$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: 6GvP/dmARJlzP657kW63dYsLADZxrqpePDHCmq+Wyyo= Subject key identifier: E4:5C:99:7D:42:80:D3:73:DF:86:D1:8D:26:77:88:FA:8A:73:EF:9F Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 5E79AA1C06FA22B25FDBFE8FDF1706A060FFDBB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01D7 Signing time: Sun 29 Jun 2025 11:00:01 +0000 Manifest this update: Sun 29 Jun 2025 10:55:01 +0000 Manifest next update: Wed 02 Jul 2025 22:48:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 2: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: rGv0vAR7eaxBL0fn6GCEJE7iOiatYK1+ZFyXa5NeM7g=) 3: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:79:aa:1c:06:fa:22:b2:5f:db:fe:8f:df:17:06:a0:60:ff:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Jun 29 10:55:01 2025 GMT Not After : Jul 2 22:48:01 2025 GMT Subject: CN=E45C997D4280D373DF86D18D267788FA8A73EF9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:94:fa:d5:c9:c5:bd:43:f4:d9:3e:13:fe: 93:e7:95:24:18:5e:7a:3e:11:b5:c8:0c:83:78:90: ef:8e:d0:25:27:ce:a1:d7:8b:f2:7e:45:f2:a8:1f: a2:2d:94:c2:ac:fd:c7:ab:f8:20:a3:f6:ca:10:35: d0:ca:d3:11:7c:e9:53:e6:23:4d:bc:90:43:f8:cd: cf:99:f8:cd:5e:8b:72:4b:91:e0:86:e9:b6:c4:0b: 51:67:9b:4b:69:23:4c:7d:83:47:da:2b:66:62:f1: 7a:71:9e:66:d7:e1:32:c4:22:86:9d:c2:90:d1:f6: fd:3d:69:56:e5:64:70:40:73:55:1b:f3:bd:70:d1: ec:e5:96:b5:f4:67:f2:fa:83:a9:f6:50:8b:2c:b3: aa:b5:2e:af:cc:b0:b2:2d:c8:a2:e7:ce:37:2e:c6: b2:1f:48:78:9a:1c:c2:be:22:55:f4:b6:6b:30:50: db:81:ca:b1:f0:69:b0:94:57:51:9e:a1:c0:17:2e: 9b:03:9d:9c:3e:61:21:d3:dc:3c:44:a9:62:2f:b8: b2:a4:71:8d:9f:ee:19:52:37:2a:2b:c9:a5:99:eb: 2d:7e:bc:b9:61:a3:57:0a:a6:59:6a:2a:30:18:27: 30:00:71:4e:a7:bb:d4:fe:13:30:c5:d7:4c:60:67: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5C:99:7D:42:80:D3:73:DF:86:D1:8D:26:77:88:FA:8A:73:EF:9F X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2b:1a:2f:4e:ef:82:11:06:77:27:40:1c:0f:84:9b:6b:2b: ec:ac:37:24:9b:05:5d:5d:38:a1:6b:f0:1f:71:d2:16:f6:3c: f8:29:7f:92:b8:6b:8b:0f:c4:0e:3a:eb:17:84:74:f1:b9:08: dd:a6:bd:c7:bc:da:cb:69:77:03:9d:ef:c2:2f:c1:ee:e6:5f: 5d:18:16:30:6b:53:6f:12:5b:e3:b2:35:0a:2c:d2:70:4f:13: d2:d9:76:c1:99:38:8d:b8:d6:6b:58:00:61:66:73:2a:ea:04: b8:c6:84:d7:7d:b4:a6:0f:46:76:f7:14:7b:3a:7d:df:6a:f1: fe:25:bd:29:e9:a1:d3:d3:e5:82:1f:e1:07:ca:6d:87:1e:8b: 60:ae:a6:70:75:e4:8f:03:b3:53:66:da:82:02:c4:1e:5b:71: bf:ba:7e:88:4e:0d:e4:04:4d:de:cb:c1:44:e9:57:e8:67:d6: 98:6b:11:2a:3e:90:55:fb:d6:8e:c5:e4:54:57:fd:fa:8a:a0: 45:7e:40:54:cd:a2:0c:1a:73:3f:d4:4f:94:46:2a:df:c8:35: 16:75:7d:48:a3:1a:41:99:5b:96:ae:cf:00:2b:85:cb:4b:87: 31:a7:ad:f5:b0:d7:ab:c4:db:e5:e4:31:8b:19:ec:6a:8f:4b: 45:4c:d5:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnmqHAb6IrJf2/6P3xcGoGD/27UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA2MjkxMDU1MDFaFw0yNTA3MDIyMjQ4MDFaMDMxMTAvBgNV BAMTKEU0NUM5OTdENDI4MEQzNzNERjg2RDE4RDI2Nzc4OEZBOEE3M0VGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0ZT61cnFvUP02T4T/pPnlSQY Xno+EbXIDIN4kO+O0CUnzqHXi/J+RfKoH6ItlMKs/cer+CCj9soQNdDK0xF86VPm I028kEP4zc+Z+M1ei3JLkeCG6bbEC1Fnm0tpI0x9g0faK2Zi8XpxnmbX4TLEIoad wpDR9v09aVblZHBAc1Ub871w0ezllrX0Z/L6g6n2UIsss6q1Lq/MsLItyKLnzjcu xrIfSHiaHMK+IlX0tmswUNuByrHwabCUV1GeocAXLpsDnZw+YSHT3DxEqWIvuLKk cY2f7hlSNyoryaWZ6y1+vLlho1cKpllqKjAYJzAAcU6nu9T+EzDF10xgZ37RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5FyZfUKA03PfhtGNJneI+opz758wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUrGi9O74IRBncnQBwPhJtrK+ysNySbBV1d OKFr8B9x0hb2PPgpf5K4a4sPxA466xeEdPG5CN2mvce82stpdwOd78Ivwe7mX10Y FjBrU28SW+OyNQos0nBPE9LZdsGZOI241mtYAGFmcyrqBLjGhNd9tKYPRnb3FHs6 fd9q8f4lvSnpodPT5YIf4QfKbYcei2CupnB15I8Ds1Nm2oICxB5bcb+6fohODeQE Td7LwUTpV+hn1phrESo+kFX71o7F5FRX/fqKoEV+QFTNogwacz/UT5RGKt/INRZ1 fUijGkGZW5auzwArhctLhzGnrfWw16vE2+XkMYsZ7GqPS0VM1WI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:14:47 2025 by rpki-client