$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: aHhpyIpgi7Txxb44El+eARHxsGETveF85yA62Ztnuy4= Subject key identifier: 59:6D:5F:B5:8F:3F:D6:B9:AD:A3:B4:B8:DA:7D:5E:A9:8F:6F:05:1B Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 3601635E15C93A7DA6E3D97C5EB86A19677AA7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 0109 Signing time: Sat 07 Mar 2026 03:02:31 +0000 Manifest this update: Sat 07 Mar 2026 02:57:31 +0000 Manifest next update: Tue 10 Mar 2026 06:26:31 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) 3: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: L2cYgwj4V++j5x+VwezDngbv4urrRPgryLx6cceqOYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:01:63:5e:15:c9:3a:7d:a6:e3:d9:7c:5e:b8:6a:19:67:7a:a7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Mar 7 02:57:31 2026 GMT Not After : Mar 10 06:26:31 2026 GMT Subject: CN=596D5FB58F3FD6B9ADA3B4B8DA7D5EA98F6F051B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:b2:08:27:66:f9:1e:60:46:c8:28:4f:fc: c7:7b:a7:62:4c:0c:9e:4d:98:10:33:91:fd:06:44: 08:e3:38:f8:87:77:ea:98:1d:f2:c8:f4:53:23:ca: e5:d4:93:41:14:80:6a:c4:d0:cf:0d:2c:8b:98:0b: b2:70:e0:39:ec:bc:cf:fb:f1:57:c0:0f:2c:60:71: 3b:1e:ab:cd:44:f9:5f:ab:99:42:51:6e:08:0a:f2: 67:2e:09:72:96:a2:e6:44:79:18:28:55:93:60:ef: eb:e5:fb:43:be:8a:14:4f:f6:e8:82:29:3a:29:fb: f7:db:8b:0c:57:fe:a3:51:9c:dd:92:74:32:e6:ee: e7:44:c6:e2:4c:64:36:ff:12:08:37:0b:79:21:f0: a3:81:f8:60:1e:d7:8b:4d:c5:84:2c:5e:ab:3d:f8: 26:98:ce:d1:16:72:34:a3:ec:5e:20:a9:c8:6f:cf: 06:7b:d1:28:36:ac:55:6f:1c:77:02:d1:93:49:d2: ce:75:07:52:6d:d2:64:27:34:30:4e:f7:c1:c2:d5: dd:9c:10:b1:82:86:5d:83:52:75:00:ea:71:03:66: f6:67:51:d3:39:50:a4:7b:f3:eb:cd:c2:2e:46:f4: 8d:bf:cf:17:64:e6:61:06:59:74:5e:69:4a:4f:00: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6D:5F:B5:8F:3F:D6:B9:AD:A3:B4:B8:DA:7D:5E:A9:8F:6F:05:1B X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:68:84:b1:bf:3d:1a:5e:c7:5c:33:5e:74:31:f6:65:b4:fd: 1a:a7:75:8e:90:9f:77:af:10:8b:06:48:d0:bd:4a:3b:0a:6b: 27:a6:b4:3c:d4:be:39:c1:cc:ec:d4:4a:32:64:cd:ab:d1:e0: 3d:81:04:9f:75:35:4f:9d:84:13:56:ee:7f:c4:cc:03:8b:f3: 87:d5:d2:45:4f:53:37:08:2b:98:9e:46:74:e6:c5:60:3d:1d: af:63:15:01:5f:c9:ee:d8:2a:53:21:d2:db:58:4d:04:b3:24: 47:a1:af:a3:5f:76:5b:cf:64:18:32:c7:d4:9f:0d:d9:79:10: 9d:22:34:fb:e9:7c:d4:98:71:cf:7b:d1:f9:eb:58:b1:45:39: 46:6d:fd:a9:0b:df:e3:9a:e0:26:ba:bd:b9:0f:b3:17:90:11: d1:78:6d:87:60:76:30:16:f9:f3:60:65:78:56:0d:26:fe:67: e4:f3:a7:fc:9b:4a:4e:cd:a9:75:99:6a:44:60:7f:9c:e3:a1: 9d:31:5a:f0:23:c2:42:02:cb:d6:24:30:7f:9e:6e:7a:36:9b: 49:52:e6:14:00:f9:d2:48:af:7a:92:e8:8a:a0:2d:50:99:20: 97:b1:8c:ec:6b:98:ac:b1:e6:e2:06:02:07:58:df:b5:97:3e: a7:de:c6:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgFjXhXJOn2m49l8XrhqGWd6p78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNjAzMDcwMjU3MzFaFw0yNjAzMTAwNjI2MzFaMDMxMTAvBgNV BAMTKDU5NkQ1RkI1OEYzRkQ2QjlBREEzQjRCOERBN0Q1RUE5OEY2RjA1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEA7IIJ2b5HmBGyChP/Md7p2JM DJ5NmBAzkf0GRAjjOPiHd+qYHfLI9FMjyuXUk0EUgGrE0M8NLIuYC7Jw4DnsvM/7 8VfADyxgcTseq81E+V+rmUJRbggK8mcuCXKWouZEeRgoVZNg7+vl+0O+ihRP9uiC KTop+/fbiwxX/qNRnN2SdDLm7udExuJMZDb/Egg3C3kh8KOB+GAe14tNxYQsXqs9 +CaYztEWcjSj7F4gqchvzwZ70Sg2rFVvHHcC0ZNJ0s51B1Jt0mQnNDBO98HC1d2c ELGChl2DUnUA6nEDZvZnUdM5UKR78+vNwi5G9I2/zxdk5mEGWXReaUpPAKpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWW1ftY8/1rmto7S42n1eqY9vBRswHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5ohLG/PRpex1wzXnQx9mW0/RqndY6Qn3ev EIsGSNC9SjsKayemtDzUvjnBzOzUSjJkzavR4D2BBJ91NU+dhBNW7n/EzAOL84fV 0kVPUzcIK5ieRnTmxWA9Ha9jFQFfye7YKlMh0ttYTQSzJEehr6NfdlvPZBgyx9Sf Ddl5EJ0iNPvpfNSYcc970fnrWLFFOUZt/akL3+Oa4Ca6vbkPsxeQEdF4bYdgdjAW +fNgZXhWDSb+Z+Tzp/ybSk7NqXWZakRgf5zjoZ0xWvAjwkICy9YkMH+ebno2m0lS 5hQA+dJIr3qS6IqgLVCZIJexjOxrmKyx5uIGAgdY37WXPqfexvc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:58:29 2026 by rpki-client