$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: pjYUG2mGD9BYEX+YXMkH098nQT4borjwHji7woGr0A8= Subject key identifier: 52:CC:0B:CB:63:E8:47:0D:8A:D4:82:71:FA:0C:0E:B5:7A:6C:5F:A1 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 3A7771601DF38217ECE6311711F559834163C671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 016C Signing time: Fri 17 Apr 2026 11:20:02 +0000 Manifest this update: Fri 17 Apr 2026 11:15:02 +0000 Manifest next update: Mon 20 Apr 2026 13:42:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: 0ZJBJk4YZRHwBPFxJzIFCzggkD37v+D7UpbvPYQAGmc=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:77:71:60:1d:f3:82:17:ec:e6:31:17:11:f5:59:83:41:63:c6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Apr 17 11:15:02 2026 GMT Not After : Apr 20 13:42:02 2026 GMT Subject: CN=52CC0BCB63E8470D8AD48271FA0C0EB57A6C5FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:9f:50:13:0e:e7:f3:0f:46:5b:58:28:2e: d9:82:69:2a:da:6f:e2:f8:82:a7:6d:9a:5b:3b:4c: b8:06:37:c4:76:7a:2e:09:f5:ef:a1:3f:c9:2b:61: a5:d5:70:61:c0:10:41:7c:8b:87:b1:da:cd:87:23: 0d:cc:9f:5a:ab:79:9f:4d:6d:a8:42:c6:24:11:63: 5d:5c:a0:07:72:69:0d:5e:c1:82:b1:6a:5f:07:a8: 7b:46:bb:fe:20:31:8e:83:04:98:98:46:fd:bf:1d: 01:94:ab:cc:2d:61:5d:e0:77:2e:02:e0:e3:26:3d: 0b:76:21:4c:be:91:71:4c:f3:68:93:30:9b:05:06: 45:10:c4:ec:d0:f1:bc:b2:be:f4:cd:78:bb:b0:23: 10:dc:5f:c3:2d:17:36:09:e1:75:6f:64:eb:be:b1: fa:f3:bf:ca:4b:b3:c3:dd:2f:fb:4f:f6:19:44:0e: 18:ab:d6:36:67:23:a1:cd:1e:11:90:b2:2d:d1:8e: 99:3d:dc:6f:f6:f4:f4:1c:1d:39:62:64:6e:1a:be: d4:75:2e:7f:ca:41:dd:8f:25:56:a5:14:54:93:33: e3:b9:fe:b1:33:89:fd:97:07:3c:6d:80:14:ad:92: 47:eb:23:da:f7:a4:b4:b3:4f:74:b0:f3:0d:65:3a: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:0B:CB:63:E8:47:0D:8A:D4:82:71:FA:0C:0E:B5:7A:6C:5F:A1 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:31:10:3a:a9:bf:72:a8:de:96:ba:d0:f1:4f:54:f0:6e: 15:9d:7d:34:a1:18:2f:20:78:c6:bc:3f:a5:61:fb:05:ef:16: be:42:6f:8e:e6:05:48:bc:67:bb:60:df:d2:27:5b:1d:99:69: 7a:c3:fa:0f:d8:77:af:43:27:5d:ba:61:a4:e2:17:54:26:bd: e3:7e:65:ee:c6:c9:7e:dc:b2:32:ff:5e:27:35:ff:85:63:f2: de:e6:60:ee:38:9c:8e:23:39:00:9b:00:86:d1:b4:62:db:74: 0f:a3:6d:bb:9e:bf:0e:57:41:5e:84:2d:b8:3b:3f:b2:91:f0: a9:72:fb:e1:f6:de:82:34:38:26:34:6e:d0:b9:09:f0:a5:27: 58:26:9d:56:8b:c0:98:20:94:8c:14:26:af:64:17:e0:2d:da: 27:e6:ab:f2:29:1d:3b:16:e5:7e:f0:85:31:40:e4:eb:ed:f7: 4e:b7:a6:9a:91:7b:59:ff:fd:c2:62:7f:5d:41:3b:cc:b3:98: bf:a5:e6:7a:86:81:69:c7:39:53:3f:50:e7:66:30:d8:8b:18: 64:98:58:55:69:27:0a:ad:4b:94:22:fa:15:8b:47:ae:5e:c7: 80:3d:3c:e1:e4:53:b8:b7:3e:99:10:ff:8f:85:99:b7:5d:e5: e1:a1:bf:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOndxYB3zghfs5jEXEfVZg0FjxnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNjA0MTcxMTE1MDJaFw0yNjA0MjAxMzQyMDJaMDMxMTAvBgNV BAMTKDUyQ0MwQkNCNjNFODQ3MEQ4QUQ0ODI3MUZBMEMwRUI1N0E2QzVGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1J9QEw7n8w9GW1goLtmCaSra b+L4gqdtmls7TLgGN8R2ei4J9e+hP8krYaXVcGHAEEF8i4ex2s2HIw3Mn1qreZ9N bahCxiQRY11coAdyaQ1ewYKxal8HqHtGu/4gMY6DBJiYRv2/HQGUq8wtYV3gdy4C 4OMmPQt2IUy+kXFM82iTMJsFBkUQxOzQ8byyvvTNeLuwIxDcX8MtFzYJ4XVvZOu+ sfrzv8pLs8PdL/tP9hlEDhir1jZnI6HNHhGQsi3Rjpk93G/29PQcHTliZG4avtR1 Ln/KQd2PJValFFSTM+O5/rEzif2XBzxtgBStkkfrI9r3pLSzT3Sw8w1lOrqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUswLy2PoRw2K1IJx+gwOtXpsX6EwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLOMRA6qb9yqN6WutDxT1TwbhWdfTShGC8g eMa8P6Vh+wXvFr5Cb47mBUi8Z7tg39InWx2ZaXrD+g/Yd69DJ126YaTiF1QmveN+ Ze7GyX7csjL/Xic1/4Vj8t7mYO44nI4jOQCbAIbRtGLbdA+jbbuevw5XQV6ELbg7 P7KR8Kly++H23oI0OCY0btC5CfClJ1gmnVaLwJgglIwUJq9kF+At2ifmq/IpHTsW 5X7whTFA5Ovt9063ppqRe1n//cJif11BO8yzmL+l5nqGgWnHOVM/UOdmMNiLGGSY WFVpJwqtS5Qi+hWLR65ex4A9POHkU7i3PpkQ/4+Fmbdd5eGhv6c= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:44 2026 by rpki-client