
$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft
File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json)
Hash identifier: rESDQgPNjYH9KBKxQ5vLLKGJHUCpZOQj7BbbWSdSDD0=
Subject key identifier: 73:1B:1B:05:68:68:FB:D9:08:68:3F:99:97:BD:F5:EB:F1:B9:07:E8
Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD
Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD
Certificate serial: 04B77CC068A392CB607762D97D67234FB6C906F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 15:33:21 +0000
Manifest this update: Sat 13 Jun 2026 15:28:21 +0000
Manifest next update: Sun 14 Jun 2026 16:51:21 +0000
Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=)
2: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: jFHL/XddR5yp4n0YrDpu/kyKlDH+SIMEteyjDxAPx/Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl
rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b7:7c:c0:68:a3:92:cb:60:77:62:d9:7d:67:23:4f:b6:c9:06:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD
Validity
Not Before: Jun 13 15:28:21 2026 GMT
Not After : Jun 14 16:51:21 2026 GMT
Subject: CN=731B1B056868FBD908683F9997BDF5EBF1B907E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:b0:b8:1c:6e:b3:fd:d0:39:70:b7:41:8e:
f5:99:47:27:03:84:c9:dc:81:45:0c:03:8e:31:40:
58:fd:12:bc:10:a2:88:fd:d8:74:7b:43:f7:c2:a7:
57:63:a7:f0:27:82:51:4c:77:0b:29:5a:70:b8:f8:
e0:9d:f0:e5:34:c9:19:b6:ad:62:be:36:e5:3c:82:
8f:43:0f:5c:5c:6e:b0:46:5c:bc:61:a6:c2:14:c0:
18:48:dd:8d:81:13:f3:6e:bb:90:6b:70:54:ef:2b:
b9:e9:74:b7:8f:a9:91:1b:f2:53:b2:b2:e8:0f:e7:
be:a2:4e:75:28:1c:c2:2d:bd:14:cd:cd:8b:29:f2:
a4:8f:60:1e:77:e8:0a:31:db:0c:e2:1a:d5:41:86:
e6:7a:13:ff:33:10:41:bf:8b:92:4a:45:ef:33:b4:
b2:f8:35:8c:3b:92:bc:b7:bb:e9:67:47:b4:bc:d4:
08:7c:69:14:27:70:3b:39:ee:20:d1:a9:bb:a3:5a:
f0:ca:3a:30:4e:7c:cb:35:4b:f4:20:68:e4:7e:aa:
6a:62:13:bd:60:ca:f8:e0:3a:88:5e:29:ba:dc:e2:
d3:bf:9c:2a:14:96:e3:68:56:4e:8c:82:1d:14:8c:
e2:86:d3:74:85:ac:c1:70:0f:da:6b:c2:e7:fc:d9:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:1B:05:68:68:FB:D9:08:68:3F:99:97:BD:F5:EB:F1:B9:07:E8
X509v3 Authority Key Identifier:
keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b5:d4:c4:db:40:fc:f8:c9:18:de:94:d7:a5:2e:b2:23:bb:
4a:a1:39:96:d1:c7:e9:92:1f:ea:d4:f2:45:5e:be:41:0d:ee:
5c:97:22:6d:36:e9:ef:97:b4:49:db:fd:01:3f:55:49:d4:9f:
3b:b6:33:28:dd:b2:25:b7:55:13:62:60:2f:73:95:e8:cf:ed:
12:dd:e9:5f:20:2d:98:22:59:e4:a4:f1:f0:90:6e:02:4e:c7:
c7:79:b5:0e:f4:02:4e:11:06:34:e6:b1:15:ba:f0:79:de:f7:
e9:44:11:b1:9f:a2:1b:65:d5:e3:4d:f0:94:cb:fb:bc:26:74:
65:8d:31:d3:7f:52:95:24:0a:f9:b0:00:db:48:2f:e3:cd:28:
9b:5e:da:55:12:66:35:ee:23:d1:d6:b5:8a:32:41:79:b9:c6:
e8:c4:17:7a:24:2a:6f:28:d5:eb:9d:53:78:39:40:f2:ed:61:
6a:d0:a5:6d:eb:72:b1:0c:d1:d3:65:b4:08:82:c5:56:ab:ac:
c4:a7:19:04:08:c4:25:c7:bf:0c:91:06:f1:a8:8e:e7:8f:39:
43:71:a8:85:df:41:cd:01:0d:22:11:49:1f:97:9e:46:33:8f:
b2:19:fd:51:6a:6e:6d:68:49:4f:01:b6:13:d1:7b:d1:17:dc:
d4:15:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:41 2026 by rpki-client