$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: epwxocLqhFCYLM39Dm/h9YCDCi1H2uQDV2smXOPPeQk= Subject key identifier: EF:C0:83:C8:30:83:02:9D:A0:62:32:3E:9E:4B:75:BF:AC:B1:5B:88 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 2F29E020CFADAB8D220E640B4047D2797F14C8B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 04D0 Signing time: Sat 10 May 2025 07:11:00 +0000 Manifest this update: Sat 10 May 2025 07:06:00 +0000 Manifest next update: Tue 13 May 2025 18:49:00 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 7RnK1pneIlEhGnfXwRlHyue4JvYIR6L3yOK57JTQSJY=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: 39jefImKgJU/LxRCCoDfLN96ifsbffQHndD7ffWdf4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:29:e0:20:cf:ad:ab:8d:22:0e:64:0b:40:47:d2:79:7f:14:c8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: May 10 07:06:00 2025 GMT Not After : May 13 18:49:00 2025 GMT Subject: CN=EFC083C83083029DA062323E9E4B75BFACB15B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:26:d7:1b:d2:27:59:42:cc:81:42:af:ec: 28:ef:f2:ce:28:7a:f3:8d:ae:f7:e4:1d:4a:e3:76: f2:cf:44:57:3b:2b:d7:8b:6b:b0:7d:4d:89:b2:d2: 99:bc:a4:59:4f:3c:47:e8:26:4e:33:6d:c5:4b:89: 6f:5d:c6:55:60:3c:ec:12:b1:bf:bb:2b:f7:e8:6b: 6c:b6:a2:b0:ae:0e:08:0d:39:78:a7:be:f8:c4:da: 5d:9d:84:d3:66:c7:d3:e8:a8:75:54:ed:30:65:52: 08:f6:17:cf:34:e8:0d:20:61:55:59:ab:a7:60:80: b8:6e:00:6d:b7:fd:07:29:00:1a:61:0c:dc:72:fa: 25:d5:16:d4:2f:3e:6e:36:73:2d:8a:ef:a7:36:d7: 2d:78:e3:13:20:ea:0d:ab:06:41:6e:ad:3f:68:78: c0:b3:5e:5d:f0:8b:97:67:20:83:a6:6c:5c:38:9b: 3f:ee:87:bf:ed:22:ce:57:8a:a5:4a:91:e5:a2:d9: 4e:a6:60:5e:a2:30:b9:66:7c:b7:56:3e:ca:56:9a: 8e:f6:0f:e0:e3:71:2c:a1:38:99:99:f1:f7:2d:4f: 8c:98:e8:24:bf:16:41:c3:43:08:52:d3:4f:43:21: ae:15:0c:1e:a7:20:8e:2e:77:16:5c:76:85:69:8e: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C0:83:C8:30:83:02:9D:A0:62:32:3E:9E:4B:75:BF:AC:B1:5B:88 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4c:94:90:2f:7b:a3:fd:4f:24:3c:77:cb:08:41:4a:b8:9f: b0:f3:6d:e4:81:f3:b4:83:4d:91:6f:8e:74:8f:a1:95:7e:c5: 73:02:ee:eb:d4:ad:5f:ff:39:74:ce:73:76:c4:7a:de:be:44: 44:73:a8:9a:df:3e:ba:b3:6f:2a:b5:55:9d:51:88:2a:21:bc: a0:08:fc:de:c4:4b:8a:c4:5c:6e:a1:57:8e:10:2e:51:28:c0: b4:68:53:22:1e:58:b7:24:13:8c:91:90:b2:03:9b:a2:4e:00: 14:b4:f9:a7:d8:a0:ef:bb:48:c0:d3:ec:16:e3:ea:60:1c:95: 40:4e:85:c0:52:58:07:09:f4:db:79:56:76:30:64:93:82:8e: 87:d7:ac:dd:5e:43:80:16:b0:26:9e:12:0f:45:f7:a2:ea:6c: 4f:c2:59:c5:22:73:46:44:9f:bb:cb:4c:54:f6:6f:eb:33:19: 01:15:fb:f6:1e:45:76:7d:ec:6b:2f:82:21:00:a3:40:ba:4e: d6:05:7d:25:05:43:fc:e4:a6:b4:2c:ac:f1:68:5f:56:c4:69: 89:c0:08:e0:88:59:84:87:a1:e7:86:b8:99:d3:2a:f2:77:5c: 08:fc:dd:4c:14:be:6f:f9:ae:37:3c:eb:43:61:eb:26:13:88: 0f:6a:1f:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyngIM+tq40iDmQLQEfSeX8UyLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTA1MTAwNzA2MDBaFw0yNTA1MTMxODQ5MDBaMDMxMTAvBgNV BAMTKEVGQzA4M0M4MzA4MzAyOURBMDYyMzIzRTlFNEI3NUJGQUNCMTVCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVybXG9InWULMgUKv7Cjv8s4o evONrvfkHUrjdvLPRFc7K9eLa7B9TYmy0pm8pFlPPEfoJk4zbcVLiW9dxlVgPOwS sb+7K/foa2y2orCuDggNOXinvvjE2l2dhNNmx9PoqHVU7TBlUgj2F8806A0gYVVZ q6dggLhuAG23/QcpABphDNxy+iXVFtQvPm42cy2K76c21y144xMg6g2rBkFurT9o eMCzXl3wi5dnIIOmbFw4mz/uh7/tIs5XiqVKkeWi2U6mYF6iMLlmfLdWPspWmo72 D+DjcSyhOJmZ8fctT4yY6CS/FkHDQwhS009DIa4VDB6nII4udxZcdoVpjrNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78CDyDCDAp2gYjI+nkt1v6yxW4gwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJMlJAve6P9TyQ8d8sIQUq4n7DzbeSB87SD TZFvjnSPoZV+xXMC7uvUrV//OXTOc3bEet6+RERzqJrfPrqzbyq1VZ1RiCohvKAI /N7ES4rEXG6hV44QLlEowLRoUyIeWLckE4yRkLIDm6JOABS0+afYoO+7SMDT7Bbj 6mAclUBOhcBSWAcJ9Nt5VnYwZJOCjofXrN1eQ4AWsCaeEg9F96LqbE/CWcUic0ZE n7vLTFT2b+szGQEV+/YeRXZ97GsvgiEAo0C6TtYFfSUFQ/zkprQsrPFoX1bEaYnA COCIWYSHoeeGuJnTKvJ3XAj83UwUvm/5rjc860Nh6yYTiA9qHx0= -----END CERTIFICATE-----Generated at Sun May 11 02:24:18 2025 by rpki-client