$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: ArUMQfT5sAMXYB3J05iskdMOwbBZRqASzOQCipxA7W0= Subject key identifier: 3F:CF:42:FA:CD:94:1C:F5:CD:6D:DF:C8:B7:49:1E:B7:8F:CF:44:FD Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 24623961B342B673FFAF4E9DBBCB97E8805D809E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0397 Signing time: Sat 28 Feb 2026 20:52:33 +0000 Manifest this update: Sat 28 Feb 2026 20:47:33 +0000 Manifest next update: Tue 03 Mar 2026 22:48:33 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: Zczk7++N/uoLO4aPluSHk3cKs/VDW1X2k5pahOcKwFI=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:62:39:61:b3:42:b6:73:ff:af:4e:9d:bb:cb:97:e8:80:5d:80:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Feb 28 20:47:33 2026 GMT Not After : Mar 3 22:48:33 2026 GMT Subject: CN=3FCF42FACD941CF5CD6DDFC8B7491EB78FCF44FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:40:d8:07:10:b3:1a:c0:ef:d1:35:c4:e5:a5: e6:40:cc:6d:01:77:19:39:37:43:e3:93:79:d8:57: c9:80:8a:f3:8c:e8:1f:cc:55:4e:b9:92:09:bb:8a: 89:e4:45:2e:74:d9:33:2b:e0:b9:c0:92:61:c3:35: 54:55:06:a9:58:b6:0a:63:09:ff:f8:ac:9f:16:7c: 66:7b:cd:95:43:c5:6e:42:14:2d:73:f0:e2:3f:b4: e4:c8:b6:9d:d4:42:42:cf:57:8e:34:be:cc:36:84: 6b:69:6c:4d:be:b2:bc:a8:19:76:7f:b9:af:45:af: 14:c5:58:9e:1a:c9:07:ee:e3:8a:6f:ee:b0:73:c7: 05:48:ee:99:8f:d0:cc:f6:53:c9:21:63:97:ac:5a: 31:47:cd:bc:a4:d5:77:71:85:16:ea:35:d0:71:b0: e2:d8:d8:d4:87:ab:dc:1e:3a:ee:cc:0c:d4:2c:8c: 60:32:16:3e:6b:3e:10:6b:7a:7e:0b:1f:87:eb:ef: 0e:fe:06:24:fa:15:f4:06:bd:3b:ae:df:a9:52:7b: 71:f7:27:63:a5:3c:0d:7b:e5:87:b8:97:5f:5c:5d: 7e:06:76:dd:d5:a5:fb:ad:e9:0e:24:be:af:cd:a9: 2d:dc:b0:c2:8b:9a:48:2d:d0:2f:e7:cf:69:1c:17: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:42:FA:CD:94:1C:F5:CD:6D:DF:C8:B7:49:1E:B7:8F:CF:44:FD X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:73:c8:ab:2c:6e:e1:90:6f:d7:9f:51:fb:a6:db:f9:e9:e9: 76:74:67:da:e5:94:f4:cd:8b:3b:92:9e:28:ad:5c:9c:09:de: 6c:f0:83:25:af:14:8a:c5:a0:6b:02:e0:30:84:63:92:f0:90: c2:f4:ea:7a:84:7c:18:58:67:95:28:7e:9d:6a:f6:78:8b:ff: 75:36:df:68:65:2e:7e:e4:82:74:7b:34:b8:7c:9a:ec:88:2f: 3c:0b:7a:72:cc:ce:cc:1a:10:7c:f7:d9:d4:4f:65:d0:07:07: 9e:b0:02:8c:b4:9d:24:ac:22:3d:a7:d6:d7:26:c3:ff:30:9a: 9c:45:6d:11:9f:1a:2f:4e:21:ea:bc:a5:ba:cd:c1:ba:c0:c7: 44:ce:a5:a0:7f:11:15:30:8e:3f:ce:1c:6d:25:d8:50:a0:af: 10:37:5e:2e:a7:a1:9b:eb:cb:c3:57:3f:75:75:b9:45:0d:d3: 3a:61:6e:07:1c:c2:63:86:33:4a:8d:1f:d0:ab:00:9a:27:b8: 2d:df:c6:c0:81:8d:b3:e2:52:d6:9c:2d:7a:a2:a1:89:b0:ed: f6:49:54:16:8d:9f:66:3d:1a:99:f2:9a:45:89:9e:2d:2c:63: 83:2e:1d:22:d8:18:99:0d:74:b8:be:5a:24:85:c5:27:d6:98: b5:f4:d6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGI5YbNCtnP/r06du8uX6IBdgJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNjAyMjgyMDQ3MzNaFw0yNjAzMDMyMjQ4MzNaMDMxMTAvBgNV BAMTKDNGQ0Y0MkZBQ0Q5NDFDRjVDRDZEREZDOEI3NDkxRUI3OEZDRjQ0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7QNgHELMawO/RNcTlpeZAzG0B dxk5N0Pjk3nYV8mAivOM6B/MVU65kgm7ionkRS502TMr4LnAkmHDNVRVBqlYtgpj Cf/4rJ8WfGZ7zZVDxW5CFC1z8OI/tOTItp3UQkLPV440vsw2hGtpbE2+sryoGXZ/ ua9FrxTFWJ4ayQfu44pv7rBzxwVI7pmP0Mz2U8khY5esWjFHzbyk1XdxhRbqNdBx sOLY2NSHq9weOu7MDNQsjGAyFj5rPhBren4LH4fr7w7+BiT6FfQGvTuu36lSe3H3 J2OlPA175Ye4l19cXX4Gdt3Vpfut6Q4kvq/NqS3csMKLmkgt0C/nz2kcF7ifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP89C+s2UHPXNbd/It0ket4/PRP0wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRzyKssbuGQb9efUfum2/np6XZ0Z9rllPTN izuSniitXJwJ3mzwgyWvFIrFoGsC4DCEY5LwkML06nqEfBhYZ5Uofp1q9niL/3U2 32hlLn7kgnR7NLh8muyILzwLenLMzswaEHz32dRPZdAHB56wAoy0nSSsIj2n1tcm w/8wmpxFbRGfGi9OIeq8pbrNwbrAx0TOpaB/ERUwjj/OHG0l2FCgrxA3Xi6noZvr y8NXP3V1uUUN0zphbgccwmOGM0qNH9CrAJonuC3fxsCBjbPiUtacLXqioYmw7fZJ VBaNn2Y9GpnymkWJni0sY4MuHSLYGJkNdLi+WiSFxSfWmLX01j4= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:04 2026 by rpki-client