$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft File: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft (raw, json) Hash identifier: 8YXj21SMrjWCvJvbCD23BpS5lQVZM6tuhnIO3SbT9xs= Subject key identifier: 54:EB:95:A5:4E:33:1A:D0:65:F6:04:1B:66:13:FA:8F:C5:05:74:4B Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 Certificate issuer: /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Certificate serial: 6D6775DA17484AD91A9B7BAA7A0F38B2B6BDA77D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft Manifest number: FE Signing time: Mon 09 Nov 2026 14:13:43 +0000 Manifest this update: Mon 09 Nov 2026 14:08:43 +0000 Manifest next update: Tue 10 Nov 2026 15:06:43 +0000 Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=) 2: CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl (hash: ZmTk8DcXoOJFNaH7r1G57gpY8fC8VDE9lTh9XnL4kzA=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: dQWZT6Xz8pO7H+599hY+k00G+PwBajaWlGUsbrDpS6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:75:da:17:48:4a:d9:1a:9b:7b:aa:7a:0f:38:b2:b6:bd:a7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01 Validity Not Before: Nov 9 14:08:43 2026 GMT Not After : Nov 10 15:06:43 2026 GMT Subject: CN=54EB95A54E331AD065F6041B6613FA8FC505744B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:75:ee:91:83:55:29:e2:1f:0b:05:94:ab: db:1d:33:73:d0:fb:9f:b9:d0:0c:d4:b2:6a:e2:74: c9:4b:49:19:8a:f7:f5:ec:27:0f:2d:3a:cf:ea:be: ff:6e:0a:26:c3:0b:14:fd:20:e1:0a:77:0d:de:3e: db:ba:81:2f:f5:7c:4f:d0:d6:ba:c8:83:cb:82:6c: 2c:35:1c:b4:5a:a5:a1:9f:cc:ce:31:29:8f:1b:5d: 7b:29:6f:27:e8:53:15:4f:fb:ba:a1:11:51:8d:93: 4d:d9:3e:36:23:00:56:c5:42:4b:9b:4e:4f:f7:ab: 02:46:13:4a:3f:dd:7d:96:f1:21:db:aa:2c:8f:37: e7:ed:37:d5:b6:fd:cd:1a:e9:fb:25:9a:e1:c8:95: 1d:0a:7b:ad:ce:75:75:60:87:b8:48:64:56:f6:6b: 5f:12:77:86:8c:ce:c3:ac:11:f6:92:d9:41:f1:40: f7:ed:1b:43:a9:30:9b:7d:df:73:af:74:61:17:ba: 23:c1:3d:d7:7e:91:04:41:49:3f:c5:3b:ae:c4:e7: 15:8f:3b:9f:a2:e2:d0:0a:8d:ed:33:ad:ad:71:e1: 35:9f:1b:3f:2e:a8:98:5b:7f:a1:75:b3:c4:ee:99: c2:76:b7:79:47:8a:f3:01:9b:98:f7:39:9c:fc:bf: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:95:A5:4E:33:1A:D0:65:F6:04:1B:66:13:FA:8F:C5:05:74:4B X509v3 Authority Key Identifier: keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:9f:0b:f1:ac:61:fb:94:52:26:51:a0:5e:7b:21:bc:e4: 79:4b:75:e2:6b:1e:bf:2c:16:69:75:b3:3a:a4:ce:1d:fb:82: b7:26:be:87:e2:83:a9:c6:a0:b4:12:7c:53:43:ef:4e:01:f4: af:21:f1:9f:c3:b9:f3:cd:dd:13:5a:f2:04:99:bc:eb:2e:7b: 04:65:8e:08:50:1b:90:99:d3:f8:a7:f0:84:3a:7b:56:d8:a3: 2d:40:f9:a6:4f:92:b5:bf:9a:b7:c3:e3:43:16:b6:0b:f4:fc: fb:99:20:45:6b:e6:45:09:70:cf:40:eb:a6:60:61:04:7a:5d: f0:d7:54:1b:c5:9e:8d:24:1d:15:5d:2f:d8:d0:6e:20:27:c6: 4b:c6:20:d3:e3:af:be:80:af:3f:fe:73:79:43:12:b8:3b:aa: 63:27:d0:a9:cf:d3:81:1b:b8:4f:bc:ee:ca:88:5b:92:99:f9: 54:09:2b:db:29:ac:6a:80:a8:b4:9a:4c:56:1f:4d:8d:e5:29: 8b:72:f3:f3:a6:3c:d4:c2:34:b0:42:86:f4:46:48:e5:07:d4: 89:d1:fd:45:04:0c:9c:11:93:e5:70:04:72:c6:ae:4d:e9:6f: b3:a2:e5:78:81:53:81:16:3b:fb:42:58:60:98:42:51:5e:21: 51:6d:59:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWd12hdIStkam3uqeg84sra9p30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlF OThGNUQwMTAeFw0yNjExMDkxNDA4NDNaFw0yNjExMTAxNTA2NDNaMDMxMTAvBgNV BAMTKDU0RUI5NUE1NEUzMzFBRDA2NUY2MDQxQjY2MTNGQThGQzUwNTc0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJBXXukYNVKeIfCwWUq9sdM3PQ +5+50AzUsmridMlLSRmK9/XsJw8tOs/qvv9uCibDCxT9IOEKdw3ePtu6gS/1fE/Q 1rrIg8uCbCw1HLRapaGfzM4xKY8bXXspbyfoUxVP+7qhEVGNk03ZPjYjAFbFQkub Tk/3qwJGE0o/3X2W8SHbqiyPN+ftN9W2/c0a6fslmuHIlR0Ke63OdXVgh7hIZFb2 a18Sd4aMzsOsEfaS2UHxQPftG0OpMJt933OvdGEXuiPBPdd+kQRBST/FO67E5xWP O5+i4tAKje0zra1x4TWfGz8uqJhbf6F1s8TumcJ2t3lHivMBm5j3OZz8v5EFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOuVpU4zGtBl9gQbZhP6j8UFdEswHwYDVR0j BBgwFoAUzMOCr5ONxW9JrMPNnp7uiemPXQEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyY2FlM2YtYjMyOS00NDFiLTk3ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5 MzhEQzU2RjQ5QUNDM0NEOUU5RUVFODlFOThGNUQwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQ0MzODJBRjkzOERDNTZGNDlBQ0MzQ0Q5RTlFRUU4OUU5OEY1 RDAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvQ0NDMzgyQUY5MzhEQzU2RjQ5QUNDM0NEOUU5RUVF ODlFOThGNUQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlUnwvxrGH7lFImUaBeeyG85HlLdeJrHr8s Fml1szqkzh37grcmvofig6nGoLQSfFND704B9K8h8Z/DufPN3RNa8gSZvOsuewRl jghQG5CZ0/in8IQ6e1bYoy1A+aZPkrW/mrfD40MWtgv0/PuZIEVr5kUJcM9A66Zg YQR6XfDXVBvFno0kHRVdL9jQbiAnxkvGINPjr76Arz/+c3lDErg7qmMn0KnP04Eb uE+87sqIW5KZ+VQJK9sprGqAqLSaTFYfTY3lKYty8/OmPNTCNLBChvRGSOUH1InR /UUEDJwRk+VwBHLGrk3pb7Oi5XiBU4EWO/tCWGCYQlFeIVFtWcQ= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:05 2026 by rpki-client