$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: Wd8/HZ8HnYcJYZ/M0qCQ0zI9abqrvCVD7f/zMscOeiw= Subject key identifier: 40:56:A3:47:3A:B3:D6:E2:A5:A2:B1:04:9E:98:05:0A:82:1D:F6:30 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 70CAA558887598BCC12B6A666989B76A50EE34B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 020D Signing time: Thu 16 Apr 2026 22:00:42 +0000 Manifest this update: Thu 16 Apr 2026 21:55:42 +0000 Manifest next update: Sun 19 Apr 2026 23:28:42 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) 2: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: d081GxS3lSphSVYQYdwqxPzIwaTy4HUk4krHRjL6rlg=) 3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ca:a5:58:88:75:98:bc:c1:2b:6a:66:69:89:b7:6a:50:ee:34:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Apr 16 21:55:42 2026 GMT Not After : Apr 19 23:28:42 2026 GMT Subject: CN=4056A3473AB3D6E2A5A2B1049E98050A821DF630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:81:c7:45:bf:9e:1d:72:8f:75:f0:a1:1d:7e: 0d:82:6b:5b:5d:e7:c5:6c:62:0e:3e:41:bb:5a:f6: d1:3a:e3:0a:87:a3:38:af:23:39:3f:49:8f:f3:2b: c5:49:8d:2e:af:c3:4a:b5:de:76:7c:6e:db:e6:19: 1c:3a:3b:70:1d:48:e5:5e:84:af:09:a2:fc:95:79: 5e:92:90:a3:87:0d:fb:b1:a3:87:26:08:c4:3d:b9: a0:1b:b0:f3:39:b7:83:0d:f1:92:46:ae:bd:f1:de: 4c:e5:e2:6b:bf:57:13:02:09:0b:f1:4b:f1:21:ca: 37:14:5f:1c:49:09:73:cb:2f:1d:b5:89:99:1d:d2: b2:7f:62:7c:31:d3:a7:e4:dc:46:fd:c7:b9:56:24: f7:2f:09:80:c1:75:46:99:3e:07:1f:f3:97:2e:f0: b3:29:9d:38:7a:b1:cd:89:69:cd:8e:17:97:30:1d: 1b:e6:e4:a9:71:32:97:4c:ad:6c:fa:e1:23:dd:e6: 45:d1:db:0f:4e:52:d1:d7:20:db:6f:9d:65:da:7c: a6:c6:b9:4d:d0:a0:db:5a:c6:63:c8:44:15:97:d9: 8d:94:2a:ea:a2:14:62:cf:d3:b2:0e:64:e7:91:1a: 59:63:86:5a:78:37:91:07:da:86:ef:69:e2:e0:0a: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:A3:47:3A:B3:D6:E2:A5:A2:B1:04:9E:98:05:0A:82:1D:F6:30 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2d:71:a1:a8:7c:83:56:71:9e:24:a0:7e:d7:cd:d2:43:c9: 97:2b:2e:67:f3:c3:ba:ae:da:ea:a5:e2:f3:85:44:de:5b:4d: 97:9e:48:db:2c:87:64:84:91:73:a6:4b:3b:d9:aa:2f:df:61: 78:13:15:b6:e4:7a:47:2d:fc:08:01:30:db:11:45:32:29:f2: ac:6b:d2:8a:8f:16:9b:39:3f:d0:6a:da:b6:12:04:9b:84:c4: f5:00:3c:23:b7:a1:73:91:df:ea:6c:2f:6d:cf:55:e6:94:64: 1e:cd:1e:9f:4e:4b:95:e0:bb:52:b0:e9:a9:a1:c2:99:23:6e: 1f:c5:5d:03:0e:f2:69:07:83:6f:bb:d3:76:a5:6e:cd:a7:9c: 55:7c:bb:ec:11:56:79:9c:d9:c6:00:5c:3c:65:a8:eb:09:da: 1c:6d:6b:47:c6:ef:a5:7b:71:71:77:34:8c:27:bb:64:89:42: e7:51:36:ed:fc:e4:09:70:50:71:0c:fb:04:1c:4f:66:07:27: f3:90:97:dd:8c:96:5c:86:e1:bd:dc:2f:5b:ca:f8:fe:61:ed: 1f:f9:61:0a:eb:f0:c5:82:e7:48:4c:33:be:df:27:1d:30:61: 29:24:15:8b:99:61:ce:ae:9f:4b:ec:89:66:cf:a3:0e:f4:6f: 3a:ce:0f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMqlWIh1mLzBK2pmaYm3alDuNLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNjA0MTYyMTU1NDJaFw0yNjA0MTkyMzI4NDJaMDMxMTAvBgNV BAMTKDQwNTZBMzQ3M0FCM0Q2RTJBNUEyQjEwNDlFOTgwNTBBODIxREY2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgcdFv54dco918KEdfg2Ca1td 58VsYg4+Qbta9tE64wqHozivIzk/SY/zK8VJjS6vw0q13nZ8btvmGRw6O3AdSOVe hK8JovyVeV6SkKOHDfuxo4cmCMQ9uaAbsPM5t4MN8ZJGrr3x3kzl4mu/VxMCCQvx S/EhyjcUXxxJCXPLLx21iZkd0rJ/Ynwx06fk3Eb9x7lWJPcvCYDBdUaZPgcf85cu 8LMpnTh6sc2Jac2OF5cwHRvm5KlxMpdMrWz64SPd5kXR2w9OUtHXINtvnWXafKbG uU3QoNtaxmPIRBWX2Y2UKuqiFGLP07IOZOeRGlljhlp4N5EH2obvaeLgCgpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFajRzqz1uKlorEEnpgFCoId9jAwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMtcaGofINWcZ4koH7XzdJDyZcrLmfzw7qu 2uql4vOFRN5bTZeeSNssh2SEkXOmSzvZqi/fYXgTFbbkekct/AgBMNsRRTIp8qxr 0oqPFps5P9Bq2rYSBJuExPUAPCO3oXOR3+psL23PVeaUZB7NHp9OS5Xgu1Kw6amh wpkjbh/FXQMO8mkHg2+703albs2nnFV8u+wRVnmc2cYAXDxlqOsJ2hxta0fG76V7 cXF3NIwnu2SJQudRNu385AlwUHEM+wQcT2YHJ/OQl92MllyG4b3cL1vK+P5h7R/5 YQrr8MWC50hMM77fJx0wYSkkFYuZYc6un0vsiWbPow70bzrOD5E= -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:13 2026 by rpki-client