$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: nYbP1u2yGXXLpyG38k0trwprNE7Yt0Bd7YZh3zfZJ44= Subject key identifier: D9:B4:6A:94:0E:7D:11:88:32:BD:BE:BB:5D:84:BC:5B:BC:69:3D:44 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 2C5214D6954E28ABE89333C372459FFA2ED00CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 06:41:04 +0000 Manifest this update: Fri 22 Aug 2025 06:36:04 +0000 Manifest next update: Mon 25 Aug 2025 14:54:04 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: FWDCzH08X6pLVs4knvMOPPwt45D3wsWQIY0Qf+zXjpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:52:14:d6:95:4e:28:ab:e8:93:33:c3:72:45:9f:fa:2e:d0:0c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Aug 22 06:36:04 2025 GMT Not After : Aug 25 14:54:04 2025 GMT Subject: CN=D9B46A940E7D118832BDBEBB5D84BC5BBC693D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:7c:d0:39:80:c8:a4:9c:5a:87:3c:26:e0: 5e:81:6b:4a:8b:4f:d5:da:70:8a:25:61:df:1a:66: 8c:b9:77:f7:8d:f5:70:79:14:3d:ac:cd:16:15:f2: d7:75:50:47:ca:86:cf:68:d7:14:b3:1c:0a:b3:bb: 81:10:e8:5e:fa:e7:77:4b:43:37:c6:db:e5:59:9e: 91:63:bc:0f:7c:a7:0b:cd:14:65:4f:7f:77:0f:53: d6:c0:2b:8c:b6:83:c9:41:12:2d:9c:8c:2f:0d:92: 55:cd:ea:22:32:5c:6a:2f:98:95:f0:2b:fc:66:d3: 74:53:96:43:ad:71:4a:aa:9c:b0:d3:ff:f9:32:b7: 90:55:03:de:ae:20:bd:e5:42:a5:65:9a:60:cb:0f: a7:b8:81:aa:96:fb:6a:f5:3f:5b:19:e6:d1:02:4a: 1b:f1:80:ef:b8:dc:3e:ba:bb:09:8d:ac:cc:ce:d4: f3:68:3a:64:e6:7b:61:3c:9d:53:f9:c7:cd:5c:d8: 8f:e0:a1:54:b7:d2:63:eb:72:17:bf:83:a5:f8:a1: 05:5e:a2:8a:8f:de:89:f0:eb:62:21:2f:98:31:9a: 6f:7e:3f:1a:5a:e7:22:cf:eb:db:d9:ff:c1:ff:85: 1a:ff:e9:e3:de:30:c1:65:ca:60:1d:66:09:3c:f5: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:6A:94:0E:7D:11:88:32:BD:BE:BB:5D:84:BC:5B:BC:69:3D:44 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9b:d7:f9:64:a0:3b:78:fc:a7:a7:f7:b9:1e:e5:26:7f:e8: 72:a3:ec:21:bf:5e:7a:8b:6e:6a:0c:99:87:da:10:e8:53:6f: ee:07:68:da:c7:a1:ab:03:97:30:ec:a8:39:be:2f:2e:1f:aa: 39:8f:a7:0a:a2:9a:46:f1:25:6d:88:48:96:c1:b0:e5:6e:94: 3f:18:c1:29:2f:1c:8e:2e:44:e4:12:16:c4:8c:97:3f:38:18: 91:61:d6:42:b8:37:23:10:bd:7f:9d:b0:69:bc:b8:73:2f:58: e9:2b:b0:fc:f8:39:84:92:40:89:5d:91:b2:07:20:87:dc:d3: e9:d4:a6:d1:e7:75:62:f7:71:ca:ca:9b:26:80:f3:42:92:3d: bd:01:28:43:a2:bc:46:f3:86:70:5d:c2:b2:9d:2e:9a:cd:cf: ae:a4:55:d2:dc:84:25:00:6c:e2:ab:b6:10:09:51:88:20:1c: 5f:7b:54:ed:7b:b3:32:eb:a8:aa:b2:25:16:ff:f0:9a:43:35: c1:27:e5:c4:db:22:ad:66:3c:5d:01:71:60:b4:aa:9c:44:c3: 83:9b:dc:81:ae:ce:b3:62:ec:6c:f9:52:fc:74:22:59:14:54: 63:9a:19:10:ec:90:07:4e:03:0e:f5:36:be:e1:0a:c3:81:18: 3e:45:43:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFIU1pVOKKvokzPDckWf+i7QDPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTA4MjIwNjM2MDRaFw0yNTA4MjUxNDU0MDRaMDMxMTAvBgNV BAMTKEQ5QjQ2QTk0MEU3RDExODgzMkJEQkVCQjVEODRCQzVCQkM2OTNENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL3zQOYDIpJxahzwm4F6Ba0qL T9XacIolYd8aZoy5d/eN9XB5FD2szRYV8td1UEfKhs9o1xSzHAqzu4EQ6F7653dL QzfG2+VZnpFjvA98pwvNFGVPf3cPU9bAK4y2g8lBEi2cjC8NklXN6iIyXGovmJXw K/xm03RTlkOtcUqqnLDT//kyt5BVA96uIL3lQqVlmmDLD6e4gaqW+2r1P1sZ5tEC ShvxgO+43D66uwmNrMzO1PNoOmTme2E8nVP5x81c2I/goVS30mPrche/g6X4oQVe ooqP3onw62IhL5gxmm9+Pxpa5yLP69vZ/8H/hRr/6ePeMMFlymAdZgk89QmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bRqlA59EYgyvb67XYS8W7xpPUQwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCb1/lkoDt4/Ken97ke5SZ/6HKj7CG/XnqL bmoMmYfaEOhTb+4HaNrHoasDlzDsqDm+Ly4fqjmPpwqimkbxJW2ISJbBsOVulD8Y wSkvHI4uROQSFsSMlz84GJFh1kK4NyMQvX+dsGm8uHMvWOkrsPz4OYSSQIldkbIH IIfc0+nUptHndWL3ccrKmyaA80KSPb0BKEOivEbzhnBdwrKdLprNz66kVdLchCUA bOKrthAJUYggHF97VO17szLrqKqyJRb/8JpDNcEn5cTbIq1mPF0BcWC0qpxEw4Ob 3IGuzrNi7Gz5Uvx0IlkUVGOaGRDskAdOAw71Nr7hCsOBGD5FQ7U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:08 2025 by rpki-client