$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: 0kRVbJ3tr3QGiFtCK0/B/BWEj53w4veMLfQ3HxnYW9s= Subject key identifier: 2A:7C:AD:4F:67:8A:4E:6E:50:62:FB:EF:D3:BA:EB:24:A7:6D:5F:70 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 41138B8F4569867CCB6FE84CFD9EE8A954A4BDA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 018F Signing time: Fri 22 Aug 2025 15:30:04 +0000 Manifest this update: Fri 22 Aug 2025 15:25:04 +0000 Manifest next update: Mon 25 Aug 2025 19:18:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: xSgNVOtk9FzKl2Nd3i5ryhXwQ4fOvaIdMGUxa7wQrlY=) 3: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:13:8b:8f:45:69:86:7c:cb:6f:e8:4c:fd:9e:e8:a9:54:a4:bd:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Aug 22 15:25:04 2025 GMT Not After : Aug 25 19:18:04 2025 GMT Subject: CN=2A7CAD4F678A4E6E5062FBEFD3BAEB24A76D5F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:5e:75:ba:c0:3b:37:99:3e:f0:a0:27:8a: 91:ab:6c:9e:b7:09:d9:60:1e:d0:85:78:d0:fb:a8: 61:a7:5f:a2:0b:d9:b3:1d:8e:1e:aa:2c:22:ea:b9: cf:32:3f:83:ac:45:67:bc:d5:53:d0:56:cf:2a:e5: 1f:f4:71:5e:65:f1:ce:44:41:89:f3:66:4b:3c:da: 8a:e3:d6:42:6d:a3:5f:05:e9:27:17:0e:78:32:2c: 6b:54:c1:88:05:c7:5c:a8:36:d1:b4:24:61:cf:5b: 68:1e:0d:59:71:30:83:27:51:c0:2f:cf:a0:25:84: cf:2f:f7:3a:14:a7:1e:23:e6:06:94:f9:f3:d8:29: c0:88:78:27:66:3d:b3:ca:6a:56:73:d0:f8:e3:6a: d4:78:a2:f8:f4:f2:06:7d:3d:38:81:82:f1:56:cd: c3:a0:50:1d:b6:a4:02:91:4f:99:fa:b3:0b:d8:47: 4e:9f:b8:6c:42:86:c2:17:57:77:7e:dd:c0:90:c0: 90:e4:63:4e:95:55:5d:01:1c:43:0d:c2:e0:48:21: 46:bf:75:30:e7:6c:c2:ca:4c:64:e3:11:e3:51:4f: b4:4b:03:10:2a:20:f9:bd:d5:e9:0d:73:b2:6a:5a: aa:5e:28:86:ed:80:58:69:cf:b7:09:47:44:79:c2: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7C:AD:4F:67:8A:4E:6E:50:62:FB:EF:D3:BA:EB:24:A7:6D:5F:70 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:04:49:f1:30:12:a0:5a:22:d6:d9:2b:01:e0:01:eb:6a:71: dd:75:c6:76:7d:11:fd:66:81:56:ad:b5:ea:b8:69:e5:9c:fc: 06:91:b0:0c:44:9f:19:12:29:86:b6:7d:95:a0:25:d5:50:a2: 0c:45:35:be:9d:03:12:a4:72:3b:a6:db:26:7b:50:f2:ab:5e: 3c:de:8e:ea:3d:4b:2a:58:33:fa:ba:ec:5b:02:b3:4f:d8:78: 7b:65:db:ac:69:06:45:9b:73:40:f9:cf:5c:af:06:0b:9c:1b: 47:d3:18:cd:7d:c3:9a:6a:77:0b:a8:01:4d:9a:5f:0b:5d:40: c1:19:e9:e8:39:9c:51:ec:6b:95:ec:4e:d0:a3:76:07:39:18: f6:58:e1:49:d6:1d:e5:0c:51:0e:bc:00:42:b9:8e:9b:b3:39: 26:90:da:d3:bc:59:eb:61:18:af:b5:3c:4f:29:d5:0a:80:85: d8:92:e2:dd:32:73:07:4f:df:ee:80:78:af:2f:a9:96:e5:75: bb:40:36:f1:13:42:ff:25:cb:b1:29:4c:54:03:94:39:e8:b8: 1a:0f:87:10:61:0a:0d:ef:bf:1e:27:fb:b8:74:d9:e5:d0:6a: 4f:71:07:b5:53:c1:64:3c:56:5a:6a:77:3a:34:03:31:96:0c: f4:c9:19:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQROLj0VphnzLb+hM/Z7oqVSkvaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA4MjIxNTI1MDRaFw0yNTA4MjUxOTE4MDRaMDMxMTAvBgNV BAMTKDJBN0NBRDRGNjc4QTRFNkU1MDYyRkJFRkQzQkFFQjI0QTc2RDVGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVV51usA7N5k+8KAnipGrbJ63 CdlgHtCFeND7qGGnX6IL2bMdjh6qLCLquc8yP4OsRWe81VPQVs8q5R/0cV5l8c5E QYnzZks82orj1kJto18F6ScXDngyLGtUwYgFx1yoNtG0JGHPW2geDVlxMIMnUcAv z6AlhM8v9zoUpx4j5gaU+fPYKcCIeCdmPbPKalZz0PjjatR4ovj08gZ9PTiBgvFW zcOgUB22pAKRT5n6swvYR06fuGxChsIXV3d+3cCQwJDkY06VVV0BHEMNwuBIIUa/ dTDnbMLKTGTjEeNRT7RLAxAqIPm91ekNc7JqWqpeKIbtgFhpz7cJR0R5whCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnytT2eKTm5QYvvv07rrJKdtX3AwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQESfEwEqBaItbZKwHgAetqcd11xnZ9Ef1m gVatteq4aeWc/AaRsAxEnxkSKYa2fZWgJdVQogxFNb6dAxKkcjum2yZ7UPKrXjze juo9SypYM/q67FsCs0/YeHtl26xpBkWbc0D5z1yvBgucG0fTGM19w5pqdwuoAU2a XwtdQMEZ6eg5nFHsa5XsTtCjdgc5GPZY4UnWHeUMUQ68AEK5jpuzOSaQ2tO8Weth GK+1PE8p1QqAhdiS4t0ycwdP3+6AeK8vqZbldbtANvETQv8ly7EpTFQDlDnouBoP hxBhCg3vvx4n+7h02eXQak9xB7VTwWQ8Vlpqdzo0AzGWDPTJGYc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:58 2025 by rpki-client