$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: 9xFT4fEEsuBR4QUY7OdcsG/BPqFQ4LLV7mBemujtPXc= Subject key identifier: EF:06:7A:B5:24:E4:E8:9A:B6:66:81:77:2A:C1:47:92:DF:8E:F2:B9 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 35F07AF488A2B6E2023F1360CBBA26147A22538D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 032C Signing time: Mon 30 Jun 2025 02:42:16 +0000 Manifest this update: Mon 30 Jun 2025 02:37:16 +0000 Manifest next update: Thu 03 Jul 2025 14:41:16 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 4: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: xtIVnNU2mKcqPJZuARHu1sqGrWVPpL1QOR1pxZ3JUqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f0:7a:f4:88:a2:b6:e2:02:3f:13:60:cb:ba:26:14:7a:22:53:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Jun 30 02:37:16 2025 GMT Not After : Jul 3 14:41:16 2025 GMT Subject: CN=EF067AB524E4E89AB66681772AC14792DF8EF2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:65:d0:40:83:f5:f7:a4:99:4b:5f:c9:1c: d9:d9:50:a3:42:29:c9:c6:b8:38:e0:0d:f1:9c:e5: 53:57:60:82:15:8d:4c:59:1c:1b:58:1d:19:36:20: fc:65:54:28:47:de:6f:77:cd:fd:0d:e7:f8:f5:18: a7:c2:f2:e7:6b:64:15:5a:4c:40:d8:e0:cb:c8:3c: 1f:f4:34:a7:71:bf:03:3b:83:db:31:8d:53:24:b5: 6e:ad:1f:41:8d:3c:20:06:92:e0:a1:14:1a:09:1b: 9d:b1:60:7b:79:13:31:fc:a5:6c:b3:3e:c7:5b:b3: 60:8d:9d:79:ae:04:cd:3c:5f:ed:b6:2a:fe:b4:9e: ce:d1:a8:4d:a9:4f:14:38:43:86:06:aa:c5:76:59: 74:7f:17:3b:4f:31:f5:81:45:cb:3f:dc:3f:d7:bb: f4:c1:2c:8c:b4:64:53:4d:f3:d0:e6:d8:7e:ca:57: f7:79:8e:c3:fb:89:d7:e9:27:c6:83:2e:fc:e7:86: f4:fe:f8:54:20:2a:c3:fc:0d:6c:7c:47:0b:7c:f6: a0:0c:11:13:66:1e:d5:51:4b:05:c4:d1:7b:f5:a1: cf:57:e1:8f:0c:27:bf:18:7c:8d:22:09:9e:69:9d: c2:a1:e2:92:e5:6f:bc:08:67:cb:72:1b:69:9d:69: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:7A:B5:24:E4:E8:9A:B6:66:81:77:2A:C1:47:92:DF:8E:F2:B9 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:52:2a:98:23:56:08:99:1c:e2:7b:f0:a7:a3:88:1c:ab: 86:cb:8d:08:f4:b6:c7:4e:a5:e5:73:09:a8:6a:c7:90:98:94: af:3e:3e:d1:db:e3:1f:d4:86:91:dc:27:44:6a:57:08:f5:7a: 95:5c:36:b2:38:30:f5:5a:33:2e:5d:bc:48:88:7f:9e:c9:76: 87:58:28:0a:b3:82:ff:7d:fb:64:36:ae:0b:51:73:be:52:0e: d9:69:e4:89:b2:3b:fc:66:4d:c4:0a:ba:75:6c:12:f4:e1:a2: e9:b8:87:84:33:c7:21:c9:1a:77:6d:e5:27:f8:e5:17:1c:e9: 8d:c9:cd:e4:5a:be:e6:f6:eb:28:a5:75:8d:88:c8:6f:1a:a6: a1:d5:63:3e:28:5c:82:8b:2d:ff:20:c3:c1:b2:ca:52:c9:ee: 8e:a9:7f:9e:17:58:d8:6a:4e:ae:b1:97:ee:e9:76:bf:bc:95: 37:02:69:1d:ad:cd:c8:8b:45:13:06:50:37:11:19:9b:af:1b: b5:6d:40:b6:92:a3:34:7e:c6:ce:80:d2:9f:4e:8e:ff:35:7d: 42:14:f3:1f:8b:43:a7:03:78:e1:58:20:be:53:0c:62:82:f0: c1:fc:a3:d0:aa:74:f3:f0:87:74:3d:11:08:24:90:c2:a0:70: 68:b9:03:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfB69IiituICPxNgy7omFHoiU40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA2MzAwMjM3MTZaFw0yNTA3MDMxNDQxMTZaMDMxMTAvBgNV BAMTKEVGMDY3QUI1MjRFNEU4OUFCNjY2ODE3NzJBQzE0NzkyREY4RUYyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPGXQQIP196SZS1/JHNnZUKNC KcnGuDjgDfGc5VNXYIIVjUxZHBtYHRk2IPxlVChH3m93zf0N5/j1GKfC8udrZBVa TEDY4MvIPB/0NKdxvwM7g9sxjVMktW6tH0GNPCAGkuChFBoJG52xYHt5EzH8pWyz Psdbs2CNnXmuBM08X+22Kv60ns7RqE2pTxQ4Q4YGqsV2WXR/FztPMfWBRcs/3D/X u/TBLIy0ZFNN89Dm2H7KV/d5jsP7idfpJ8aDLvznhvT++FQgKsP8DWx8Rwt89qAM ERNmHtVRSwXE0Xv1oc9X4Y8MJ78YfI0iCZ5pncKh4pLlb7wIZ8tyG2mdaSlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wZ6tSTk6Jq2ZoF3KsFHkt+O8rkwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdbUiqYI1YImRzie/Cno4gcq4bLjQj0tsdO peVzCahqx5CYlK8+PtHb4x/UhpHcJ0RqVwj1epVcNrI4MPVaMy5dvEiIf57JdodY KAqzgv99+2Q2rgtRc75SDtlp5ImyO/xmTcQKunVsEvThoum4h4QzxyHJGndt5Sf4 5Rcc6Y3JzeRavub26yildY2IyG8apqHVYz4oXIKLLf8gw8GyylLJ7o6pf54XWNhq Tq6xl+7pdr+8lTcCaR2tzciLRRMGUDcRGZuvG7VtQLaSozR+xs6A0p9Ojv81fUIU 8x+LQ6cDeOFYIL5TDGKC8MH8o9CqdPPwh3Q9EQgkkMKgcGi5A5k= -----END CERTIFICATE-----Generated at Mon Jun 30 11:58:07 2025 by rpki-client