$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft File: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft (raw, json) Hash identifier: 0skrCz49/WAaNjU6jfnHvCdZHPBfDbregv8aAIgBF90= Subject key identifier: 90:F8:88:03:92:FA:D4:BF:CD:97:5C:21:E1:D4:D6:7F:D6:2D:91:F3 Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 Certificate issuer: /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Certificate serial: 6677D0B7CE4196F717B8ADF168A21C8B67455E7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 22:03:49 +0000 Manifest this update: Tue 28 Jul 2026 21:58:49 +0000 Manifest next update: Thu 30 Jul 2026 01:02:49 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: Qdc9euHL+3k8NfrXNBnHkozHtMezUxyyeuXRXCqCBdM=) 2: CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl (hash: lTVFTdX7VGZ+8InpSpcXWtR06hz7/gkLg1nVtlSC/8A=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: uvdb69KVLoscNZSGWpIcBSgwPx5W3Wtj9pl5ilu6nps=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: jgOKZm86Ne016AW6eohuKXLwhxMOpk/gXggXShM+U6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:77:d0:b7:ce:41:96:f7:17:b8:ad:f1:68:a2:1c:8b:67:45:5e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0 Validity Not Before: Jul 28 21:58:49 2026 GMT Not After : Jul 30 01:02:49 2026 GMT Subject: CN=90F8880392FAD4BFCD975C21E1D4D67FD62D91F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:7d:81:24:d2:9e:bb:5d:c0:c6:40:ab:ef: 0a:cd:f5:50:14:2c:17:2e:66:fc:7d:9c:cb:21:d5: cd:9d:3f:36:52:7a:a7:25:43:85:df:2e:98:18:10: a3:88:bb:3b:87:41:6e:53:30:9d:68:fc:bb:07:94: 0d:4f:a4:de:eb:74:03:22:4e:fb:66:5b:7f:59:ce: e1:93:43:3f:3f:f4:da:d7:5f:18:05:a7:30:3c:55: 3e:87:28:83:e2:fd:13:7b:40:bf:72:6a:1b:12:6d: ee:d4:04:de:14:41:bf:d1:eb:7a:62:d5:d4:17:87: 47:07:83:a2:c7:73:f9:e2:0c:7b:36:40:bd:53:ca: 73:0c:46:b5:63:49:99:51:65:37:f4:1b:64:89:0e: 40:b0:61:46:e1:23:61:8a:4c:1d:37:8a:fb:90:e1: 48:4f:a1:cc:d4:29:a8:1e:8c:55:6e:fa:13:c7:95: 5e:8f:72:11:d1:26:ce:a7:59:3f:13:74:aa:de:f2: c2:9c:44:80:7e:09:7c:f2:01:c1:0c:ae:2f:9c:bf: c3:fc:cf:0e:9e:81:00:68:0c:90:48:64:66:71:10: 56:ba:2c:54:31:55:bc:3c:9d:27:14:e5:01:27:99: 0b:a7:04:97:1a:13:64:27:6c:2f:27:56:c0:d2:b6: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:88:03:92:FA:D4:BF:CD:97:5C:21:E1:D4:D6:7F:D6:2D:91:F3 X509v3 Authority Key Identifier: keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:72:4f:e1:a9:63:45:66:39:9c:2c:14:99:1a:24:94:5d:b6: 83:49:b9:69:68:62:53:1d:58:e8:28:db:cc:d2:56:66:3d:7c: 6b:19:49:a4:4f:f0:76:1a:52:40:8f:e1:76:e4:1e:a8:94:5f: 12:81:72:68:08:99:6e:67:c9:b7:6f:03:34:7e:d6:90:16:71: e2:60:11:6f:5f:54:1a:e3:10:f5:15:c9:15:cd:ef:08:cd:28: c9:a9:9e:db:38:e1:ad:a8:68:8d:b6:b5:aa:c0:18:bb:70:58: 82:43:83:a1:3b:fd:99:45:c3:3f:6b:dc:bc:55:96:80:6a:ce: 9a:ad:a2:cf:fe:bb:30:05:e5:7d:a3:1a:c6:63:72:dc:ee:02: 2e:3d:0f:e0:53:4e:9d:81:7b:e1:dd:f8:7c:5e:f8:9d:10:c5: cf:4e:51:a4:bd:75:d0:9b:5e:42:33:49:e9:88:da:c8:35:7b: 18:85:1f:5e:63:f7:ed:52:14:2f:3e:56:42:21:3d:76:dc:0f: d9:84:87:60:4d:00:ca:2c:14:79:d5:96:e7:06:7e:d4:5a:bb: 71:8c:2f:db:ae:86:d1:54:79:60:71:12:45:4d:6a:61:fd:19: 35:d3:fc:0d:eb:46:86:09:cd:11:98:70:c5:4e:f4:f5:3b:15: ba:ec:1d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnfQt85BlvcXuK3xaKIci2dFXn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMw NTI0Q0ZGMDAeFw0yNjA3MjgyMTU4NDlaFw0yNjA3MzAwMTAyNDlaMDMxMTAvBgNV BAMTKDkwRjg4ODAzOTJGQUQ0QkZDRDk3NUMyMUUxRDRENjdGRDYyRDkxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydH2BJNKeu13AxkCr7wrN9VAU LBcuZvx9nMsh1c2dPzZSeqclQ4XfLpgYEKOIuzuHQW5TMJ1o/LsHlA1PpN7rdAMi TvtmW39ZzuGTQz8/9NrXXxgFpzA8VT6HKIPi/RN7QL9yahsSbe7UBN4UQb/R63pi 1dQXh0cHg6LHc/niDHs2QL1TynMMRrVjSZlRZTf0G2SJDkCwYUbhI2GKTB03ivuQ 4UhPoczUKagejFVu+hPHlV6PchHRJs6nWT8TdKre8sKcRIB+CXzyAcEMri+cv8P8 zw6egQBoDJBIZGZxEFa6LFQxVbw8nScU5QEnmQunBJcaE2QnbC8nVsDStqjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPiIA5L61L/Nl1wh4dTWf9YtkfMwHwYDVR0j BBgwFoAUzHouxqeAW9MDBsPWStKSrAUkz/AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRmYjM5OTItMWQyZi00NmNlLTg4NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZB NzgwNUJEMzAzMDZDM0Q2NEFEMjkyQUMwNTI0Q0ZGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQzdBMkVDNkE3ODA1QkQzMDMwNkMzRDY0QUQyOTJBQzA1MjRD RkYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvQ0M3QTJFQzZBNzgwNUJEMzAzMDZDM0Q2NEFEMjky QUMwNTI0Q0ZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARyT+GpY0VmOZwsFJkaJJRdtoNJuWloYlMd WOgo28zSVmY9fGsZSaRP8HYaUkCP4XbkHqiUXxKBcmgImW5nybdvAzR+1pAWceJg EW9fVBrjEPUVyRXN7wjNKMmpnts44a2oaI22tarAGLtwWIJDg6E7/ZlFwz9r3LxV loBqzpqtos/+uzAF5X2jGsZjctzuAi49D+BTTp2Be+Hd+Hxe+J0Qxc9OUaS9ddCb XkIzSemI2sg1exiFH15j9+1SFC8+VkIhPXbcD9mEh2BNAMosFHnVlucGftRau3GM L9uuhtFUeWBxEkVNamH9GTXT/A3rRoYJzRGYcMVO9PU7FbrsHXA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:18 2026 by rpki-client