$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: vHTrkHjeQTeIt6QZX/CGA3t9a6yzLNquljNVpeAbBKc= Subject key identifier: DD:62:58:6C:5B:94:F1:5B:09:BB:09:76:63:5B:B5:79:E7:79:CA:5F Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 6E5BA69A394E891BF0BE5F11F24A8E358A37466B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0567 Signing time: Sat 18 Apr 2026 02:41:16 +0000 Manifest this update: Sat 18 Apr 2026 02:36:16 +0000 Manifest next update: Tue 21 Apr 2026 14:30:16 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 36Mnbeo0zz4O0rX3ab/CtE+doBUn+AQeUdg6xUmnJIs=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5b:a6:9a:39:4e:89:1b:f0:be:5f:11:f2:4a:8e:35:8a:37:46:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Apr 18 02:36:16 2026 GMT Not After : Apr 21 14:30:16 2026 GMT Subject: CN=DD62586C5B94F15B09BB0976635BB579E779CA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:40:8a:68:05:3c:3a:fd:56:7c:fa:67:cf: 27:0a:bd:1f:93:b0:b9:9d:17:f0:3c:31:b7:0e:c5: cb:c6:94:f9:c8:65:6d:96:f9:e0:5d:24:4b:06:26: 1e:f0:e3:d1:5d:42:47:e3:d1:7f:89:54:c2:eb:47: ee:0b:8a:10:c7:9e:ad:f2:17:98:fe:df:57:86:3c: fa:30:8f:39:bb:c1:88:0f:d8:99:55:19:2f:66:0e: c4:13:0d:ef:0a:71:1e:f6:33:b5:88:03:01:70:9a: ea:a4:82:0d:c1:06:08:5c:48:7e:53:ce:a0:7b:d2: c8:f0:80:43:cd:af:9f:e3:e1:f4:54:e7:46:67:7f: 4a:af:2a:e9:ac:01:c5:55:8e:f3:53:08:71:8d:85: fa:6f:56:74:a3:ff:2a:b6:d2:70:97:10:70:1a:0c: 31:d7:82:fb:6a:dc:b8:0e:b8:30:76:f4:97:37:e6: 40:03:05:98:ea:33:3b:57:b7:4b:b3:f3:2a:fb:61: 76:86:fd:fa:4b:08:f4:0b:eb:66:4f:dc:ac:82:d8: 23:1f:63:e9:1a:d8:06:24:7f:eb:ce:1e:c5:f5:28: 96:dc:51:fc:4e:cf:36:df:e5:f6:55:00:1a:93:e1: 5a:5d:7b:82:d6:a5:57:56:a5:f9:e6:2b:c8:50:10: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:58:6C:5B:94:F1:5B:09:BB:09:76:63:5B:B5:79:E7:79:CA:5F X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d2:62:6a:c2:e9:2d:f9:f2:0a:47:6c:91:ca:4d:52:60:5c: 75:52:15:1f:2c:92:86:4e:8e:08:60:f4:25:6a:10:e1:82:2b: c2:43:30:d9:35:98:62:79:29:8e:f8:67:03:c2:ad:98:f8:6b: 6b:98:02:ea:62:87:13:b1:79:3f:28:25:53:c7:7a:3a:d9:36: e2:75:2d:26:ff:7b:af:02:9a:aa:8b:f1:1e:18:19:fe:e4:3d: 8f:47:a6:da:4d:e9:b6:e5:d2:4b:55:8e:c3:39:a0:4c:bc:f0: b3:c2:c6:db:5a:96:08:4d:40:a9:09:91:a1:54:7e:b2:11:07: 34:6a:99:09:e9:f1:18:f2:12:d1:af:1d:fe:e2:51:60:28:5c: ec:89:bf:78:e6:f5:e5:08:74:0b:00:40:53:21:a0:e8:66:6e: 95:ad:0a:cd:b2:eb:ed:17:91:6b:a2:c0:57:e3:42:09:a6:96: ec:9b:88:a1:a1:fd:bc:1e:c2:27:cd:1c:3a:ed:57:e6:d6:1a: cc:21:d8:42:15:f6:9d:f3:97:1d:45:e6:7f:1d:44:d2:e7:af: c6:62:07:fb:78:28:7d:d2:b6:9c:cf:48:be:89:65:cc:c0:8c: f5:ee:c4:3c:1f:87:91:f7:11:2d:79:88:d9:e1:d7:81:55:37: 8f:f5:4a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblummjlOiRvwvl8R8kqONYo3RmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNjA0MTgwMjM2MTZaFw0yNjA0MjExNDMwMTZaMDMxMTAvBgNV BAMTKERENjI1ODZDNUI5NEYxNUIwOUJCMDk3NjYzNUJCNTc5RTc3OUNBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJF0CKaAU8Ov1WfPpnzycKvR+T sLmdF/A8MbcOxcvGlPnIZW2W+eBdJEsGJh7w49FdQkfj0X+JVMLrR+4LihDHnq3y F5j+31eGPPowjzm7wYgP2JlVGS9mDsQTDe8KcR72M7WIAwFwmuqkgg3BBghcSH5T zqB70sjwgEPNr5/j4fRU50Znf0qvKumsAcVVjvNTCHGNhfpvVnSj/yq20nCXEHAa DDHXgvtq3LgOuDB29Jc35kADBZjqMztXt0uz8yr7YXaG/fpLCPQL62ZP3KyC2CMf Y+ka2AYkf+vOHsX1KJbcUfxOzzbf5fZVABqT4Vpde4LWpVdWpfnmK8hQEOEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WJYbFuU8VsJuwl2Y1u1eed5yl8wHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrSYmrC6S358gpHbJHKTVJgXHVSFR8skoZO jghg9CVqEOGCK8JDMNk1mGJ5KY74ZwPCrZj4a2uYAupihxOxeT8oJVPHejrZNuJ1 LSb/e68CmqqL8R4YGf7kPY9HptpN6bbl0ktVjsM5oEy88LPCxttalghNQKkJkaFU frIRBzRqmQnp8RjyEtGvHf7iUWAoXOyJv3jm9eUIdAsAQFMhoOhmbpWtCs2y6+0X kWuiwFfjQgmmluybiKGh/bwewifNHDrtV+bWGswh2EIV9p3zlx1F5n8dRNLnr8Zi B/t4KH3StpzPSL6JZczAjPXuxDwfh5H3ES15iNnh14FVN4/1SnI= -----END CERTIFICATE-----Generated at Mon Apr 20 09:40:38 2026 by rpki-client