$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: VOt6qyh39a3Ynic8qXD1Gbcz3kLMXv9Bx+sqme4qmxA= Subject key identifier: 17:42:CC:16:7E:33:C4:0E:35:27:55:20:C5:8B:A8:08:99:CD:E5:DC Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 067DEEF72432851CDFB0EC90EFEA48FF1586773E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 025A Signing time: Mon 20 Apr 2026 06:50:01 +0000 Manifest this update: Mon 20 Apr 2026 06:45:01 +0000 Manifest next update: Thu 23 Apr 2026 16:22:01 +0000 Files and hashes: 1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: x40EquQPnv3Wndj6o2Vn16WH9VpqgA6aZaQEy7Uqit0=) 2: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: FwcFScp7Cs7HZfIouUaq3jflFIuNZirrbsGdb6d6Gyk=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: pPrmF7wA0mkz0XFtTbZ2mXTXaWSM3+27UUv699+o4qw=) 4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: mZZxWzYI+/x/HPmJcFlJlvOu172XUYAgVPc/9sUojk8=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: ugs0c0VPcoyXvgnQe8BNqVxdTK1dLc3Sk2MjVANs5YE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7d:ee:f7:24:32:85:1c:df:b0:ec:90:ef:ea:48:ff:15:86:77:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Apr 20 06:45:01 2026 GMT Not After : Apr 23 16:22:01 2026 GMT Subject: CN=1742CC167E33C40E35275520C58BA80899CDE5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:78:fd:fa:8d:9c:7d:9e:45:46:f7:eb:7c: 0b:20:71:9c:5d:82:16:21:06:06:94:89:8d:87:46: 7c:de:a8:e6:65:76:1c:97:11:a0:db:60:01:a7:b4: 82:a6:97:73:d3:81:2d:d0:16:79:96:cd:eb:65:25: 57:b0:52:31:ef:0d:14:8b:c0:05:d7:70:80:25:4c: d4:35:bd:97:a1:11:2a:47:c7:d4:94:cf:db:67:d4: 85:03:4a:08:f9:7a:e4:29:f5:cf:fe:d6:da:ad:e7: 3e:7c:ad:aa:ba:ac:40:e6:f6:9c:1d:37:40:1e:f0: 94:e9:48:5b:73:48:3f:29:bd:d0:7f:f9:db:f9:45: de:50:90:4d:26:78:00:9f:22:a5:8a:74:ac:f7:82: 4a:22:40:61:19:a0:f5:74:7e:ac:50:a9:ed:90:2d: ef:46:8b:65:7c:7d:f1:1c:02:cd:9c:54:51:66:b4: a2:57:d3:f6:e6:8a:74:ff:6a:9b:5d:f9:48:f7:1d: 5b:91:75:b4:d1:94:6c:e7:3f:df:38:d8:4c:2a:cc: f4:5e:8b:35:a2:85:2e:ce:52:06:2e:43:8f:1e:9d: 66:1a:a1:5a:85:52:2f:d6:bd:6a:15:fd:4a:ed:42: 06:0d:c6:28:ca:99:9c:4a:95:22:de:db:01:0f:31: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:42:CC:16:7E:33:C4:0E:35:27:55:20:C5:8B:A8:08:99:CD:E5:DC X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:09:39:07:fd:a5:40:32:8e:f6:df:74:93:94:3d:1e:eb:7f: 16:41:0c:5a:aa:77:33:f8:8e:e2:57:ce:90:17:d4:b4:81:e0: bd:e4:20:09:83:27:f7:00:af:99:ae:28:00:c1:28:88:cf:6b: 03:6a:d3:76:03:0a:0e:ee:b4:e8:a2:e1:7d:b3:6a:80:fd:40: 39:00:4b:72:6f:c9:6a:01:37:9b:26:dc:37:e7:93:b3:2c:f9: 3a:12:ab:07:a3:2e:c7:8d:dd:13:4f:45:1f:c8:ee:a8:35:3f: 4c:ad:2b:c2:da:70:d1:ba:9d:ab:ec:ac:21:2d:60:88:90:6a: 32:e5:eb:6c:03:7d:2a:59:08:dc:01:34:34:80:b6:ec:8e:be: 7a:ca:1e:17:8b:d9:a2:9e:1c:3e:22:65:bc:c8:e4:3d:5d:1b: 1f:7c:33:e6:36:67:58:09:bd:88:1a:0b:09:be:73:14:6d:d4: e8:81:62:93:19:74:c4:fd:42:61:22:f1:57:cc:16:c6:f0:ea: bc:6c:13:1e:e8:b5:ff:ef:b3:19:1c:d6:f8:58:99:7a:a1:de: 8e:51:b7:dc:eb:a1:08:93:8d:83:90:3f:31:33:62:3e:9f:a2: a6:4f:ce:04:71:47:0e:c7:55:b4:e4:0a:2d:b5:29:78:1a:10: ce:ce:e0:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn3u9yQyhRzfsOyQ7+pI/xWGdz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNjA0MjAwNjQ1MDFaFw0yNjA0MjMxNjIyMDFaMDMxMTAvBgNV BAMTKDE3NDJDQzE2N0UzM0M0MEUzNTI3NTUyMEM1OEJBODA4OTlDREU1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIN3j9+o2cfZ5FRvfrfAsgcZxd ghYhBgaUiY2HRnzeqOZldhyXEaDbYAGntIKml3PTgS3QFnmWzetlJVewUjHvDRSL wAXXcIAlTNQ1vZehESpHx9SUz9tn1IUDSgj5euQp9c/+1tqt5z58raq6rEDm9pwd N0Ae8JTpSFtzSD8pvdB/+dv5Rd5QkE0meACfIqWKdKz3gkoiQGEZoPV0fqxQqe2Q Le9Gi2V8ffEcAs2cVFFmtKJX0/bminT/aptd+Uj3HVuRdbTRlGznP9842EwqzPRe izWihS7OUgYuQ48enWYaoVqFUi/WvWoV/UrtQgYNxijKmZxKlSLe2wEPMW63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF0LMFn4zxA41J1UgxYuoCJnN5dwwHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQJOQf9pUAyjvbfdJOUPR7rfxZBDFqqdzP4 juJXzpAX1LSB4L3kIAmDJ/cAr5muKADBKIjPawNq03YDCg7utOii4X2zaoD9QDkA S3JvyWoBN5sm3Dfnk7Ms+ToSqwejLseN3RNPRR/I7qg1P0ytK8LacNG6navsrCEt YIiQajLl62wDfSpZCNwBNDSAtuyOvnrKHheL2aKeHD4iZbzI5D1dGx98M+Y2Z1gJ vYgaCwm+cxRt1OiBYpMZdMT9QmEi8VfMFsbw6rxsEx7otf/vsxkc1vhYmXqh3o5R t9zroQiTjYOQPzEzYj6foqZPzgRxRw7HVbTkCi21KXgaEM7O4BE= -----END CERTIFICATE-----Generated at Wed Apr 22 10:34:25 2026 by rpki-client