$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: o+ZxdUTQA0g4eH2ptMzhapmqROZwcZfGusARu5omRG8= Subject key identifier: B8:FB:5A:67:B1:69:50:6B:1A:6E:47:43:81:90:C3:22:87:3D:A8:1C Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 23BA932EF4F58D48AD27FE886FE47028CE4C193A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01F9 Signing time: Sat 18 Apr 2026 15:40:04 +0000 Manifest this update: Sat 18 Apr 2026 15:35:04 +0000 Manifest next update: Tue 21 Apr 2026 22:52:04 +0000 Files and hashes: 1: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: TIgkMsm3F1QPE8zZXv+2smSOlSXSyxGDGajymgHG/Ow=) 2: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=) 3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: 84KdwUDQ+0D3+ekB6207g3sjA0I9x+smJE2POztYJcE=) 4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: nO1NSzeB5XT9XzKpF7F6P+AZbf5v5+SS/A0zE49DbPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ba:93:2e:f4:f5:8d:48:ad:27:fe:88:6f:e4:70:28:ce:4c:19:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Apr 18 15:35:04 2026 GMT Not After : Apr 21 22:52:04 2026 GMT Subject: CN=B8FB5A67B169506B1A6E47438190C322873DA81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:19:62:bc:03:96:7e:45:fc:c2:29:c3:8a: 30:8c:19:6c:e3:0c:9e:8b:0c:48:f0:98:73:35:0c: 4d:2c:c1:f3:df:0b:ff:4c:9b:ad:3a:e3:ae:62:35: f7:f3:16:02:78:df:cd:19:55:87:d9:34:ec:48:06: 1a:03:a4:84:72:e1:56:4a:92:a2:e7:4d:1a:2b:7d: d9:bf:24:7b:47:7c:6c:71:88:28:2d:b9:af:09:ce: d0:ee:80:34:79:c8:e1:f1:0d:15:a6:7d:f5:24:3b: ab:9d:ea:a5:75:d5:1a:51:f5:28:4c:c3:f9:f1:80: ee:9c:a7:66:af:55:de:24:6d:16:d8:ee:ae:6d:c7: 75:ce:d4:7e:2f:f2:c8:bc:52:4f:ad:7b:c4:da:1e: 45:b5:f1:c8:41:7b:34:eb:9b:8b:03:9a:f7:1e:4a: 4d:92:c5:06:ef:d5:31:46:4c:b6:f0:10:4f:9c:c8: e5:04:86:ef:dd:19:ee:2e:ab:55:82:1d:4a:8d:98: 59:c5:2c:4c:5d:32:70:5f:74:e9:b7:4c:65:e3:e7: 25:5b:0e:24:c3:76:b7:6d:40:48:47:ed:a3:ef:d3: c9:47:28:12:30:8c:eb:3f:b1:38:da:04:08:1e:0b: 14:9f:20:0b:0f:95:6a:1b:45:bd:79:38:c6:51:28: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FB:5A:67:B1:69:50:6B:1A:6E:47:43:81:90:C3:22:87:3D:A8:1C X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:db:5d:66:2c:6f:b4:9d:17:23:5d:18:12:ba:e9:89:56: d8:94:3b:27:c8:d7:d1:6a:24:30:e4:63:c3:b2:f1:2b:2f:5a: 3e:fe:82:50:7e:b9:d9:62:4d:37:48:e8:b2:89:30:2e:b2:13: 28:9e:a2:37:da:dd:71:81:2f:14:15:5c:93:5b:56:72:2b:0a: aa:aa:26:b8:5b:61:6d:36:95:6d:9c:5d:d7:52:f8:37:7f:0f: b2:67:28:16:e5:4d:e4:72:7e:24:08:b1:a4:77:f2:da:ff:ca: ef:f0:b1:73:b7:8d:d7:fe:ad:b2:0b:20:ab:44:b5:ff:4c:c4: 62:65:79:63:76:9d:01:8b:0b:06:c3:1a:60:f9:cc:86:33:79: 8a:a8:03:a4:b5:a1:e5:48:14:08:cd:15:35:30:a5:27:99:a5: 68:04:a8:c8:09:0c:ef:ca:76:4a:a6:71:a5:dc:26:1d:ea:55: 84:87:68:45:60:8d:50:07:22:fc:96:f3:2f:7a:f9:72:41:10: ec:e0:13:35:e6:34:9c:18:22:d9:66:d3:2c:51:a7:d0:26:6d: 03:40:fc:c2:98:bd:59:ae:92:a3:17:a8:4d:ff:00:64:e0:a8: fa:8a:f2:d5:01:fc:10:2c:d8:c0:1c:ba:98:d2:49:19:b3:94: a1:2e:98:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7qTLvT1jUitJ/6Ib+RwKM5MGTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNjA0MTgxNTM1MDRaFw0yNjA0MjEyMjUyMDRaMDMxMTAvBgNV BAMTKEI4RkI1QTY3QjE2OTUwNkIxQTZFNDc0MzgxOTBDMzIyODczREE4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDhlivAOWfkX8winDijCMGWzj DJ6LDEjwmHM1DE0swfPfC/9Mm606465iNffzFgJ4380ZVYfZNOxIBhoDpIRy4VZK kqLnTRorfdm/JHtHfGxxiCgtua8JztDugDR5yOHxDRWmffUkO6ud6qV11RpR9ShM w/nxgO6cp2avVd4kbRbY7q5tx3XO1H4v8si8Uk+te8TaHkW18chBezTrm4sDmvce Sk2SxQbv1TFGTLbwEE+cyOUEhu/dGe4uq1WCHUqNmFnFLExdMnBfdOm3TGXj5yVb DiTDdrdtQEhH7aPv08lHKBIwjOs/sTjaBAgeCxSfIAsPlWobRb15OMZRKA29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPtaZ7FpUGsabkdDgZDDIoc9qBwwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3j211mLG+0nRcjXRgSuumJVtiUOyfI19Fq JDDkY8Oy8SsvWj7+glB+udliTTdI6LKJMC6yEyieojfa3XGBLxQVXJNbVnIrCqqq JrhbYW02lW2cXddS+Dd/D7JnKBblTeRyfiQIsaR38tr/yu/wsXO3jdf+rbILIKtE tf9MxGJleWN2nQGLCwbDGmD5zIYzeYqoA6S1oeVIFAjNFTUwpSeZpWgEqMgJDO/K dkqmcaXcJh3qVYSHaEVgjVAHIvyW8y96+XJBEOzgEzXmNJwYItlm0yxRp9AmbQNA /MKYvVmukqMXqE3/AGTgqPqK8tUB/BAs2MAcupjSSRmzlKEumD0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:00 2026 by rpki-client