$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: nNVtE9HS2kC+GWhf8L2bLF8d3dv+ssPYt4AyL+E1eLA= Subject key identifier: C5:E3:77:10:C0:10:C3:11:1F:65:4C:11:18:BC:06:A2:CD:B0:52:B9 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 686D07A83245BFEF0E2D7B32CC7C83FB45500D51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 0220 Signing time: Wed 25 Mar 2026 13:32:25 +0000 Manifest this update: Wed 25 Mar 2026 13:27:25 +0000 Manifest next update: Sat 28 Mar 2026 15:45:25 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) 2: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: eF36F2O8aJxtQTB4dhuIgesGEoNbnpucx3HVN8PdcpY=) 3: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: f0SsLswPilPvPbMFKpaJI7W/EIOShyoOBmV2HG2RCbM=) 4: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gW58Bt6Gz49TMr81C5jMAuCRmOf4ew6UR7uHG5yi3xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6d:07:a8:32:45:bf:ef:0e:2d:7b:32:cc:7c:83:fb:45:50:0d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Mar 25 13:27:25 2026 GMT Not After : Mar 28 15:45:25 2026 GMT Subject: CN=C5E37710C010C3111F654C1118BC06A2CDB052B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:1f:77:47:26:c4:fa:da:69:64:6f:10:00: fe:b3:31:b9:d3:91:0d:90:c4:60:40:2a:9f:3f:24: 6b:c2:6a:72:d0:57:a8:dd:c5:d8:b1:f8:7b:c4:e8: f1:c3:f4:22:64:ca:5a:0a:e0:29:db:b3:44:c1:74: fa:3b:07:24:6c:95:65:dd:4d:03:59:f2:b3:69:94: 71:fd:c2:35:ab:8a:20:11:d8:b8:32:ad:db:ca:34: 7f:e5:1a:d8:97:e5:97:ec:f3:d0:76:b1:88:80:11: ee:e1:bf:17:ac:9a:d9:af:42:27:cb:ef:84:bf:b1: 53:81:b1:79:20:4e:69:25:bf:12:44:17:31:77:da: 6c:65:28:f6:90:65:2c:17:23:74:5c:16:f1:85:92: 6e:47:f7:48:a0:b9:1a:c1:2e:0f:cc:fc:40:90:4c: f2:03:73:64:b4:33:8a:1f:64:5b:3d:ce:39:c7:63: a0:08:ed:7a:30:19:83:2e:aa:ae:7a:66:48:4f:c8: df:15:99:3f:62:0b:43:65:8e:da:ea:8e:86:41:4a: f1:44:37:1c:7d:6a:c4:f1:d9:51:0f:06:57:46:8b: e3:05:28:33:0d:45:d1:85:00:38:29:1e:96:a9:5a: 16:ba:b1:2d:e2:b7:5e:0c:eb:c9:04:f2:51:32:c4: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:77:10:C0:10:C3:11:1F:65:4C:11:18:BC:06:A2:CD:B0:52:B9 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:fe:23:a0:83:44:2e:95:53:ad:d1:16:ba:01:97:91:78:c1: ae:37:01:0b:e9:4b:75:67:72:de:12:09:6e:a5:f8:b5:59:a7: 31:95:b0:a9:a7:29:4c:28:8e:f9:e7:af:1a:b0:1f:34:2a:a4: 5a:d2:83:d2:59:b3:13:c8:24:29:41:a4:d4:93:01:9b:d4:19: c5:e3:ff:d6:2b:0a:ff:fb:e9:cc:7b:2a:c9:5a:62:e2:b6:f8: ec:45:38:8c:60:a0:e8:24:8b:0c:c2:aa:33:8f:87:a6:bd:ed: a1:97:71:8d:89:7c:a5:79:51:cc:53:75:45:0a:9f:27:01:02: 89:86:5d:45:3b:c1:29:37:49:36:3f:ea:fa:c0:a5:b2:d2:af: 0d:1e:b6:a8:b7:ea:36:d9:22:dc:af:b8:43:14:10:0e:90:5f: 9d:23:03:e6:7b:a4:3b:0c:96:c6:98:61:55:27:ff:dc:43:48: cc:fb:c4:8e:82:91:b9:de:fd:98:10:73:51:a7:a4:d6:35:f6: 62:1c:bd:0f:59:fc:81:cd:3c:ef:83:0f:39:fe:a4:5e:09:25: 1b:92:fc:91:5e:34:69:f9:e3:d2:db:9e:ae:b5:90:cf:c2:3e: 1a:a8:00:64:77:9c:a7:0b:bc:7e:9f:b3:c8:27:bf:69:5d:f5: ed:3c:43:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaG0HqDJFv+8OLXsyzHyD+0VQDVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNjAzMjUxMzI3MjVaFw0yNjAzMjgxNTQ1MjVaMDMxMTAvBgNV BAMTKEM1RTM3NzEwQzAxMEMzMTExRjY1NEMxMTE4QkMwNkEyQ0RCMDUyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+R93RybE+tppZG8QAP6zMbnT kQ2QxGBAKp8/JGvCanLQV6jdxdix+HvE6PHD9CJkyloK4Cnbs0TBdPo7ByRslWXd TQNZ8rNplHH9wjWriiAR2LgyrdvKNH/lGtiX5Zfs89B2sYiAEe7hvxesmtmvQifL 74S/sVOBsXkgTmklvxJEFzF32mxlKPaQZSwXI3RcFvGFkm5H90iguRrBLg/M/ECQ TPIDc2S0M4ofZFs9zjnHY6AI7XowGYMuqq56ZkhPyN8VmT9iC0NljtrqjoZBSvFE Nxx9asTx2VEPBldGi+MFKDMNRdGFADgpHpapWha6sS3it14M68kE8lEyxKnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeN3EMAQwxEfZUwRGLwGos2wUrkwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALX+I6CDRC6VU63RFroBl5F4wa43AQvpS3Vn ct4SCW6l+LVZpzGVsKmnKUwojvnnrxqwHzQqpFrSg9JZsxPIJClBpNSTAZvUGcXj /9YrCv/76cx7KslaYuK2+OxFOIxgoOgkiwzCqjOPh6a97aGXcY2JfKV5UcxTdUUK nycBAomGXUU7wSk3STY/6vrApbLSrw0etqi36jbZItyvuEMUEA6QX50jA+Z7pDsM lsaYYVUn/9xDSMz7xI6Ckbne/ZgQc1GnpNY19mIcvQ9Z/IHNPO+DDzn+pF4JJRuS /JFeNGn549Lbnq61kM/CPhqoAGR3nKcLvH6fs8gnv2ld9e08Q9g= -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:42 2026 by rpki-client