$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: SCi2Yve/gTfOTsOjj7ig6/5h/8PC6+Vn6bKoiGUYYeo= Subject key identifier: F6:E9:75:9D:80:A1:D8:E7:08:62:44:D9:FB:8F:32:60:CD:58:C2:D4 Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 4D0A96D7214F46C8E3CDC5B753D6114A2882CE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0243 Signing time: Sat 28 Feb 2026 17:30:01 +0000 Manifest this update: Sat 28 Feb 2026 17:25:01 +0000 Manifest next update: Wed 04 Mar 2026 01:21:01 +0000 Files and hashes: 1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: 8htfgQ82WjmOWi6rLLCX/ra37sdyFYK2hTeLir69cDg=) 2: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 3: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0a:96:d7:21:4f:46:c8:e3:cd:c5:b7:53:d6:11:4a:28:82:ce:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Feb 28 17:25:01 2026 GMT Not After : Mar 4 01:21:01 2026 GMT Subject: CN=F6E9759D80A1D8E7086244D9FB8F3260CD58C2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:c5:97:eb:ab:b9:67:6c:02:de:4c:dd:83: 0f:e8:1e:97:89:56:45:9a:be:f7:78:50:16:b2:bd: d2:55:48:15:7e:d1:65:24:18:47:92:7d:29:ca:5e: 0f:76:fb:ae:49:99:d9:ba:f9:e8:95:44:66:49:da: 7d:60:f6:eb:58:b1:64:7d:c1:2b:50:b0:7f:6d:f2: cf:1c:2d:62:d3:43:4e:5f:a6:6c:83:2a:12:d9:55: f2:6f:86:12:7f:df:7b:72:23:44:57:18:26:98:14: 03:cb:e3:98:e2:57:eb:2f:a5:63:a1:44:18:28:4e: 64:0d:07:db:fb:91:63:cd:41:b3:c5:93:96:88:be: 4e:4a:6d:2f:f9:ba:07:38:1a:09:48:54:8a:8b:46: 9b:69:d2:61:ea:4e:25:49:da:fc:51:e2:7f:3a:e6: 01:e9:c7:19:cc:4c:bd:a9:2c:fd:bc:0c:47:32:e3: aa:ba:11:e6:ef:d3:44:39:e0:50:1a:6a:5b:82:80: 01:8f:b6:b2:9a:a1:60:1d:eb:8a:ea:47:34:62:9e: e9:ad:36:43:78:7e:ed:36:74:4c:bb:c9:ff:63:36: 0e:ee:02:fd:08:28:51:ec:3a:1f:47:80:c2:1f:c5: 8a:97:70:10:13:22:63:10:4d:0f:21:d2:cc:17:d7: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E9:75:9D:80:A1:D8:E7:08:62:44:D9:FB:8F:32:60:CD:58:C2:D4 X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1d:1b:29:05:df:ac:2c:a3:49:61:d2:ad:ca:97:0a:78:ab: a7:8e:5f:89:45:c5:de:aa:e4:b4:2c:60:bd:18:e3:30:b6:db: ac:d8:2a:c2:20:97:8f:2f:a3:8f:5b:9e:59:0e:1e:55:7d:ac: 62:7a:47:80:70:26:80:9f:1f:1f:51:52:93:e8:21:17:94:63: 36:39:89:cb:89:fc:f6:59:1c:9c:4f:4d:d5:28:4d:fa:dd:65: 22:c8:18:b3:91:e7:e1:e1:7c:24:b4:fe:7b:b7:45:41:79:98: 41:e7:90:a1:fe:3d:fa:09:e8:77:50:95:a5:02:1b:cd:e0:82: 91:52:50:3d:51:03:0c:c6:48:a5:76:56:0d:99:ee:f7:b2:c3: 25:63:31:a8:0e:fe:9e:d4:15:37:a7:30:22:7c:8c:8f:9e:3c: be:b3:2c:60:a9:46:5b:23:7c:54:76:d6:6a:63:1d:08:ba:bd: d3:fc:e8:49:ed:9c:9e:38:8e:6e:9a:5d:5c:af:3e:4c:9f:17: ed:5d:d2:9d:a0:10:66:53:4a:80:c9:31:6e:30:3f:56:ef:ce: 01:3f:2b:1c:01:48:36:e5:56:22:1f:67:eb:77:2c:13:4d:7c: 9b:ce:7d:9b:fe:a2:8c:ea:7a:9a:7d:4f:f0:b4:68:0e:5b:94: fd:77:83:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQqW1yFPRsjjzcW3U9YRSiiCzlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNjAyMjgxNzI1MDFaFw0yNjAzMDQwMTIxMDFaMDMxMTAvBgNV BAMTKEY2RTk3NTlEODBBMUQ4RTcwODYyNDREOUZCOEYzMjYwQ0Q1OEMyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0cWX66u5Z2wC3kzdgw/oHpeJ VkWavvd4UBayvdJVSBV+0WUkGEeSfSnKXg92+65Jmdm6+eiVRGZJ2n1g9utYsWR9 wStQsH9t8s8cLWLTQ05fpmyDKhLZVfJvhhJ/33tyI0RXGCaYFAPL45jiV+svpWOh RBgoTmQNB9v7kWPNQbPFk5aIvk5KbS/5ugc4GglIVIqLRptp0mHqTiVJ2vxR4n86 5gHpxxnMTL2pLP28DEcy46q6Eebv00Q54FAaaluCgAGPtrKaoWAd64rqRzRinumt NkN4fu02dEy7yf9jNg7uAv0IKFHsOh9HgMIfxYqXcBATImMQTQ8h0swX10MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ul1nYCh2OcIYkTZ+48yYM1YwtQwHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEdGykF36wso0lh0q3Klwp4q6eOX4lFxd6q 5LQsYL0Y4zC226zYKsIgl48vo49bnlkOHlV9rGJ6R4BwJoCfHx9RUpPoIReUYzY5 icuJ/PZZHJxPTdUoTfrdZSLIGLOR5+HhfCS0/nu3RUF5mEHnkKH+PfoJ6HdQlaUC G83ggpFSUD1RAwzGSKV2Vg2Z7veywyVjMagO/p7UFTenMCJ8jI+ePL6zLGCpRlsj fFR21mpjHQi6vdP86EntnJ44jm6aXVyvPkyfF+1d0p2gEGZTSoDJMW4wP1bvzgE/ KxwBSDblViIfZ+t3LBNNfJvOfZv+oozqepp9T/C0aA5blP13g6s= -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:15 2026 by rpki-client