$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: sabjhCUWuEUHgKfUWCDyoU4BK/QjVdUh9hyr3Jus2nc= Subject key identifier: 05:E6:4B:76:5C:08:FD:40:A0:C8:31:BC:8C:5A:FF:5D:9F:A3:BA:E5 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 43CFDA07ABD79F8D6030BCB17986C165C4EF6BA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01A8 Signing time: Wed 02 Jul 2025 03:22:07 +0000 Manifest this update: Wed 02 Jul 2025 03:17:07 +0000 Manifest next update: Sat 05 Jul 2025 09:40:07 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: 5RCLfXkii6t3vzlqFjkL7isZkwgq+9nOa0Y7pcmhzqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cf:da:07:ab:d7:9f:8d:60:30:bc:b1:79:86:c1:65:c4:ef:6b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Jul 2 03:17:07 2025 GMT Not After : Jul 5 09:40:07 2025 GMT Subject: CN=05E64B765C08FD40A0C831BC8C5AFF5D9FA3BAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:8c:f0:99:64:e1:bb:4f:dc:5c:72:24:22: bd:65:d8:d4:c0:71:22:6d:49:dd:2b:e0:9a:aa:b3: 4a:e0:b1:52:80:5a:4f:dc:93:0d:48:14:16:01:39: 26:c5:0a:a3:39:64:23:b7:13:bb:59:22:91:77:ef: d4:65:16:b9:ef:f8:a0:c7:d9:e2:ff:4a:62:bd:8e: 21:8f:71:eb:0d:89:27:b1:51:69:e3:e4:e5:5f:3c: 5b:46:98:51:ba:26:f7:78:28:8e:c0:c6:c3:b1:9b: a4:38:55:02:b1:2e:4d:bc:b2:23:29:6e:40:c1:a8: 31:57:fe:3b:14:39:d3:a5:da:f8:9f:ba:ff:80:0b: 05:d3:b2:6d:ac:2b:61:c8:8f:c7:68:56:67:c8:82: cb:f2:86:25:30:f7:d9:2e:3e:34:77:c1:c2:42:ae: 08:40:71:6d:e0:47:15:c5:0e:28:3f:46:9f:7b:f5: 26:94:4a:d4:31:5c:a2:aa:a1:34:f0:20:cb:77:7a: 9b:99:b4:78:ec:c7:30:27:e6:b6:4e:b5:f8:84:c7: 81:53:03:a3:f6:04:a7:d5:51:54:06:1d:fe:fc:22: 09:a6:17:6a:4d:da:3c:a3:04:c0:fe:73:fe:0a:22: 50:3a:70:24:3d:ae:61:26:9f:87:54:ef:12:3b:2e: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E6:4B:76:5C:08:FD:40:A0:C8:31:BC:8C:5A:FF:5D:9F:A3:BA:E5 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d2:52:01:4e:f3:66:2a:da:8c:b9:d1:1b:75:79:34:de:83: 70:ca:57:00:ef:59:4a:3d:e6:56:bc:02:e4:94:09:82:32:4b: b2:b3:28:8d:19:41:f2:6a:73:bc:3a:0c:f7:6c:23:bb:87:ce: 74:d2:72:80:c6:fe:5a:52:dd:55:b5:2a:96:bb:ba:c3:08:a1: 33:26:6b:d0:24:19:bc:07:33:af:78:11:05:a2:49:73:d0:4e: 2f:cf:0b:b9:b3:c0:ff:10:4c:73:8d:42:11:ce:c3:04:9b:d4: bd:d4:25:a8:7c:bf:04:ef:f7:e6:8e:02:31:2e:38:6c:8a:bd: 9f:70:44:9f:ce:9c:54:2e:97:76:a0:44:7f:f9:fa:a1:da:29: 14:95:21:14:84:ec:e4:c9:78:92:da:95:64:dd:e6:99:55:b7: 66:ee:3f:45:8d:b0:22:c0:fa:bc:7a:b2:2f:b0:0e:60:97:4b: 62:17:ed:88:6e:c3:18:38:e4:ed:b8:18:f2:f0:cf:ed:39:2e: 3a:fd:9c:a9:0b:f8:f4:d2:4f:12:1c:25:dd:e6:a1:86:ca:18: 57:6c:de:6b:ac:90:81:62:9c:ca:c0:57:b9:32:de:d3:17:2b: 11:3e:0b:21:68:e7:f3:95:66:8d:16:3c:0c:fc:9e:6c:6f:2c: eb:7d:d1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8/aB6vXn41gMLyxeYbBZcTva6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA3MDIwMzE3MDdaFw0yNTA3MDUwOTQwMDdaMDMxMTAvBgNV BAMTKDA1RTY0Qjc2NUMwOEZENDBBMEM4MzFCQzhDNUFGRjVEOUZBM0JBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHH4zwmWThu0/cXHIkIr1l2NTA cSJtSd0r4Jqqs0rgsVKAWk/ckw1IFBYBOSbFCqM5ZCO3E7tZIpF379RlFrnv+KDH 2eL/SmK9jiGPcesNiSexUWnj5OVfPFtGmFG6Jvd4KI7AxsOxm6Q4VQKxLk28siMp bkDBqDFX/jsUOdOl2vifuv+ACwXTsm2sK2HIj8doVmfIgsvyhiUw99kuPjR3wcJC rghAcW3gRxXFDig/Rp979SaUStQxXKKqoTTwIMt3epuZtHjsxzAn5rZOtfiEx4FT A6P2BKfVUVQGHf78IgmmF2pN2jyjBMD+c/4KIlA6cCQ9rmEmn4dU7xI7LrM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeZLdlwI/UCgyDG8jFr/XZ+juuUwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXSUgFO82Yq2oy50Rt1eTTeg3DKVwDvWUo9 5la8AuSUCYIyS7KzKI0ZQfJqc7w6DPdsI7uHznTScoDG/lpS3VW1Kpa7usMIoTMm a9AkGbwHM694EQWiSXPQTi/PC7mzwP8QTHONQhHOwwSb1L3UJah8vwTv9+aOAjEu OGyKvZ9wRJ/OnFQul3agRH/5+qHaKRSVIRSE7OTJeJLalWTd5plVt2buP0WNsCLA +rx6si+wDmCXS2IX7Yhuwxg45O24GPLwz+05Ljr9nKkL+PTSTxIcJd3moYbKGFds 3muskIFinMrAV7ky3tMXKxE+CyFo5/OVZo0WPAz8nmxvLOt90Z0= -----END CERTIFICATE-----Generated at Fri Jul 4 02:02:40 2025 by rpki-client