$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: tWNBqQiri7G7MpMlnW7UBKFtdOeGJTH0V/doP+TMaDE= Subject key identifier: 19:91:16:6E:E3:07:99:DD:CE:DE:6E:F0:E5:65:79:1C:E6:85:97:C3 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 59132B07F9879E7A3D09B78322C687AA0B53E646 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: EC Signing time: Sat 24 Oct 2026 16:14:19 +0000 Manifest this update: Sat 24 Oct 2026 16:09:19 +0000 Manifest next update: Sun 25 Oct 2026 20:07:19 +0000 Files and hashes: 1: 3130332e3136372e3133362e302f32342d3234203d3e20313339343536.roa (hash: 7OHSfmWI/nR+ShqhwFBj8vsSyoyMS+f+Xt96lod6jAU=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 3: 3130332e3136372e3133372e302f32342d3234203d3e20313339343536.roa (hash: 5hNgNzCE1uulr0uDc5RCxjLA0Zo4ik7pC2wAL54DJWs=) 4: 3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa (hash: i09Z8Tx2AGUJCoOM8U7S48IwaKRFx1XbdhDarsrxQWY=) 5: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) 6: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: ektoxARARRqq1VWU0U6vPg80TPoLcwzBK3P39xwa/jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:13:2b:07:f9:87:9e:7a:3d:09:b7:83:22:c6:87:aa:0b:53:e6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Oct 24 16:09:19 2026 GMT Not After : Oct 25 20:07:19 2026 GMT Subject: CN=1991166EE30799DDCEDE6EF0E565791CE68597C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:d1:fd:d5:2e:d8:b4:d4:04:91:92:74:01: b9:0f:ef:16:c4:64:7d:aa:56:b8:9d:e7:92:71:00: e5:43:41:7b:82:88:f1:f9:c9:77:38:b7:78:06:10: df:55:4f:78:32:7a:84:54:c1:08:46:69:0f:af:f7: 3e:93:94:e2:6b:76:06:79:a4:07:91:2a:15:2a:dd: 33:b4:80:35:73:ad:78:bf:27:80:e3:ca:49:ef:a7: f3:3e:33:0c:ec:30:8d:6f:34:45:f8:a9:7e:6f:e6: ce:38:8d:a2:60:1a:bd:ac:d1:c6:b4:3a:7f:05:99: 1b:3c:5b:e9:bd:7e:06:c4:05:af:f1:1b:5d:d0:26: 78:05:60:24:2f:88:fc:6d:e9:77:5b:5b:03:eb:90: 69:9f:96:ed:c4:69:80:bd:dc:86:c7:ab:00:82:1a: f1:20:a8:d9:06:d0:a6:d9:f5:15:b3:0e:89:e5:59: 62:b2:21:73:f4:8e:7e:19:85:22:04:be:0b:19:d3: d3:4a:d7:ca:a3:29:0d:5c:93:f4:21:ba:8d:18:bd: 2e:03:8b:56:0c:9a:b2:72:45:39:d7:af:a7:74:40: 35:c4:2a:85:17:9f:13:9a:6a:0e:10:cd:bc:12:41: 4f:6c:ef:4a:67:7b:fd:78:a7:91:24:b8:76:24:f4: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:16:6E:E3:07:99:DD:CE:DE:6E:F0:E5:65:79:1C:E6:85:97:C3 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5f:61:28:27:42:8c:93:ef:fc:ee:e4:f1:9c:26:3a:a3:b7: 8a:58:78:1b:3d:aa:50:24:8d:20:c4:59:14:25:0b:8a:9e:97: d6:06:04:59:1d:f7:51:5f:4b:3b:b4:49:89:2d:1e:6b:2e:5d: 81:74:4c:9e:ab:24:9d:82:9d:a7:19:04:5e:29:f0:8a:94:3f: 23:eb:d6:21:3e:65:4a:0f:54:71:be:1f:4b:81:de:a7:c5:74: fd:9a:c8:4a:d9:3d:f7:4e:6f:be:2d:c6:2e:ed:f0:d2:97:57: 70:3b:ad:5f:cd:1b:2f:34:0f:3b:ce:33:c1:0d:c6:10:97:e2: 34:eb:a8:db:16:b6:9b:8b:43:87:fa:ec:ca:6e:b8:6b:53:2a: d4:56:fe:fb:f5:38:06:95:ff:3b:3f:55:66:cf:4e:8c:06:af: 1b:df:de:52:d4:8d:68:7c:42:79:b4:3b:fd:c8:af:d0:cc:72: 8b:2f:c8:87:4f:82:dc:81:e7:e8:0c:92:8c:3c:62:4f:08:1d: 83:8a:61:fe:a9:7e:dc:34:ea:74:12:b8:cc:70:4e:ea:41:60: 90:ed:7c:89:04:1a:57:82:9b:8d:46:32:8d:bc:cc:d8:6c:5e: e6:06:b3:52:2a:d1:50:ce:dc:50:cd:cb:2c:47:92:61:91:ab: 2c:4a:2d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRMrB/mHnno9CbeDIsaHqgtT5kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjEwMjQxNjA5MTlaFw0yNjEwMjUyMDA3MTlaMDMxMTAvBgNV BAMTKDE5OTExNjZFRTMwNzk5RERDRURFNkVGMEU1NjU3OTFDRTY4NTk3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCtH91S7YtNQEkZJ0AbkP7xbE ZH2qVrid55JxAOVDQXuCiPH5yXc4t3gGEN9VT3gyeoRUwQhGaQ+v9z6TlOJrdgZ5 pAeRKhUq3TO0gDVzrXi/J4Djyknvp/M+MwzsMI1vNEX4qX5v5s44jaJgGr2s0ca0 On8FmRs8W+m9fgbEBa/xG13QJngFYCQviPxt6XdbWwPrkGmflu3EaYC93IbHqwCC GvEgqNkG0KbZ9RWzDonlWWKyIXP0jn4ZhSIEvgsZ09NK18qjKQ1ck/Qhuo0YvS4D i1YMmrJyRTnXr6d0QDXEKoUXnxOaag4QzbwSQU9s70pne/14p5EkuHYk9F+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZEWbuMHmd3O3m7w5WV5HOaFl8MwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJfYSgnQoyT7/zu5PGcJjqjt4pYeBs9qlAk jSDEWRQlC4qel9YGBFkd91FfSzu0SYktHmsuXYF0TJ6rJJ2CnacZBF4p8IqUPyPr 1iE+ZUoPVHG+H0uB3qfFdP2ayErZPfdOb74txi7t8NKXV3A7rV/NGy80DzvOM8EN xhCX4jTrqNsWtpuLQ4f67MpuuGtTKtRW/vv1OAaV/zs/VWbPTowGrxvf3lLUjWh8 Qnm0O/3Ir9DMcosvyIdPgtyB5+gMkow8Yk8IHYOKYf6pftw06nQSuMxwTupBYJDt fIkEGleCm41GMo28zNhsXuYGs1Iq0VDO3FDNyyxHkmGRqyxKLUI= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:51 2026 by rpki-client