$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: h333uzt6pRqGoYUQOlX08PB6uxcFPsjC/oELVM1vt4Q= Subject key identifier: 05:DB:3D:87:9D:3F:DE:56:9B:DB:EB:E6:69:9B:8F:25:EE:F1:4F:19 Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 5912CB7EF73EDFDB2A31232BFA847721ED5E5F74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:35:59 +0000 Manifest this update: Mon 21 Sep 2026 15:30:59 +0000 Manifest next update: Tue 22 Sep 2026 17:04:59 +0000 Files and hashes: 1: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: srfOdVBHOf4BCl3mZS9Mr7B30hQQva98/aXiSmtzRfA=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:12:cb:7e:f7:3e:df:db:2a:31:23:2b:fa:84:77:21:ed:5e:5f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Sep 21 15:30:59 2026 GMT Not After : Sep 22 17:04:59 2026 GMT Subject: CN=05DB3D879D3FDE569BDBEBE6699B8F25EEF14F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:6d:0b:a8:5c:d3:7a:5c:33:be:b9:19:88: d8:3f:ee:40:22:58:8a:0d:fe:d6:1c:0f:d3:6a:f4: 39:d9:5b:a5:91:2c:13:e1:a2:45:ff:97:f3:3c:bc: 99:35:0f:ac:4e:9f:98:b3:ed:5e:94:19:45:6a:c6: 06:26:a4:14:31:ee:72:f2:0d:93:7e:e6:e1:f5:51: 5a:bc:9f:02:a2:22:1a:46:0d:2e:d4:82:e5:74:cd: f2:45:c0:ce:dc:83:5e:12:13:1c:50:eb:68:1c:fd: ec:aa:07:d9:89:2f:65:8b:ce:32:99:62:b3:9d:76: e9:aa:a8:3f:48:20:b6:19:22:5d:0d:76:ca:55:c4: 99:ef:d2:73:d4:c6:59:88:73:5f:22:41:ef:b9:a3: 74:d4:91:c7:0a:20:b8:53:76:95:0f:c1:dc:0c:52: 01:4b:ab:23:f0:92:38:9b:95:d3:56:81:5d:eb:2b: 18:6d:ad:75:17:c2:ab:43:94:78:f4:49:f5:24:40: ba:f6:b6:e0:16:93:2d:86:c1:57:af:c7:35:a2:d1: 98:d6:92:36:75:8f:7c:03:d9:64:e9:a7:8f:0a:9e: df:70:9c:10:40:57:8f:93:2e:cd:66:9b:84:62:e7: 27:9f:b9:35:d5:c7:96:18:7d:b3:51:f2:44:8f:b3: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:3D:87:9D:3F:DE:56:9B:DB:EB:E6:69:9B:8F:25:EE:F1:4F:19 X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d6:55:7a:c0:a6:16:e5:3f:3e:e8:d8:2d:f7:63:dc:a9:6d: c4:ca:73:22:ff:27:8c:7a:c4:83:4a:15:8a:5f:49:5f:aa:7b: cd:24:2f:fc:9e:d0:3d:e3:b4:9b:de:44:63:fb:48:7f:f0:fa: 05:42:0e:55:57:47:d1:9c:7e:c9:ee:f9:03:3d:ce:0f:36:90: 00:fb:ac:b4:7b:aa:54:78:b2:60:0a:7d:b9:b2:b7:12:80:b1: 9b:70:77:40:1f:7e:db:f3:4f:2d:54:a2:c9:96:34:48:27:65: 08:d0:95:fe:50:cc:1d:11:d5:37:0d:73:46:66:fe:f3:1a:af: 10:08:41:3d:e4:41:94:6f:dc:7c:a6:c5:3c:5d:2c:65:bb:08: 74:3b:6d:55:64:7a:74:b6:a9:f7:3a:67:10:ba:e4:e5:27:51: 11:01:64:fa:c7:6f:3e:a1:ec:28:98:fc:f3:49:11:54:f1:bd: 22:ae:f6:05:5e:4c:80:6e:f5:5e:00:87:40:69:01:76:86:7b: 23:33:35:a5:1b:84:78:7d:ed:fd:fd:93:e0:85:e8:f8:c1:ca: 1d:b1:7d:c0:cd:78:10:61:00:b0:16:84:8a:b9:e9:98:d4:96: f5:95:b9:a7:f8:b3:48:a7:94:57:62:f8:ba:9d:33:83:90:04: 38:f6:5e:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRLLfvc+39sqMSMr+oR3Ie1eX3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjA5MjExNTMwNTlaFw0yNjA5MjIxNzA0NTlaMDMxMTAvBgNV BAMTKDA1REIzRDg3OUQzRkRFNTY5QkRCRUJFNjY5OUI4RjI1RUVGMTRGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAm0LqFzTelwzvrkZiNg/7kAi WIoN/tYcD9Nq9DnZW6WRLBPhokX/l/M8vJk1D6xOn5iz7V6UGUVqxgYmpBQx7nLy DZN+5uH1UVq8nwKiIhpGDS7UguV0zfJFwM7cg14SExxQ62gc/eyqB9mJL2WLzjKZ YrOddumqqD9IILYZIl0NdspVxJnv0nPUxlmIc18iQe+5o3TUkccKILhTdpUPwdwM UgFLqyPwkjibldNWgV3rKxhtrXUXwqtDlHj0SfUkQLr2tuAWky2GwVevxzWi0ZjW kjZ1j3wD2WTpp48Knt9wnBBAV4+TLs1mm4Ri5yefuTXVx5YYfbNR8kSPs4ifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBds9h50/3lab2+vmaZuPJe7xTxkwHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLWVXrAphblPz7o2C33Y9ypbcTKcyL/J4x6 xINKFYpfSV+qe80kL/ye0D3jtJveRGP7SH/w+gVCDlVXR9Gcfsnu+QM9zg82kAD7 rLR7qlR4smAKfbmytxKAsZtwd0AfftvzTy1UosmWNEgnZQjQlf5QzB0R1TcNc0Zm /vMarxAIQT3kQZRv3HymxTxdLGW7CHQ7bVVkenS2qfc6ZxC65OUnUREBZPrHbz6h 7CiY/PNJEVTxvSKu9gVeTIBu9V4Ah0BpAXaGeyMzNaUbhHh97f39k+CF6PjByh2x fcDNeBBhALAWhIq56ZjUlvWVuaf4s0inlFdi+LqdM4OQBDj2Xsg= -----END CERTIFICATE-----Generated at Tue Sep 22 05:30:57 2026 by rpki-client