$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: nM3r518HNZReh6ihxlLvidVe2u5P5V2Nd/ghnweRpt8= Subject key identifier: 95:0F:D4:6A:EE:6F:99:CA:0C:08:A9:1B:51:2F:11:1F:ED:59:B9:9E Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 3153A86FCCD77EEB7B76B805062EAA7C64669AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 0178 Signing time: Mon 30 Jun 2025 21:10:04 +0000 Manifest this update: Mon 30 Jun 2025 21:05:04 +0000 Manifest next update: Thu 03 Jul 2025 23:48:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 2: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) 3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 4: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: VvX7QigPjVlrSbo5ke1z1f1X1rbMHk4jq1qsujlFcbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:53:a8:6f:cc:d7:7e:eb:7b:76:b8:05:06:2e:aa:7c:64:66:9a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Jun 30 21:05:04 2025 GMT Not After : Jul 3 23:48:04 2025 GMT Subject: CN=950FD46AEE6F99CA0C08A91B512F111FED59B99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:60:ed:67:45:e4:45:95:cb:cd:11:2a:0e: a5:ca:42:e7:97:b0:52:60:e8:6c:ee:7a:44:50:a9: 70:c7:49:59:d9:f3:c9:cc:c8:64:b6:b5:49:b2:c3: 63:60:97:c7:1e:9d:ca:39:f9:7b:b5:73:42:84:af: 58:76:bd:77:18:f7:b9:b5:6b:a8:4b:03:d8:1c:62: d0:f5:21:70:67:4d:dc:02:3f:ec:3a:07:5a:d6:e2: 47:1b:89:9f:80:7e:bf:9f:29:b7:e5:59:ac:ba:29: 42:75:03:07:dc:77:f4:34:0a:da:d0:7e:de:2d:ce: a1:7c:22:36:d6:03:aa:d9:79:aa:1c:26:dd:d2:27: f5:9d:55:00:3f:19:02:99:8b:a2:96:ee:48:4c:f8: 69:ef:36:1c:5c:63:64:fe:99:8b:30:fd:87:9c:d1: 6c:c9:28:18:56:c6:63:7c:4e:cd:64:ca:36:e8:07: b3:ad:fd:0d:d9:28:01:fe:9b:57:4a:e1:3f:ff:03: 8a:63:5d:12:63:90:f1:e4:8d:2f:00:c2:9d:6f:b0: 62:5b:cb:25:dd:44:ed:1b:ea:a9:88:81:fb:1c:5d: fc:57:83:9c:a3:cc:8b:2e:10:9c:b6:3a:b2:1c:12: 05:3d:29:74:27:93:07:5f:ad:0e:4d:88:2f:fe:19: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:D4:6A:EE:6F:99:CA:0C:08:A9:1B:51:2F:11:1F:ED:59:B9:9E X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:90:3c:76:55:21:a4:ed:ca:a6:4b:6f:66:ec:b5:f3:e2:23: b8:6c:56:42:a2:c8:83:ed:8e:40:e3:30:61:af:4a:06:e6:6b: 9c:d0:b0:be:8d:ff:96:a3:9f:31:a8:2f:5a:8f:df:5f:01:74: 64:8b:33:34:b5:38:92:23:72:00:fc:2f:aa:c8:04:8e:ac:1d: 5d:8a:10:10:6c:5d:e6:86:1e:2d:9f:8b:03:b6:bd:08:79:11: bf:eb:ba:fa:f0:29:67:32:a7:e0:e8:07:f7:ee:96:49:b9:84: c2:47:95:c6:e0:67:d7:1d:37:3d:5c:7f:25:76:ea:84:4f:32: dc:9e:57:2e:e2:7b:97:a2:6d:7f:b7:1a:82:80:91:c2:93:b8: 0d:05:11:ec:74:46:3f:a7:ce:4c:39:4b:d4:36:74:98:d3:39: f9:28:f4:50:be:5e:d5:4c:25:8c:91:b3:8d:9d:f3:96:cc:c3: 94:c5:65:a7:98:1f:1a:f1:47:c2:95:81:01:85:41:4c:d9:8e: 10:ef:2c:1b:6c:9f:27:f8:94:9f:f4:31:70:53:65:15:eb:55: 9b:24:73:01:c7:10:7b:1c:c7:f3:64:93:eb:91:60:07:e5:78: 68:f2:21:c9:dc:53:30:71:63:c5:93:5b:6c:b2:84:14:10:6d: 4a:31:fb:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVOob8zXfut7drgFBi6qfGRmmu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA2MzAyMTA1MDRaFw0yNTA3MDMyMzQ4MDRaMDMxMTAvBgNV BAMTKDk1MEZENDZBRUU2Rjk5Q0EwQzA4QTkxQjUxMkYxMTFGRUQ1OUI5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnGDtZ0XkRZXLzREqDqXKQueX sFJg6GzuekRQqXDHSVnZ88nMyGS2tUmyw2Ngl8cenco5+Xu1c0KEr1h2vXcY97m1 a6hLA9gcYtD1IXBnTdwCP+w6B1rW4kcbiZ+Afr+fKbflWay6KUJ1Awfcd/Q0CtrQ ft4tzqF8IjbWA6rZeaocJt3SJ/WdVQA/GQKZi6KW7khM+GnvNhxcY2T+mYsw/Yec 0WzJKBhWxmN8Ts1kyjboB7Ot/Q3ZKAH+m1dK4T//A4pjXRJjkPHkjS8Awp1vsGJb yyXdRO0b6qmIgfscXfxXg5yjzIsuEJy2OrIcEgU9KXQnkwdfrQ5NiC/+GcXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQ/Uau5vmcoMCKkbUS8RH+1ZuZ4wHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+QPHZVIaTtyqZLb2bstfPiI7hsVkKiyIPt jkDjMGGvSgbma5zQsL6N/5ajnzGoL1qP318BdGSLMzS1OJIjcgD8L6rIBI6sHV2K EBBsXeaGHi2fiwO2vQh5Eb/ruvrwKWcyp+DoB/fulkm5hMJHlcbgZ9cdNz1cfyV2 6oRPMtyeVy7ie5eibX+3GoKAkcKTuA0FEex0Rj+nzkw5S9Q2dJjTOfko9FC+XtVM JYyRs42d85bMw5TFZaeYHxrxR8KVgQGFQUzZjhDvLBtsnyf4lJ/0MXBTZRXrVZsk cwHHEHscx/Nkk+uRYAfleGjyIcncUzBxY8WTW2yyhBQQbUox+ww= -----END CERTIFICATE-----Generated at Wed Jul 2 04:14:09 2025 by rpki-client