$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: ikvy2lwkfHJD4Lg1Rgc4MVDLwsZn7UjIKJ6xm5ChbH0= Subject key identifier: 5A:1D:C1:E8:E4:FC:73:A8:6D:25:23:14:AD:70:FA:DB:D8:85:9E:71 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 4FF0DB4B604584A8E86C2696E342AB967577C40B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01BF Signing time: Sat 23 Aug 2025 01:42:15 +0000 Manifest this update: Sat 23 Aug 2025 01:37:15 +0000 Manifest next update: Tue 26 Aug 2025 11:11:15 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: tp5PIvsciMSQ75maYNB8aNeyaY95417+cf10ZRgZiAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f0:db:4b:60:45:84:a8:e8:6c:26:96:e3:42:ab:96:75:77:c4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Aug 23 01:37:15 2025 GMT Not After : Aug 26 11:11:15 2025 GMT Subject: CN=5A1DC1E8E4FC73A86D252314AD70FADBD8859E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:c1:e7:f9:a7:81:6b:29:3b:0f:72:c8:9b: 5e:f5:69:a9:16:34:08:6e:3d:25:b8:57:72:35:56: ff:74:7c:f9:19:65:76:6e:57:a2:91:e8:99:27:b2: 61:33:ce:d9:d1:3b:a4:f0:92:05:f7:cf:6d:eb:e8: 1b:7c:ae:27:aa:1d:b8:99:b5:8b:f7:8f:d5:3c:64: a6:cc:5b:20:b2:54:71:73:b3:5b:36:62:a1:bc:eb: 05:6c:3f:4f:e8:5e:3e:d2:c0:5b:ea:93:3b:64:d0: 9e:8e:92:0e:ee:bf:80:96:65:b2:bc:a4:17:56:d5: 54:9a:72:7f:f1:c7:4b:0e:e7:26:6d:96:a1:56:6a: 49:34:35:0a:22:9d:05:79:bb:99:ca:fd:ef:ee:92: 30:10:1d:9a:64:f5:18:57:f5:e0:cc:cc:d8:dc:7d: b2:01:c5:45:09:08:dd:ae:c7:22:d2:70:85:19:27: 4c:bd:40:7b:be:9b:5e:58:a9:fb:9c:bb:3d:47:28: 25:35:30:f4:4d:1c:cc:f0:bc:bb:46:69:41:dd:89: eb:88:d4:45:1e:07:0a:97:e6:c5:8e:65:34:6b:81: 8d:98:44:37:71:5d:d7:9d:69:36:d8:00:44:4e:87: da:36:a1:18:8f:74:4f:da:d5:af:49:78:99:4c:2e: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1D:C1:E8:E4:FC:73:A8:6D:25:23:14:AD:70:FA:DB:D8:85:9E:71 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:26:c1:55:98:0c:6b:9e:aa:6f:c9:e1:a5:3a:76:b7:62:5b: 02:02:cf:27:7f:14:76:0b:9a:81:60:27:bd:0a:8b:34:78:77: c1:3d:a4:9e:14:5a:f7:64:ce:05:f1:e8:db:01:6b:b1:3f:68: 36:0f:75:09:7f:17:dd:f9:83:c5:a5:b7:17:20:50:8b:33:db: 31:2f:77:ac:65:63:64:82:ff:04:ad:79:78:aa:ab:c5:2e:c0: 6b:7f:75:bf:d7:fd:02:be:50:7e:aa:1f:e6:26:cf:06:46:96: 48:e4:9a:43:26:ba:75:00:cc:76:2e:17:1e:1e:94:bf:73:73: ce:7f:6f:47:c2:47:42:e4:84:53:34:89:37:d1:61:40:9e:f5: a3:1f:0f:ba:64:16:19:e5:79:2d:51:50:66:1e:1b:14:16:a9: 78:82:f8:29:85:aa:05:31:7a:75:da:ab:1d:c7:8c:0a:ec:94: e3:95:78:15:d2:80:08:25:cd:f2:70:99:e0:5f:4f:aa:fc:de: 84:c2:ae:65:6a:96:be:bb:8a:6f:1f:74:ca:d2:4d:a6:1f:77: e7:cd:65:81:86:c9:34:02:fa:5a:31:9e:74:d3:ca:f6:35:58: e5:8d:85:01:4b:e5:33:25:bd:07:8d:c2:98:f7:18:42:4c:5c: 80:99:c2:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/DbS2BFhKjobCaW40KrlnV3xAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA4MjMwMTM3MTVaFw0yNTA4MjYxMTExMTVaMDMxMTAvBgNV BAMTKDVBMURDMUU4RTRGQzczQTg2RDI1MjMxNEFENzBGQURCRDg4NTlFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9cHn+aeBayk7D3LIm171aakW NAhuPSW4V3I1Vv90fPkZZXZuV6KR6JknsmEzztnRO6TwkgX3z23r6Bt8rieqHbiZ tYv3j9U8ZKbMWyCyVHFzs1s2YqG86wVsP0/oXj7SwFvqkztk0J6Okg7uv4CWZbK8 pBdW1VSacn/xx0sO5yZtlqFWakk0NQoinQV5u5nK/e/ukjAQHZpk9RhX9eDMzNjc fbIBxUUJCN2uxyLScIUZJ0y9QHu+m15Yqfucuz1HKCU1MPRNHMzwvLtGaUHdieuI 1EUeBwqX5sWOZTRrgY2YRDdxXdedaTbYAEROh9o2oRiPdE/a1a9JeJlMLu6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWh3B6OT8c6htJSMUrXD629iFnnEwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsmwVWYDGueqm/J4aU6drdiWwICzyd/FHYL moFgJ70KizR4d8E9pJ4UWvdkzgXx6NsBa7E/aDYPdQl/F935g8WltxcgUIsz2zEv d6xlY2SC/wSteXiqq8UuwGt/db/X/QK+UH6qH+YmzwZGlkjkmkMmunUAzHYuFx4e lL9zc85/b0fCR0LkhFM0iTfRYUCe9aMfD7pkFhnleS1RUGYeGxQWqXiC+CmFqgUx enXaqx3HjArslOOVeBXSgAglzfJwmeBfT6r83oTCrmVqlr67im8fdMrSTaYfd+fN ZYGGyTQC+loxnnTTyvY1WOWNhQFL5TMlvQeNwpj3GEJMXICZwmQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:15 2025 by rpki-client