$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: doE3BSZkamEVwL8AojoDnRioHGUbyAYK/s6sWd6f8Ng= Subject key identifier: 4A:52:76:E3:20:24:F5:3F:1B:73:FE:5B:BF:49:FD:1A:3F:78:C0:38 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 34450B84C1716B8CA8E7B05CF11B58F8640CA9DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 0215 Signing time: Sat 28 Feb 2026 21:32:23 +0000 Manifest this update: Sat 28 Feb 2026 21:27:23 +0000 Manifest next update: Wed 04 Mar 2026 01:09:23 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: YcF7bieBFG0sJpKg/MafPouoPrE/A/W+Ev0yD0uI794=) 2: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: eF36F2O8aJxtQTB4dhuIgesGEoNbnpucx3HVN8PdcpY=) 3: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gW58Bt6Gz49TMr81C5jMAuCRmOf4ew6UR7uHG5yi3xs=) 4: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:45:0b:84:c1:71:6b:8c:a8:e7:b0:5c:f1:1b:58:f8:64:0c:a9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Feb 28 21:27:23 2026 GMT Not After : Mar 4 01:09:23 2026 GMT Subject: CN=4A5276E32024F53F1B73FE5BBF49FD1A3F78C038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:fb:7f:e0:be:f0:1e:eb:8b:02:14:6d:85: 4f:52:55:b1:f9:83:d1:cf:7b:85:b6:db:9b:13:28: f0:c2:bb:12:4e:f2:e3:e1:d1:0e:b9:b2:7e:eb:e0: be:91:d0:77:14:c9:b0:9b:97:02:de:ac:08:9b:39: 6d:0f:35:16:4b:0e:9b:eb:ba:ab:88:d7:b7:70:01: cd:19:40:3c:56:d6:0b:bb:8d:c9:84:b7:82:ce:22: 26:a7:e7:03:6d:54:b6:76:84:a3:41:74:48:fe:6a: a0:d8:8e:dc:50:8c:e0:44:df:31:43:7b:1d:cd:35: 91:2b:3c:89:2d:36:b1:18:68:1b:bd:99:19:fa:2f: 80:8a:85:a9:72:6b:0a:13:9a:74:f3:9c:73:90:d1: 6a:d0:c8:ee:8e:0e:ac:0e:2f:44:ba:b4:f3:85:9f: 8a:74:9d:61:a8:63:d2:c2:7a:67:3b:4b:ee:49:69: cf:38:23:88:23:f3:86:74:02:c5:26:f0:b6:e9:b3: 07:64:2d:6f:d8:d3:0d:55:83:4f:76:ae:08:21:91: 98:6d:04:ff:96:db:13:b7:e4:cd:fa:f1:68:bb:04: 62:69:25:5f:e0:70:f0:7f:cb:c0:55:c7:1a:61:0f: 4a:95:3d:3f:65:0e:99:fb:b0:62:94:0a:79:13:b2: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:76:E3:20:24:F5:3F:1B:73:FE:5B:BF:49:FD:1A:3F:78:C0:38 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0a:bf:cc:99:f5:f1:21:bb:2e:68:5a:26:70:09:3a:25:14: 06:86:39:93:c3:55:47:d0:e2:67:a0:79:4d:1c:b1:f0:cd:66: d5:03:2d:93:ef:e2:8a:d9:51:52:3d:ac:73:fe:4a:8c:76:b7: 37:cf:20:b5:89:e6:5c:2b:7b:0a:11:6f:22:30:05:99:e0:87: c3:35:3b:66:8b:c5:c9:65:86:26:b6:0f:f2:37:22:23:f4:b9: 49:76:91:b2:b8:17:12:8b:e7:24:e8:7a:63:dd:0b:38:d7:16: 0d:af:fb:d3:1e:53:9e:4f:2f:48:df:4a:df:65:e4:6c:10:44: a1:23:ae:4d:89:23:39:a8:1b:89:85:51:c2:e9:f3:f9:9c:7d: 7b:a4:ef:f1:c5:a1:c6:7a:4a:0e:8f:da:27:00:60:24:76:26: bc:74:5b:40:94:86:eb:d2:32:4b:41:c1:c3:87:82:14:a5:93: 75:36:61:eb:57:a7:21:c4:20:5f:52:81:14:68:c3:25:d2:ad: bd:0f:92:82:90:9e:05:32:01:78:6c:66:11:14:2c:a6:0d:72: e3:c7:d2:7f:75:a2:99:f6:ea:8b:d7:1a:db:f3:ee:e1:6e:c2: ef:8a:83:a5:de:a3:92:a1:f2:aa:bd:6b:c1:62:c4:f4:82:12: 0e:b1:d5:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEULhMFxa4yo57Bc8RtY+GQMqdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNjAyMjgyMTI3MjNaFw0yNjAzMDQwMTA5MjNaMDMxMTAvBgNV BAMTKDRBNTI3NkUzMjAyNEY1M0YxQjczRkU1QkJGNDlGRDFBM0Y3OEMwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsft/4L7wHuuLAhRthU9SVbH5 g9HPe4W225sTKPDCuxJO8uPh0Q65sn7r4L6R0HcUybCblwLerAibOW0PNRZLDpvr uquI17dwAc0ZQDxW1gu7jcmEt4LOIian5wNtVLZ2hKNBdEj+aqDYjtxQjOBE3zFD ex3NNZErPIktNrEYaBu9mRn6L4CKhalyawoTmnTznHOQ0WrQyO6ODqwOL0S6tPOF n4p0nWGoY9LCemc7S+5Jac84I4gj84Z0AsUm8LbpswdkLW/Y0w1Vg092rgghkZht BP+W2xO35M368Wi7BGJpJV/gcPB/y8BVxxphD0qVPT9lDpn7sGKUCnkTsshPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlJ24yAk9T8bc/5bv0n9Gj94wDgwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4Kv8yZ9fEhuy5oWiZwCTolFAaGOZPDVUfQ 4megeU0csfDNZtUDLZPv4orZUVI9rHP+Sox2tzfPILWJ5lwrewoRbyIwBZngh8M1 O2aLxcllhia2D/I3IiP0uUl2kbK4FxKL5yToemPdCzjXFg2v+9MeU55PL0jfSt9l 5GwQRKEjrk2JIzmoG4mFUcLp8/mcfXuk7/HFocZ6Sg6P2icAYCR2Jrx0W0CUhuvS MktBwcOHghSlk3U2YetXpyHEIF9SgRRowyXSrb0PkoKQngUyAXhsZhEULKYNcuPH 0n91opn26ovXGtvz7uFuwu+Kg6Xeo5Kh8qq9a8FixPSCEg6x1RQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:22 2026 by rpki-client