$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: rAbsrMlgcjtAlPsiZqXjg0hPJSuKCE7Yt2eFlDQTVvg= Subject key identifier: CE:9F:90:10:A6:A4:20:C4:E8:78:AF:3F:19:B1:53:B1:EE:67:00:D9 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 79C7D365BF5BA7A3A198BCE61604C860540AAAA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 0190 Signing time: Wed 07 May 2025 08:22:06 +0000 Manifest this update: Wed 07 May 2025 08:17:06 +0000 Manifest next update: Sat 10 May 2025 15:38:06 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: CVahTEYE1BfSmtEmPqsPjpuUJWVizcG47u1ITFmEBKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c7:d3:65:bf:5b:a7:a3:a1:98:bc:e6:16:04:c8:60:54:0a:aa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: May 7 08:17:06 2025 GMT Not After : May 10 15:38:06 2025 GMT Subject: CN=CE9F9010A6A420C4E878AF3F19B153B1EE6700D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:55:85:8c:7c:c2:8a:a6:f9:15:85:40:27: c1:6d:3b:9c:9b:37:4f:9d:e6:49:f9:b5:8f:09:a2: 81:46:e4:dd:e1:3b:e3:54:d0:11:00:35:c2:3f:d8: 99:df:95:9e:f7:1c:78:05:c8:85:1b:ff:96:ef:f2: 4c:fc:ac:ff:b4:dc:f7:44:bf:35:14:d0:fa:2b:a4: 30:f8:f5:d1:77:42:49:10:f9:6a:5f:d2:8f:d7:f2: cf:e1:44:d2:4c:35:7f:0c:6e:39:0b:4b:cf:32:88: b7:61:58:23:bb:18:ec:49:81:26:e4:d8:f4:04:69: 0b:06:9f:2e:f3:3c:9e:8a:6b:74:06:75:db:20:31: 69:45:d0:2e:a9:6d:50:4b:ac:0d:29:c3:b0:42:25: e8:b4:d5:57:b9:dc:37:27:8d:fb:a2:af:08:8a:27: 24:16:e5:dd:61:0d:60:95:f2:f1:12:d0:67:78:5d: 4b:f2:dc:e5:87:fe:00:a0:f2:14:97:c5:c2:b2:bb: 3d:44:0b:89:08:be:c4:80:0a:52:17:5a:24:2a:5b: d2:93:d5:ca:9b:94:b5:bd:58:92:1f:49:49:88:63: b8:eb:55:0d:c5:ac:18:13:50:e6:b0:2c:a7:02:3e: 2f:27:ae:94:d1:8f:d9:cc:22:f0:15:49:38:cb:6d: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9F:90:10:A6:A4:20:C4:E8:78:AF:3F:19:B1:53:B1:EE:67:00:D9 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:71:58:ab:7a:3b:bc:08:f3:fd:e1:29:6f:ba:ea:05:ee:5a: ec:82:86:9d:e1:b0:36:4b:c1:db:32:8a:f8:4e:83:5f:07:09: 58:bc:57:44:2c:87:74:fc:2b:de:20:d5:3d:0c:5d:dd:5d:d4: fa:47:6a:44:5b:5f:4b:99:0a:37:8e:91:93:62:96:6e:ea:d6: cf:99:dc:d1:e6:84:55:50:9e:90:d1:a5:6f:78:cb:b1:d0:20: 5d:a7:e3:cc:6e:16:89:18:b2:05:1a:44:8f:a8:e9:27:af:27: 13:34:09:ea:ad:c5:d6:4c:14:55:3d:ae:75:14:f3:bf:5a:76: b1:d3:50:c9:16:12:a0:3a:a5:9b:85:b7:d7:a3:9d:9d:40:55: 23:b7:bd:41:b4:4e:59:2f:76:21:f3:fd:a2:3f:f1:d0:c0:bf: a1:5d:29:e0:23:fe:b4:65:18:84:23:85:15:d1:1a:ab:de:c7: 71:b4:0f:88:a2:06:e8:75:3c:49:0f:51:e0:f9:0e:c9:3e:a7: c4:e7:df:e6:46:bc:b6:4c:71:fd:60:29:72:2e:46:8f:d5:e5: b4:70:90:2f:8e:05:75:60:6c:91:16:c6:4f:33:ac:ef:a7:b7: 0c:70:f5:7f:95:76:81:5d:6a:30:15:5b:31:38:4a:e1:f6:90: d7:f8:28:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecfTZb9bp6OhmLzmFgTIYFQKqqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA1MDcwODE3MDZaFw0yNTA1MTAxNTM4MDZaMDMxMTAvBgNV BAMTKENFOUY5MDEwQTZBNDIwQzRFODc4QUYzRjE5QjE1M0IxRUU2NzAwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUFWFjHzCiqb5FYVAJ8FtO5yb N0+d5kn5tY8JooFG5N3hO+NU0BEANcI/2JnflZ73HHgFyIUb/5bv8kz8rP+03PdE vzUU0PorpDD49dF3QkkQ+Wpf0o/X8s/hRNJMNX8MbjkLS88yiLdhWCO7GOxJgSbk 2PQEaQsGny7zPJ6Ka3QGddsgMWlF0C6pbVBLrA0pw7BCJei01Ve53DcnjfuirwiK JyQW5d1hDWCV8vES0Gd4XUvy3OWH/gCg8hSXxcKyuz1EC4kIvsSAClIXWiQqW9KT 1cqblLW9WJIfSUmIY7jrVQ3FrBgTUOawLKcCPi8nrpTRj9nMIvAVSTjLbVSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzp+QEKakIMToeK8/GbFTse5nANkwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlxWKt6O7wI8/3hKW+66gXuWuyChp3hsDZL wdsyivhOg18HCVi8V0Qsh3T8K94g1T0MXd1d1PpHakRbX0uZCjeOkZNilm7q1s+Z 3NHmhFVQnpDRpW94y7HQIF2n48xuFokYsgUaRI+o6SevJxM0CeqtxdZMFFU9rnUU 879adrHTUMkWEqA6pZuFt9ejnZ1AVSO3vUG0TlkvdiHz/aI/8dDAv6FdKeAj/rRl GIQjhRXRGqvex3G0D4iiBuh1PEkPUeD5Dsk+p8Tn3+ZGvLZMcf1gKXIuRo/V5bRw kC+OBXVgbJEWxk8zrO+ntwxw9X+VdoFdajAVWzE4SuH2kNf4KPc= -----END CERTIFICATE-----Generated at Fri May 9 02:59:53 2025 by rpki-client