$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: fWjkV313rq3jMXbXBq7O7W5omi/96bVI7jsLozxLNZc= Subject key identifier: 68:28:3D:7B:36:9A:7C:9E:A1:7E:19:ED:85:C0:C1:C1:84:4B:84:3D Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 192ECE726805730F468CACA05D048C8572E06ED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01A9 Signing time: Sun 19 Oct 2025 00:40:04 +0000 Manifest this update: Sun 19 Oct 2025 00:35:04 +0000 Manifest next update: Wed 22 Oct 2025 10:02:04 +0000 Files and hashes: 1: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: SGnQP5RK1VJMuKbqfs3XTw7Wy59t6YjUoRVlneSdCl8=) 2: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 3: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2e:ce:72:68:05:73:0f:46:8c:ac:a0:5d:04:8c:85:72:e0:6e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Oct 19 00:35:04 2025 GMT Not After : Oct 22 10:02:04 2025 GMT Subject: CN=68283D7B369A7C9EA17E19ED85C0C1C1844B843D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:12:e4:95:8e:82:84:ce:7b:7b:08:44:f6: 0a:04:97:98:e4:54:29:5e:e0:ea:c4:d8:04:63:e8: 2d:2a:3b:b7:c0:74:29:b0:40:bb:69:a7:2c:9a:05: 7b:b6:3c:58:38:64:15:df:95:11:e5:42:46:cb:7f: 09:16:d4:25:cb:cd:12:0f:55:bf:2c:41:3b:25:6f: 19:0d:0d:4f:f4:3a:99:d3:5a:97:bb:88:04:89:80: dc:be:b6:02:de:c0:84:0b:13:f3:d2:f9:78:f2:08: 86:60:a0:a2:21:a0:44:f7:d1:6f:75:c6:b5:26:a4: 63:a8:c3:f5:d3:d9:00:ba:1e:55:e3:67:3b:f8:7b: 2b:35:1b:26:96:cb:e4:99:05:9a:4d:bc:36:c5:cf: d3:55:d5:2d:af:fb:69:ec:a9:f1:a8:dd:45:1a:7b: 63:a2:9a:5f:f4:a6:2c:59:8d:01:67:79:95:1d:22: e2:36:98:d5:4a:34:8b:28:cd:c9:22:05:77:a1:bb: 8c:0a:1c:53:cd:45:69:09:48:50:16:1c:14:9a:70: 7e:72:d0:ef:89:33:b3:3f:6f:27:39:c5:3e:c8:1f: 70:c3:26:69:57:c9:07:66:dd:1c:d4:57:a9:01:a9: e3:7e:d0:76:9e:01:89:63:ff:d5:9e:d0:72:61:f7: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:3D:7B:36:9A:7C:9E:A1:7E:19:ED:85:C0:C1:C1:84:4B:84:3D X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:ed:71:33:02:17:d1:46:45:76:2a:14:d8:b4:ea:0a:ae: 25:58:5c:01:48:39:37:17:9b:0d:67:f9:e7:0f:e1:64:30:92: bb:a4:31:c6:da:f7:1b:ed:fd:d7:7d:32:71:30:2b:d9:69:ab: b9:96:5a:16:d8:53:6a:6d:9a:53:80:d0:1d:13:57:50:7d:4f: 2d:33:41:8f:9f:c8:d9:e7:4c:42:25:c2:ec:68:e6:9d:80:4b: 1f:5a:fc:07:ca:96:4b:9b:0c:9d:c9:22:eb:7d:86:d8:7b:de: a2:7b:7d:47:00:a0:5d:35:ab:b0:37:f1:3b:43:22:1e:9c:62: f6:b4:7a:62:48:31:c4:b7:8c:6b:7b:b9:f9:3c:f0:a2:e7:f3: 37:00:db:94:1e:79:88:d5:8a:7a:99:f3:ea:e6:76:19:b2:c7: ca:63:39:3d:46:42:be:69:98:43:e3:ac:75:b2:6b:44:6a:33: 9e:6e:47:d5:7a:52:c0:f4:55:3e:5e:db:b8:74:42:f2:4d:76: b5:63:56:6f:55:e7:cb:e9:36:ef:50:d5:31:7c:26:25:4f:7c: 74:1a:3c:80:31:c8:03:45:3b:dc:52:88:b3:51:19:78:a8:50: a5:26:84:02:66:b6:ca:63:34:b4:49:88:ab:bb:0b:46:0d:06: 52:b3:a0:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS7OcmgFcw9GjKygXQSMhXLgbtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTEwMTkwMDM1MDRaFw0yNTEwMjIxMDAyMDRaMDMxMTAvBgNV BAMTKDY4MjgzRDdCMzY5QTdDOUVBMTdFMTlFRDg1QzBDMUMxODQ0Qjg0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTxLklY6ChM57ewhE9goEl5jk VCle4OrE2ARj6C0qO7fAdCmwQLtppyyaBXu2PFg4ZBXflRHlQkbLfwkW1CXLzRIP Vb8sQTslbxkNDU/0OpnTWpe7iASJgNy+tgLewIQLE/PS+XjyCIZgoKIhoET30W91 xrUmpGOow/XT2QC6HlXjZzv4eys1GyaWy+SZBZpNvDbFz9NV1S2v+2nsqfGo3UUa e2Oiml/0pixZjQFneZUdIuI2mNVKNIsozckiBXehu4wKHFPNRWkJSFAWHBSacH5y 0O+JM7M/byc5xT7IH3DDJmlXyQdm3RzUV6kBqeN+0HaeAYlj/9We0HJh99pHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaCg9ezaafJ6hfhnthcDBwYRLhD0wHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFy7XEzAhfRRkV2KhTYtOoKriVYXAFIOTcX mw1n+ecP4WQwkrukMcba9xvt/dd9MnEwK9lpq7mWWhbYU2ptmlOA0B0TV1B9Ty0z QY+fyNnnTEIlwuxo5p2ASx9a/AfKlkubDJ3JIut9hth73qJ7fUcAoF01q7A38TtD Ih6cYva0emJIMcS3jGt7ufk88KLn8zcA25QeeYjVinqZ8+rmdhmyx8pjOT1GQr5p mEPjrHWya0RqM55uR9V6UsD0VT5e27h0QvJNdrVjVm9V58vpNu9Q1TF8JiVPfHQa PIAxyANFO9xSiLNRGXioUKUmhAJmtspjNLRJiKu7C0YNBlKzoPE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:59 2025 by rpki-client