$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: RmYhZ2lYg0PZNuxBAKw2T2ms9CLP621/iAMNDcN+BKA= Subject key identifier: EA:61:BD:B8:AA:53:6C:9D:B0:7B:1C:4F:4F:90:89:13:58:EB:36:7E Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 33F245A5CE0106A04C8AAC1C334DAD13F6997740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: FC Signing time: Sun 29 Jun 2025 10:51:19 +0000 Manifest this update: Sun 29 Jun 2025 10:46:19 +0000 Manifest next update: Wed 02 Jul 2025 20:50:19 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: 207BAhbB4PDdNY3t5VW3eScstGkLxUJEpq1d/wfY1bE=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f2:45:a5:ce:01:06:a0:4c:8a:ac:1c:33:4d:ad:13:f6:99:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Jun 29 10:46:19 2025 GMT Not After : Jul 2 20:50:19 2025 GMT Subject: CN=EA61BDB8AA536C9DB07B1C4F4F90891358EB367E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:df:39:ff:db:d8:da:c2:ae:f1:1f:20:16: a3:7d:b3:55:e2:c2:85:21:f4:25:ff:1f:d2:d5:e2: 2c:e6:ce:d4:88:37:a2:69:60:00:79:12:a2:57:db: e7:82:50:c1:b3:d7:94:0a:91:04:a0:42:ad:4e:8c: aa:28:ce:7d:9e:66:65:aa:86:2b:3b:d1:17:9e:6a: 4c:0a:20:8d:2c:43:c8:4d:a9:0a:48:bd:4b:f1:61: 08:3b:90:e9:26:38:86:18:69:1d:30:bd:47:41:f7: 77:a8:74:76:18:59:88:80:4f:df:33:22:43:ff:e9: 2f:5c:5f:d3:a2:53:a1:03:93:84:2f:f2:bc:67:a0: cb:cd:8d:5b:ec:b1:0d:41:41:13:62:b6:57:97:e2: 75:94:d5:c6:60:a6:ac:1f:91:27:a8:7a:5f:6b:7c: 4a:e1:3f:02:94:b5:12:f1:c8:2e:1c:f4:c5:43:69: 51:26:1f:7d:3b:47:18:a4:8e:ba:2c:72:ba:e4:18: 89:45:05:47:fe:75:b9:95:01:61:6b:2d:1e:48:34: 71:3e:b2:4f:43:6b:32:b4:cc:83:e5:b8:03:bd:46: bc:e0:31:fe:1f:98:00:89:7f:d3:3f:21:30:23:7d: 8e:72:c2:b0:68:ab:99:30:6c:2a:a4:54:ef:ee:5e: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:BD:B8:AA:53:6C:9D:B0:7B:1C:4F:4F:90:89:13:58:EB:36:7E X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1b:9a:c4:5a:c9:d4:45:dc:f1:30:60:ab:f1:bf:b6:2b:10: 5a:50:8e:cf:62:1c:8c:51:6d:98:82:57:db:23:d8:4e:7d:0c: 8c:c1:72:a9:eb:33:2f:8b:17:a0:e1:70:f3:b5:4f:ec:53:4d: ac:09:06:79:86:6d:9b:45:2c:19:d8:69:d7:11:eb:21:db:23: 52:a5:49:5c:07:09:85:b2:3c:c4:c5:7c:49:8c:64:76:0a:33: 9a:6a:7f:ed:69:ae:12:2a:cd:1b:47:4f:73:c1:a3:62:47:30: 7f:ee:cf:88:ad:65:07:82:4e:e6:b9:19:a3:d0:94:f1:a0:aa: 61:02:c8:39:da:2a:83:87:4e:82:6f:db:1a:04:88:b8:47:a9: b2:ed:b9:24:87:65:b7:84:2b:26:ae:0e:67:12:cd:57:79:c7: c1:e2:97:09:e7:d3:e0:2f:4b:8e:8c:80:9e:22:09:ee:f7:48: 29:e6:29:bb:49:5f:16:7d:bd:cf:3b:8b:ce:ba:05:61:98:2a: f1:ba:46:4d:7d:16:a9:da:b8:df:d7:4f:59:58:1f:de:2e:12: d6:1a:4b:72:1c:de:f9:a3:b8:37:58:c9:04:87:8d:c7:aa:31: 41:75:fc:00:55:2e:a8:74:e9:29:f7:06:57:38:f0:93:d1:cc: 91:34:16:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/JFpc4BBqBMiqwcM02tE/aZd0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA2MjkxMDQ2MTlaFw0yNTA3MDIyMDUwMTlaMDMxMTAvBgNV BAMTKEVBNjFCREI4QUE1MzZDOURCMDdCMUM0RjRGOTA4OTEzNThFQjM2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5985/9vY2sKu8R8gFqN9s1Xi woUh9CX/H9LV4izmztSIN6JpYAB5EqJX2+eCUMGz15QKkQSgQq1OjKoozn2eZmWq his70ReeakwKII0sQ8hNqQpIvUvxYQg7kOkmOIYYaR0wvUdB93eodHYYWYiAT98z IkP/6S9cX9OiU6EDk4Qv8rxnoMvNjVvssQ1BQRNitleX4nWU1cZgpqwfkSeoel9r fErhPwKUtRLxyC4c9MVDaVEmH307RxikjroscrrkGIlFBUf+dbmVAWFrLR5INHE+ sk9DazK0zIPluAO9RrzgMf4fmACJf9M/ITAjfY5ywrBoq5kwbCqkVO/uXvvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mG9uKpTbJ2wexxPT5CJE1jrNn4wHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKobmsRaydRF3PEwYKvxv7YrEFpQjs9iHIxR bZiCV9sj2E59DIzBcqnrMy+LF6DhcPO1T+xTTawJBnmGbZtFLBnYadcR6yHbI1Kl SVwHCYWyPMTFfEmMZHYKM5pqf+1prhIqzRtHT3PBo2JHMH/uz4itZQeCTua5GaPQ lPGgqmECyDnaKoOHToJv2xoEiLhHqbLtuSSHZbeEKyauDmcSzVd5x8Hilwnn0+Av S46MgJ4iCe73SCnmKbtJXxZ9vc87i866BWGYKvG6Rk19FqnauN/XT1lYH94uEtYa S3Ic3vmjuDdYyQSHjceqMUF1/ABVLqh06Sn3Blc48JPRzJE0Fi8= -----END CERTIFICATE-----Generated at Mon Jun 30 08:27:25 2025 by rpki-client