$ rpki-client -vvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: pGp/4WQUVis7LYIoMz54Qgu+NOVoIKn/pqKpRR8Zc94= Subject key identifier: 71:6A:6D:E2:5F:CA:0A:8A:01:65:64:CE:93:BD:4D:7C:2B:37:3A:55 Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 31B474769B5E763E87EC8F2A6ADDB973BB9D9DA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 08:46:20 +0000 Manifest this update: Wed 29 Jul 2026 08:41:20 +0000 Manifest next update: Thu 30 Jul 2026 09:07:20 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: bZS2KRx5IBV69R15MnzTguiz73nWR6qG8Ah3a0hu2es=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b4:74:76:9b:5e:76:3e:87:ec:8f:2a:6a:dd:b9:73:bb:9d:9d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Jul 29 08:41:20 2026 GMT Not After : Jul 30 09:07:20 2026 GMT Subject: CN=716A6DE25FCA0A8A016564CE93BD4D7C2B373A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:9e:97:31:43:f5:da:3d:0c:f4:b6:3a:d8: 8c:10:ab:49:52:c5:23:7e:f9:0e:91:e0:52:94:ec: 86:8b:39:41:3b:62:17:5c:f1:01:3a:59:4d:fa:e1: 7a:f4:cb:16:84:80:6a:37:6e:34:4b:1d:aa:57:68: 9a:a0:2f:0f:0f:6c:de:c6:73:8a:94:29:2e:0b:00: d8:67:0f:d7:2e:92:3e:10:0c:17:02:7f:1f:17:40: be:02:16:d7:fe:9f:f6:29:f6:c4:e3:bc:26:ce:8d: 28:1b:a1:8a:eb:e8:0e:2f:e4:63:09:b4:6f:47:24: 96:fc:0c:45:ad:f5:25:40:dd:3e:9c:9e:9a:7c:18: c6:39:f5:38:f5:41:07:44:df:e8:a1:d6:33:5b:f8: 14:ab:31:9c:63:3a:a1:56:a6:01:14:44:16:58:ac: a3:da:6d:fc:7e:ed:f0:3a:20:40:2a:79:bf:8b:12: 87:f6:72:75:b2:b1:49:7c:f3:72:c0:8f:38:37:f6: bf:92:68:13:41:91:7d:eb:fa:62:51:76:34:45:0d: 49:55:14:5d:33:6c:93:4d:9a:85:a0:7d:54:35:0b: 02:e3:ea:5c:bd:be:24:4b:ac:fe:7d:78:41:2f:76: f1:28:b9:9b:67:ff:d1:ec:97:65:74:3b:67:41:1f: 77:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6A:6D:E2:5F:CA:0A:8A:01:65:64:CE:93:BD:4D:7C:2B:37:3A:55 X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:12:44:74:2c:10:8a:6c:45:d7:08:40:cd:73:7b:9f:77:c2: 60:27:f0:45:82:73:43:99:97:ad:08:39:ce:b0:0b:c1:77:90: d1:c4:f2:f5:3a:57:a5:a9:09:e1:a8:51:93:fc:6d:d6:51:14: 63:ce:9e:65:e4:48:7f:44:3c:e5:c0:5f:df:5b:8f:52:52:8b: 2e:c0:6c:f5:0e:1e:9f:2b:4b:82:18:f3:bc:77:69:8f:b2:a2: 0f:03:7e:9f:1a:21:95:22:d8:03:80:4a:c8:3b:e3:3b:cd:76: 76:0e:18:4e:89:db:66:bd:d8:e5:b0:59:e0:1a:72:e5:d6:4a: b7:bc:f8:fe:34:9c:9b:ee:5c:9e:df:be:c0:ab:ec:be:31:62: a0:2f:45:dc:4a:47:d9:a2:94:81:7d:83:82:da:a3:1b:37:c0: d4:cd:2a:7c:0e:9e:4c:db:b5:e6:bb:66:65:63:4c:83:b9:ff: 2f:98:0c:6d:35:16:4f:41:93:3d:d9:50:35:a1:4e:66:87:d6: 06:e4:fe:64:13:fd:68:b0:8e:e3:e4:f9:61:12:5d:19:c6:b7: 8c:a4:63:14:e8:7f:bb:90:7e:3c:6a:fd:d3:73:3e:46:fc:94: 67:ef:62:08:2a:80:60:fa:1c:78:f7:c7:9e:e9:c2:c5:bf:49: a5:1e:09:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbR0dptedj6H7I8qat25c7udnaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA3MjkwODQxMjBaFw0yNjA3MzAwOTA3MjBaMDMxMTAvBgNV BAMTKDcxNkE2REUyNUZDQTBBOEEwMTY1NjRDRTkzQkQ0RDdDMkIzNzNBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG56XMUP12j0M9LY62IwQq0lS xSN++Q6R4FKU7IaLOUE7Yhdc8QE6WU364Xr0yxaEgGo3bjRLHapXaJqgLw8PbN7G c4qUKS4LANhnD9cukj4QDBcCfx8XQL4CFtf+n/Yp9sTjvCbOjSgboYrr6A4v5GMJ tG9HJJb8DEWt9SVA3T6cnpp8GMY59Tj1QQdE3+ih1jNb+BSrMZxjOqFWpgEURBZY rKPabfx+7fA6IEAqeb+LEof2cnWysUl883LAjzg39r+SaBNBkX3r+mJRdjRFDUlV FF0zbJNNmoWgfVQ1CwLj6ly9viRLrP59eEEvdvEouZtn/9Hsl2V0O2dBH3e1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWpt4l/KCooBZWTOk71NfCs3OlUwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgSRHQsEIpsRdcIQM1ze593wmAn8EWCc0OZ l60IOc6wC8F3kNHE8vU6V6WpCeGoUZP8bdZRFGPOnmXkSH9EPOXAX99bj1JSiy7A bPUOHp8rS4IY87x3aY+yog8Dfp8aIZUi2AOASsg74zvNdnYOGE6J22a92OWwWeAa cuXWSre8+P40nJvuXJ7fvsCr7L4xYqAvRdxKR9milIF9g4Laoxs3wNTNKnwOnkzb tea7ZmVjTIO5/y+YDG01Fk9Bkz3ZUDWhTmaH1gbk/mQT/WiwjuPk+WESXRnGt4yk YxTof7uQfjxq/dNzPkb8lGfvYggqgGD6HHj3x57pwsW/SaUeCcI= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:41 2026 by rpki-client