$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: VSnJgDlMHUZJhKYTf+9shMkzYp+RJxN4XmJjwgwEJs4= Subject key identifier: DF:CB:97:70:24:4D:36:AE:44:C2:57:EB:DD:E3:EC:EF:B5:E2:39:D0 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 2334058DB753AFA7E6FECE6A5C6729806A2AE99A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 011D Signing time: Mon 20 Apr 2026 23:52:36 +0000 Manifest this update: Mon 20 Apr 2026 23:47:35 +0000 Manifest next update: Fri 24 Apr 2026 06:00:35 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) 3: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: QJTsKfgl13ztb1o6hBanUHBgbbydkxmyrSw44AUSzd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:34:05:8d:b7:53:af:a7:e6:fe:ce:6a:5c:67:29:80:6a:2a:e9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Apr 20 23:47:35 2026 GMT Not After : Apr 24 06:00:35 2026 GMT Subject: CN=DFCB9770244D36AE44C257EBDDE3ECEFB5E239D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9e:5a:18:c6:e0:4e:d8:49:34:2f:8b:49:80: f8:92:18:c0:d2:7a:db:7b:c7:7b:ff:a4:9b:2f:d3: 3e:4d:17:c0:a1:9c:b4:33:13:97:62:aa:e8:72:04: 9c:e9:a2:fb:ef:ed:3d:ef:29:0d:3c:91:dc:e5:a6: 8f:93:a5:eb:0d:70:04:76:79:e0:1f:b2:f8:cb:70: 8e:75:10:a2:bb:78:a4:31:3a:3d:53:23:50:11:e7: 4a:2f:47:a6:8a:70:eb:ff:59:c5:8e:c7:79:d1:4b: 5d:bd:2d:0b:e9:f4:89:9e:84:dc:54:44:a2:cb:31: 00:9a:52:67:da:5a:ad:3b:c4:b9:0d:12:77:e5:f0: 98:02:50:c6:7d:6d:14:f0:53:97:39:07:50:71:0c: 4f:ce:82:82:fe:95:37:19:0a:f5:67:af:c6:0e:e9: fa:a6:f1:74:c8:dc:75:95:8c:ed:5c:08:39:11:02: 68:f5:44:e4:c6:5a:66:77:d3:87:75:74:28:7d:fb: 18:99:ee:59:4e:82:4a:02:99:ae:f1:b6:92:de:58: 0f:c8:8d:a7:56:7c:8f:a4:6f:d5:9d:22:f1:01:ae: f4:00:84:97:7b:a0:09:9f:5c:1d:d4:84:4b:39:65: 64:c4:53:07:77:60:23:09:c2:e0:85:f4:2f:18:69: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CB:97:70:24:4D:36:AE:44:C2:57:EB:DD:E3:EC:EF:B5:E2:39:D0 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0d:75:ce:c6:d1:0c:cc:85:b8:ff:04:b0:96:9e:8f:a6:f8: 3a:98:ce:0d:3f:62:d5:5a:6d:de:0e:c6:7f:25:cd:1b:87:68: de:7e:d0:4f:81:bd:cd:c8:6c:14:07:16:c5:b9:84:e9:26:6f: 3c:09:5b:d6:84:1e:12:1f:b6:c5:90:bd:f1:9d:db:43:73:db: 7e:62:96:78:b0:0f:99:fd:b5:59:40:34:11:3c:0d:6c:3e:ee: 6e:b2:1c:19:e7:d9:74:59:8b:ee:a5:f5:09:86:41:49:d1:b9: 8c:8b:41:65:96:3e:73:6a:6b:08:a5:b5:0a:68:30:53:96:28: c1:e9:18:bc:34:88:f1:92:39:b1:f1:b6:74:bc:06:a7:57:01: c7:b2:a6:2e:e6:7a:40:4a:de:10:2e:5e:67:f5:a6:bb:e2:27: ec:94:eb:02:f6:da:23:af:3b:25:a8:9f:21:24:f5:d7:42:12: 0d:2d:4f:54:e5:d2:5d:2b:78:a0:84:45:19:44:90:2f:fb:bd: d5:cb:12:4f:8b:03:8f:f2:6e:f6:bc:2b:9a:f3:50:90:81:a3: c5:57:28:ef:40:b6:61:c6:18:48:29:c6:43:f6:38:bf:ba:0c: 22:1e:60:c1:8f:0b:3c:c1:42:6e:b5:21:d2:ac:71:0d:e0:05: 0a:ee:24:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzQFjbdTr6fm/s5qXGcpgGoq6ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNjA0MjAyMzQ3MzVaFw0yNjA0MjQwNjAwMzVaMDMxMTAvBgNV BAMTKERGQ0I5NzcwMjQ0RDM2QUU0NEMyNTdFQkRERTNFQ0VGQjVFMjM5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDunloYxuBO2Ek0L4tJgPiSGMDS ett7x3v/pJsv0z5NF8ChnLQzE5diquhyBJzpovvv7T3vKQ08kdzlpo+TpesNcAR2 eeAfsvjLcI51EKK7eKQxOj1TI1AR50ovR6aKcOv/WcWOx3nRS129LQvp9ImehNxU RKLLMQCaUmfaWq07xLkNEnfl8JgCUMZ9bRTwU5c5B1BxDE/OgoL+lTcZCvVnr8YO 6fqm8XTI3HWVjO1cCDkRAmj1ROTGWmZ304d1dCh9+xiZ7llOgkoCma7xtpLeWA/I jadWfI+kb9WdIvEBrvQAhJd7oAmfXB3UhEs5ZWTEUwd3YCMJwuCF9C8YaXbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38uXcCRNNq5Ewlfr3ePs77XiOdAwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgNdc7G0QzMhbj/BLCWno+m+DqYzg0/YtVa bd4Oxn8lzRuHaN5+0E+Bvc3IbBQHFsW5hOkmbzwJW9aEHhIftsWQvfGd20Nz235i lniwD5n9tVlANBE8DWw+7m6yHBnn2XRZi+6l9QmGQUnRuYyLQWWWPnNqawiltQpo MFOWKMHpGLw0iPGSObHxtnS8BqdXAceypi7mekBK3hAuXmf1prviJ+yU6wL22iOv OyWonyEk9ddCEg0tT1Tl0l0reKCERRlEkC/7vdXLEk+LA4/ybva8K5rzUJCBo8VX KO9AtmHGGEgpxkP2OL+6DCIeYMGPCzzBQm61IdKscQ3gBQruJCk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:34 2026 by rpki-client