
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json)
Hash identifier: RXR5uIUzOqMT0in/BKxRdnMImYPlDbc8k0hN9zRFJqw=
Subject key identifier: 6A:23:0C:89:12:37:47:81:E6:E6:AD:BE:F2:C4:B8:BE:36:0F:B3:39
Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB
Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB
Certificate serial: 74A38CAE1501EC694CAA2644FF6A7F6C2BEA66D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
Manifest number: 0552
Signing time: Sun 01 Mar 2026 16:01:12 +0000
Manifest this update: Sun 01 Mar 2026 15:56:12 +0000
Manifest next update: Thu 05 Mar 2026 03:25:12 +0000
Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 6xcdJ+vtzA88VwQ8gAtEoOLeJiubikxoujR4YBT/STI=)
2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl
rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a3:8c:ae:15:01:ec:69:4c:aa:26:44:ff:6a:7f:6c:2b:ea:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB
Validity
Not Before: Mar 1 15:56:12 2026 GMT
Not After : Mar 5 03:25:12 2026 GMT
Subject: CN=6A230C8912374781E6E6ADBEF2C4B8BE360FB339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:3d:49:08:69:c1:5c:96:f9:5d:47:a3:ca:
f3:3d:57:ef:85:b2:84:68:1d:76:74:5f:58:e7:e9:
8b:1a:a8:8b:64:f2:02:bd:39:f8:ae:4b:68:9c:83:
94:3a:ae:92:9d:73:a7:9f:f9:a7:d6:a6:f7:f1:fd:
7e:63:90:c4:a4:eb:ff:37:e6:74:6a:56:a3:58:f5:
aa:86:5c:f0:70:3e:e9:c1:d2:c6:43:c6:34:44:a1:
93:fd:9a:b9:c1:ee:c2:17:66:c1:e4:67:05:b7:3c:
75:32:38:4c:a1:ba:8b:d2:58:ad:1c:17:f2:43:61:
4f:9a:d3:4b:fd:93:c5:26:0d:93:2c:a9:cb:11:47:
dc:f9:e2:81:eb:95:cc:dd:76:24:23:ec:d5:4a:bb:
83:35:43:ca:a7:18:48:32:db:f0:1c:c6:45:31:a7:
08:40:fa:a0:68:5c:3d:d2:61:96:f0:63:7d:a0:60:
fc:84:d8:d7:f4:57:ad:07:14:47:c6:13:85:5d:99:
97:1e:0a:c7:97:ad:9b:c7:6c:6b:e3:89:6a:59:84:
92:2b:91:02:45:0e:79:4a:ca:1b:49:cd:a7:5b:ac:
ca:df:79:0e:e2:5f:54:f5:57:92:2c:9a:fd:0a:23:
13:be:1b:63:f7:19:b9:3f:11:c7:ef:fd:01:e3:a2:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:0C:89:12:37:47:81:E6:E6:AD:BE:F2:C4:B8:BE:36:0F:B3:39
X509v3 Authority Key Identifier:
keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:d5:b9:11:28:0d:9c:8c:04:c4:58:a3:46:6c:92:48:f6:
f7:12:12:28:e8:a9:78:a0:f3:9e:66:89:b3:a3:e1:6e:83:63:
73:b4:fd:99:0f:94:0f:7a:48:da:fb:ed:86:b7:c8:18:44:2e:
91:1e:49:3f:e7:45:08:1b:c6:e1:9b:10:6d:19:1d:ac:31:63:
88:fa:3d:c1:7e:aa:f3:93:9b:29:62:fc:dd:a4:77:7a:f9:13:
a1:f0:e2:88:cb:d2:3e:6f:72:8b:21:ca:33:4e:f8:5a:9d:8f:
78:53:d3:35:ed:0f:e9:c8:89:e1:66:f9:77:0a:6f:9a:6c:29:
aa:8b:4e:64:4e:47:38:a8:9d:19:8a:1b:61:31:68:b6:50:1d:
bd:b4:04:c5:fc:14:d9:06:88:88:83:92:df:5c:fc:0f:49:d0:
26:69:80:19:d3:a2:29:3b:9d:54:bb:a1:3c:68:d0:23:f2:eb:
47:ab:46:2c:81:87:69:39:7d:86:cc:54:fa:5c:4c:c7:2d:7f:
d6:fe:9c:29:8b:82:ad:48:8e:17:39:d4:c1:ec:4e:2d:94:e8:
92:73:40:a0:37:4e:d6:ec:cf:1a:67:ba:e0:1a:ec:25:56:42:
09:50:34:41:49:52:a6:39:41:55:c8:00:3b:be:45:f5:72:60:
6e:26:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:28 2026 by rpki-client