$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: lHhZi+n7n4BKXWvt07Gk/BzMHtqOd3t7PTr1sM7olkQ= Subject key identifier: 8A:AB:F0:C9:94:76:96:1A:29:08:BE:30:1F:2F:F5:86:0F:BD:0F:CF Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 6A6E653E056129392920772B9FDB6C9D999DDB01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 0111 Signing time: Tue 24 Mar 2026 12:42:30 +0000 Manifest this update: Tue 24 Mar 2026 12:37:30 +0000 Manifest next update: Fri 27 Mar 2026 21:57:30 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 2: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: DP8S6+C2TXfFX3fUfS5diwft2072d7z16YTz+NmnDno=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6e:65:3e:05:61:29:39:29:20:77:2b:9f:db:6c:9d:99:9d:db:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Mar 24 12:37:30 2026 GMT Not After : Mar 27 21:57:30 2026 GMT Subject: CN=8AABF0C99476961A2908BE301F2FF5860FBD0FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:38:f8:d3:7b:62:41:72:67:1a:80:d9:6e: 46:bb:07:62:52:97:7f:4e:aa:9b:27:4f:aa:a3:9c: ac:79:39:5b:14:dd:72:df:9d:df:dd:5d:06:78:2f: 2e:6e:b1:6f:ea:b1:9a:41:94:88:80:5b:20:ab:2f: bd:28:69:86:a8:1d:f0:da:14:47:d8:8c:0e:03:0d: 9b:65:c0:eb:39:a7:68:a7:8d:3f:3d:23:b5:03:21: bf:3c:f7:18:4d:80:7c:4b:af:d4:89:3d:8b:7a:15: 05:16:e1:32:62:6a:d1:42:23:09:7f:92:12:16:4a: f8:7a:ce:c1:67:77:ab:b8:a4:a3:56:a4:61:c4:0b: f9:42:8f:3e:d2:0b:66:da:77:27:c9:a0:72:ee:bc: f5:be:0b:d2:78:e2:3b:6a:ee:81:bf:99:ee:46:b2: 0f:27:be:a4:e7:27:9b:47:87:d3:c0:59:a1:dc:59: 43:4b:79:76:13:b0:09:df:d4:5f:0f:3c:c4:cc:5c: 06:0c:71:04:eb:5d:ca:5a:e6:65:41:90:02:9f:0a: e4:64:a3:05:ff:bc:fc:d3:bf:68:a6:30:ff:80:4d: 2f:fb:bd:1f:6a:cd:55:c0:30:e4:7f:a7:1c:e8:07: 47:c0:69:1f:02:f8:8e:29:a1:c0:3a:90:82:f8:9b: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AB:F0:C9:94:76:96:1A:29:08:BE:30:1F:2F:F5:86:0F:BD:0F:CF X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:08:e5:be:60:23:05:a1:03:61:32:ca:f4:c1:2d:16:6c:7a: 9c:60:06:49:46:82:33:dd:22:85:36:8a:47:2a:23:7a:f9:8f: ed:3e:07:08:94:72:12:33:34:42:40:8f:2b:ed:01:ed:96:e7: c7:f7:d1:48:91:45:4d:07:3b:4d:2e:91:a9:e8:f7:85:b7:1f: b2:d6:5b:7d:d3:ff:58:d6:13:a4:1e:f8:71:11:41:ab:d2:f3: 77:0c:24:a5:60:db:23:09:63:b9:9a:fb:f5:fb:21:c3:04:85: 60:d2:2a:25:17:a3:dd:ad:8a:50:b3:29:29:a3:63:31:c7:01: ac:19:5a:63:6b:c5:18:93:c0:92:fd:95:a9:69:bc:1b:ec:84: 69:72:64:29:46:c0:03:a8:2e:92:7f:7c:5a:17:b7:92:0e:2f: 68:9a:1e:c0:1e:2a:a7:85:88:4c:53:cb:b7:b7:e2:13:9a:df: 15:f8:b6:b2:0d:b5:5d:b0:38:6b:50:c3:c1:ff:66:98:39:ce: 9a:48:07:ba:66:46:7e:d6:2a:2c:f1:fc:62:98:e9:fb:29:7e: a8:a9:ae:3b:1b:c8:d0:fe:b0:b5:26:d8:46:48:03:30:20:45: 15:bc:49:94:cd:b4:43:9f:8d:da:bb:6b:74:59:3b:16:52:76: ca:b0:ee:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUam5lPgVhKTkpIHcrn9tsnZmd2wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNjAzMjQxMjM3MzBaFw0yNjAzMjcyMTU3MzBaMDMxMTAvBgNV BAMTKDhBQUJGMEM5OTQ3Njk2MUEyOTA4QkUzMDFGMkZGNTg2MEZCRDBGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTTj403tiQXJnGoDZbka7B2JS l39OqpsnT6qjnKx5OVsU3XLfnd/dXQZ4Ly5usW/qsZpBlIiAWyCrL70oaYaoHfDa FEfYjA4DDZtlwOs5p2injT89I7UDIb889xhNgHxLr9SJPYt6FQUW4TJiatFCIwl/ khIWSvh6zsFnd6u4pKNWpGHEC/lCjz7SC2badyfJoHLuvPW+C9J44jtq7oG/me5G sg8nvqTnJ5tHh9PAWaHcWUNLeXYTsAnf1F8PPMTMXAYMcQTrXcpa5mVBkAKfCuRk owX/vPzTv2imMP+ATS/7vR9qzVXAMOR/pxzoB0fAaR8C+I4pocA6kIL4m0OHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiqvwyZR2lhopCL4wHy/1hg+9D88wHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkI5b5gIwWhA2EyyvTBLRZsepxgBklGgjPd IoU2ikcqI3r5j+0+BwiUchIzNEJAjyvtAe2W58f30UiRRU0HO00ukano94W3H7LW W33T/1jWE6Qe+HERQavS83cMJKVg2yMJY7ma+/X7IcMEhWDSKiUXo92tilCzKSmj YzHHAawZWmNrxRiTwJL9lalpvBvshGlyZClGwAOoLpJ/fFoXt5IOL2iaHsAeKqeF iExTy7e34hOa3xX4trINtV2wOGtQw8H/Zpg5zppIB7pmRn7WKizx/GKY6fspfqip rjsbyND+sLUm2EZIAzAgRRW8SZTNtEOfjdq7a3RZOxZSdsqw7hU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:53 2026 by rpki-client