$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: K1cIYZl68ocwwBphoXsH8aHjfWIgx2ziIsnAt0NApY0= Subject key identifier: 14:70:D1:1E:A8:EB:78:34:FD:10:40:05:D2:0E:74:55:D8:46:12:51 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 5266CA0A313E2665598100CA395718DA76760941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0114 Signing time: Sat 23 Aug 2025 04:31:20 +0000 Manifest this update: Sat 23 Aug 2025 04:26:20 +0000 Manifest next update: Tue 26 Aug 2025 10:17:20 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: /Q3Z2zt32ognlWpKMuvTuhSPmOt7zjZplHaFjnYPuCY=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:66:ca:0a:31:3e:26:65:59:81:00:ca:39:57:18:da:76:76:09:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Aug 23 04:26:20 2025 GMT Not After : Aug 26 10:17:20 2025 GMT Subject: CN=1470D11EA8EB7834FD104005D20E7455D8461251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:0f:73:39:0d:c1:7b:bc:01:8e:3a:56:65: 3b:20:01:ef:f9:a8:3d:74:13:01:95:c9:74:55:d4: b1:d0:b5:e8:a7:97:c1:cb:fe:cb:6f:43:65:95:84: 9d:77:d8:c0:1b:f7:c4:25:99:3f:55:d4:82:0d:44: 46:2b:64:9c:24:b4:70:5a:c8:a7:f3:c7:99:62:7a: 8c:8a:ce:9e:0a:05:eb:2a:ef:96:1e:ff:b7:6f:71: cf:54:01:66:d9:af:5d:34:a1:d6:7d:79:e1:31:4c: 4b:e3:79:ad:97:c8:00:6b:bd:7d:4f:e9:fc:82:49: b7:8b:bd:3e:3e:41:d8:aa:2c:4e:13:95:23:0b:72: b0:e3:2f:f6:50:14:01:6b:26:0a:67:ed:6f:ba:21: ab:b7:24:80:e7:27:16:b1:49:fd:b5:63:15:88:8c: e4:78:a3:3d:ec:2d:d7:8b:ba:1f:81:35:f8:ea:ea: 63:51:14:38:46:fe:a5:af:da:89:5c:22:39:c6:e8: 78:00:59:f2:e6:9d:52:ba:db:0a:79:11:08:af:83: 97:cc:4f:03:19:b7:a2:0e:7c:2b:12:db:21:28:a4: 44:38:7b:60:cb:99:84:2a:25:53:26:9d:76:01:bb: c0:43:77:24:42:e0:e8:3c:50:8a:d5:75:5f:18:e8: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:70:D1:1E:A8:EB:78:34:FD:10:40:05:D2:0E:74:55:D8:46:12:51 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:dc:3c:6b:64:b6:36:50:df:b0:c2:9d:24:9a:16:21:26: 79:41:4a:d8:90:02:bd:51:92:c8:cc:e4:be:19:21:f3:a8:3d: f9:56:71:dc:4f:d6:ca:82:8d:ba:a0:8d:0c:1d:f0:60:41:07: bd:94:33:0c:15:27:8a:24:fa:12:ba:3f:95:e3:49:25:5c:ef: 8b:56:5b:08:3b:be:7a:ea:f8:23:7e:68:d8:9d:f1:c4:21:ea: c3:f8:00:06:ac:6a:d3:fd:3d:36:7a:81:f8:19:bf:b6:c7:84: 3e:c5:e5:d3:d1:48:86:0a:9a:1f:f5:a4:7f:ef:49:f4:44:dd: 49:b3:e2:10:85:c9:60:a9:38:12:84:7b:7b:c9:8f:9a:9e:87: b4:f6:7d:2c:de:0f:1a:19:10:69:76:77:4f:81:74:7d:0e:31: 5a:3c:eb:99:a1:1f:37:60:61:ec:48:29:8e:3b:64:f4:e4:60: ac:0a:61:6c:48:5f:d6:ab:f8:83:d3:ea:c2:3a:8e:11:63:48: e2:1d:be:50:19:94:c5:63:b0:28:6c:79:67:03:ef:6e:27:f8: 75:bc:b4:01:b7:9d:08:29:df:f7:2d:a5:77:8a:41:82:fe:f3: df:34:29:66:98:97:07:f3:05:ba:cc:19:d6:21:e5:f7:8b:ee: 04:76:e3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmbKCjE+JmVZgQDKOVcY2nZ2CUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA4MjMwNDI2MjBaFw0yNTA4MjYxMDE3MjBaMDMxMTAvBgNV BAMTKDE0NzBEMTFFQThFQjc4MzRGRDEwNDAwNUQyMEU3NDU1RDg0NjEyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiA9zOQ3Be7wBjjpWZTsgAe/5 qD10EwGVyXRV1LHQteinl8HL/stvQ2WVhJ132MAb98QlmT9V1IINREYrZJwktHBa yKfzx5lieoyKzp4KBesq75Ye/7dvcc9UAWbZr100odZ9eeExTEvjea2XyABrvX1P 6fyCSbeLvT4+QdiqLE4TlSMLcrDjL/ZQFAFrJgpn7W+6Iau3JIDnJxaxSf21YxWI jOR4oz3sLdeLuh+BNfjq6mNRFDhG/qWv2olcIjnG6HgAWfLmnVK62wp5EQivg5fM TwMZt6IOfCsS2yEopEQ4e2DLmYQqJVMmnXYBu8BDdyRC4Og8UIrVdV8Y6LYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHDRHqjreDT9EEAF0g50VdhGElEwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGP3DxrZLY2UN+wwp0kmhYhJnlBStiQAr1R ksjM5L4ZIfOoPflWcdxP1sqCjbqgjQwd8GBBB72UMwwVJ4ok+hK6P5XjSSVc74tW Wwg7vnrq+CN+aNid8cQh6sP4AAasatP9PTZ6gfgZv7bHhD7F5dPRSIYKmh/1pH/v SfRE3Umz4hCFyWCpOBKEe3vJj5qeh7T2fSzeDxoZEGl2d0+BdH0OMVo865mhHzdg YexIKY47ZPTkYKwKYWxIX9ar+IPT6sI6jhFjSOIdvlAZlMVjsChseWcD724n+HW8 tAG3nQgp3/ctpXeKQYL+8980KWaYlwfzBbrMGdYh5feL7gR2418= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:07 2025 by rpki-client