$ rpki-client -vvvf rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft (raw, json) Hash identifier: oKsBdgAfhhgUXdzxsKouTua7uN6bApq1A+a/lBaK60c= Subject key identifier: 58:13:0A:E5:FC:CC:CE:99:4B:16:76:F9:E8:0C:55:18:FC:FE:EF:FC Authority key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Certificate issuer: /CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Certificate serial: 5FC4F5886F008362B9A38A8CC5CA109F28B7F456 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 06:13:43 +0000 Manifest this update: Wed 23 Sep 2026 06:08:43 +0000 Manifest next update: Thu 24 Sep 2026 06:24:43 +0000 Files and hashes: 1: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl (hash: xXFJJtvkPHwVgEnrXswm1ww97t5TXivB0srLzm8tKQE=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DR+j1zY44oxNuEO9QTU0vo2OnQJPf5eMzXADUFUvxzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c4:f5:88:6f:00:83:62:b9:a3:8a:8c:c5:ca:10:9f:28:b7:f4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Validity Not Before: Sep 23 06:08:43 2026 GMT Not After : Sep 24 06:24:43 2026 GMT Subject: CN=58130AE5FCCCCE994B1676F9E80C5518FCFEEFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:25:da:c5:87:cd:83:56:35:2d:26:eb:33: ab:ec:ef:31:ed:62:e1:16:99:ec:57:4d:f4:4f:e0: 80:68:03:19:10:bf:06:17:70:60:a9:53:63:c7:12: 71:b5:dc:b3:ab:9e:e8:66:86:b8:a7:aa:8f:51:8b: fc:a2:4e:4b:6c:29:d0:f3:d9:00:49:a4:7c:d6:ba: d7:f7:cd:fb:65:95:75:05:29:17:6b:ab:f9:08:f0: 38:b5:36:9c:00:64:ad:46:19:ca:50:fd:43:41:18: cc:7a:03:cb:87:0f:06:32:0a:a5:b7:13:d7:dd:9b: 26:1a:69:3c:21:39:b0:b4:e7:ce:47:53:81:d3:92: 30:90:2d:73:db:2a:89:1f:25:f5:2d:a0:20:bf:29: 77:ca:5e:32:d4:76:b0:f0:f8:47:98:75:24:4f:72: 1e:33:a3:37:65:b7:5d:7a:f1:c2:99:ef:1d:91:cf: 88:e9:42:82:be:36:c8:20:5c:26:bd:a7:2b:41:1a: a8:f2:59:50:7b:20:85:17:cb:bc:69:61:0f:15:10: 34:2a:92:67:db:b4:c6:12:92:9e:8a:17:92:48:18: f1:6d:87:20:c0:9e:51:2f:b6:1b:ad:04:11:56:ac: 23:0c:03:e0:07:75:46:35:32:52:3b:ab:6c:6d:2c: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:0A:E5:FC:CC:CE:99:4B:16:76:F9:E8:0C:55:18:FC:FE:EF:FC X509v3 Authority Key Identifier: keyid:0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fc:6f:6a:86:67:f7:50:7f:76:a3:cd:a2:85:17:44:57:33: 86:23:d0:30:99:ae:5f:e5:f9:2b:d7:05:b6:a5:20:45:d7:82: b4:e3:d9:65:af:41:ff:70:b5:76:4f:b6:4f:f0:c2:b9:c2:87: 14:32:71:fa:bc:01:45:8c:2e:a2:f0:d3:b9:93:10:51:4f:a5: 70:c6:a8:81:85:29:2f:c6:26:5a:39:2b:42:e7:c2:09:28:f9: 3c:32:45:24:70:23:3c:25:c5:01:14:a3:81:96:de:7d:43:02: 9e:9e:8c:f1:e8:fa:02:3d:ac:eb:7e:8a:4e:32:5b:29:76:f5: 86:86:b3:f0:f5:02:00:dd:f1:74:14:09:81:8f:e2:c7:69:ed: 0e:b4:ac:8c:80:4e:41:94:f3:38:38:91:be:75:40:22:ce:36: fa:9a:e6:91:4c:10:db:87:4c:64:1a:a8:0d:1e:8a:4f:fe:71: a1:68:dc:b6:a7:d6:dd:4c:8b:24:27:30:65:b4:08:d4:df:93: 67:7e:05:31:ca:01:28:87:27:9f:fa:05:ff:eb:29:03:4f:40: c4:3e:1f:5a:35:f2:88:ab:63:31:ee:bc:36:a2:df:a0:57:70: ff:10:57:93:8c:57:98:0d:b4:f6:33:0e:11:9e:ea:6c:e4:52: f9:8c:a5:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8T1iG8Ag2K5o4qMxcoQnyi39FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlB Qjk0RThERDAeFw0yNjA5MjMwNjA4NDNaFw0yNjA5MjQwNjI0NDNaMDMxMTAvBgNV BAMTKDU4MTMwQUU1RkNDQ0NFOTk0QjE2NzZGOUU4MEM1NTE4RkNGRUVGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnCXaxYfNg1Y1LSbrM6vs7zHt YuEWmexXTfRP4IBoAxkQvwYXcGCpU2PHEnG13LOrnuhmhrinqo9Ri/yiTktsKdDz 2QBJpHzWutf3zftllXUFKRdrq/kI8Di1NpwAZK1GGcpQ/UNBGMx6A8uHDwYyCqW3 E9fdmyYaaTwhObC0585HU4HTkjCQLXPbKokfJfUtoCC/KXfKXjLUdrDw+EeYdSRP ch4zozdlt1168cKZ7x2Rz4jpQoK+NsggXCa9pytBGqjyWVB7IIUXy7xpYQ8VEDQq kmfbtMYSkp6KF5JIGPFthyDAnlEvthutBBFWrCMMA+AHdUY1MlI7q2xtLE65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBMK5fzMzplLFnb56AxVGPz+7/wwHwYDVR0j BBgwFoAUDMzkDQfKkxe8M1nTw4CzyauU6N0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM2ZmQ1NTEtNmFiYS00MjIyLThhMjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQw N0NBOTMxN0JDMzM1OUQzQzM4MEIzQzlBQjk0RThERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0NDRTQwRDA3Q0E5MzE3QkMzMzU5RDNDMzgwQjNDOUFCOTRF OERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvMENDQ0U0MEQwN0NBOTMxN0JDMzM1OUQzQzM4MEIz QzlBQjk0RThERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf8b2qGZ/dQf3ajzaKFF0RXM4Yj0DCZrl/l +SvXBbalIEXXgrTj2WWvQf9wtXZPtk/wwrnChxQycfq8AUWMLqLw07mTEFFPpXDG qIGFKS/GJlo5K0Lnwgko+TwyRSRwIzwlxQEUo4GW3n1DAp6ejPHo+gI9rOt+ik4y Wyl29YaGs/D1AgDd8XQUCYGP4sdp7Q60rIyATkGU8zg4kb51QCLONvqa5pFMENuH TGQaqA0eik/+caFo3Lan1t1MiyQnMGW0CNTfk2d+BTHKASiHJ5/6Bf/rKQNPQMQ+ H1o18oirYzHuvDai36BXcP8QV5OMV5gNtPYzDhGe6mzkUvmMpVc= -----END CERTIFICATE-----Generated at Wed Sep 23 20:31:34 2026 by rpki-client