$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: wJWi5mPpjHI+4OC+eHTMtTjj0/DIwwrZrexA+9ic97c= Subject key identifier: B6:D3:77:8C:69:88:80:44:37:C7:2D:CB:C6:A0:C3:78:8C:43:15:92 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 5A107123E040FEA19925F958DE9AA8F790198FDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 01:01:13 +0000 Manifest this update: Thu 16 Apr 2026 00:56:13 +0000 Manifest next update: Sun 19 Apr 2026 02:39:13 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: xzYnau6G2PXvv5aOMS/dM1+Zq/1i8Ytj2c34T9zSYJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:10:71:23:e0:40:fe:a1:99:25:f9:58:de:9a:a8:f7:90:19:8f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Apr 16 00:56:13 2026 GMT Not After : Apr 19 02:39:13 2026 GMT Subject: CN=B6D3778C6988804437C72DCBC6A0C3788C431592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:68:40:d8:98:77:b0:8c:14:5b:ed:f7:16: a7:69:a2:47:f9:c4:dc:5f:3a:60:03:b8:2f:73:ef: 3f:8d:d4:cd:0c:8b:e1:f5:dd:59:ac:a4:31:8e:c9: 42:af:ae:01:23:54:fd:50:0e:e3:e7:85:82:45:ce: 2f:8d:54:fd:ec:ce:5a:c5:e1:38:f3:91:db:21:c4: 06:52:5c:3f:ef:71:96:ae:5d:1d:8b:72:29:27:f4: 25:26:79:20:73:f8:72:ad:66:98:b8:2b:39:c6:78: 59:db:3b:be:cf:2b:56:19:99:79:ec:a8:bd:40:f9: 92:77:51:a9:71:63:1c:f5:7c:ce:b2:a3:36:76:59: 51:52:71:18:b6:56:3a:91:a4:a2:42:37:35:3e:85: a6:65:3f:be:43:eb:91:90:da:00:3e:2b:b1:8a:fe: db:d7:e2:84:cb:1e:4e:2d:1c:0a:77:d2:d3:c0:ef: 5a:0b:72:80:3f:aa:38:c8:c6:92:55:32:8a:4b:7b: 1a:96:d5:f8:cb:fe:c9:6b:ee:c9:80:6e:97:ca:6c: ce:84:1c:e5:13:fb:48:b8:3b:d3:f7:ef:2f:c1:a9: eb:e8:0c:ef:cb:89:6c:b1:59:e6:31:e6:49:e4:b5: 89:1b:f4:3d:ef:f7:9e:42:ff:67:9f:24:6f:d2:ce: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:77:8C:69:88:80:44:37:C7:2D:CB:C6:A0:C3:78:8C:43:15:92 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c0:9d:43:a7:73:89:54:41:89:ce:b7:ac:ce:75:d6:42:62: 5a:1c:1f:c2:cb:8b:16:62:fd:21:93:61:25:ab:d9:a3:19:37: 07:aa:e2:47:9a:8e:7a:84:c9:65:40:f5:c8:5f:6a:dd:c6:2d: ca:39:0e:30:12:14:e4:9b:02:73:3b:f4:4a:46:51:35:08:1e: 38:d4:32:a8:f9:42:19:05:40:33:25:e4:c9:a7:eb:1b:20:66: ff:93:5e:25:f3:98:72:69:cb:2c:51:2b:68:1b:43:59:ef:2f: 74:52:68:9b:c3:3f:da:11:63:99:32:b2:e6:46:6f:c9:34:fc: 5f:f4:75:30:f4:0c:77:66:16:c8:a8:6f:57:25:fa:6b:0a:46: 2a:12:bf:e4:9a:de:03:8c:62:5a:dd:b5:b2:f6:09:4f:3d:2d: d6:dd:0a:cb:1e:16:1b:b7:4a:50:18:26:1a:16:a0:65:05:d8: 59:5b:26:3a:b0:6c:e3:11:b0:9b:e9:43:de:99:0d:e0:89:27: 59:a7:a8:2c:e1:8f:ae:d9:84:2f:16:00:4a:91:47:61:0d:08: 34:19:aa:ee:c1:3c:6a:51:a9:42:3d:f1:80:1d:38:fb:f6:b5: 8c:a4:77:b4:71:0c:bc:8d:19:0a:b7:a3:67:3f:a3:97:47:7c: aa:0c:c7:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhBxI+BA/qGZJflY3pqo95AZj90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNjA0MTYwMDU2MTNaFw0yNjA0MTkwMjM5MTNaMDMxMTAvBgNV BAMTKEI2RDM3NzhDNjk4ODgwNDQzN0M3MkRDQkM2QTBDMzc4OEM0MzE1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOmhA2Jh3sIwUW+33Fqdpokf5 xNxfOmADuC9z7z+N1M0Mi+H13VmspDGOyUKvrgEjVP1QDuPnhYJFzi+NVP3szlrF 4TjzkdshxAZSXD/vcZauXR2Lcikn9CUmeSBz+HKtZpi4KznGeFnbO77PK1YZmXns qL1A+ZJ3UalxYxz1fM6yozZ2WVFScRi2VjqRpKJCNzU+haZlP75D65GQ2gA+K7GK /tvX4oTLHk4tHAp30tPA71oLcoA/qjjIxpJVMopLexqW1fjL/slr7smAbpfKbM6E HOUT+0i4O9P37y/BqevoDO/LiWyxWeYx5knktYkb9D3v955C/2efJG/SzgQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttN3jGmIgEQ3xy3LxqDDeIxDFZIwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPAnUOnc4lUQYnOt6zOddZCYlocH8LLixZi /SGTYSWr2aMZNweq4keajnqEyWVA9chfat3GLco5DjASFOSbAnM79EpGUTUIHjjU Mqj5QhkFQDMl5Mmn6xsgZv+TXiXzmHJpyyxRK2gbQ1nvL3RSaJvDP9oRY5kysuZG b8k0/F/0dTD0DHdmFsiob1cl+msKRioSv+Sa3gOMYlrdtbL2CU89LdbdCsseFhu3 SlAYJhoWoGUF2FlbJjqwbOMRsJvpQ96ZDeCJJ1mnqCzhj67ZhC8WAEqRR2ENCDQZ qu7BPGpRqUI98YAdOPv2tYykd7RxDLyNGQq3o2c/o5dHfKoMxyQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:37 2026 by rpki-client