$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: +ojbKM3kO/RKpu9O+M89Nx4+ViqolTf6lmtLr85zp3g= Subject key identifier: C4:6C:C9:9B:8B:C9:34:A1:44:01:FF:57:FB:AB:AE:D4:90:F9:7A:05 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 40BC981DC1AC13381AA28C3B26748F30BF547570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01D9 Signing time: Thu 26 Mar 2026 10:00:47 +0000 Manifest this update: Thu 26 Mar 2026 09:55:47 +0000 Manifest next update: Sun 29 Mar 2026 17:20:47 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: biBXtFp6C/fNkmbn6dXZYs+wuXTfgqOdjdEZvUg9RpQ=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: 8Ege+nP0UOE+7Zo7IFwWTyzPW1ylNStb0XlDl5DtQnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:98:1d:c1:ac:13:38:1a:a2:8c:3b:26:74:8f:30:bf:54:75:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Mar 26 09:55:47 2026 GMT Not After : Mar 29 17:20:47 2026 GMT Subject: CN=C46CC99B8BC934A14401FF57FBABAED490F97A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:13:54:c7:a5:37:ec:ee:00:99:73:c9:c5: ad:e6:ec:d9:06:54:f9:51:86:41:f8:2b:64:b7:d3: ec:fd:a7:48:db:b2:41:ef:09:7b:21:2f:56:64:35: 11:e3:af:8e:a6:43:bb:43:d1:15:af:33:cb:04:a4: dc:c5:31:89:d3:01:d3:37:e8:7a:5f:e6:1d:6b:9d: 07:f7:41:59:bc:cd:bc:94:d4:39:4c:f4:02:3d:49: 90:fe:be:b5:cc:cc:02:30:8a:68:6b:7b:ad:47:2c: ac:0e:12:07:24:b6:7f:4e:c7:5a:cf:86:43:82:11: 3f:14:92:49:4c:63:aa:43:6e:79:d4:87:db:38:2b: 8c:6b:07:f6:38:70:3a:1f:a6:45:79:d6:c7:4f:2d: f1:ad:2e:95:16:77:9c:d9:32:8a:9d:71:2d:27:c3: d1:7d:0f:8a:8f:44:8f:e8:d5:67:48:fb:c1:65:b2: aa:93:72:f9:5d:5d:f2:10:bd:1c:81:bf:92:a1:32: 0e:a6:5e:11:7c:6e:01:9b:47:a3:69:71:e7:6c:b0: 0e:d3:95:7f:d7:25:62:8e:51:71:db:bb:c7:d4:77: b1:cd:c9:44:bd:9d:ee:11:10:d8:df:42:03:c4:b2: a9:60:6e:9c:ca:4a:6f:7e:8f:97:98:47:5d:b4:2d: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:C9:9B:8B:C9:34:A1:44:01:FF:57:FB:AB:AE:D4:90:F9:7A:05 X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:67:bd:a9:b3:05:26:10:19:d2:c7:6f:80:68:67:e5:eb:d7: c1:d2:7d:7a:22:f8:23:1b:77:56:34:9f:3c:51:27:18:84:9e: a6:1b:be:8d:42:2e:00:a1:3e:1d:44:4c:da:84:a5:fc:b8:49: df:33:5b:29:42:29:12:1f:28:0e:df:51:20:78:96:52:6f:37: d6:cc:8a:a0:f7:b6:95:6c:e2:2a:78:df:67:d8:e5:d2:c1:81: d9:ba:e1:73:e7:b1:1f:d7:d9:41:dc:0a:b8:aa:86:0c:77:87: 45:04:f6:e8:43:d6:39:29:66:29:c5:23:3a:73:94:df:e9:97: 56:4d:fb:c4:29:c7:08:ad:9c:e6:75:71:d8:cc:6c:1f:6a:43: 68:77:c7:f2:73:03:79:a5:1a:46:96:90:98:a1:aa:d4:ca:90: cd:69:1e:7e:26:c6:d7:93:92:1e:56:af:81:11:aa:2e:72:1c: 29:b1:a9:c0:48:8b:31:67:50:e2:df:8e:5c:46:da:e9:0e:f9: 92:a7:b0:c6:0d:22:4e:87:36:dd:37:2a:4e:f9:5f:e9:5e:50: 2d:79:08:3d:e0:4a:f4:f8:ee:f2:1a:fd:5a:62:43:e3:6e:55: 1b:b1:09:c3:b2:eb:b9:02:70:84:fd:31:2c:65:32:28:59:0a: 8b:9b:33:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLyYHcGsEzgaoow7JnSPML9UdXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNjAzMjYwOTU1NDdaFw0yNjAzMjkxNzIwNDdaMDMxMTAvBgNV BAMTKEM0NkNDOTlCOEJDOTM0QTE0NDAxRkY1N0ZCQUJBRUQ0OTBGOTdBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyhNUx6U37O4AmXPJxa3m7NkG VPlRhkH4K2S30+z9p0jbskHvCXshL1ZkNRHjr46mQ7tD0RWvM8sEpNzFMYnTAdM3 6Hpf5h1rnQf3QVm8zbyU1DlM9AI9SZD+vrXMzAIwimhre61HLKwOEgcktn9Ox1rP hkOCET8UkklMY6pDbnnUh9s4K4xrB/Y4cDofpkV51sdPLfGtLpUWd5zZMoqdcS0n w9F9D4qPRI/o1WdI+8FlsqqTcvldXfIQvRyBv5KhMg6mXhF8bgGbR6NpcedssA7T lX/XJWKOUXHbu8fUd7HNyUS9ne4RENjfQgPEsqlgbpzKSm9+j5eYR120LefTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGzJm4vJNKFEAf9X+6uu1JD5egUwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNnvamzBSYQGdLHb4BoZ+Xr18HSfXoi+CMb d1Y0nzxRJxiEnqYbvo1CLgChPh1ETNqEpfy4Sd8zWylCKRIfKA7fUSB4llJvN9bM iqD3tpVs4ip432fY5dLBgdm64XPnsR/X2UHcCriqhgx3h0UE9uhD1jkpZinFIzpz lN/pl1ZN+8QpxwitnOZ1cdjMbB9qQ2h3x/JzA3mlGkaWkJihqtTKkM1pHn4mxteT kh5Wr4ERqi5yHCmxqcBIizFnUOLfjlxG2ukO+ZKnsMYNIk6HNt03Kk75X+leUC15 CD3gSvT47vIa/VpiQ+NuVRuxCcOy67kCcIT9MSxlMihZCoubM5E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:18 2026 by rpki-client