$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft (raw, json) Hash identifier: ixkR/W6nAh5Muahj4Eq5vXbo1stM30hW7fcUxEnEekE= Subject key identifier: 89:A8:5B:04:A9:A3:B8:DB:40:77:62:AE:63:0D:A6:E0:9F:F2:8E:A2 Authority key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 Certificate issuer: /CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Certificate serial: 2D5BECB88DAD6E72FC1B463F36F22CEEE20493E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:03:32 +0000 Manifest this update: Sun 20 Sep 2026 08:58:32 +0000 Manifest next update: Mon 21 Sep 2026 11:13:32 +0000 Files and hashes: 1: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl (hash: fcc2ksz7M2QjR0ar9skQiuO8tzpU9sntkRLYICpTF+M=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: yMPJNSkMGIl2UvT1CYNlCKulD32gYlJwLvlyIrBqbfE=) 3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: 0buGIXn5F8o+JhXrXgmfNJ2sJWtjHLxvA64EOEEpl5Q=) 4: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: jn+K6WOORye+NOCB1GXieBBnyp4klMVwEtXChM9Gflg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5b:ec:b8:8d:ad:6e:72:fc:1b:46:3f:36:f2:2c:ee:e2:04:93:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Validity Not Before: Sep 20 08:58:32 2026 GMT Not After : Sep 21 11:13:32 2026 GMT Subject: CN=89A85B04A9A3B8DB407762AE630DA6E09FF28EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:2d:e0:95:d4:51:4f:3b:db:55:b1:45:f8: b9:d4:68:18:64:c9:fb:77:da:e9:96:06:a6:a2:99: 90:15:20:94:b9:c9:c3:43:7d:af:6b:57:e5:0d:5d: 24:e1:96:2e:43:2c:3f:b8:d2:92:84:fc:73:db:2f: 78:31:ce:25:30:51:6e:03:dd:4e:08:40:64:0e:c8: 5c:b6:fe:b1:8b:c1:6b:ec:e3:a3:4e:d1:50:5c:2f: 91:ec:b3:12:ee:ea:66:08:04:66:de:ce:3f:75:0e: 0c:2d:c0:6d:d0:32:cc:ad:2f:b9:ed:3e:b7:ba:9e: 94:6e:42:0e:4d:30:14:15:f7:39:7a:22:9d:79:7c: 61:93:55:57:94:86:68:88:be:ee:5e:ec:55:bd:61: e9:9d:85:6b:70:79:83:af:dd:9c:ef:22:e2:30:3d: c3:83:9c:9b:1c:55:40:2f:91:8d:9c:06:91:6f:fe: d9:91:4d:03:17:bf:e7:ad:6d:27:54:80:4b:24:df: 10:78:0d:fe:2d:77:92:f0:4a:9c:a7:fa:d2:46:9b: a1:1d:0b:c1:08:dc:95:35:c4:9a:52:47:19:a6:6c: 61:a4:72:1c:a2:a7:5e:81:6d:f7:48:5f:a3:c2:1a: ad:fb:4d:c4:3c:5f:18:50:66:2a:2c:5a:08:02:bf: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:5B:04:A9:A3:B8:DB:40:77:62:AE:63:0D:A6:E0:9F:F2:8E:A2 X509v3 Authority Key Identifier: keyid:0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f7:87:b3:6f:75:f6:30:86:cf:32:44:bf:78:c9:d9:4b:82: a8:96:e1:a6:c8:b8:9e:50:7d:49:45:3b:76:72:f8:e8:f0:48: 27:d4:22:08:3a:e6:7f:7d:6c:97:95:a7:c1:b0:70:da:ab:14: 72:8f:24:7b:35:06:8e:e7:f3:38:26:90:a2:98:35:86:48:6e: 60:0a:91:10:7a:06:60:ae:d2:da:a2:de:f2:fe:7b:88:7a:bb: 54:01:e0:1b:5d:bb:3a:ae:99:c4:3a:26:65:bd:59:44:73:3d: f8:2f:30:6e:b0:42:ac:97:34:9c:04:34:b6:f3:0b:99:a5:5e: 8d:8e:d9:33:c1:5f:77:e6:f5:57:c1:4c:1e:72:66:15:cb:ea: 4b:de:52:85:c3:9f:7c:d6:e4:cc:32:2f:f3:f0:67:b2:79:e2: 6e:90:e6:7b:0b:bd:2f:c3:74:64:f3:00:d6:df:a6:16:28:fd: 23:5e:96:cf:25:f3:5f:bf:3b:00:4d:18:1c:3d:b9:a2:e7:92: 81:a0:da:5f:74:32:aa:ed:01:27:af:d4:84:1d:b8:ab:93:0c: ae:4f:90:ae:62:2d:bc:55:c7:6c:2c:b6:3f:c7:b7:18:19:31: 62:69:e2:a2:36:80:19:07:34:86:f1:6e:e2:7d:46:45:77:84: 1e:3e:b3:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVvsuI2tbnL8G0Y/NvIs7uIEk+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3 RDQxOTc4MzAeFw0yNjA5MjAwODU4MzJaFw0yNjA5MjExMTEzMzJaMDMxMTAvBgNV BAMTKDg5QTg1QjA0QTlBM0I4REI0MDc3NjJBRTYzMERBNkUwOUZGMjhFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NC3gldRRTzvbVbFF+LnUaBhk yft32umWBqaimZAVIJS5ycNDfa9rV+UNXSThli5DLD+40pKE/HPbL3gxziUwUW4D 3U4IQGQOyFy2/rGLwWvs46NO0VBcL5HssxLu6mYIBGbezj91DgwtwG3QMsytL7nt Pre6npRuQg5NMBQV9zl6Ip15fGGTVVeUhmiIvu5e7FW9YemdhWtweYOv3ZzvIuIw PcODnJscVUAvkY2cBpFv/tmRTQMXv+etbSdUgEsk3xB4Df4td5LwSpyn+tJGm6Ed C8EI3JU1xJpSRxmmbGGkchyip16BbfdIX6PCGq37TcQ8XxhQZiosWggCvzjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiahbBKmjuNtAd2KuYw2m4J/yjqIwHwYDVR0j BBgwFoAUDM+Ujz2izAjwYt/LV8oHBn1Bl4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZmOGY0YWItMWFiOC00ODk0LWI3NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYz REEyQ0MwOEYwNjJERkNCNTdDQTA3MDY3RDQxOTc4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NGOTQ4RjNEQTJDQzA4RjA2MkRGQ0I1N0NBMDcwNjdENDE5 NzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvMENDRjk0OEYzREEyQ0MwOEYwNjJERkNCNTdDQTA3 MDY3RDQxOTc4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf3h7NvdfYwhs8yRL94ydlLgqiW4abIuJ5Q fUlFO3Zy+OjwSCfUIgg65n99bJeVp8GwcNqrFHKPJHs1Bo7n8zgmkKKYNYZIbmAK kRB6BmCu0tqi3vL+e4h6u1QB4BtduzqumcQ6JmW9WURzPfgvMG6wQqyXNJwENLbz C5mlXo2O2TPBX3fm9VfBTB5yZhXL6kveUoXDn3zW5MwyL/PwZ7J54m6Q5nsLvS/D dGTzANbfphYo/SNels8l81+/OwBNGBw9uaLnkoGg2l90MqrtASev1IQduKuTDK5P kK5iLbxVx2wstj/HtxgZMWJp4qI2gBkHNIbxbuJ9RkV3hB4+s50= -----END CERTIFICATE-----Generated at Sun Sep 20 21:06:28 2026 by rpki-client