$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: nCMcjDNAeirkPLyMcFaW65YE/ljZcrM63UyUALn0w4c= Subject key identifier: B5:98:1B:E5:00:46:EA:11:EC:7B:FC:DA:26:34:D3:CE:4A:E8:9C:69 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 7C07BA73E59B21F7E8F9D28473723261982D6866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 99 Signing time: Sun 29 Jun 2025 18:22:12 +0000 Manifest this update: Sun 29 Jun 2025 18:17:12 +0000 Manifest next update: Wed 02 Jul 2025 18:27:12 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U=) 3: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: zvOcW5lep196okomg9EaaUSke0sYoz2aIryWmQxmwqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 18:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:07:ba:73:e5:9b:21:f7:e8:f9:d2:84:73:72:32:61:98:2d:68:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Jun 29 18:17:12 2025 GMT Not After : Jul 2 18:27:12 2025 GMT Subject: CN=B5981BE50046EA11EC7BFCDA2634D3CE4AE89C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:2d:a8:f6:2e:6b:84:6c:2c:c2:59:cb:2e: b6:8c:6e:0d:fa:9c:74:85:16:a9:a3:45:0e:f8:44: 67:75:7f:cc:c8:00:61:e7:35:9d:df:48:36:1d:8c: 5c:e1:49:43:e6:0f:8f:9e:5f:b9:86:18:13:da:ba: ed:db:ba:14:5b:b3:19:54:19:04:56:2b:d5:6c:89: f1:6e:3e:65:43:2f:a2:36:5e:35:c0:bd:cf:78:88: 19:ce:52:bb:40:4f:4f:8f:61:92:08:3a:90:af:63: 2a:e1:77:b8:ff:e5:14:31:ad:3d:70:71:2f:c8:0c: cc:da:61:b4:b2:3c:61:9f:07:4a:77:5a:c8:ab:b3: bf:df:14:98:5b:6d:97:68:3b:9a:a3:f7:79:2f:e8: 34:80:b7:af:51:57:23:09:61:4f:a3:fb:a6:2b:4b: eb:78:2f:8d:b2:e2:93:5a:83:49:5e:df:44:ec:ec: a0:c6:1b:df:a6:86:d7:62:ea:cd:87:1a:06:e6:d5: 6e:57:5c:bd:b8:74:99:7c:8e:41:72:36:35:c3:23: 6b:a5:39:aa:1b:0e:8e:cb:7a:81:a8:da:e5:51:64: c4:fc:d5:77:72:e6:72:0b:6c:2b:74:e8:d2:5f:05: 93:9f:24:dd:83:36:2c:1b:b9:bb:c4:d7:2c:4b:20: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:1B:E5:00:46:EA:11:EC:7B:FC:DA:26:34:D3:CE:4A:E8:9C:69 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:85:f7:53:15:96:bb:af:ac:0c:f1:9a:be:bf:62:bc:16:19: 29:45:48:00:48:2a:cf:d9:9d:24:cf:68:78:ba:c3:73:30:91: 85:11:a4:90:33:55:48:f9:6c:e8:91:b8:3e:49:ae:4f:e1:0e: ad:74:f7:84:99:13:5f:4a:8b:f5:df:50:df:2f:a8:f3:7b:b1: c8:e3:70:1e:b7:3b:e6:d1:98:e4:6c:5c:93:dd:6b:65:8d:34: 2d:2e:2f:70:87:ed:a9:92:aa:b6:97:5d:ec:15:1a:bb:1a:a8: 01:15:3e:c3:a2:4e:b8:04:92:b1:ab:99:64:df:36:84:4a:1e: 09:e5:55:38:17:24:59:59:bb:d0:d5:0a:47:1f:66:94:31:6f: b2:2a:a9:1e:29:b0:3e:be:0b:e0:88:80:a5:a6:91:c9:8e:45: ce:9f:fd:58:85:c1:19:52:0d:02:cc:a3:e2:f1:19:85:a1:ca: c7:97:f0:ee:d7:ad:3a:b5:04:c8:ce:4b:bf:4a:43:e3:9a:2d: 4a:0f:d4:8f:e0:b2:b2:06:6d:82:cc:70:fd:00:b0:c0:c5:60: 69:47:d7:4d:85:a2:9a:da:02:a4:69:86:da:9d:a8:56:43:92: e3:54:db:47:ca:79:67:d0:a6:c9:33:2e:f8:fc:ca:5a:39:fc: 67:90:d6:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAe6c+WbIffo+dKEc3IyYZgtaGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA2MjkxODE3MTJaFw0yNTA3MDIxODI3MTJaMDMxMTAvBgNV BAMTKEI1OTgxQkU1MDA0NkVBMTFFQzdCRkNEQTI2MzREM0NFNEFFODlDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KC2o9i5rhGwswlnLLraMbg36 nHSFFqmjRQ74RGd1f8zIAGHnNZ3fSDYdjFzhSUPmD4+eX7mGGBPauu3buhRbsxlU GQRWK9VsifFuPmVDL6I2XjXAvc94iBnOUrtAT0+PYZIIOpCvYyrhd7j/5RQxrT1w cS/IDMzaYbSyPGGfB0p3Wsirs7/fFJhbbZdoO5qj93kv6DSAt69RVyMJYU+j+6Yr S+t4L42y4pNag0le30Ts7KDGG9+mhtdi6s2HGgbm1W5XXL24dJl8jkFyNjXDI2ul OaobDo7LeoGo2uVRZMT81Xdy5nILbCt06NJfBZOfJN2DNiwbubvE1yxLICZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZgb5QBG6hHse/zaJjTTzkronGkwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmF91MVlruvrAzxmr6/YrwWGSlFSABIKs/Z nSTPaHi6w3MwkYURpJAzVUj5bOiRuD5Jrk/hDq1094SZE19Ki/XfUN8vqPN7scjj cB63O+bRmORsXJPda2WNNC0uL3CH7amSqraXXewVGrsaqAEVPsOiTrgEkrGrmWTf NoRKHgnlVTgXJFlZu9DVCkcfZpQxb7IqqR4psD6+C+CIgKWmkcmORc6f/ViFwRlS DQLMo+LxGYWhyseX8O7XrTq1BMjOS79KQ+OaLUoP1I/gsrIGbYLMcP0AsMDFYGlH 102FopraAqRphtqdqFZDkuNU20fKeWfQpskzLvj8ylo5/GeQ1gM= -----END CERTIFICATE-----Generated at Mon Jun 30 09:29:52 2025 by rpki-client