$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: Di81caBvQxVzr2A9/xCvjW3g5b0uRE1xmiCcpLpN9Ok= Subject key identifier: 9D:59:60:F4:51:2A:0F:3D:85:9B:98:16:B9:A8:37:25:6F:07:98:26 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 196E0BFE1BB775F96F47EE12EA0E0D875A6647A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0173 Signing time: Tue 24 Mar 2026 21:51:31 +0000 Manifest this update: Tue 24 Mar 2026 21:46:31 +0000 Manifest next update: Sat 28 Mar 2026 00:50:31 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: LZ6dZv1PBIGlm66BUr3+B52ApsMn6lQ0xLPXkK9ziLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6e:0b:fe:1b:b7:75:f9:6f:47:ee:12:ea:0e:0d:87:5a:66:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Mar 24 21:46:31 2026 GMT Not After : Mar 28 00:50:31 2026 GMT Subject: CN=9D5960F4512A0F3D859B9816B9A837256F079826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:f7:14:1f:12:cd:f0:00:1e:fd:d2:ba:19: cd:07:23:47:5b:ef:69:ba:c0:a6:2e:5c:95:73:34: ba:f5:93:6d:80:f5:45:a0:99:8d:93:ed:35:c5:e5: 7f:ed:35:e6:e5:4f:55:43:73:4e:c5:0d:57:d6:7b: b8:76:91:b5:49:72:14:b9:4d:84:01:d6:c8:75:e5: 35:0a:07:e0:06:44:37:6b:d9:75:66:44:07:7c:d0: 41:66:72:a5:78:34:04:55:36:3d:94:72:40:ea:60: 21:f4:e4:ff:89:89:8a:a0:41:fc:ee:2f:1f:cf:f1: e2:7f:00:b5:84:a0:05:c7:e7:b2:5a:14:46:84:2d: d9:46:38:bf:bc:bd:49:66:c7:22:a5:b4:a4:57:ce: b0:88:19:f9:09:42:40:b9:be:12:35:9a:c5:02:ed: 63:b7:03:27:6d:33:57:32:7b:b6:7a:f1:e6:58:e4: 9e:0a:e9:dc:6b:11:e9:87:76:15:00:d4:fe:6f:e5: 13:df:1c:21:ed:92:7e:a1:a0:ff:af:31:a9:fa:36: 54:4f:8c:fc:37:04:02:3d:49:3a:81:64:df:aa:59: be:eb:4f:ec:74:d0:1d:21:b9:f2:be:a0:67:16:b6: 1b:e7:80:33:bd:ed:d6:70:e2:82:c8:8b:b9:fd:87: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:59:60:F4:51:2A:0F:3D:85:9B:98:16:B9:A8:37:25:6F:07:98:26 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ad:0a:3d:13:c6:92:91:0c:a4:01:db:61:0f:02:d0:fb:3c: 56:5a:42:1e:9e:b1:95:4b:9f:f4:c2:1b:1f:8f:4d:06:fb:59: 93:80:34:00:13:b4:99:0f:64:54:d2:76:3a:8a:46:97:97:cb: 49:9c:77:c9:74:5c:ff:e3:10:7c:53:8c:eb:37:5c:53:00:3c: 6e:d4:d5:8c:2f:d7:98:50:cc:aa:bf:5f:55:fd:53:59:98:25: 78:21:6f:6f:9a:7a:8a:96:4d:b6:0f:8f:43:ac:8d:e0:a4:b1: 5d:5d:9b:71:be:93:61:6e:ee:94:28:76:fd:08:f3:e1:24:a6: ff:84:5e:04:fa:1b:50:59:d0:9c:0f:f6:b3:b4:27:ea:84:13: eb:3d:ed:a2:50:c7:84:eb:b4:34:f8:14:b3:c9:30:ba:70:b0: 09:7c:66:cd:f7:3b:5e:89:f6:b8:08:b5:31:4d:4d:c4:12:7e: 5f:64:f5:0d:95:c3:dc:17:37:94:1f:43:b0:07:f9:36:ed:03: 2a:74:60:f4:d9:a4:71:e6:dd:5b:8a:04:d9:57:c7:54:45:3f: 7e:bb:c0:a8:cf:ab:39:94:47:55:49:ad:ed:4a:b7:54:a2:a3: 54:d1:cf:8c:73:13:95:fc:9c:d9:86:67:e3:de:c3:24:45:19: c3:7d:63:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGW4L/hu3dflvR+4S6g4Nh1pmR6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNjAzMjQyMTQ2MzFaFw0yNjAzMjgwMDUwMzFaMDMxMTAvBgNV BAMTKDlENTk2MEY0NTEyQTBGM0Q4NTlCOTgxNkI5QTgzNzI1NkYwNzk4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI//cUHxLN8AAe/dK6Gc0HI0db 72m6wKYuXJVzNLr1k22A9UWgmY2T7TXF5X/tNeblT1VDc07FDVfWe7h2kbVJchS5 TYQB1sh15TUKB+AGRDdr2XVmRAd80EFmcqV4NARVNj2UckDqYCH05P+JiYqgQfzu Lx/P8eJ/ALWEoAXH57JaFEaELdlGOL+8vUlmxyKltKRXzrCIGfkJQkC5vhI1msUC 7WO3AydtM1cye7Z68eZY5J4K6dxrEemHdhUA1P5v5RPfHCHtkn6hoP+vMan6NlRP jPw3BAI9STqBZN+qWb7rT+x00B0hufK+oGcWthvngDO97dZw4oLIi7n9h/tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnVlg9FEqDz2Fm5gWuag3JW8HmCYwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKtCj0TxpKRDKQB22EPAtD7PFZaQh6esZVL n/TCGx+PTQb7WZOANAATtJkPZFTSdjqKRpeXy0mcd8l0XP/jEHxTjOs3XFMAPG7U 1Ywv15hQzKq/X1X9U1mYJXghb2+aeoqWTbYPj0OsjeCksV1dm3G+k2Fu7pQodv0I 8+Ekpv+EXgT6G1BZ0JwP9rO0J+qEE+s97aJQx4TrtDT4FLPJMLpwsAl8Zs33O16J 9rgItTFNTcQSfl9k9Q2Vw9wXN5QfQ7AH+TbtAyp0YPTZpHHm3VuKBNlXx1RFP367 wKjPqzmUR1VJre1Kt1Sio1TRz4xzE5X8nNmGZ+PewyRFGcN9Y5A= -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:13 2026 by rpki-client