$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: /rjqZuCf+ufwtuTI+rlMgSw4Lsy4rb+ZfWN5N3eMaz8= Subject key identifier: E7:CD:BF:1B:9C:04:08:38:5F:FA:08:F9:DD:F9:41:45:11:AB:76:E8 Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 645D91E56C3F733A81B7531448311EC63576C1F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0258 Signing time: Wed 15 Apr 2026 20:10:01 +0000 Manifest this update: Wed 15 Apr 2026 20:05:01 +0000 Manifest next update: Sun 19 Apr 2026 01:14:01 +0000 Files and hashes: 1: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: ugs0c0VPcoyXvgnQe8BNqVxdTK1dLc3Sk2MjVANs5YE=) 2: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: hMs8+rNyQELiT6aWfGWtaAwpidVzcO6w/mTQ1VQATQs=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: pPrmF7wA0mkz0XFtTbZ2mXTXaWSM3+27UUv699+o4qw=) 4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: mZZxWzYI+/x/HPmJcFlJlvOu172XUYAgVPc/9sUojk8=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: FwcFScp7Cs7HZfIouUaq3jflFIuNZirrbsGdb6d6Gyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5d:91:e5:6c:3f:73:3a:81:b7:53:14:48:31:1e:c6:35:76:c1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Apr 15 20:05:01 2026 GMT Not After : Apr 19 01:14:01 2026 GMT Subject: CN=E7CDBF1B9C0408385FFA08F9DDF9414511AB76E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:cc:85:9c:5f:2d:80:7b:a4:9c:d7:c4:d0: 02:10:8e:fe:25:00:c4:3a:31:27:09:99:70:9d:61: 69:0d:4a:61:90:48:a9:a4:54:cb:a7:92:fd:15:c4: 82:3f:06:48:d0:fc:ba:f1:4d:fd:78:c7:fd:c6:68: ef:a5:5f:1d:d4:f2:69:62:1b:0e:79:cc:68:7c:72: b2:ba:6d:8b:5f:32:92:bc:c0:ca:e4:28:91:0c:d5: e7:53:a7:81:83:db:c4:85:47:1e:d0:db:d7:00:80: 86:11:64:c2:97:69:25:85:08:fc:5d:4e:47:5f:eb: 1f:5e:cb:36:c8:8f:d3:e9:59:cd:98:ba:f7:9b:57: e9:84:29:41:97:5b:d5:af:43:6c:5d:98:b3:b3:69: 5a:83:00:a9:01:73:d9:6b:73:11:ca:5d:61:f5:d0: b7:64:8b:71:0b:02:03:4e:e4:42:d3:8c:fe:07:87: f9:ef:ae:06:48:a1:7c:67:fa:4c:9b:3d:82:76:ba: fb:22:e2:30:5b:75:c2:3a:f3:b4:60:e4:1b:35:81: 02:0f:e3:c8:3c:3f:08:c3:ab:10:be:fc:9f:56:2d: 7c:04:fc:85:d4:eb:56:da:5f:66:18:2d:31:e4:24: 20:ba:f8:5c:59:a3:07:a7:c3:6d:d2:99:2d:a7:17: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:BF:1B:9C:04:08:38:5F:FA:08:F9:DD:F9:41:45:11:AB:76:E8 X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:15:1a:ae:37:d9:32:4d:b5:a6:b9:ce:7d:22:0e:be:e1:0d: 72:0f:20:1a:2b:5c:cd:42:54:cd:34:6a:85:66:35:15:20:db: 6e:e3:f6:b0:38:2a:8c:d1:1b:8c:1d:91:a5:27:41:78:5a:f4: 02:a0:01:d9:fa:10:3b:06:e0:96:96:e9:8a:6b:fd:90:72:9e: e8:7a:08:b4:9e:7d:44:d5:20:a7:56:df:8c:91:87:26:19:f5: b1:9a:7f:0a:9d:19:89:b1:6d:56:b7:b5:19:a7:46:1b:36:8b: a4:f7:e2:14:ec:00:19:83:17:00:47:f3:d0:72:b5:48:ea:7e: 3d:40:8a:16:b8:f7:8b:bc:2d:dd:40:ee:aa:42:87:d0:f1:7c: 43:b7:f8:4d:34:cc:e5:85:76:fd:a5:3a:8b:20:ed:17:91:06: e0:d2:c5:36:6e:7d:f2:e0:e6:c0:81:4a:89:47:51:90:de:0c: 67:b1:df:64:2a:e7:cd:f7:46:3a:41:2a:82:c5:eb:65:d3:a1: e0:fc:d5:4b:41:a0:0b:d8:d5:03:9a:54:8e:ca:e4:44:b5:e2: 2c:a5:71:d4:9d:da:02:2b:90:63:59:3e:aa:57:44:1c:cf:1e: f8:c7:46:43:09:93:5e:b5:b1:e5:46:b6:df:15:f5:88:3f:85: 0f:79:18:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZF2R5Ww/czqBt1MUSDEexjV2wfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNjA0MTUyMDA1MDFaFw0yNjA0MTkwMTE0MDFaMDMxMTAvBgNV BAMTKEU3Q0RCRjFCOUMwNDA4Mzg1RkZBMDhGOURERjk0MTQ1MTFBQjc2RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgMyFnF8tgHuknNfE0AIQjv4l AMQ6MScJmXCdYWkNSmGQSKmkVMunkv0VxII/BkjQ/LrxTf14x/3GaO+lXx3U8mli Gw55zGh8crK6bYtfMpK8wMrkKJEM1edTp4GD28SFRx7Q29cAgIYRZMKXaSWFCPxd Tkdf6x9eyzbIj9PpWc2YuvebV+mEKUGXW9WvQ2xdmLOzaVqDAKkBc9lrcxHKXWH1 0Ldki3ELAgNO5ELTjP4Hh/nvrgZIoXxn+kybPYJ2uvsi4jBbdcI687Rg5Bs1gQIP 48g8PwjDqxC+/J9WLXwE/IXU61baX2YYLTHkJCC6+FxZowenw23SmS2nF4jFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU582/G5wECDhf+gj53flBRRGrdugwHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsVGq432TJNtaa5zn0iDr7hDXIPIBorXM1C VM00aoVmNRUg227j9rA4KozRG4wdkaUnQXha9AKgAdn6EDsG4JaW6Ypr/ZBynuh6 CLSefUTVIKdW34yRhyYZ9bGafwqdGYmxbVa3tRmnRhs2i6T34hTsABmDFwBH89By tUjqfj1Aiha494u8Ld1A7qpCh9DxfEO3+E00zOWFdv2lOosg7ReRBuDSxTZuffLg 5sCBSolHUZDeDGex32Qq5833RjpBKoLF62XToeD81UtBoAvY1QOaVI7K5ES14iyl cdSd2gIrkGNZPqpXRBzPHvjHRkMJk161seVGtt8V9Yg/hQ95GLo= -----END CERTIFICATE-----Generated at Fri Apr 17 20:19:40 2026 by rpki-client