$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: XfCalU117PPpm2fshG8GJ5Rtf4e5GUBsTOV6J0mBKXQ= Subject key identifier: DB:55:F3:A6:F4:62:35:DC:0B:43:6D:4D:C2:36:A9:49:FE:90:54:6A Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 75AE6A8B6B5B8101C63EF56B97989B03402F61F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01E3 Signing time: Sat 18 Apr 2026 01:50:45 +0000 Manifest this update: Sat 18 Apr 2026 01:45:45 +0000 Manifest next update: Tue 21 Apr 2026 04:17:45 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: MyBLwsWV/l72CCclgCxEF1K7XOfKWMLViCUtHFkjkKU=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: 8Ege+nP0UOE+7Zo7IFwWTyzPW1ylNStb0XlDl5DtQnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:6a:8b:6b:5b:81:01:c6:3e:f5:6b:97:98:9b:03:40:2f:61:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Apr 18 01:45:45 2026 GMT Not After : Apr 21 04:17:45 2026 GMT Subject: CN=DB55F3A6F46235DC0B436D4DC236A949FE90546A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:6a:31:e5:dd:04:13:3b:57:89:04:cf:ed: ae:f9:b8:78:f3:04:e9:47:91:7b:63:01:76:84:46: 6f:b8:06:09:96:5a:70:46:90:5f:08:83:3b:9a:f8: f4:90:a0:21:81:99:4c:a7:c4:5b:a8:76:d3:f5:c3: 87:a1:d0:a8:8e:64:a8:ee:22:01:95:51:7a:e3:8d: fd:be:c3:85:d6:47:b4:11:5b:7c:63:dd:ce:a0:3a: 65:ea:1c:47:ee:6b:a5:ce:42:36:26:7e:68:fa:d5: a0:bb:c4:ff:5c:ff:09:7f:43:56:17:12:54:a8:8a: 1c:ac:bf:b6:4b:1e:a5:84:78:a1:78:84:e4:2b:a1: cc:2c:f6:f9:cc:fc:1f:79:39:ff:96:4c:de:c4:3c: 57:fe:f0:b5:16:46:20:1d:bd:8c:4f:e8:cb:cf:ec: 58:53:7c:f3:b0:1d:66:63:65:25:3e:07:1c:1f:92: da:c7:33:c0:93:39:6c:27:37:01:63:3d:13:4c:e1: 1e:97:42:ad:de:83:d0:ed:51:a0:19:6f:73:6b:bd: cd:5d:48:8e:6b:a5:24:07:a6:e6:d9:4b:7d:a8:3c: e3:89:ab:e1:30:f0:64:47:e5:dc:f0:c5:ee:6a:da: b5:0f:bc:61:06:86:41:17:0d:59:a9:35:a5:5c:32: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:F3:A6:F4:62:35:DC:0B:43:6D:4D:C2:36:A9:49:FE:90:54:6A X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:de:b6:75:f2:70:17:6a:41:83:96:79:6b:0e:e1:c7:3d:e2: 21:06:25:29:d1:e9:d2:59:1e:51:1f:eb:3a:fe:66:44:61:4f: 96:b0:92:06:cd:55:77:3b:c4:81:05:79:83:40:93:69:fb:a0: b9:26:2b:25:d2:d7:73:11:2c:54:b0:b5:9c:22:e5:64:bf:65: 69:52:f4:75:9e:be:0d:0b:de:45:3a:97:be:02:30:df:3f:95: 14:43:c3:b2:98:87:f6:93:39:13:5f:1e:35:17:48:a7:21:9d: 7e:dd:1d:a3:fc:de:2d:b5:a2:6d:7b:e8:46:4b:75:b3:af:5d: 6a:f4:14:ea:32:5d:a1:ef:f8:88:a3:27:c6:0c:70:b9:8b:7c: ee:3c:c7:fc:09:17:5a:9a:52:e2:e4:12:a9:53:eb:4a:a1:f1: 8b:76:5b:e5:76:ea:11:be:df:d9:7e:aa:83:c8:e1:75:ad:11: df:dc:0f:ff:e7:f6:3d:1e:82:28:b0:73:b6:05:8c:06:0e:06: f7:d8:96:ba:a6:7b:c2:0f:5f:c7:78:d7:41:b1:df:d4:04:2e: 09:4c:d4:a4:57:b4:9f:5b:ce:75:ad:01:52:8b:57:bf:79:36: 88:e8:5e:03:04:05:78:12:97:1f:55:3f:31:09:43:5d:64:e0: 13:3a:95:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda5qi2tbgQHGPvVrl5ibA0AvYfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNjA0MTgwMTQ1NDVaFw0yNjA0MjEwNDE3NDVaMDMxMTAvBgNV BAMTKERCNTVGM0E2RjQ2MjM1REMwQjQzNkQ0REMyMzZBOTQ5RkU5MDU0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDWox5d0EEztXiQTP7a75uHjz BOlHkXtjAXaERm+4BgmWWnBGkF8Igzua+PSQoCGBmUynxFuodtP1w4eh0KiOZKju IgGVUXrjjf2+w4XWR7QRW3xj3c6gOmXqHEfua6XOQjYmfmj61aC7xP9c/wl/Q1YX ElSoihysv7ZLHqWEeKF4hOQrocws9vnM/B95Of+WTN7EPFf+8LUWRiAdvYxP6MvP 7FhTfPOwHWZjZSU+BxwfktrHM8CTOWwnNwFjPRNM4R6XQq3eg9DtUaAZb3Nrvc1d SI5rpSQHpubZS32oPOOJq+Ew8GRH5dzwxe5q2rUPvGEGhkEXDVmpNaVcMmWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU21XzpvRiNdwLQ21NwjapSf6QVGowHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnetnXycBdqQYOWeWsO4cc94iEGJSnR6dJZ HlEf6zr+ZkRhT5awkgbNVXc7xIEFeYNAk2n7oLkmKyXS13MRLFSwtZwi5WS/ZWlS 9HWevg0L3kU6l74CMN8/lRRDw7KYh/aTORNfHjUXSKchnX7dHaP83i21om176EZL dbOvXWr0FOoyXaHv+IijJ8YMcLmLfO48x/wJF1qaUuLkEqlT60qh8Yt2W+V26hG+ 39l+qoPI4XWtEd/cD//n9j0egiiwc7YFjAYOBvfYlrqme8IPX8d410Gx39QELglM 1KRXtJ9bznWtAVKLV795NojoXgMEBXgSlx9VPzEJQ11k4BM6lZQ= -----END CERTIFICATE-----Generated at Sun Apr 19 15:49:58 2026 by rpki-client