$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: XZILYQtuTb5ucJY1FmZsDqTcvKydDhl1CrPHCjWLp2Q= Subject key identifier: F1:96:4D:E8:31:D5:6B:D9:8E:85:AB:61:73:A1:45:62:E8:76:B0:AA Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 3186B0520970D03E7A5FBCC48F2A212C01BD3207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 024F Signing time: Thu 26 Mar 2026 16:30:01 +0000 Manifest this update: Thu 26 Mar 2026 16:25:01 +0000 Manifest next update: Sun 29 Mar 2026 18:54:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: mZZxWzYI+/x/HPmJcFlJlvOu172XUYAgVPc/9sUojk8=) 2: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: kWPk1IaJbMKrP68l4e9qo1hax8mmk1FiUFRfYcDVYw4=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: pPrmF7wA0mkz0XFtTbZ2mXTXaWSM3+27UUv699+o4qw=) 4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: ugs0c0VPcoyXvgnQe8BNqVxdTK1dLc3Sk2MjVANs5YE=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: FwcFScp7Cs7HZfIouUaq3jflFIuNZirrbsGdb6d6Gyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:b0:52:09:70:d0:3e:7a:5f:bc:c4:8f:2a:21:2c:01:bd:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Mar 26 16:25:01 2026 GMT Not After : Mar 29 18:54:01 2026 GMT Subject: CN=F1964DE831D56BD98E85AB6173A14562E876B0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:f2:cd:a8:99:50:49:dc:58:ac:cd:ad:87: 16:e4:53:76:56:c2:77:ac:6d:aa:9a:1c:da:63:22: 7b:59:a5:b0:f8:c7:78:33:e5:a1:cc:33:cd:f3:4f: f5:ad:3b:83:bf:3a:fa:ff:bc:53:ff:08:01:05:c1: ac:57:21:b6:77:c6:c4:5e:f1:33:78:3a:49:0d:c4: 9a:a4:44:fd:95:c8:c1:7f:b8:6e:c0:92:ca:bf:c7: ae:0e:53:ba:4e:aa:d7:d1:3d:71:bd:25:ff:11:2a: 7e:8c:2b:d3:95:30:b0:93:12:14:61:29:a3:b1:fa: c1:76:37:2c:48:44:06:9e:8d:57:70:2d:1a:1b:dc: ae:0d:63:17:59:65:72:94:71:a5:a0:5d:07:ca:54: 8d:2e:12:f5:52:aa:32:66:57:51:d7:a4:11:ed:82: ec:ed:9a:34:23:d5:76:03:9f:b4:d2:84:90:72:e8: 72:cc:9a:31:c7:d8:39:80:39:06:93:8f:89:25:cc: 5a:ad:52:03:86:5f:9c:81:50:8d:75:2f:92:34:fe: e1:84:16:c1:18:02:7b:fe:f4:8f:c8:c3:61:e4:80: 69:21:3c:c6:5d:af:d3:10:8e:1f:13:42:f3:66:fa: 27:0e:e5:f6:c6:43:c2:63:d2:fb:b4:ff:04:80:1a: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:4D:E8:31:D5:6B:D9:8E:85:AB:61:73:A1:45:62:E8:76:B0:AA X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cf:1f:74:66:e2:37:11:5e:4d:93:4f:4c:8b:d0:32:e6:ee: 13:b0:27:72:9f:c9:e2:1f:bb:d8:fd:0f:16:08:10:5a:fb:0c: d8:aa:52:ac:45:50:63:23:9c:9d:d2:75:ba:10:b9:5d:61:d5: f8:7e:19:e9:63:79:15:08:30:88:84:90:bb:96:54:41:98:1d: f1:47:9f:d2:77:b6:a4:6f:8b:3f:68:77:0f:4e:8d:50:75:f1: 92:dc:f0:d2:05:90:14:c9:be:0e:34:c2:76:81:74:82:6b:e1: 10:f8:e1:98:6d:86:2e:a6:3e:b2:5f:dc:ae:28:db:93:ce:93: 19:27:f1:0a:51:e1:e3:c1:2d:b4:13:70:2e:c4:f3:b2:2a:42: c5:a6:7f:a4:05:f1:60:61:71:38:45:78:cf:fe:3e:3d:a7:30: 68:5c:0d:85:fb:12:4f:da:ce:3b:2b:cb:8c:a0:d0:7a:6e:2d: 6e:c0:98:d0:79:1d:14:f2:de:00:11:00:30:3c:fa:7a:fb:e4: 2e:6f:a8:11:4f:a7:b0:de:96:9c:f0:dc:7e:19:33:fb:ae:e8: ce:4d:8c:f2:74:5c:b8:4b:5b:f3:51:cc:8d:17:ac:c3:e3:37: 2a:77:ac:66:0a:49:c6:2b:c7:27:d1:07:83:26:06:3f:8c:4e: 97:9c:7f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYawUglw0D56X7zEjyohLAG9MgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNjAzMjYxNjI1MDFaFw0yNjAzMjkxODU0MDFaMDMxMTAvBgNV BAMTKEYxOTY0REU4MzFENTZCRDk4RTg1QUI2MTczQTE0NTYyRTg3NkIwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrvLNqJlQSdxYrM2thxbkU3ZW wnesbaqaHNpjIntZpbD4x3gz5aHMM83zT/WtO4O/Ovr/vFP/CAEFwaxXIbZ3xsRe 8TN4OkkNxJqkRP2VyMF/uG7Aksq/x64OU7pOqtfRPXG9Jf8RKn6MK9OVMLCTEhRh KaOx+sF2NyxIRAaejVdwLRob3K4NYxdZZXKUcaWgXQfKVI0uEvVSqjJmV1HXpBHt guztmjQj1XYDn7TShJBy6HLMmjHH2DmAOQaTj4klzFqtUgOGX5yBUI11L5I0/uGE FsEYAnv+9I/Iw2HkgGkhPMZdr9MQjh8TQvNm+icO5fbGQ8Jj0vu0/wSAGv9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ZZN6DHVa9mOhathc6FFYuh2sKowHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLPH3Rm4jcRXk2TT0yL0DLm7hOwJ3KfyeIf u9j9DxYIEFr7DNiqUqxFUGMjnJ3SdboQuV1h1fh+GeljeRUIMIiEkLuWVEGYHfFH n9J3tqRviz9odw9OjVB18ZLc8NIFkBTJvg40wnaBdIJr4RD44Zhthi6mPrJf3K4o 25POkxkn8QpR4ePBLbQTcC7E87IqQsWmf6QF8WBhcThFeM/+Pj2nMGhcDYX7Ek/a zjsry4yg0HpuLW7AmNB5HRTy3gARADA8+nr75C5vqBFPp7Delpzw3H4ZM/uu6M5N jPJ0XLhLW/NRzI0XrMPjNyp3rGYKScYrxyfRB4MmBj+MTpecfw0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:50 2026 by rpki-client