$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: HjFR8XoWNkncMuES0H4wADJfB9ESUjIUagi65Yg31ZM= Subject key identifier: 8F:99:77:89:43:AE:E7:FE:1B:A4:6E:F0:1C:F5:01:7C:FF:26:B2:5D Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 60DB56A49750FB24E2EE6454258467C02E313379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 03A2 Signing time: Thu 26 Mar 2026 03:42:35 +0000 Manifest this update: Thu 26 Mar 2026 03:37:35 +0000 Manifest next update: Sun 29 Mar 2026 10:10:35 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 2/MHsRhi1qpWra55HOdpLJbBkw+VrpJNtc4FckBsLcg=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:56:a4:97:50:fb:24:e2:ee:64:54:25:84:67:c0:2e:31:33:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Mar 26 03:37:35 2026 GMT Not After : Mar 29 10:10:35 2026 GMT Subject: CN=8F99778943AEE7FE1BA46EF01CF5017CFF26B25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:d0:83:ae:f4:5c:6a:e1:b3:72:1a:af:42: a2:a6:c9:7b:a9:f0:71:68:63:73:41:81:44:b2:66: 30:29:ba:45:dc:93:b0:19:98:d4:93:03:be:b8:10: b0:95:89:ee:4f:d4:16:aa:42:a8:8f:c4:6a:cd:a6: c3:03:14:d6:7a:49:46:8c:6e:5a:f6:2e:1e:ff:28: 26:62:44:a9:95:53:13:bd:d6:7a:a4:84:5f:88:66: 46:c7:09:cf:7b:fc:e2:9b:60:45:38:34:48:f9:c5: 0d:ff:92:a7:5e:bb:e5:93:77:a4:7b:45:23:d8:e7: 4f:9b:3d:13:59:a6:01:b5:62:6f:5c:b1:7a:21:69: f1:33:44:74:53:f7:8a:1d:1d:b5:c9:11:88:c6:fd: bd:44:51:d3:7d:cd:eb:22:ab:89:2e:3e:03:de:a1: b0:6f:fc:80:fc:86:68:a3:13:34:75:4e:71:19:8d: 29:37:f4:a0:51:5f:85:1a:b4:7d:68:e3:6a:e1:9a: 7a:1e:fa:64:46:f5:75:49:df:10:9b:e8:97:b2:93: 5a:e8:19:28:b5:97:e4:98:a9:aa:fd:63:2b:26:51: 74:f4:cf:b6:69:35:c0:8d:6d:87:c0:78:af:a8:b5: 88:1f:53:5d:c6:fc:05:13:9c:2b:3c:ee:ed:ae:8d: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:77:89:43:AE:E7:FE:1B:A4:6E:F0:1C:F5:01:7C:FF:26:B2:5D X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:e2:18:fc:d1:8c:8c:94:e6:0c:06:a4:83:f9:03:2c:b3:51: be:a3:a5:12:71:8c:81:50:a7:5e:52:bc:cc:1f:1b:be:5a:7d: 83:4f:19:fa:e0:7f:26:fb:25:94:9b:1d:19:2e:53:36:23:79: c2:64:9b:19:af:8a:3a:6f:c7:5c:09:b8:c6:3f:ba:e6:8b:40: 89:a8:88:32:6e:04:be:c5:d0:08:bc:f3:31:f7:92:e7:07:30: 70:40:e2:8a:72:af:bd:a7:17:b7:46:0f:65:c7:7b:81:a9:d3: 02:3d:c8:bd:1c:d6:31:54:82:d0:cb:6b:39:21:65:0f:a1:ee: de:44:3e:86:fb:da:c4:be:25:e4:15:56:dc:42:82:ee:ae:ec: 87:26:0a:11:28:a2:d1:f1:c9:f8:44:c9:18:03:01:79:4f:fd: 46:cc:1e:ca:ae:1c:1c:78:a7:a0:b6:5a:b4:95:82:a7:9a:18: 65:df:20:09:14:6a:fc:a8:e0:a3:89:89:30:84:fe:34:5f:35: 44:5b:91:09:68:8f:f9:f2:00:b7:c0:5f:2a:e0:bd:93:0c:68: 4d:0a:11:87:43:1b:b7:e1:6b:14:f5:d5:46:29:d8:71:44:c0: d9:11:af:b6:2b:69:c8:1c:f7:1d:0b:67:b7:47:a8:34:cc:2b: 0c:d8:c9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNtWpJdQ+yTi7mRUJYRnwC4xM3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNjAzMjYwMzM3MzVaFw0yNjAzMjkxMDEwMzVaMDMxMTAvBgNV BAMTKDhGOTk3Nzg5NDNBRUU3RkUxQkE0NkVGMDFDRjUwMTdDRkYyNkIyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/dCDrvRcauGzchqvQqKmyXup 8HFoY3NBgUSyZjApukXck7AZmNSTA764ELCVie5P1BaqQqiPxGrNpsMDFNZ6SUaM blr2Lh7/KCZiRKmVUxO91nqkhF+IZkbHCc97/OKbYEU4NEj5xQ3/kqdeu+WTd6R7 RSPY50+bPRNZpgG1Ym9csXohafEzRHRT94odHbXJEYjG/b1EUdN9zesiq4kuPgPe obBv/ID8hmijEzR1TnEZjSk39KBRX4UatH1o42rhmnoe+mRG9XVJ3xCb6Jeyk1ro GSi1l+SYqar9YysmUXT0z7ZpNcCNbYfAeK+otYgfU13G/AUTnCs87u2ujYObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5l3iUOu5/4bpG7wHPUBfP8msl0wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN3iGPzRjIyU5gwGpIP5AyyzUb6jpRJxjIFQ p15SvMwfG75afYNPGfrgfyb7JZSbHRkuUzYjecJkmxmvijpvx1wJuMY/uuaLQImo iDJuBL7F0Ai88zH3kucHMHBA4opyr72nF7dGD2XHe4Gp0wI9yL0c1jFUgtDLazkh ZQ+h7t5EPob72sS+JeQVVtxCgu6u7IcmChEootHxyfhEyRgDAXlP/UbMHsquHBx4 p6C2WrSVgqeaGGXfIAkUavyo4KOJiTCE/jRfNURbkQloj/nyALfAXyrgvZMMaE0K EYdDG7fhaxT11UYp2HFEwNkRr7Yracgc9x0LZ7dHqDTMKwzYyWA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:00 2026 by rpki-client