$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: hTLCI803Seai23wl6IiEVfRJ9csL22XLjJ3tbEZuJVI= Subject key identifier: 96:7D:06:A8:0C:B9:9E:C1:D9:88:93:BB:DE:D6:08:73:9F:AF:FC:1C Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 3BF0CD0572AEDEF4920807CD7BA558C9523BC274 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 035D Signing time: Sat 18 Oct 2025 17:02:18 +0000 Manifest this update: Sat 18 Oct 2025 16:57:18 +0000 Manifest next update: Tue 21 Oct 2025 20:55:18 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: spQaBA748/m6/IKqwAoUVD2NoEbdNN6ddBa9COLXkvI=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 4: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f0:cd:05:72:ae:de:f4:92:08:07:cd:7b:a5:58:c9:52:3b:c2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Oct 18 16:57:18 2025 GMT Not After : Oct 21 20:55:18 2025 GMT Subject: CN=967D06A80CB99EC1D98893BBDED608739FAFFC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:49:fc:10:1d:f8:f1:59:c7:ed:53:22:49: 96:7f:19:3a:eb:c6:6c:52:76:05:80:e7:fb:3e:25: b3:8b:f2:a8:1a:cf:4a:23:be:22:4c:02:57:78:0b: c0:90:76:6d:8f:81:ea:c0:24:3e:09:9c:0f:5d:5c: cd:9d:75:04:1e:76:4e:7a:59:73:e3:91:96:fa:65: cf:01:16:74:2c:12:9e:44:96:84:03:58:fb:c3:f5: 87:ac:19:b0:02:37:2c:ba:e8:a9:6b:92:f0:a0:79: 47:d5:4f:c6:47:90:6a:7c:6b:15:7b:38:b5:92:42: b1:75:f8:c6:19:12:53:ee:91:90:08:80:6b:8c:ba: 05:a5:93:50:9d:00:1c:25:dc:08:9a:96:8f:4d:3f: ac:2e:31:96:48:ba:f0:77:29:05:c1:95:67:90:a5: eb:6f:a9:bd:6a:de:23:47:16:56:c6:d0:3a:e6:29: bc:14:11:9c:cc:ab:27:a2:9d:9d:6c:d0:02:76:46: b9:fe:18:6e:af:f1:81:2a:7c:fa:b0:c7:35:23:90: 9a:bc:07:73:32:08:5b:06:47:65:43:c0:f7:89:10: 96:d8:03:30:1c:d8:6f:e9:0b:b0:d0:b1:d6:5f:e6: 75:54:c1:75:24:5c:f8:f3:14:d8:08:57:d8:96:41: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7D:06:A8:0C:B9:9E:C1:D9:88:93:BB:DE:D6:08:73:9F:AF:FC:1C X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8e:9c:76:df:78:db:ed:8e:4b:c3:58:44:1c:3b:86:29:31: 2c:6f:36:2b:13:0f:a9:da:87:d6:de:a8:60:01:c5:16:dc:a9: 93:2e:f8:1c:15:03:cb:97:a6:98:df:8d:cf:b0:97:da:a8:21: 34:59:1c:93:37:cd:05:f1:15:c1:bc:0f:ce:fd:f3:cd:09:b2: c8:44:1a:61:76:43:d7:6f:19:09:15:fb:3f:01:52:75:7d:39: b8:91:69:51:a2:f0:13:95:b9:d7:4f:d5:b3:8c:d5:49:3f:f6: a2:51:2e:6c:c9:74:0d:f1:57:6e:d0:d6:d2:0b:e6:1b:ac:ea: 40:0e:c1:e9:e4:bc:5b:52:de:95:07:82:a1:6a:80:49:9e:14: f2:aa:1d:15:bd:ae:78:bd:0e:02:81:d6:9b:64:9e:f0:d6:31: 37:16:a0:5e:05:bd:e6:06:18:b5:4d:53:9e:24:30:34:3a:25: 92:29:b0:d1:80:72:b2:96:7b:66:fa:b3:a6:37:13:1a:34:18: aa:63:30:d7:51:ec:07:29:b7:9e:6b:db:5a:f3:6d:c0:cd:38: 87:af:57:47:41:7a:88:90:62:fa:01:39:de:83:0f:ac:a5:1c: 27:cb:8c:6c:5b:46:78:a5:22:05:6c:ce:ae:00:a6:9a:d7:04: 1f:44:71:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/DNBXKu3vSSCAfNe6VYyVI7wnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTEwMTgxNjU3MThaFw0yNTEwMjEyMDU1MThaMDMxMTAvBgNV BAMTKDk2N0QwNkE4MENCOTlFQzFEOTg4OTNCQkRFRDYwODczOUZBRkZDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYkn8EB348VnH7VMiSZZ/GTrr xmxSdgWA5/s+JbOL8qgaz0ojviJMAld4C8CQdm2PgerAJD4JnA9dXM2ddQQedk56 WXPjkZb6Zc8BFnQsEp5EloQDWPvD9YesGbACNyy66KlrkvCgeUfVT8ZHkGp8axV7 OLWSQrF1+MYZElPukZAIgGuMugWlk1CdABwl3Aialo9NP6wuMZZIuvB3KQXBlWeQ petvqb1q3iNHFlbG0DrmKbwUEZzMqyeinZ1s0AJ2Rrn+GG6v8YEqfPqwxzUjkJq8 B3MyCFsGR2VDwPeJEJbYAzAc2G/pC7DQsdZf5nVUwXUkXPjzFNgIV9iWQTaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUln0GqAy5nsHZiJO73tYIc5+v/BwwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaOnHbfeNvtjkvDWEQcO4YpMSxvNisTD6na h9beqGABxRbcqZMu+BwVA8uXppjfjc+wl9qoITRZHJM3zQXxFcG8D879880JsshE GmF2Q9dvGQkV+z8BUnV9ObiRaVGi8BOVuddP1bOM1Uk/9qJRLmzJdA3xV27Q1tIL 5hus6kAOwenkvFtS3pUHgqFqgEmeFPKqHRW9rni9DgKB1ptknvDWMTcWoF4FveYG GLVNU54kMDQ6JZIpsNGAcrKWe2b6s6Y3Exo0GKpjMNdR7Acpt55r21rzbcDNOIev V0dBeoiQYvoBOd6DD6ylHCfLjGxbRnilIgVszq4ApprXBB9EcU4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:48 2025 by rpki-client