$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: hZIS+0kK2XREOL1hJ6/TV23C4uECQTwBbFOkZDvy2n0= Subject key identifier: 79:62:9D:51:B5:A2:56:EB:BA:D1:58:2F:DE:0C:F5:F6:00:28:5E:0B Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 0BF6B92A2846A301ACF3A7C7758682641261AE4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:28:23 +0000 Manifest this update: Sat 13 Jun 2026 11:23:23 +0000 Manifest next update: Sun 14 Jun 2026 14:50:23 +0000 Files and hashes: 1: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: IWZyoff2gE3aY57XdyYrlTLw0wahuI/eohz+fZkHAtw=) 2: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 4: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f6:b9:2a:28:46:a3:01:ac:f3:a7:c7:75:86:82:64:12:61:ae:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Jun 13 11:23:23 2026 GMT Not After : Jun 14 14:50:23 2026 GMT Subject: CN=79629D51B5A256EBBAD1582FDE0CF5F600285E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:3f:3b:be:1d:7c:3b:e7:4f:df:42:2b:d3: 8f:dc:e2:e2:16:85:29:b1:d2:2c:a0:5f:a8:eb:d4: 3f:96:ff:55:bd:1a:1f:9e:26:37:f5:ce:b6:df:64: 36:f0:8d:3c:e2:b3:95:ec:a5:e9:e2:8a:c2:54:ad: ff:b7:b4:03:99:ea:68:93:9c:7f:04:b9:78:9b:7d: ac:51:9a:ba:a7:48:ad:25:c0:0a:ed:d4:e4:a8:78: 8b:63:42:94:94:ac:de:c0:56:ee:9a:71:c4:60:d9: 3d:04:31:a8:c1:ef:c2:3b:13:9d:ec:96:8f:2d:7a: bd:32:ae:a1:1f:34:84:c9:79:6e:7e:90:91:1a:0d: 8d:9b:9a:be:4b:cb:0a:2a:92:72:8a:9c:af:20:ef: 3a:cc:e8:16:4b:12:a3:56:3b:00:f6:9d:1d:81:ae: b1:2e:89:0c:03:bb:76:b6:c5:54:9a:fd:d7:76:7f: a2:6a:f2:6c:3c:3e:98:49:98:5d:b4:00:1c:61:80: 20:1a:88:6b:2a:94:9e:b9:f8:9b:ca:0f:84:57:a8: 6b:9c:74:12:17:9c:f0:28:8c:84:ec:85:69:e9:e2: fb:3b:18:9b:67:72:f5:c0:d6:e7:1e:1c:0c:c5:c7: 46:b4:43:1d:38:5c:86:83:45:3a:4c:ea:c0:9f:d2: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:9D:51:B5:A2:56:EB:BA:D1:58:2F:DE:0C:F5:F6:00:28:5E:0B X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:32:37:25:46:83:01:31:86:09:66:3d:22:4d:8e:98:47: 13:1b:65:f0:98:d2:7e:3e:34:5d:a9:04:6b:4b:91:3b:3b:69: 37:83:e0:df:d7:2b:6e:27:b3:87:ca:a2:5f:68:1d:70:a6:13: 02:9b:f1:56:c1:8b:6f:f3:9e:19:83:4f:11:46:13:7c:00:da: f3:7d:5e:42:07:d6:cf:73:3e:20:c1:db:0e:bb:f8:0a:66:fa: 4c:cf:51:07:88:a9:dc:38:d5:15:e0:3e:28:62:9a:33:8c:13: bf:6d:d2:98:f0:84:f5:f4:26:12:5d:2b:d6:76:f2:86:63:d2: b3:a9:61:37:25:4b:d2:8b:04:6f:9f:38:6f:20:b9:4d:2b:1c: 2b:d9:e6:5a:7f:25:be:35:84:22:01:63:11:55:25:e3:fe:af: fa:a9:c8:95:e4:ae:9b:6c:d1:d8:3c:0a:98:85:e4:38:97:dd: 22:69:14:02:72:89:87:15:50:8f:13:81:62:50:34:75:7d:5d: dc:a2:c1:e5:69:af:a7:02:36:dc:b0:e9:8b:58:67:2b:d4:84: c5:ed:52:32:b8:c8:5b:4a:22:79:d0:5f:66:aa:b4:a2:b9:d2: 7d:7e:f5:5b:69:db:2b:08:55:f5:a1:4e:25:9d:aa:b4:8f:7b: 37:19:13:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/a5KihGowGs86fHdYaCZBJhrkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA2MTMxMTIzMjNaFw0yNjA2MTQxNDUwMjNaMDMxMTAvBgNV BAMTKDc5NjI5RDUxQjVBMjU2RUJCQUQxNTgyRkRFMENGNUY2MDAyODVFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvz87vh18O+dP30Ir04/c4uIW hSmx0iygX6jr1D+W/1W9Gh+eJjf1zrbfZDbwjTzis5XspeniisJUrf+3tAOZ6miT nH8EuXibfaxRmrqnSK0lwArt1OSoeItjQpSUrN7AVu6accRg2T0EMajB78I7E53s lo8ter0yrqEfNITJeW5+kJEaDY2bmr5LywoqknKKnK8g7zrM6BZLEqNWOwD2nR2B rrEuiQwDu3a2xVSa/dd2f6Jq8mw8PphJmF20ABxhgCAaiGsqlJ65+JvKD4RXqGuc dBIXnPAojITshWnp4vs7GJtncvXA1uceHAzFx0a0Qx04XIaDRTpM6sCf0ty9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWKdUbWiVuu60Vgv3gz19gAoXgswHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT/MjclRoMBMYYJZj0iTY6YRxMbZfCY0n4+ NF2pBGtLkTs7aTeD4N/XK24ns4fKol9oHXCmEwKb8VbBi2/znhmDTxFGE3wA2vN9 XkIH1s9zPiDB2w67+Apm+kzPUQeIqdw41RXgPihimjOME79t0pjwhPX0JhJdK9Z2 8oZj0rOpYTclS9KLBG+fOG8guU0rHCvZ5lp/Jb41hCIBYxFVJeP+r/qpyJXkrpts 0dg8CpiF5DiX3SJpFAJyiYcVUI8TgWJQNHV9XdyiweVpr6cCNtyw6YtYZyvUhMXt UjK4yFtKInnQX2aqtKK50n1+9Vtp2ysIVfWhTiWdqrSPezcZE8Q= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:52 2026 by rpki-client