$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: H7Hym4iUAKoY9QnTkhc40XuK26bYLX8d8pfUBxTW2GE= Subject key identifier: 2A:E7:8D:A8:32:D0:90:07:06:6D:4A:0D:7C:E8:46:24:66:19:BB:99 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 167250ECD8676FD0963438F87D6A9C522C234ED7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0344 Signing time: Sat 23 Aug 2025 03:52:18 +0000 Manifest this update: Sat 23 Aug 2025 03:47:18 +0000 Manifest next update: Tue 26 Aug 2025 08:56:18 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: r3xKddmUh4GbBmvSbMOC9qLpzc8Ta2yPKIhBYyRuMp0=) 2: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:72:50:ec:d8:67:6f:d0:96:34:38:f8:7d:6a:9c:52:2c:23:4e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Aug 23 03:47:18 2025 GMT Not After : Aug 26 08:56:18 2025 GMT Subject: CN=2AE78DA832D09007066D4A0D7CE846246619BB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:d8:fd:64:7f:14:42:63:4d:76:6f:36:38: 6c:4c:84:7f:ad:1e:29:09:b8:94:09:23:b9:0a:9d: 12:73:eb:1b:3b:97:3b:75:aa:36:2a:70:52:06:80: 04:67:f5:ed:0f:61:f9:a1:4d:02:e7:8c:87:a9:9f: d1:af:0e:f2:4b:94:8d:a3:9e:31:76:6a:9d:d4:b0: f0:73:6d:8c:ff:50:47:15:af:9d:18:76:7a:82:40: bf:38:9a:b0:c8:e0:78:45:f6:de:f5:f6:02:99:5d: d0:62:27:a9:02:75:d2:ad:47:d2:7e:2a:5f:43:9b: 31:06:b8:61:da:ed:20:3e:45:76:25:3b:06:39:81: a9:76:a6:67:05:81:23:3c:b1:7d:93:84:42:a7:17: c5:23:9b:8a:97:0b:03:f7:fb:35:57:23:5b:a8:d0: 80:d0:4c:56:1a:d6:26:64:b8:60:da:8b:41:27:4e: 68:ab:06:5d:ab:ba:6f:ae:cc:72:b4:f0:3c:1d:4a: 71:de:d6:fa:72:59:4f:ee:3c:41:06:14:83:e5:c9: e4:b1:4a:31:aa:00:5b:3e:1f:51:35:0f:1f:8c:80: f8:e2:5f:d2:a0:94:5e:46:60:44:a4:09:a4:86:c1: dc:2c:9d:bf:45:75:03:4c:ff:06:9a:61:c2:90:a2: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:8D:A8:32:D0:90:07:06:6D:4A:0D:7C:E8:46:24:66:19:BB:99 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ed:fe:75:dc:a2:19:eb:68:04:a4:e9:69:d1:62:73:cc:40: 8f:e5:6b:c5:58:ca:98:48:18:2a:98:c1:e8:19:ea:f3:21:e0: 7f:d9:69:4d:a4:b0:2b:8c:9d:d5:43:bd:b5:6f:9d:fa:e7:95: 4c:98:45:19:c5:77:03:0f:ab:c1:cb:7e:27:87:aa:d4:03:18: ce:41:05:c1:68:97:8b:80:f7:6c:89:1f:93:41:dd:85:9b:5a: 6a:be:4d:3c:00:a1:2e:77:f6:25:83:be:e5:30:1d:4c:8a:8f: e5:2a:a3:ba:88:77:63:a0:b4:bb:85:42:af:4a:96:41:ee:4d: 68:30:4b:4d:ae:50:c6:ab:6f:ce:da:d4:06:0d:bf:69:6d:d8: 69:3e:0c:36:68:c1:9d:2c:e3:50:99:e5:4f:48:94:59:6f:f8: 79:35:ec:12:2c:b9:97:09:44:8a:c5:b8:d1:46:b6:7e:ef:04: b0:a1:2f:1c:3b:95:dc:20:d0:cf:fa:44:78:a6:40:20:bd:08: 4c:f3:5c:8f:85:d5:a5:81:6f:75:e6:e8:2a:a6:f9:5e:53:27: 0d:42:2f:cd:5b:b9:36:6b:1e:f1:54:3c:86:c2:f4:f3:a3:20: 52:42:0a:f5:95:e1:f3:f5:0a:8a:e4:78:fd:5c:20:47:2a:08: bf:84:5b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnJQ7Nhnb9CWNDj4fWqcUiwjTtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA4MjMwMzQ3MThaFw0yNTA4MjYwODU2MThaMDMxMTAvBgNV BAMTKDJBRTc4REE4MzJEMDkwMDcwNjZENEEwRDdDRTg0NjI0NjYxOUJCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/Nj9ZH8UQmNNdm82OGxMhH+t HikJuJQJI7kKnRJz6xs7lzt1qjYqcFIGgARn9e0PYfmhTQLnjIepn9GvDvJLlI2j njF2ap3UsPBzbYz/UEcVr50YdnqCQL84mrDI4HhF9t719gKZXdBiJ6kCddKtR9J+ Kl9DmzEGuGHa7SA+RXYlOwY5gal2pmcFgSM8sX2ThEKnF8Ujm4qXCwP3+zVXI1uo 0IDQTFYa1iZkuGDai0EnTmirBl2rum+uzHK08DwdSnHe1vpyWU/uPEEGFIPlyeSx SjGqAFs+H1E1Dx+MgPjiX9KglF5GYESkCaSGwdwsnb9FdQNM/waaYcKQogk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKueNqDLQkAcGbUoNfOhGJGYZu5kwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/t/nXcohnraASk6WnRYnPMQI/la8VYyphI GCqYwegZ6vMh4H/ZaU2ksCuMndVDvbVvnfrnlUyYRRnFdwMPq8HLfieHqtQDGM5B BcFol4uA92yJH5NB3YWbWmq+TTwAoS539iWDvuUwHUyKj+Uqo7qId2OgtLuFQq9K lkHuTWgwS02uUMarb87a1AYNv2lt2Gk+DDZowZ0s41CZ5U9IlFlv+Hk17BIsuZcJ RIrFuNFGtn7vBLChLxw7ldwg0M/6RHimQCC9CEzzXI+F1aWBb3Xm6Cqm+V5TJw1C L81buTZrHvFUPIbC9POjIFJCCvWV4fP1CorkeP1cIEcqCL+EW/A= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:49 2025 by rpki-client