$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: 1vOMHksamSKPTYE6GB+l3d+EOM09kXFVJLggveOFE24= Subject key identifier: 21:C0:5A:F9:A9:AF:C2:49:B5:71:DF:8F:D0:41:C3:B1:60:57:3A:22 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 747A8EE8767C50B8534A61622B2FC9AB9E7D1420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: E6 Signing time: Fri 09 May 2025 04:41:18 +0000 Manifest this update: Fri 09 May 2025 04:36:18 +0000 Manifest next update: Mon 12 May 2025 11:54:18 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: 48gPHUzbNQKb3lIwFwJjPdgayPToy9JynNlwyD6ODYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7a:8e:e8:76:7c:50:b8:53:4a:61:62:2b:2f:c9:ab:9e:7d:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: May 9 04:36:18 2025 GMT Not After : May 12 11:54:18 2025 GMT Subject: CN=21C05AF9A9AFC249B571DF8FD041C3B160573A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:c7:75:94:a5:c0:0b:af:af:87:3a:2d:90: 3c:1c:9f:07:82:d7:94:92:75:fa:7d:41:4e:37:24: e6:c5:86:e4:55:25:31:da:0d:e3:c7:0e:30:9d:e3: 39:66:56:e7:ab:78:76:da:81:92:21:8b:28:95:a3: e0:95:15:64:53:7f:98:db:82:c5:08:89:12:31:c2: 0c:c2:ec:71:61:85:ae:b7:a0:42:6f:5f:8c:db:02: ae:0c:00:fc:ba:c7:aa:eb:ef:3e:cb:e1:2d:73:d7: c9:57:2e:a8:7f:f5:6c:fd:85:65:43:75:04:57:e5: fe:b0:10:e5:29:6d:d4:37:49:01:e5:a0:b8:30:fe: f3:c6:51:49:86:18:1b:e2:ac:2e:a1:c4:eb:ab:21: 92:08:d5:de:be:e3:8b:56:60:a5:b1:65:6f:6d:cb: 6f:07:48:03:9b:e7:cf:c8:eb:68:83:ce:b1:da:ee: 3a:7a:54:3a:b4:a2:da:b1:7a:b2:66:9b:73:51:58: f0:7f:c6:be:c2:9a:38:2a:82:cd:62:c2:80:f4:27: 05:36:68:87:08:da:1a:3d:84:f5:15:89:55:25:c0: 23:77:ef:f2:b7:20:2c:a9:e9:11:6e:91:06:d9:31: b8:c4:87:63:b4:49:eb:1c:02:e6:df:9e:43:c8:01: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C0:5A:F9:A9:AF:C2:49:B5:71:DF:8F:D0:41:C3:B1:60:57:3A:22 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:b4:5a:3f:e0:2e:ed:13:b8:ce:52:ae:34:e9:c9:fe:70: 64:ab:ab:b5:2a:ba:af:25:ed:aa:14:b8:9d:c6:27:da:51:ea: bc:41:cf:c2:3d:b1:7f:b6:ff:f8:e7:70:7c:19:3c:34:dc:31: 40:89:1b:90:76:61:21:ee:f1:50:30:ec:d2:3f:d4:af:43:07: 26:9f:ff:11:5f:2e:75:b0:4f:85:52:e4:99:d4:03:58:85:14: 4d:7b:45:4c:0c:58:27:68:2d:0c:61:67:20:a5:7e:9f:62:70: eb:60:ea:3f:6a:d0:d8:f5:86:6c:b8:8c:74:49:9c:8f:b3:af: 42:64:bd:cd:4e:cf:a6:b6:ac:88:8c:ae:53:83:0a:d0:fd:f3: 34:12:1b:e4:37:f9:98:b7:60:78:fa:2b:27:a0:e3:90:d4:59: e3:fb:25:0a:c0:41:39:d2:a6:30:d5:a7:9f:e0:6b:4d:92:0f: a9:f2:06:92:e8:a0:fb:ca:2d:45:96:3b:ac:eb:54:6d:75:50: ca:b1:11:ff:b7:81:8a:26:56:37:d9:b2:0c:f0:e9:38:3b:5f: a6:e9:e9:a9:7d:93:91:43:f7:c3:90:a3:f5:f4:c7:d6:01:a7: b1:96:5b:17:7a:ad:d2:21:d8:cd:76:38:05:da:50:d0:bb:99: ad:df:0a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHqO6HZ8ULhTSmFiKy/Jq559FCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA1MDkwNDM2MThaFw0yNTA1MTIxMTU0MThaMDMxMTAvBgNV BAMTKDIxQzA1QUY5QTlBRkMyNDlCNTcxREY4RkQwNDFDM0IxNjA1NzNBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfMd1lKXAC6+vhzotkDwcnweC 15SSdfp9QU43JObFhuRVJTHaDePHDjCd4zlmVuereHbagZIhiyiVo+CVFWRTf5jb gsUIiRIxwgzC7HFhha63oEJvX4zbAq4MAPy6x6rr7z7L4S1z18lXLqh/9Wz9hWVD dQRX5f6wEOUpbdQ3SQHloLgw/vPGUUmGGBvirC6hxOurIZII1d6+44tWYKWxZW9t y28HSAOb58/I62iDzrHa7jp6VDq0otqxerJmm3NRWPB/xr7Cmjgqgs1iwoD0JwU2 aIcI2ho9hPUViVUlwCN37/K3ICyp6RFukQbZMbjEh2O0SescAubfnkPIAbzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcBa+amvwkm1cd+P0EHDsWBXOiIwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUetFo/4C7tE7jOUq406cn+cGSrq7Uquq8l 7aoUuJ3GJ9pR6rxBz8I9sX+2//jncHwZPDTcMUCJG5B2YSHu8VAw7NI/1K9DByaf /xFfLnWwT4VS5JnUA1iFFE17RUwMWCdoLQxhZyClfp9icOtg6j9q0Nj1hmy4jHRJ nI+zr0Jkvc1Oz6a2rIiMrlODCtD98zQSG+Q3+Zi3YHj6Kyeg45DUWeP7JQrAQTnS pjDVp5/ga02SD6nyBpLooPvKLUWWO6zrVG11UMqxEf+3gYomVjfZsgzw6Tg7X6bp 6al9k5FD98OQo/X0x9YBp7GWWxd6rdIh2M12OAXaUNC7ma3fCnc= -----END CERTIFICATE-----Generated at Sat May 10 11:43:23 2025 by rpki-client