$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: DuC2O8kIYbDHlG4S/bOkYvFQ3bKcWnPD/RCk2hsh2Rs= Subject key identifier: 04:1D:39:5A:D8:F0:D5:8B:21:33:2D:84:96:20:E3:49:59:17:8E:F1 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 392D348E302AF2A5BAD87670259C63BC6FBE05AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 017D Signing time: Thu 16 Apr 2026 10:51:33 +0000 Manifest this update: Thu 16 Apr 2026 10:46:33 +0000 Manifest next update: Sun 19 Apr 2026 21:33:33 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: c35pZi7eAlFSt4prDwf1HzJ65ro2rzGSqtqqfRHOrxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2d:34:8e:30:2a:f2:a5:ba:d8:76:70:25:9c:63:bc:6f:be:05:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Apr 16 10:46:33 2026 GMT Not After : Apr 19 21:33:33 2026 GMT Subject: CN=041D395AD8F0D58B21332D849620E34959178EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:76:88:50:45:6b:b0:84:2a:ec:7a:42:c8: a9:79:74:dc:ab:7f:ac:bf:51:93:73:ba:f3:6b:d6: bc:c8:31:ec:4d:ec:50:f2:1d:cf:8b:26:ad:09:ee: ff:aa:60:52:97:17:c0:b4:7d:c2:b8:20:83:85:b7: 6f:52:b0:b7:04:85:22:5e:d8:52:d6:8e:e2:60:46: 9b:4a:a0:0c:82:83:87:bc:74:d4:5f:9d:d4:80:03: 5f:90:36:37:6b:81:56:23:e6:f2:53:65:d4:52:14: df:d7:6c:8c:0d:16:7a:dc:d5:90:f6:b4:d3:5f:95: 4c:22:58:ae:16:07:a8:5d:95:72:57:cf:08:5d:da: 4b:90:41:2b:13:6e:a4:97:39:b2:26:9f:63:90:c5: 93:6b:f7:35:02:65:4f:19:d7:bf:94:e3:da:71:fa: be:46:79:1f:18:5a:3d:ea:ec:07:3c:2c:5c:36:e2: f3:d4:a1:98:f7:11:a7:c6:93:34:26:fa:95:bb:53: 66:de:72:4c:ea:af:a9:7d:ab:5d:c9:3a:ba:41:50: ea:2b:5a:ce:41:1d:0d:61:d4:c7:a2:30:65:a2:6c: 66:ff:ea:b0:02:04:a7:ee:37:0d:67:b9:ea:30:c1: 80:33:38:03:6e:d4:7d:eb:ab:80:33:2d:dd:12:d8: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:39:5A:D8:F0:D5:8B:21:33:2D:84:96:20:E3:49:59:17:8E:F1 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:67:4f:55:8d:e2:0f:94:84:ea:41:7b:33:93:07:33:9e:18: 0d:92:31:07:4b:96:b9:c6:8a:7e:36:b5:f0:f8:dd:ed:fb:8d: 64:0a:13:fd:32:db:24:f2:af:df:40:bd:0b:71:6c:6c:35:f9: 3f:84:30:65:9c:45:fe:73:db:2c:01:7c:f5:12:93:41:eb:46: c1:4e:23:a1:8d:bf:be:f0:83:fe:db:d8:23:52:bd:a3:93:00: 35:70:e2:01:44:14:49:68:8b:ab:6c:9c:c3:a3:37:c4:a1:34: 06:6f:28:8e:9a:9c:19:96:c7:69:dd:a2:4b:5d:a1:d9:c5:ba: c9:c8:4f:53:74:26:0c:d4:34:88:0e:aa:bb:de:73:1f:ab:42: c2:cc:3b:cc:76:62:20:de:cf:24:58:21:4b:0d:48:18:b7:e2: 65:1f:28:8b:23:bb:2e:2c:07:a4:a7:78:11:7f:1d:99:a7:0c: e2:85:b4:f5:17:ec:ed:5c:9a:3c:9e:26:6b:1b:5f:6a:70:f6: a0:88:c7:88:0b:66:85:aa:bf:1e:d1:68:02:05:3c:15:4d:59: f7:8b:9a:e7:71:45:76:fd:00:19:8e:f1:53:dd:3c:8c:d0:9a: 71:ce:7a:05:33:12:19:8f:18:32:0e:c1:ed:2b:1f:0a:d7:b1: 3e:e4:89:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS00jjAq8qW62HZwJZxjvG++BaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNjA0MTYxMDQ2MzNaFw0yNjA0MTkyMTMzMzNaMDMxMTAvBgNV BAMTKDA0MUQzOTVBRDhGMEQ1OEIyMTMzMkQ4NDk2MjBFMzQ5NTkxNzhFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c3aIUEVrsIQq7HpCyKl5dNyr f6y/UZNzuvNr1rzIMexN7FDyHc+LJq0J7v+qYFKXF8C0fcK4IIOFt29SsLcEhSJe 2FLWjuJgRptKoAyCg4e8dNRfndSAA1+QNjdrgVYj5vJTZdRSFN/XbIwNFnrc1ZD2 tNNflUwiWK4WB6hdlXJXzwhd2kuQQSsTbqSXObImn2OQxZNr9zUCZU8Z17+U49px +r5GeR8YWj3q7Ac8LFw24vPUoZj3EafGkzQm+pW7U2beckzqr6l9q13JOrpBUOor Ws5BHQ1h1MeiMGWibGb/6rACBKfuNw1nueowwYAzOANu1H3rq4AzLd0S2DsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBB05Wtjw1YshMy2EliDjSVkXjvEwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFnT1WN4g+UhOpBezOTBzOeGA2SMQdLlrnG in42tfD43e37jWQKE/0y2yTyr99AvQtxbGw1+T+EMGWcRf5z2ywBfPUSk0HrRsFO I6GNv77wg/7b2CNSvaOTADVw4gFEFEloi6tsnMOjN8ShNAZvKI6anBmWx2ndoktd odnFusnIT1N0JgzUNIgOqrvecx+rQsLMO8x2YiDezyRYIUsNSBi34mUfKIsjuy4s B6SneBF/HZmnDOKFtPUX7O1cmjyeJmsbX2pw9qCIx4gLZoWqvx7RaAIFPBVNWfeL mudxRXb9ABmO8VPdPIzQmnHOegUzEhmPGDIOwe0rHwrXsT7kid4= -----END CERTIFICATE-----Generated at Sat Apr 18 08:23:59 2026 by rpki-client