$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft File: CC4A3B86531912A00DCFBF94884369F58244CFCD.mft (raw, json) Hash identifier: zPPYTcEQ/8AgpIRic0DwjxsNWIjPa5hPvn22OYqlf1Y= Subject key identifier: 66:5C:30:CD:3C:81:EB:BE:9F:46:0F:B9:C7:B8:EA:C8:CB:C0:EB:59 Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Certificate serial: 20A6A01FE4D1F64D8DE9E07CA9053B5036E80BD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft Manifest number: BF Signing time: Tue 22 Sep 2026 09:43:34 +0000 Manifest this update: Tue 22 Sep 2026 09:38:34 +0000 Manifest next update: Wed 23 Sep 2026 13:23:34 +0000 Files and hashes: 1: CC4A3B86531912A00DCFBF94884369F58244CFCD.crl (hash: im6wZsMqyw5O0JTNIflAANrzkXwt3n90SvLf7RTFD58=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:a0:1f:e4:d1:f6:4d:8d:e9:e0:7c:a9:05:3b:50:36:e8:0b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD Validity Not Before: Sep 22 09:38:34 2026 GMT Not After : Sep 23 13:23:34 2026 GMT Subject: CN=665C30CD3C81EBBE9F460FB9C7B8EAC8CBC0EB59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:9c:28:ed:c4:40:83:76:f2:14:70:b6:83: 3d:38:1b:29:5b:40:b8:06:08:37:49:f2:9f:c2:21: bb:20:2c:78:94:47:e5:55:c2:c5:f6:68:14:71:33: 2c:97:65:50:8a:68:a9:f3:a4:cf:0f:aa:28:7d:eb: d5:58:b0:58:e7:10:f8:ef:dd:bd:aa:f3:8a:03:85: cd:b9:cc:2a:27:21:ef:86:b1:ca:b0:b1:83:77:e7: 65:1f:2f:45:40:44:c5:83:05:13:2b:5e:43:04:b3: c8:53:86:b3:f4:dc:22:aa:22:ec:ba:1b:fb:9e:7c: 89:eb:e1:b9:38:b8:32:e7:5a:7f:7b:d2:c8:5d:8f: cc:96:e1:44:0f:e2:fb:9b:29:ba:22:a5:87:b5:21: 23:88:1b:f8:29:5e:eb:f2:43:b0:0b:61:20:7f:66: ae:6e:3b:27:7a:26:82:1b:ee:f8:59:82:da:5b:38: a2:b3:68:66:76:fe:d8:12:51:c0:3f:00:b5:fc:90: d3:27:0b:5a:d6:a3:07:88:38:0f:69:f0:6e:1c:22: 6f:5b:be:66:8d:f0:44:40:ac:f7:98:0c:30:4b:7b: 22:29:e4:f2:48:4d:47:b0:9c:97:e2:b8:aa:36:c5: 73:cc:fb:6c:f0:d3:36:8b:ea:cd:d2:61:4b:27:13: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:30:CD:3C:81:EB:BE:9F:46:0F:B9:C7:B8:EA:C8:CB:C0:EB:59 X509v3 Authority Key Identifier: keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:79:51:d8:a3:d8:3d:45:59:60:17:b8:be:86:ee:50:71:ed: 79:7d:06:f8:c7:36:5e:ad:28:7e:f3:46:e2:79:c9:4c:9b:32: 73:c9:a6:cf:c0:f8:b3:c2:48:d4:7b:e0:d9:23:75:ad:15:d8: 67:2e:a6:22:18:12:13:22:62:6f:33:ff:dc:02:85:dd:95:38: 02:28:8a:2e:8a:37:64:40:43:ca:d6:cf:c5:fb:11:3e:a1:82: d0:17:a0:c6:ed:56:41:2d:97:27:a5:3e:a4:5d:b5:a8:85:e1: f5:4b:51:c1:ad:d3:1e:46:3f:ce:1d:ac:23:63:77:ca:5f:5b: d6:41:19:83:86:87:f3:df:7a:76:88:f9:05:0e:d3:78:a6:3e: 51:ed:d5:07:92:e6:bf:21:49:bc:60:ab:47:dc:a6:4a:1e:c2: d3:c4:e2:1c:74:43:2e:aa:43:f1:3e:c6:20:dc:f3:ea:59:9b: 51:af:be:e1:b0:65:63:96:22:35:8a:05:6a:5d:39:f6:27:42: 30:d0:4d:65:2e:30:7b:20:bd:72:10:95:66:77:9a:58:d6:4c: 32:eb:b3:92:0c:f4:97:e7:53:00:3e:a9:35:5e:9f:c4:55:98: f3:4c:c1:b2:3e:6a:19:92:59:5b:58:56:ce:bf:04:a1:63:4d: bf:10:39:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKagH+TR9k2N6eB8qQU7UDboC9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4 MjQ0Q0ZDRDAeFw0yNjA5MjIwOTM4MzRaFw0yNjA5MjMxMzIzMzRaMDMxMTAvBgNV BAMTKDY2NUMzMENEM0M4MUVCQkU5RjQ2MEZCOUM3QjhFQUM4Q0JDMEVCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6Zwo7cRAg3byFHC2gz04Gylb QLgGCDdJ8p/CIbsgLHiUR+VVwsX2aBRxMyyXZVCKaKnzpM8Pqih969VYsFjnEPjv 3b2q84oDhc25zConIe+GscqwsYN352UfL0VARMWDBRMrXkMEs8hThrP03CKqIuy6 G/uefInr4bk4uDLnWn970shdj8yW4UQP4vubKboipYe1ISOIG/gpXuvyQ7ALYSB/ Zq5uOyd6JoIb7vhZgtpbOKKzaGZ2/tgSUcA/ALX8kNMnC1rWoweIOA9p8G4cIm9b vmaN8ERArPeYDDBLeyIp5PJITUewnJfiuKo2xXPM+2zw0zaL6s3SYUsnEzg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlwwzTyB676fRg+5x7jqyMvA61kwHwYDVR0j BBgwFoAUzEo7hlMZEqANz7+UiENp9YJEz80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTExZGMtZmY3MS00ZWQ3LWE2OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1 MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5RjU4MjQ0Q0ZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DQzRBM0I4NjUzMTkxMkEwMERDRkJGOTQ4ODQzNjlGNTgyNDRD RkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvQ0M0QTNCODY1MzE5MTJBMDBEQ0ZCRjk0ODg0MzY5 RjU4MjQ0Q0ZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd5Udij2D1FWWAXuL6G7lBx7Xl9BvjHNl6t KH7zRuJ5yUybMnPJps/A+LPCSNR74Nkjda0V2GcupiIYEhMiYm8z/9wChd2VOAIo ii6KN2RAQ8rWz8X7ET6hgtAXoMbtVkEtlyelPqRdtaiF4fVLUcGt0x5GP84drCNj d8pfW9ZBGYOGh/PfenaI+QUO03imPlHt1QeS5r8hSbxgq0fcpkoewtPE4hx0Qy6q Q/E+xiDc8+pZm1GvvuGwZWOWIjWKBWpdOfYnQjDQTWUuMHsgvXIQlWZ3mljWTDLr s5IM9JfnUwA+qTVen8RVmPNMwbI+ahmSWVtYVs6/BKFjTb8QOdw= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:25 2026 by rpki-client