$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: ojmyPMcrZx23j5TAE+Eg0VbX8q/AFxVxN6clESZm0jA= Subject key identifier: 81:DA:D8:2D:9F:99:2C:B5:DA:DA:73:F8:A6:84:C1:94:C5:A5:CD:B6 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 56091634C67502DB01F8AF2E9BA547A352E20492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 011B Signing time: Thu 16 Apr 2026 07:42:34 +0000 Manifest this update: Thu 16 Apr 2026 07:37:34 +0000 Manifest next update: Sun 19 Apr 2026 17:11:34 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 2: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: N5Z/Vjzr/r1JmVcAhjA/mwoP71/Ltxr9mw8tOKFYB6U=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 17:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:16:34:c6:75:02:db:01:f8:af:2e:9b:a5:47:a3:52:e2:04:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Apr 16 07:37:34 2026 GMT Not After : Apr 19 17:11:34 2026 GMT Subject: CN=81DAD82D9F992CB5DADA73F8A684C194C5A5CDB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:96:95:bf:68:49:5c:f1:67:4a:87:df:98: ef:c2:cd:d6:23:29:8a:d5:15:f2:72:de:13:36:88: f5:49:38:88:18:31:06:dd:95:81:57:c0:db:a0:1d: 4f:f2:5f:b2:49:28:14:65:88:d7:7f:40:a0:47:2e: 0d:ec:59:cc:1c:85:40:ee:48:f2:14:b5:21:66:cc: d4:b9:7c:82:17:ca:79:e3:be:40:c7:5e:95:27:82: d5:02:ff:87:78:ba:2f:0c:f5:90:06:da:fb:20:f1: 76:d8:f5:eb:43:3c:a9:8e:b5:61:2a:94:29:3d:1d: 89:43:3f:ad:8e:80:c2:64:4d:f1:da:b4:04:02:58: 94:5e:2d:57:f0:03:76:6d:1d:56:e7:93:49:41:10: 5d:32:8b:7b:1b:c3:2a:90:fc:ab:1d:01:e3:4c:23: b3:fc:3c:f7:e8:df:f1:1d:34:cc:23:88:0e:7e:2b: 37:f3:df:8d:b3:87:08:09:03:fd:db:18:47:65:85: 1d:b9:18:6b:a6:2a:e6:b6:0d:7e:80:5a:76:43:de: d8:6a:7f:87:3b:ca:ba:41:aa:16:06:d2:22:3c:bb: 98:42:10:c7:16:56:14:55:31:aa:5e:10:26:00:fa: e9:84:a9:9c:88:96:e1:8f:f0:71:84:23:03:98:c1: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:D8:2D:9F:99:2C:B5:DA:DA:73:F8:A6:84:C1:94:C5:A5:CD:B6 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5e:47:be:6d:75:6d:b3:3f:24:51:b6:6f:35:3a:fb:1f:89: df:af:00:64:a1:58:22:14:48:7c:b8:50:49:ee:9f:39:f2:9f: 47:eb:98:d5:fe:7b:04:6c:a8:d8:6c:5e:08:3b:b6:62:76:7c: 4f:b5:10:07:ea:f9:7f:48:89:e5:ff:ff:08:4b:c1:6d:1a:35: b6:c8:b7:27:12:be:d4:0d:ae:5d:56:c1:e9:2a:aa:00:f6:db: 34:a4:68:b0:ae:57:71:02:93:01:56:33:bb:aa:fd:60:16:38: 18:b0:10:1a:9b:08:82:ce:da:46:da:33:96:2b:84:76:f7:e2: 7f:f3:12:4d:27:1d:88:2c:e9:61:d7:4a:45:64:89:e1:ec:c9: 7c:05:63:fd:76:9e:a9:fe:d1:98:3d:91:8f:07:25:a5:20:9a: 61:7f:6e:98:83:54:a3:63:3f:fa:b2:4d:a9:41:82:91:f6:d7: 77:15:37:1a:18:ad:49:99:a1:dc:92:3a:d6:d5:2b:8f:ec:3a: 6d:27:2f:f4:f6:16:4c:9f:8d:6d:66:4c:cd:16:f3:dd:d6:2c: af:fa:f5:5b:ba:b6:39:90:89:3a:b5:25:b4:74:0c:71:1c:3e: bc:6b:c8:ce:5b:9a:5d:c5:56:e3:5e:f3:a9:6e:45:70:ac:cc: 12:fd:77:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgkWNMZ1AtsB+K8um6VHo1LiBJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNjA0MTYwNzM3MzRaFw0yNjA0MTkxNzExMzRaMDMxMTAvBgNV BAMTKDgxREFEODJEOUY5OTJDQjVEQURBNzNGOEE2ODRDMTk0QzVBNUNEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZ5aVv2hJXPFnSoffmO/CzdYj KYrVFfJy3hM2iPVJOIgYMQbdlYFXwNugHU/yX7JJKBRliNd/QKBHLg3sWcwchUDu SPIUtSFmzNS5fIIXynnjvkDHXpUngtUC/4d4ui8M9ZAG2vsg8XbY9etDPKmOtWEq lCk9HYlDP62OgMJkTfHatAQCWJReLVfwA3ZtHVbnk0lBEF0yi3sbwyqQ/KsdAeNM I7P8PPfo3/EdNMwjiA5+Kzfz342zhwgJA/3bGEdlhR25GGumKua2DX6AWnZD3thq f4c7yrpBqhYG0iI8u5hCEMcWVhRVMapeECYA+umEqZyIluGP8HGEIwOYwZyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdrYLZ+ZLLXa2nP4poTBlMWlzbYwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZeR75tdW2zPyRRtm81Ovsfid+vAGShWCIU SHy4UEnunznyn0frmNX+ewRsqNhsXgg7tmJ2fE+1EAfq+X9IieX//whLwW0aNbbI tycSvtQNrl1WwekqqgD22zSkaLCuV3ECkwFWM7uq/WAWOBiwEBqbCILO2kbaM5Yr hHb34n/zEk0nHYgs6WHXSkVkieHsyXwFY/12nqn+0Zg9kY8HJaUgmmF/bpiDVKNj P/qyTalBgpH213cVNxoYrUmZodySOtbVK4/sOm0nL/T2FkyfjW1mTM0W893WLK/6 9Vu6tjmQiTq1JbR0DHEcPrxryM5bml3FVuNe86luRXCszBL9d+4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:30 2026 by rpki-client