$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: NoxVX1+BLlYGMTfIMN3QEGhbKSiJL1AFu6pkk8AvW7w= Subject key identifier: B7:89:31:DF:42:8B:20:3C:12:36:E4:E2:63:BE:5A:D1:26:17:E8:E0 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 79B41D77AD3801FE2FAB1A661D3A9E89DBD96402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0315 Signing time: Sat 10 May 2025 10:22:17 +0000 Manifest this update: Sat 10 May 2025 10:17:17 +0000 Manifest next update: Tue 13 May 2025 22:14:17 +0000 Files and hashes: 1: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=) 2: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: LzuLEQR86m8Q/3yzK0mCFaVUAmJN+UR+zO3i3W2WqmE=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b4:1d:77:ad:38:01:fe:2f:ab:1a:66:1d:3a:9e:89:db:d9:64:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: May 10 10:17:17 2025 GMT Not After : May 13 22:14:17 2025 GMT Subject: CN=B78931DF428B203C1236E4E263BE5AD12617E8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:09:8e:71:ef:26:41:bc:76:ef:7f:bd:7a: 9e:cd:dc:04:ca:72:77:5e:97:e8:59:63:56:c5:0c: bc:4b:3d:88:7d:c2:f7:61:c9:0e:01:84:78:5a:91: 20:50:00:41:b5:a1:45:12:47:c1:d7:5f:7f:40:1d: fe:7f:da:96:02:d7:0a:0a:42:bb:ad:f9:29:9d:4d: e6:8f:7e:ac:e8:69:46:1a:46:d3:e5:bf:38:f9:f0: 55:71:8d:63:a0:39:16:0f:04:31:54:2a:e9:91:e6: 59:58:38:e5:b0:dc:bb:c9:8f:9b:d2:5d:c0:57:db: f1:d1:22:1e:bb:21:e9:29:99:e1:3a:3c:94:42:24: 3f:45:81:e8:a5:7e:97:08:c6:a3:d2:04:40:7d:ac: 5e:c2:79:da:e5:10:dd:03:a8:db:ef:20:b7:42:e1: c6:00:97:6a:b6:9a:13:c4:4f:bd:c0:a3:4e:ab:ea: 72:42:3a:88:db:d6:1e:06:85:b0:19:0c:92:9a:82: 59:cb:3e:7e:c1:f9:31:23:6f:4f:e1:b5:58:cb:0e: 89:e2:8b:77:10:4a:91:35:57:3b:e3:f9:e3:26:4a: 9c:ee:07:e5:12:24:db:32:59:29:85:42:f6:2e:71: fe:45:75:fb:80:e8:79:a3:1e:f6:30:db:c5:ca:0a: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:31:DF:42:8B:20:3C:12:36:E4:E2:63:BE:5A:D1:26:17:E8:E0 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:10:ca:ae:74:a2:cb:46:bb:eb:65:84:b0:a3:84:99:c5: 86:67:6f:bc:45:46:a9:c2:bd:21:32:e0:67:bb:76:fd:db:75: c0:1f:82:14:27:38:1b:d3:9e:4c:30:2c:63:51:ec:8f:1a:1e: b7:d4:f6:3c:a3:95:79:36:29:e3:04:82:b2:e8:a1:98:8d:2b: 93:8b:c9:2f:99:8e:8c:05:2c:0c:4b:ee:f1:55:46:92:6c:bb: f6:67:71:98:b2:55:47:79:79:d1:00:d8:84:3e:fe:ae:0c:35: 4e:8a:e8:a6:7b:dc:1e:11:3d:33:f3:54:43:59:de:57:2b:35: 38:1e:e9:65:cd:e2:c4:ff:3d:df:c7:c3:a6:4d:60:bc:a7:b1: 0b:b3:0a:b5:e7:fb:fd:16:45:9b:47:6f:b3:8a:ed:69:11:0d: df:d7:68:44:c9:70:79:76:b6:ef:39:3f:f5:e8:be:94:33:08: 9a:5c:db:b2:32:7c:a6:52:03:c6:20:0e:97:ce:d0:97:59:5d: 26:10:05:d3:8f:d9:8c:8f:9d:52:d6:ec:9c:3a:8f:bc:28:43: 43:3e:b5:e0:4a:58:22:a3:1f:71:ef:db:4b:3b:0c:80:cb:63: 40:be:8e:2f:02:b0:41:60:b5:1d:4c:30:cd:a1:69:6a:d0:d8: 87:b1:35:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebQdd604Af4vqxpmHTqeidvZZAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA1MTAxMDE3MTdaFw0yNTA1MTMyMjE0MTdaMDMxMTAvBgNV BAMTKEI3ODkzMURGNDI4QjIwM0MxMjM2RTRFMjYzQkU1QUQxMjYxN0U4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDQmOce8mQbx273+9ep7N3ATK cndel+hZY1bFDLxLPYh9wvdhyQ4BhHhakSBQAEG1oUUSR8HXX39AHf5/2pYC1woK Qrut+SmdTeaPfqzoaUYaRtPlvzj58FVxjWOgORYPBDFUKumR5llYOOWw3LvJj5vS XcBX2/HRIh67IekpmeE6PJRCJD9FgeilfpcIxqPSBEB9rF7CedrlEN0DqNvvILdC 4cYAl2q2mhPET73Ao06r6nJCOojb1h4GhbAZDJKaglnLPn7B+TEjb0/htVjLDoni i3cQSpE1Vzvj+eMmSpzuB+USJNsyWSmFQvYucf5FdfuA6HmjHvYw28XKCk9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4kx30KLIDwSNuTiY75a0SYX6OAwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrGEMqudKLLRrvrZYSwo4SZxYZnb7xFRqnC vSEy4Ge7dv3bdcAfghQnOBvTnkwwLGNR7I8aHrfU9jyjlXk2KeMEgrLooZiNK5OL yS+ZjowFLAxL7vFVRpJsu/ZncZiyVUd5edEA2IQ+/q4MNU6K6KZ73B4RPTPzVENZ 3lcrNTge6WXN4sT/Pd/Hw6ZNYLynsQuzCrXn+/0WRZtHb7OK7WkRDd/XaETJcHl2 tu85P/XovpQzCJpc27IyfKZSA8YgDpfO0JdZXSYQBdOP2YyPnVLW7Jw6j7woQ0M+ teBKWCKjH3Hv20s7DIDLY0C+ji8CsEFgtR1MMM2haWrQ2IexNYo= -----END CERTIFICATE-----Generated at Sat May 10 13:02:32 2025 by rpki-client