$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json) Hash identifier: iW/gPrILftnJQ9k81hIhCkY7cXKlpyuF/FNlQbm9hJ8= Subject key identifier: B0:D7:C1:A9:0F:35:B4:BE:EC:21:35:E4:F3:1C:D2:DB:29:84:0B:7E Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Certificate serial: 51C309E5032B1B20A4B74D7164928D1DF674E9B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft Manifest number: FE Signing time: Mon 09 Nov 2026 05:06:58 +0000 Manifest this update: Mon 09 Nov 2026 05:01:58 +0000 Manifest next update: Tue 10 Nov 2026 07:59:58 +0000 Files and hashes: 1: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: 1GTUppIq2ZlG7MYDkMG6zHfsGw79ZiXm8wNiiUK3w7I=) 2: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=) 3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=) 4: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:09:e5:03:2b:1b:20:a4:b7:4d:71:64:92:8d:1d:f6:74:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Validity Not Before: Nov 9 05:01:58 2026 GMT Not After : Nov 10 07:59:58 2026 GMT Subject: CN=B0D7C1A90F35B4BEEC2135E4F31CD2DB29840B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:2c:5e:9c:36:bd:dd:fd:a8:58:15:38:7f: f2:1d:85:da:f6:9c:7e:6f:f5:2d:2b:d2:71:b9:39: 38:e1:12:a4:c3:50:5d:3d:cd:2c:08:de:fe:ed:68: 40:3e:d8:8f:bc:b3:32:e5:4e:da:bf:57:67:b3:31: 1a:4d:c3:2d:41:1f:32:2d:cd:40:d7:88:81:7a:69: 60:fe:cf:74:6d:ba:56:8a:21:25:d1:0b:73:c3:ce: 3d:6e:e8:0e:74:29:7f:f9:62:28:5c:08:a0:00:7e: 94:8e:29:51:5e:08:f1:55:18:e9:cc:13:26:d4:35: ed:4e:c5:fc:bb:eb:b9:7d:63:70:79:88:24:b2:d6: 4d:b8:3c:53:40:8d:41:72:df:b6:af:8c:94:55:90: e1:a6:7f:8e:0a:08:88:21:db:6f:7d:ae:a4:c6:e5: a9:a2:06:27:88:a0:16:42:70:02:66:2b:de:1f:9e: a3:e6:d4:a6:b2:9e:f3:28:42:60:2f:07:aa:d0:99: 50:5e:03:f4:fc:e1:da:7a:5d:60:37:d7:97:67:4f: 09:f1:05:3e:0d:f2:96:db:67:e2:57:b7:31:7b:68: 21:87:0e:fa:1b:59:ed:e0:71:5f:bf:58:d7:e5:7d: 7c:3d:50:b8:4a:91:2e:9d:e1:ad:23:8c:1c:4a:23: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:C1:A9:0F:35:B4:BE:EC:21:35:E4:F3:1C:D2:DB:29:84:0B:7E X509v3 Authority Key Identifier: keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:0c:c8:dc:97:a6:78:52:f0:08:1e:a1:78:1b:9b:49:2a: 76:32:74:12:1d:4f:bc:2c:9e:8a:1b:a2:26:65:14:c4:08:1c: 2c:af:eb:f9:e5:9a:3f:50:b3:7e:7c:ae:11:11:b3:c0:41:c8: 69:df:e1:42:54:d6:a8:cc:b8:f9:ad:6a:1d:32:90:e4:11:8b: 81:69:e6:f7:e5:9e:34:2f:36:87:31:e4:87:e5:f4:2e:3f:72: 76:4d:62:dd:ce:cb:1a:68:88:7c:67:97:cb:49:83:86:50:b6: 7b:71:39:c7:60:27:43:24:9b:b8:8e:af:47:5d:52:63:2d:7f: 95:8c:df:54:ce:6c:d6:eb:0d:de:e2:90:ec:f1:a1:7e:c8:7f: 89:d2:3a:77:2d:88:17:c3:db:07:e2:1e:99:e4:07:0f:cb:63: 60:76:75:b2:c6:e4:33:79:ba:b1:75:ef:64:4f:5e:f6:c7:5d: 08:ec:1e:2f:22:fa:ae:c0:c7:b3:eb:f4:25:e1:c6:b1:c1:db: 1c:2e:cc:b4:25:2c:d2:89:84:fc:ba:22:e5:c1:27:42:6e:9a: 2f:96:95:98:a9:28:23:61:f1:1e:9a:12:27:08:17:af:95:2b: c0:b5:f8:10:a7:04:06:44:b0:98:f0:d4:3a:a1:da:87:9c:a0: 69:c6:ad:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcMJ5QMrGyCkt01xZJKNHfZ06bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3 RDQxOTc4MzAeFw0yNjExMDkwNTAxNThaFw0yNjExMTAwNzU5NThaMDMxMTAvBgNV BAMTKEIwRDdDMUE5MEYzNUI0QkVFQzIxMzVFNEYzMUNEMkRCMjk4NDBCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yixenDa93f2oWBU4f/Idhdr2 nH5v9S0r0nG5OTjhEqTDUF09zSwI3v7taEA+2I+8szLlTtq/V2ezMRpNwy1BHzIt zUDXiIF6aWD+z3RtulaKISXRC3PDzj1u6A50KX/5YihcCKAAfpSOKVFeCPFVGOnM EybUNe1Oxfy767l9Y3B5iCSy1k24PFNAjUFy37avjJRVkOGmf44KCIgh2299rqTG 5amiBieIoBZCcAJmK94fnqPm1KaynvMoQmAvB6rQmVBeA/T84dp6XWA315dnTwnx BT4N8pbbZ+JXtzF7aCGHDvobWe3gcV+/WNflfXw9ULhKkS6d4a0jjBxKI8D9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNfBqQ81tL7sITXk8xzS2ymEC34wHwYDVR0j BBgwFoAUDM+Ujz2izAjwYt/LV8oHBn1Bl4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZmOGY0YWItMWFiOC00ODk0LWI3NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYz REEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3RDQxOTc4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NGOTQ4RjNEQTJDQzA4RjA2MkRGQ0I1N0NBMDcwNjdENDE5 NzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3 MDY3RDQxOTc4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGScDMjcl6Z4UvAIHqF4G5tJKnYydBIdT7ws nooboiZlFMQIHCyv6/nlmj9Qs358rhERs8BByGnf4UJU1qjMuPmtah0ykOQRi4Fp 5vflnjQvNocx5Ifl9C4/cnZNYt3OyxpoiHxnl8tJg4ZQtntxOcdgJ0Mkm7iOr0dd UmMtf5WM31TObNbrDd7ikOzxoX7If4nSOnctiBfD2wfiHpnkBw/LY2B2dbLG5DN5 urF172RPXvbHXQjsHi8i+q7Ax7Pr9CXhxrHB2xwuzLQlLNKJhPy6IuXBJ0Jumi+W lZipKCNh8R6aEicIF6+VK8C1+BCnBAZEsJjw1Dqh2oecoGnGreg= -----END CERTIFICATE-----Generated at Tue Nov 10 01:19:59 2026 by rpki-client