$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: ogIceq9QenxcNmHdfoM0ncxRMfwCliXt2PriHIGyJ/4= Subject key identifier: 3F:8B:EB:42:DF:CF:A6:E5:7D:33:F6:C5:11:D6:25:2F:C7:A6:65:47 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 625582F72A55A2F048F1150A3A366485F5089ACB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 03AC Signing time: Thu 16 Apr 2026 03:32:35 +0000 Manifest this update: Thu 16 Apr 2026 03:27:35 +0000 Manifest next update: Sun 19 Apr 2026 13:35:35 +0000 Files and hashes: 1: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: SGbZgR5zdidNXqFT4GAo8fw40HlS/8e91X/VI1zIojY=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: aCnss5loM4VF9YE2hmuJEeS2rIj4fuqVES0ROYO+Lig=) 4: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: ND0SdC1BMTSbW2viouPwzCsAjdIce1HxRY3mIbhkyKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:55:82:f7:2a:55:a2:f0:48:f1:15:0a:3a:36:64:85:f5:08:9a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Apr 16 03:27:35 2026 GMT Not After : Apr 19 13:35:35 2026 GMT Subject: CN=3F8BEB42DFCFA6E57D33F6C511D6252FC7A66547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:be:65:d6:bd:34:e9:c1:79:85:46:56:02: de:f8:15:f7:f1:bb:04:fa:09:9b:ba:84:e1:a0:b5: e0:61:c5:c8:35:82:db:99:13:e0:6f:07:ae:e4:11: dc:40:55:b8:0e:1b:fc:65:6f:7f:1b:db:cb:0e:f0: b1:17:49:ab:75:2d:38:54:f5:d1:5b:18:f0:9d:db: 9f:7a:c8:76:a2:76:d2:4f:28:8e:41:42:ba:7c:51: 99:9b:52:2f:d4:d3:4f:a7:28:c1:f6:e4:92:c0:46: 15:58:8b:4d:e9:44:52:58:68:10:cd:01:bf:28:e0: ea:d7:b7:fc:c7:46:8c:19:24:59:aa:28:44:c8:8e: 97:2a:33:cc:0d:5a:ff:b5:21:65:13:e4:37:47:87: bb:b8:c3:28:72:e3:b7:5e:95:52:71:e2:3b:21:8b: b2:09:33:69:25:e1:01:f2:37:80:7c:6b:16:c0:4f: e7:46:24:81:c3:57:b9:d0:25:77:c8:6f:77:6c:12: 43:65:3a:90:0c:38:6a:02:2e:b5:21:3f:58:7d:6f: 4d:af:e5:24:77:89:fe:cf:70:2e:e8:d7:27:16:fa: 02:a9:d1:46:76:e4:10:00:f7:22:40:63:2b:a4:aa: c9:1a:8e:1e:54:35:a1:99:45:3c:9f:c6:b7:7e:fa: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:EB:42:DF:CF:A6:E5:7D:33:F6:C5:11:D6:25:2F:C7:A6:65:47 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:bc:ff:91:ea:52:1d:91:7a:39:11:5a:87:92:0c:46:3a:0b: 88:31:e3:fa:5b:76:f3:06:53:40:62:c1:d1:d6:20:75:48:68: 35:93:fa:1f:90:3e:5c:97:5d:86:14:ae:c9:26:69:d1:78:8d: d2:08:6c:2c:00:c7:65:52:33:a3:97:13:73:f9:c5:a1:75:3c: 34:05:27:c5:42:1c:86:98:fd:2e:82:ba:92:99:0a:c7:f6:da: b5:55:cb:7e:6f:c6:f3:e2:db:b0:91:f2:5d:fe:2b:d4:e2:00: 5a:e7:74:80:81:83:4f:99:9b:03:d9:c2:89:ac:09:60:82:3c: 58:35:e7:ea:48:90:97:9e:00:51:0b:78:fc:45:7e:5d:d3:bc: 74:6f:3a:22:49:73:b1:82:91:de:a3:22:22:55:95:c2:1a:99: 5c:12:74:a6:da:2f:ac:2c:c7:86:f4:6c:b0:78:5b:c6:e9:09: 4f:2a:85:7f:70:c0:14:02:36:bb:df:f4:68:e0:6e:81:ee:98: 47:71:a5:ea:88:5f:a3:b5:b5:28:27:9c:63:ac:7d:93:32:74: d2:a9:43:bf:5e:d0:52:a1:c1:5c:dd:c3:b1:c0:df:63:15:38: c8:2f:79:d6:29:08:2b:1a:b4:ba:1b:bf:09:2b:59:f2:7a:73: a0:70:e2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlWC9ypVovBI8RUKOjZkhfUImsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNjA0MTYwMzI3MzVaFw0yNjA0MTkxMzM1MzVaMDMxMTAvBgNV BAMTKDNGOEJFQjQyREZDRkE2RTU3RDMzRjZDNTExRDYyNTJGQzdBNjY1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Nb5l1r006cF5hUZWAt74Fffx uwT6CZu6hOGgteBhxcg1gtuZE+BvB67kEdxAVbgOG/xlb38b28sO8LEXSat1LThU 9dFbGPCd2596yHaidtJPKI5BQrp8UZmbUi/U00+nKMH25JLARhVYi03pRFJYaBDN Ab8o4OrXt/zHRowZJFmqKETIjpcqM8wNWv+1IWUT5DdHh7u4wyhy47delVJx4jsh i7IJM2kl4QHyN4B8axbAT+dGJIHDV7nQJXfIb3dsEkNlOpAMOGoCLrUhP1h9b02v 5SR3if7PcC7o1ycW+gKp0UZ25BAA9yJAYyukqskajh5UNaGZRTyfxrd++id7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4vrQt/PpuV9M/bFEdYlL8emZUcwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO8/5HqUh2RejkRWoeSDEY6C4gx4/pbdvMG U0BiwdHWIHVIaDWT+h+QPlyXXYYUrskmadF4jdIIbCwAx2VSM6OXE3P5xaF1PDQF J8VCHIaY/S6CupKZCsf22rVVy35vxvPi27CR8l3+K9TiAFrndICBg0+ZmwPZwoms CWCCPFg15+pIkJeeAFELePxFfl3TvHRvOiJJc7GCkd6jIiJVlcIamVwSdKbaL6ws x4b0bLB4W8bpCU8qhX9wwBQCNrvf9GjgboHumEdxpeqIX6O1tSgnnGOsfZMydNKp Q79e0FKhwVzdw7HA32MVOMgvedYpCCsatLobvwkrWfJ6c6Bw4tA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:05 2026 by rpki-client