$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: 7G9guT//cJiQpDMY7qOCVoMrXCxD8Ri9vDg+78gVX4w= Subject key identifier: E7:73:38:A1:C0:B8:77:36:7A:DF:C3:0A:08:C3:86:19:2C:67:6B:8A Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 60706168A5539DD826A423D676D435D96629AFB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 012E Signing time: Mon 20 Oct 2025 03:21:21 +0000 Manifest this update: Mon 20 Oct 2025 03:16:21 +0000 Manifest next update: Thu 23 Oct 2025 10:01:21 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: 55ovmEkXRkqCsAjB2l2cjWfdMFZltpliTpOaMq9RRnw=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:70:61:68:a5:53:9d:d8:26:a4:23:d6:76:d4:35:d9:66:29:af:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Oct 20 03:16:21 2025 GMT Not After : Oct 23 10:01:21 2025 GMT Subject: CN=E77338A1C0B877367ADFC30A08C386192C676B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:83:28:9d:78:87:09:cf:c5:ce:88:cf:94: fb:93:ab:e4:06:a8:f1:63:3b:7e:05:1b:22:1c:0e: 9b:24:83:4a:1c:9c:5c:5a:b0:82:07:a2:42:81:81: de:8c:2c:15:7e:46:56:36:15:9d:0c:aa:c9:92:59: 3f:6e:97:87:6c:ef:75:15:a7:c7:aa:48:13:cf:d1: bc:da:40:3c:85:a4:a5:55:bd:0f:f9:0a:37:92:55: 3d:77:62:45:77:97:13:54:c4:4b:5c:5e:90:47:88: cb:18:01:32:db:d0:3d:b9:ee:7d:c6:2b:e9:25:a9: f2:c5:8b:05:ac:74:3f:d8:47:dd:6b:95:44:a8:fb: 03:79:f3:d4:92:97:b4:1d:0e:2a:a9:d7:38:00:33: 37:5d:3e:5c:fc:46:72:22:4c:ac:95:85:be:30:94: 93:96:bb:ef:bb:08:62:e1:50:eb:cc:6e:51:95:de: 41:c3:31:43:82:e0:6e:32:81:7e:42:6c:6e:21:6d: f2:41:ad:78:cb:48:b6:dc:7d:86:b7:20:2e:0b:f1: 76:d9:da:81:90:c9:f6:d4:96:a7:35:2d:12:82:c2: fe:de:b3:00:67:4c:9f:52:d4:a1:54:1e:6f:d3:34: 08:36:51:06:d3:1e:cd:27:fb:0d:b5:1f:c1:10:0e: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:38:A1:C0:B8:77:36:7A:DF:C3:0A:08:C3:86:19:2C:67:6B:8A X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fb:bd:0a:9c:e8:67:53:51:58:e1:a8:86:b9:97:e0:d7:34: 54:4c:b1:e2:d1:ea:ff:84:23:69:62:98:95:00:0a:70:4a:ac: be:2e:4c:50:c9:60:e4:9f:6a:f1:92:7c:f8:f3:24:9f:cf:1b: 95:0f:30:af:f3:23:fc:f7:3f:39:a9:8b:ad:b9:51:4d:23:8c: 67:96:e0:ff:04:4e:fc:c8:a1:c4:d6:47:78:93:75:ac:2d:a5: 11:5e:14:97:f4:c2:05:9b:1a:1d:f9:36:dd:1c:8c:95:7f:27: 74:57:38:47:be:5f:36:27:54:bb:e2:67:d6:a7:9b:59:41:57: 09:c5:fd:90:df:03:b7:66:82:0d:57:7f:de:b6:8a:e6:c1:d1: 9f:45:50:30:27:93:12:65:da:ce:63:91:92:01:50:0c:18:f8: d4:65:93:54:91:c8:85:8b:87:be:fd:1c:be:6f:56:92:d7:a4: c2:7c:32:ba:13:31:71:55:c8:c6:64:6a:05:81:0e:5f:e0:58: 16:ff:99:ae:e9:c6:3c:8e:09:4f:08:92:6a:d6:69:38:4d:1b: cc:cc:8e:c4:aa:35:1e:12:8d:47:0e:73:f7:2d:bb:74:d7:c6: a0:40:d7:0f:a8:bc:08:a0:e0:90:ec:c0:f8:d1:92:fd:84:71: 22:d5:ea:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHBhaKVTndgmpCPWdtQ12WYpr7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTEwMjAwMzE2MjFaFw0yNTEwMjMxMDAxMjFaMDMxMTAvBgNV BAMTKEU3NzMzOEExQzBCODc3MzY3QURGQzMwQTA4QzM4NjE5MkM2NzZCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rYMonXiHCc/FzojPlPuTq+QG qPFjO34FGyIcDpskg0ocnFxasIIHokKBgd6MLBV+RlY2FZ0MqsmSWT9ul4ds73UV p8eqSBPP0bzaQDyFpKVVvQ/5CjeSVT13YkV3lxNUxEtcXpBHiMsYATLb0D257n3G K+klqfLFiwWsdD/YR91rlUSo+wN589SSl7QdDiqp1zgAMzddPlz8RnIiTKyVhb4w lJOWu++7CGLhUOvMblGV3kHDMUOC4G4ygX5CbG4hbfJBrXjLSLbcfYa3IC4L8XbZ 2oGQyfbUlqc1LRKCwv7eswBnTJ9S1KFUHm/TNAg2UQbTHs0n+w21H8EQDlbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53M4ocC4dzZ638MKCMOGGSxna4owHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn7vQqc6GdTUVjhqIa5l+DXNFRMseLR6v+E I2limJUACnBKrL4uTFDJYOSfavGSfPjzJJ/PG5UPMK/zI/z3Pzmpi625UU0jjGeW 4P8ETvzIocTWR3iTdawtpRFeFJf0wgWbGh35Nt0cjJV/J3RXOEe+XzYnVLviZ9an m1lBVwnF/ZDfA7dmgg1Xf962iubB0Z9FUDAnkxJl2s5jkZIBUAwY+NRlk1SRyIWL h779HL5vVpLXpMJ8MroTMXFVyMZkagWBDl/gWBb/ma7pxjyOCU8IkmrWaThNG8zM jsSqNR4SjUcOc/ctu3TXxqBA1w+ovAig4JDswPjRkv2EcSLV6jo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:52 2025 by rpki-client