$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: ClV3wptfxBhk9JJ2vktWu6rpxwLROpX8AXmluFoDJ74= Subject key identifier: 08:22:EB:2B:C8:DA:D8:C3:50:A0:41:EB:2D:F3:1F:AB:A2:4B:B1:9A Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 60C9C7ACCE0BD9BA2D935619BD14D7BDCFE84632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01E3 Signing time: Sat 28 Feb 2026 21:30:04 +0000 Manifest this update: Sat 28 Feb 2026 21:25:04 +0000 Manifest next update: Wed 04 Mar 2026 07:15:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: nO1NSzeB5XT9XzKpF7F6P+AZbf5v5+SS/A0zE49DbPg=) 2: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=) 3: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: zH98jg9e8LL+5jWYCEfaYjBh5EHlJX+GPjXD3MdDE2g=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: 84KdwUDQ+0D3+ekB6207g3sjA0I9x+smJE2POztYJcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c9:c7:ac:ce:0b:d9:ba:2d:93:56:19:bd:14:d7:bd:cf:e8:46:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Feb 28 21:25:04 2026 GMT Not After : Mar 4 07:15:04 2026 GMT Subject: CN=0822EB2BC8DAD8C350A041EB2DF31FABA24BB19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:47:0a:2f:5d:78:fa:9d:90:20:ba:a5:30: 01:aa:46:ee:d9:c9:b9:f0:b4:d5:1d:ba:d8:7d:98: d0:75:bf:a2:20:21:6a:12:d3:7a:ce:9c:57:24:22: fa:08:0e:6d:fb:5b:7c:e3:80:53:c7:12:f9:dc:03: 55:2c:31:93:b3:a4:25:c7:e1:0c:cc:41:5b:c6:c2: 48:54:3a:fc:af:02:89:0d:0d:48:be:b7:11:30:7b: 91:1e:90:3a:4a:74:4d:2e:ba:dd:61:5f:70:3c:4d: 28:f8:72:49:f4:e4:00:3a:1c:1a:a5:af:7c:16:31: 37:17:79:61:50:2c:be:0d:05:37:9f:e0:b1:15:d2: fb:e4:f4:b0:73:b1:9c:ce:e6:41:55:07:a8:f0:ed: 50:93:75:6b:74:db:3b:2a:ab:99:01:77:ab:f6:76: 20:98:b0:c3:c1:f7:ac:34:b5:2c:6b:f7:ab:93:d6: 9d:33:29:c6:63:0c:a5:11:27:42:ae:df:97:9f:26: 72:15:fd:88:ed:70:55:b4:95:4d:85:58:1c:bf:57: 02:c6:5a:d1:03:38:26:82:4f:26:d2:d5:56:26:70: 91:db:80:1f:98:bc:f8:1d:0f:81:3e:b3:d6:45:aa: 6e:c2:38:93:7a:22:85:35:59:20:50:ff:57:f4:e7: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:22:EB:2B:C8:DA:D8:C3:50:A0:41:EB:2D:F3:1F:AB:A2:4B:B1:9A X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4f:8b:82:19:1f:2a:df:2c:4b:05:14:88:2c:7e:41:2b:47: 26:e8:93:65:7a:01:3e:ec:52:d8:b9:88:f0:b8:35:43:97:b9: 20:9a:ca:98:70:28:ee:ca:e6:72:e5:be:b8:59:9c:01:14:fe: 1c:ab:dc:79:7a:33:bf:b7:6d:83:43:51:d5:44:3d:94:b0:91: 9e:4d:f6:9e:96:01:e6:00:cc:4e:de:26:88:27:74:b4:d9:94: 96:bf:9a:23:1f:9c:d2:3f:13:3b:e1:58:57:fe:c3:f4:fa:fc: 47:b4:94:df:6d:5e:7c:05:df:9d:83:f5:f7:cd:9b:ed:e4:09: f1:61:be:f4:a2:e4:85:c3:76:ae:31:87:5b:a2:34:0c:aa:0f: 89:81:22:aa:dd:96:6d:d6:45:1a:2f:34:c7:47:28:d8:c0:0d: 7e:e6:75:37:f6:f5:de:f7:83:52:d7:fa:e2:71:d9:d9:d5:b7: 46:b6:d4:4d:3a:78:c7:ae:83:82:fb:53:7a:8b:18:b9:00:0c: 37:6d:97:e2:14:0a:95:b5:1c:e7:b9:25:2e:8f:ba:be:61:0b: e6:35:74:31:0d:8a:f5:f8:7e:ed:ab:05:c7:be:52:f2:a1:16: 02:7d:67:fc:83:56:76:60:b8:01:26:b8:22:c7:c2:78:31:9b: 01:6b:58:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMnHrM4L2botk1YZvRTXvc/oRjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNjAyMjgyMTI1MDRaFw0yNjAzMDQwNzE1MDRaMDMxMTAvBgNV BAMTKDA4MjJFQjJCQzhEQUQ4QzM1MEEwNDFFQjJERjMxRkFCQTI0QkIxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXUcKL114+p2QILqlMAGqRu7Z ybnwtNUduth9mNB1v6IgIWoS03rOnFckIvoIDm37W3zjgFPHEvncA1UsMZOzpCXH 4QzMQVvGwkhUOvyvAokNDUi+txEwe5EekDpKdE0uut1hX3A8TSj4ckn05AA6HBql r3wWMTcXeWFQLL4NBTef4LEV0vvk9LBzsZzO5kFVB6jw7VCTdWt02zsqq5kBd6v2 diCYsMPB96w0tSxr96uT1p0zKcZjDKURJ0Ku35efJnIV/YjtcFW0lU2FWBy/VwLG WtEDOCaCTybS1VYmcJHbgB+YvPgdD4E+s9ZFqm7COJN6IoU1WSBQ/1f051MrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCLrK8ja2MNQoEHrLfMfq6JLsZowHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBPi4IZHyrfLEsFFIgsfkErRybok2V6AT7s Uti5iPC4NUOXuSCayphwKO7K5nLlvrhZnAEU/hyr3Hl6M7+3bYNDUdVEPZSwkZ5N 9p6WAeYAzE7eJogndLTZlJa/miMfnNI/EzvhWFf+w/T6/Ee0lN9tXnwF352D9ffN m+3kCfFhvvSi5IXDdq4xh1uiNAyqD4mBIqrdlm3WRRovNMdHKNjADX7mdTf29d73 g1LX+uJx2dnVt0a21E06eMeug4L7U3qLGLkADDdtl+IUCpW1HOe5JS6Pur5hC+Y1 dDENivX4fu2rBce+UvKhFgJ9Z/yDVnZguAEmuCLHwngxmwFrWMM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:14 2026 by rpki-client