$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: wO8EFnkzPb7SooEj8vaFHgNRIg34sJZZzm6ZOU6HEy4= Subject key identifier: A4:D4:03:EE:54:64:1F:8C:7D:58:00:FA:C7:78:39:A3:83:BB:20:03 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 36F4C3A60735294164C55024DD5CE368B1A9494C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 011A Signing time: Sat 18 Oct 2025 09:10:02 +0000 Manifest this update: Sat 18 Oct 2025 09:05:02 +0000 Manifest next update: Tue 21 Oct 2025 14:30:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: HudJKAwGnoczrWC/U3iKunfGCK/6+vz1LUvfLEglFs0=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f4:c3:a6:07:35:29:41:64:c5:50:24:dd:5c:e3:68:b1:a9:49:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Oct 18 09:05:02 2025 GMT Not After : Oct 21 14:30:02 2025 GMT Subject: CN=A4D403EE54641F8C7D5800FAC77839A383BB2003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:f6:ce:6c:5b:81:bb:d2:ed:c3:b1:9d:d0: e8:09:62:52:5f:30:16:a4:dd:86:f6:0c:7b:da:bc: 78:da:3a:e7:f4:be:37:10:b1:d9:17:52:8c:f3:22: 55:c3:c7:80:64:de:27:60:cd:a5:38:4b:d3:21:5c: a0:87:ea:47:11:ab:58:7a:41:2d:06:8b:5c:9c:b8: 61:8d:f3:d6:8f:95:39:43:eb:7b:6b:10:36:b3:fe: 10:53:3e:70:9b:75:ae:5f:6a:af:45:1d:0e:49:68: 39:ee:39:bd:94:9e:8d:00:05:7e:de:00:8a:3d:f4: 71:b7:79:fc:86:0c:10:4f:0e:16:2f:35:cc:ec:16: b0:20:79:50:1f:1d:0e:a7:d4:21:a2:53:a2:28:d5: 6a:3e:95:83:52:a7:44:21:6a:6e:8d:6b:76:fd:0f: bd:cd:d9:eb:3a:6f:ed:4a:f6:fa:62:bb:b7:b8:40: 27:0d:df:63:96:63:b0:7a:08:19:57:12:74:b6:61: 4f:42:a7:ea:56:82:e3:f4:09:f8:c2:50:ad:ba:21: 2b:26:5d:30:81:39:d4:ae:42:1f:8f:f3:88:6f:cd: bc:b7:5b:a5:0d:fd:39:7e:5e:73:61:ca:2c:7b:5a: cd:c1:f2:13:70:c4:d5:ec:e0:b8:c5:ec:3d:5d:eb: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:03:EE:54:64:1F:8C:7D:58:00:FA:C7:78:39:A3:83:BB:20:03 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fa:8f:fc:36:13:5a:d1:57:00:2b:a7:2e:f2:e0:c7:de:fe: ce:66:d1:ce:32:88:86:b8:43:f9:69:8f:0e:07:09:ee:23:21: 6e:9d:3c:c4:21:3a:c7:f0:13:7f:c4:10:ea:9f:d1:b0:a3:1c: b6:0b:0e:0c:2d:1b:83:e0:1e:fb:81:f5:bc:08:b3:9d:52:48: 6f:04:9f:9f:08:de:bd:be:ad:85:c6:05:20:64:54:6d:67:3d: 73:cb:e9:9e:85:be:c0:9e:61:3b:49:38:c2:de:31:49:5e:d9: b8:65:5c:b3:59:72:84:07:f9:72:05:09:1e:67:cf:3a:8e:f9: 49:ef:e2:ce:e7:8a:d5:46:76:af:97:a1:cb:35:80:fb:72:19: 29:b1:c3:42:7b:68:2c:a2:8e:ef:1f:9d:29:cb:02:fe:3e:d0: 57:93:35:24:93:0f:d3:c6:16:06:1b:32:3f:47:ab:9d:8e:30: 11:02:f6:26:79:46:8f:03:f4:6a:f6:f9:ff:f6:38:81:f6:aa: 7a:b8:5f:56:0d:90:81:4c:c5:4d:8a:b2:89:3b:07:fd:87:35: 15:94:4d:19:04:33:a5:6e:b1:a2:52:95:b6:53:59:27:09:41: 13:e9:fa:7b:0e:39:45:9f:ae:12:f4:15:d2:6d:01:fc:f7:af: 8b:1b:af:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvTDpgc1KUFkxVAk3VzjaLGpSUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTEwMTgwOTA1MDJaFw0yNTEwMjExNDMwMDJaMDMxMTAvBgNV BAMTKEE0RDQwM0VFNTQ2NDFGOEM3RDU4MDBGQUM3NzgzOUEzODNCQjIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0vbObFuBu9Ltw7Gd0OgJYlJf MBak3Yb2DHvavHjaOuf0vjcQsdkXUozzIlXDx4Bk3idgzaU4S9MhXKCH6kcRq1h6 QS0Gi1ycuGGN89aPlTlD63trEDaz/hBTPnCbda5faq9FHQ5JaDnuOb2Uno0ABX7e AIo99HG3efyGDBBPDhYvNczsFrAgeVAfHQ6n1CGiU6Io1Wo+lYNSp0Qham6Na3b9 D73N2es6b+1K9vpiu7e4QCcN32OWY7B6CBlXEnS2YU9Cp+pWguP0CfjCUK26ISsm XTCBOdSuQh+P84hvzby3W6UN/Tl+XnNhyix7Ws3B8hNwxNXs4LjF7D1d65jRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpNQD7lRkH4x9WAD6x3g5o4O7IAMwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP6j/w2E1rRVwArpy7y4Mfe/s5m0c4yiIa4 Q/lpjw4HCe4jIW6dPMQhOsfwE3/EEOqf0bCjHLYLDgwtG4PgHvuB9bwIs51SSG8E n58I3r2+rYXGBSBkVG1nPXPL6Z6FvsCeYTtJOMLeMUle2bhlXLNZcoQH+XIFCR5n zzqO+Unv4s7nitVGdq+Xocs1gPtyGSmxw0J7aCyiju8fnSnLAv4+0FeTNSSTD9PG FgYbMj9Hq52OMBEC9iZ5Ro8D9Gr2+f/2OIH2qnq4X1YNkIFMxU2Ksok7B/2HNRWU TRkEM6VusaJSlbZTWScJQRPp+nsOOUWfrhL0FdJtAfz3r4sbrxg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:39:11 2025 by rpki-client