$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: FWvK279s9Houo6nXu+wwHNMG8/EcH+qgdVVGwmezMsQ= Subject key identifier: CB:9B:FF:C0:79:22:AD:81:38:95:1D:D9:93:ED:94:0D:2E:AA:EA:E2 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 077483C86E945A796DA53391306DF80CC0B77FC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01EE Signing time: Wed 25 Mar 2026 09:30:04 +0000 Manifest this update: Wed 25 Mar 2026 09:25:04 +0000 Manifest next update: Sat 28 Mar 2026 16:05:04 +0000 Files and hashes: 1: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: aRyNbxly/ap/5j+ThcI+e8UeefxxDtBCnqrMi9ggcYk=) 2: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=) 3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: 84KdwUDQ+0D3+ekB6207g3sjA0I9x+smJE2POztYJcE=) 4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: nO1NSzeB5XT9XzKpF7F6P+AZbf5v5+SS/A0zE49DbPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:83:c8:6e:94:5a:79:6d:a5:33:91:30:6d:f8:0c:c0:b7:7f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Mar 25 09:25:04 2026 GMT Not After : Mar 28 16:05:04 2026 GMT Subject: CN=CB9BFFC07922AD8138951DD993ED940D2EAAEAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:03:1a:af:84:a8:26:15:f8:13:0a:ff:a0: a9:ab:4e:8e:5c:cc:7b:d7:fe:0e:a7:43:41:ec:18: 23:f3:44:53:f7:74:7e:92:d3:9b:a2:f9:f7:13:6b: 6f:6b:ab:9c:6d:18:af:19:26:4b:6e:0f:75:1b:27: 8d:6d:8c:64:19:21:aa:e2:77:3b:69:09:e7:8b:51: 74:47:df:cd:2a:d2:a7:c4:b8:7f:3a:d4:ef:5b:0c: 84:09:f4:99:85:01:e0:45:7c:21:43:0d:41:3c:3e: 18:5b:2e:ee:4e:80:58:b2:cb:68:5a:17:74:35:5e: 53:69:a7:5c:e3:8a:6a:86:f6:9f:ce:32:92:7d:ce: 56:7f:22:10:a4:9e:15:ee:64:72:97:5a:47:e6:f2: e4:9e:0c:b0:6a:4b:ca:34:73:1f:eb:26:cf:42:c2: da:d1:9b:b5:eb:64:a8:06:a6:d0:d5:6b:e8:f4:c4: c0:b1:79:43:ab:a5:a8:05:d3:ba:bf:cb:e8:67:3a: 38:08:d1:4d:88:40:97:12:28:42:e5:d5:13:9c:9c: 39:4d:ed:a6:72:1c:7b:b8:f8:ff:62:48:63:dd:e3: 7d:8a:a8:e8:66:b8:18:9c:77:a3:8f:6d:2a:8d:ea: 40:89:a5:27:ea:0d:6a:8f:ee:4b:15:2e:f9:c8:07: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9B:FF:C0:79:22:AD:81:38:95:1D:D9:93:ED:94:0D:2E:AA:EA:E2 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:33:ea:bc:39:c8:69:92:bf:a7:92:03:c8:a7:79:97:4b:3e: a2:ab:88:dd:e9:48:ec:b6:17:ea:cc:8c:73:ee:0d:a3:bf:b8: 1c:15:d8:01:ab:3a:b7:16:f9:ec:bf:ae:06:7b:cc:ff:50:ae: 53:22:45:91:28:bf:3e:97:a0:6b:5e:fb:29:a8:40:49:4e:77: 17:1b:76:57:8e:0a:e4:74:3a:69:97:17:ef:74:a0:e1:4d:48: c4:ac:1f:da:1c:a8:2c:e3:c4:38:b7:92:49:26:b6:ad:80:01: d9:58:92:13:a7:ae:17:db:c4:38:d4:6d:3e:68:0b:48:4a:16: 5a:4e:69:b6:59:d3:dd:8d:0f:96:55:d1:42:05:bf:5a:73:9e: 88:33:b5:53:b2:21:f4:b5:95:b0:05:8e:b1:75:0a:9e:93:d0: ae:f8:48:40:c1:12:17:27:dd:f6:6d:20:ee:42:3a:06:7e:99: fd:12:20:f8:47:9a:6f:d1:0b:0b:5a:f1:3a:da:6a:73:b0:d6: d0:56:0d:dd:41:b5:3a:ea:c6:2b:f6:97:53:73:6c:93:a2:7c: f6:16:d0:c7:f4:a9:03:ff:e0:ba:40:1b:2a:19:86:50:9b:fa: 80:17:34:a9:2a:c5:45:7c:5a:cc:45:45:14:e9:fc:c4:d8:b5: 27:9d:36:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3SDyG6UWnltpTORMG34DMC3f8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNjAzMjUwOTI1MDRaFw0yNjAzMjgxNjA1MDRaMDMxMTAvBgNV BAMTKENCOUJGRkMwNzkyMkFEODEzODk1MUREOTkzRUQ5NDBEMkVBQUVBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gwMar4SoJhX4Ewr/oKmrTo5c zHvX/g6nQ0HsGCPzRFP3dH6S05ui+fcTa29rq5xtGK8ZJktuD3UbJ41tjGQZIari dztpCeeLUXRH380q0qfEuH861O9bDIQJ9JmFAeBFfCFDDUE8PhhbLu5OgFiyy2ha F3Q1XlNpp1zjimqG9p/OMpJ9zlZ/IhCknhXuZHKXWkfm8uSeDLBqS8o0cx/rJs9C wtrRm7XrZKgGptDVa+j0xMCxeUOrpagF07q/y+hnOjgI0U2IQJcSKELl1ROcnDlN 7aZyHHu4+P9iSGPd432KqOhmuBicd6OPbSqN6kCJpSfqDWqP7ksVLvnIBwv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5v/wHkirYE4lR3Zk+2UDS6q6uIwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIz6rw5yGmSv6eSA8ineZdLPqKriN3pSOy2 F+rMjHPuDaO/uBwV2AGrOrcW+ey/rgZ7zP9QrlMiRZEovz6XoGte+ymoQElOdxcb dleOCuR0OmmXF+90oOFNSMSsH9ocqCzjxDi3kkkmtq2AAdlYkhOnrhfbxDjUbT5o C0hKFlpOabZZ092ND5ZV0UIFv1pznogztVOyIfS1lbAFjrF1Cp6T0K74SEDBEhcn 3fZtIO5COgZ+mf0SIPhHmm/RCwta8TraanOw1tBWDd1BtTrqxiv2l1NzbJOifPYW 0Mf0qQP/4LpAGyoZhlCb+oAXNKkqxUV8WsxFRRTp/MTYtSedNrI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:00 2026 by rpki-client