$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: skl8D/7M5eGIY10FcfmOfji2lUNQqujDOFfMflzNXO4= Subject key identifier: 55:45:36:07:B8:9C:EF:11:4F:6B:64:F4:28:3F:F9:DC:46:56:89:DB Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 2927811D90CFB45925E4C8C26746BC85CB6577EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: CB Signing time: Sun 19 Oct 2025 09:02:12 +0000 Manifest this update: Sun 19 Oct 2025 08:57:12 +0000 Manifest next update: Wed 22 Oct 2025 19:36:12 +0000 Files and hashes: 1: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: 8E8zbuKx0mBkPmpAUDZhXI3JuYs970h1qD0c3ThuLnc=) 2: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:27:81:1d:90:cf:b4:59:25:e4:c8:c2:67:46:bc:85:cb:65:77:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Oct 19 08:57:12 2025 GMT Not After : Oct 22 19:36:12 2025 GMT Subject: CN=55453607B89CEF114F6B64F4283FF9DC465689DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:28:fd:40:18:44:c8:dc:da:fa:97:55:16: 81:a8:58:8e:6f:3f:93:5c:ba:8d:86:2e:0a:b4:9c: 12:54:75:bb:b0:0b:82:06:6d:3f:02:24:d1:f3:4d: 4f:00:cc:e8:dd:09:71:e4:e6:ea:72:2d:e3:db:05: d5:e9:20:54:62:11:8d:59:55:0c:82:01:53:79:0c: 94:0e:98:6b:c6:b2:50:38:07:18:90:60:2d:9a:69: cb:99:1a:1d:81:e5:73:9c:d5:ce:15:c2:90:43:2b: 0d:40:30:11:02:52:f5:91:f3:29:7a:ea:0f:3e:66: 40:ba:93:4b:73:41:49:0a:e9:3d:d5:f9:20:07:9d: 95:52:04:26:33:0f:a2:de:b8:20:e5:77:b1:5e:30: 5f:eb:2f:1d:f3:c1:e4:90:92:37:63:f2:88:11:4b: 68:ac:a3:2e:02:d8:51:03:25:91:f5:17:73:32:43: 65:21:a7:33:47:fc:0e:6c:8a:23:29:20:c1:bc:69: 54:ef:12:90:6d:da:a5:8d:20:f3:6f:10:54:e3:19: 5c:7a:a8:c0:23:3f:2d:45:70:54:e1:99:62:d8:1e: a4:df:12:00:a2:b3:be:b7:64:01:02:9a:e9:f7:8b: b4:cf:e3:61:d5:d1:c2:57:57:fa:ef:43:44:64:cd: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:45:36:07:B8:9C:EF:11:4F:6B:64:F4:28:3F:F9:DC:46:56:89:DB X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ec:df:3e:22:e6:0f:62:07:bd:62:18:eb:34:a5:f2:64:d6: 6c:ce:46:70:56:2c:ee:3c:ad:85:cf:53:59:12:25:db:88:c7: 7a:4f:9a:77:83:37:34:0e:60:b5:49:75:ec:4d:a4:6c:89:40: dd:98:5c:4e:12:7b:32:3a:86:0b:b5:db:26:0f:20:b7:dd:f3: a4:45:43:a2:af:02:e2:ee:c3:a3:00:33:4c:89:2a:d5:6f:0c: b5:df:1a:1e:3b:8a:4e:64:b4:d6:0c:24:e9:79:f9:dc:ba:44: 59:0e:ca:d1:30:52:5f:c5:34:e7:2d:e7:2d:da:98:a2:9a:bf: ff:53:04:4d:2e:5a:99:4f:47:a8:21:5d:62:67:e4:e8:77:41: 91:42:e1:eb:27:ac:be:dd:bb:55:4b:12:dd:76:53:fe:07:f0: 04:15:9b:3e:50:28:70:c7:51:05:e7:bf:ec:75:42:d5:71:6b: 7c:5a:bd:5d:1b:98:74:5e:5c:d0:2d:35:0f:6e:16:2b:db:fe: 9d:1e:c1:bd:32:91:0c:cf:0f:2a:55:ad:8f:aa:e6:5f:44:bd: 0e:57:3f:34:a4:17:38:42:42:e7:35:c4:ef:5c:6b:05:24:8f: 5a:ec:c0:6f:d5:88:e4:3a:bd:df:05:2a:5e:ba:c2:4c:bf:65: e6:5d:5d:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSeBHZDPtFkl5MjCZ0a8hctld+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTEwMTkwODU3MTJaFw0yNTEwMjIxOTM2MTJaMDMxMTAvBgNV BAMTKDU1NDUzNjA3Qjg5Q0VGMTE0RjZCNjRGNDI4M0ZGOURDNDY1Njg5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfCj9QBhEyNza+pdVFoGoWI5v P5Ncuo2GLgq0nBJUdbuwC4IGbT8CJNHzTU8AzOjdCXHk5upyLePbBdXpIFRiEY1Z VQyCAVN5DJQOmGvGslA4BxiQYC2aacuZGh2B5XOc1c4VwpBDKw1AMBECUvWR8yl6 6g8+ZkC6k0tzQUkK6T3V+SAHnZVSBCYzD6LeuCDld7FeMF/rLx3zweSQkjdj8ogR S2isoy4C2FEDJZH1F3MyQ2UhpzNH/A5siiMpIMG8aVTvEpBt2qWNIPNvEFTjGVx6 qMAjPy1FcFThmWLYHqTfEgCis763ZAECmun3i7TP42HV0cJXV/rvQ0RkzUspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVUU2B7ic7xFPa2T0KD/53EZWidswHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDs3z4i5g9iB71iGOs0pfJk1mzORnBWLO48 rYXPU1kSJduIx3pPmneDNzQOYLVJdexNpGyJQN2YXE4SezI6hgu12yYPILfd86RF Q6KvAuLuw6MAM0yJKtVvDLXfGh47ik5ktNYMJOl5+dy6RFkOytEwUl/FNOct5y3a mKKav/9TBE0uWplPR6ghXWJn5Oh3QZFC4esnrL7du1VLEt12U/4H8AQVmz5QKHDH UQXnv+x1QtVxa3xavV0bmHReXNAtNQ9uFivb/p0ewb0ykQzPDypVrY+q5l9EvQ5X PzSkFzhCQuc1xO9cawUkj1rswG/ViOQ6vd8FKl66wky/ZeZdXUE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:46 2025 by rpki-client