87DC4FFD8659C97BEA4B7DD746ABAC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:37:4e:14:01:2f:c3:2f:f5:14:9b:b6:4d: 6d:46:29:51:5d:01:9c:13:69:a3:f7:87:49:8d:d6: 09:c4:f8:2b:2d:5d:5f:50:ae:d0:01:49:a1:c3:71: 3f:3f:12:5e:cf:c3:e3:2c:42:2e:ac:02:36:9a:fb: 6c:91:41:83:05:37:89:a4:0e:15:4a:98:e4:ac:df: c0:db:f2:ee:4a:af:de:ed:ab:a1:d9:c2:00:c8:35: 01:98:8e:b0:90:2e:a1:7e:4d:53:65:5d:73:44:7a: e4:65:7c:d7:bd:e0:18:31:94:3d:9f:bb:35:c5:ca: 3d:d9:58:2e:fc:c5:8b:76:78:7d:60:aa:d4:71:0e: e2:3b:e2:f2:b5:0b:5b:bf:04:14:df:bc:50:1b:02: 35:88:9a:62:0c:6d:64:49:34:4e:08:9f:11:a9:35: 99:c5:79:c3:a6:87:f5:bd:d5:9b:f8:25:c7:5b:b5: 64:ea:e6:70:1e:1f:b8:e6:e4:a4:46:3f:5c:93:96: a3:80:a6:ac:c6:1d:e6:66:ce:02:5f:29:8d:89:a7: aa:2a:9c:3e:6f:aa:c5:9a:83:48:f3:f5:2e:27:8b: 4c:6f:4b:58:16:f8:53:8e:35:9b:0c:b0:4a:3b:7c: 20:4b:78:52:60:c2:2a:36:55:2d:39:ce:be:30:4a: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:52:BE:EE:87:DC:4F:FD:86:59:C9:7B:EA:4B:7D:D7:46:AB:AC:51 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2d:b2:1b:5e:28:03:09:84:3a:28:32:3b:f1:a1:20:81:47: e1:f7:7c:78:96:e4:01:86:32:2b:b3:c8:89:4a:dc:0e:b0:90: 28:59:0e:9c:b5:77:3b:95:fb:ca:01:82:e0:38:58:96:82:ee: 64:bd:78:46:29:ef:c1:29:17:1d:48:af:09:eb:fd:e1:34:c2: c9:48:70:42:6d:cc:c1:f8:8c:43:73:26:4b:77:e4:ef:6f:e1: d6:61:64:7c:9e:8e:3b:c1:e2:a7:77:67:a8:27:6b:f0:49:3d: f7:5b:6d:2d:08:bb:c1:35:3b:87:79:28:d1:0a:8d:41:bb:92: c7:a7:3e:50:27:64:a6:48:71:f0:85:b1:c5:67:52:77:67:e0: 8e:12:03:e9:8b:02:00:72:e1:b6:39:2a:a4:ea:de:95:d5:ab: 22:4c:cf:bf:5b:01:2f:e9:10:c3:0f:ef:61:8b:89:fe:f0:d4: 6e:3f:57:47:9f:e4:70:54:36:a5:fc:1c:07:47:4b:c7:ee:c2: 94:4d:72:bd:ff:28:4c:21:52:ac:0d:b3:28:a8:39:e1:d1:92: aa:90:09:af:d3:b5:e2:98:95:01:a8:c8:87:62:f7:fa:4b:ff: 6b:84:33:8a:d2:75:c7:21:d7:33:96:f8:cc:29:50:85:96:76: 97:2b:01:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRxhKGsSt1vu3ZmyQUoIChHW4lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjEwMTkwOTA1NTRaFw0yNjEwMjAxMjU1NTRaMDMxMTAvBgNV BAMTKDkyNTJCRUVFODdEQzRGRkQ4NjU5Qzk3QkVBNEI3REQ3NDZBQkFDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2TdOFAEvwy/1FJu2TW1GKVFd AZwTaaP3h0mN1gnE+CstXV9QrtABSaHDcT8/El7Pw+MsQi6sAjaa+2yRQYMFN4mk DhVKmOSs38Db8u5Kr97tq6HZwgDINQGYjrCQLqF+TVNlXXNEeuRlfNe94BgxlD2f uzXFyj3ZWC78xYt2eH1gqtRxDuI74vK1C1u/BBTfvFAbAjWImmIMbWRJNE4InxGp NZnFecOmh/W91Zv4JcdbtWTq5nAeH7jm5KRGP1yTlqOApqzGHeZmzgJfKY2Jp6oq nD5vqsWag0jz9S4ni0xvS1gW+FOONZsMsEo7fCBLeFJgwio2VS05zr4wSl/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklK+7ofcT/2GWcl76kt910arrFEwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0tshteKAMJhDooMjvxoSCBR+H3fHiW5AGG MiuzyIlK3A6wkChZDpy1dzuV+8oBguA4WJaC7mS9eEYp78EpFx1Irwnr/eE0wslI cEJtzMH4jENzJkt35O9v4dZhZHyejjvB4qd3Z6gna/BJPfdbbS0Iu8E1O4d5KNEK jUG7ksenPlAnZKZIcfCFscVnUndn4I4SA+mLAgBy4bY5KqTq3pXVqyJMz79bAS/p EMMP72GLif7w1G4/V0ef5HBUNqX8HAdHS8fuwpRNcr3/KEwhUqwNsyioOeHRkqqQ Ca/TteKYlQGoyIdi9/pL/2uEM4rSdcch1zOW+MwpUIWWdpcrAUo= -----END CERTIFICATE-----Generated at Mon Oct 19 22:50:13 2026 by rpki-client