$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: +ZtYvEkiWlEUVklUrMEaYAnk6Vi9aPSxU7/n/qWLB1E= Subject key identifier: 0C:7B:D1:F9:4F:A2:0B:34:F9:0F:4C:40:D1:20:05:03:C2:2F:45:04 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 51AF431DB012B98501F0128AF67D5357C749561C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01D9 Signing time: Sun 19 Oct 2025 15:52:09 +0000 Manifest this update: Sun 19 Oct 2025 15:47:09 +0000 Manifest next update: Wed 22 Oct 2025 18:49:09 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: LlMoEx1XPKYHChW6WgOcDhRifd1T+ynraJqNygFqU0A=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:af:43:1d:b0:12:b9:85:01:f0:12:8a:f6:7d:53:57:c7:49:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Oct 19 15:47:09 2025 GMT Not After : Oct 22 18:49:09 2025 GMT Subject: CN=0C7BD1F94FA20B34F90F4C40D1200503C22F4504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:ae:43:5a:2d:24:db:13:af:e1:ef:47:f6: 0e:44:0b:51:08:e5:54:c5:2e:23:c7:a6:ab:8d:9a: 55:27:25:55:14:f5:f5:b5:ba:51:df:03:89:cf:8f: 46:37:e1:96:73:ae:c8:0c:6e:dd:23:c9:df:bc:d9: c4:bb:63:d6:3c:6f:df:ad:27:96:e1:71:59:f5:9f: e5:c7:c4:34:51:5b:e6:2d:d5:93:59:79:ce:7b:40: d5:c1:ed:21:77:da:88:4a:bf:87:3a:da:a7:04:21: 01:32:f8:d4:84:b8:0c:6a:6c:be:40:b9:d3:7b:15: e9:d6:6a:56:7e:60:e4:2b:2d:bd:00:ac:2b:da:a3: 2a:e9:97:6f:2f:6d:71:10:c1:89:0c:dc:48:95:b6: be:2d:be:06:67:c0:17:a5:45:33:2b:e9:a7:2b:08: 09:03:c6:32:46:5a:4c:9f:19:33:5d:72:44:09:f3: 91:7e:56:bd:75:d0:09:4d:fa:2b:3c:6d:96:1c:3a: c5:a8:0a:41:b3:a3:5e:ba:35:16:4d:16:71:22:eb: 87:4d:9f:59:03:a4:bc:a5:07:8c:34:ba:03:58:78: 5f:b2:cb:af:9a:09:3f:c0:20:f3:da:6f:83:66:28: 91:9a:56:9f:e6:0d:14:d7:ad:5a:c0:97:92:aa:38: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:D1:F9:4F:A2:0B:34:F9:0F:4C:40:D1:20:05:03:C2:2F:45:04 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:32:1f:8e:56:18:d6:b6:a8:8b:9f:4b:ae:51:26:d4:2c: 54:67:21:fc:ca:e0:fb:3e:ec:71:46:66:7a:86:05:98:9f:a2: 56:aa:8d:de:ca:1a:aa:31:cf:32:30:66:c9:19:a1:be:ba:a5: 83:c9:55:00:68:3e:02:b4:ec:f6:c8:2b:14:ae:0c:67:32:70: 74:ce:aa:c8:21:e6:bc:4b:e9:37:44:e1:93:9c:98:67:7e:db: 63:03:a5:43:41:49:ac:cc:21:b4:20:8b:72:6e:3e:f6:b0:a0: ac:0c:16:81:16:20:0e:d5:79:79:aa:d3:20:37:03:9a:58:bd: 00:99:bb:c6:20:46:ff:a7:89:70:47:f7:28:64:49:23:f7:ee: a6:94:ba:56:58:16:c2:b0:e7:43:f0:1f:66:43:d7:b4:e5:15: 08:49:27:0a:83:58:82:aa:15:4d:2f:42:66:1b:2a:b8:20:d5: c0:95:91:ba:57:7c:c2:0a:bb:ba:77:24:cc:c5:90:aa:88:86: 5b:78:d7:5f:65:8e:de:22:34:68:f6:4f:ec:67:0e:12:68:39: b2:1e:2f:33:d8:2c:a9:2e:0a:82:73:e3:97:a3:32:d7:7f:86: b9:c3:9c:85:aa:11:17:4a:8a:59:af:8a:7b:60:42:0c:c0:f4: f0:c8:32:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUa9DHbASuYUB8BKK9n1TV8dJVhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTEwMTkxNTQ3MDlaFw0yNTEwMjIxODQ5MDlaMDMxMTAvBgNV BAMTKDBDN0JEMUY5NEZBMjBCMzRGOTBGNEM0MEQxMjAwNTAzQzIyRjQ1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsq5DWi0k2xOv4e9H9g5EC1EI 5VTFLiPHpquNmlUnJVUU9fW1ulHfA4nPj0Y34ZZzrsgMbt0jyd+82cS7Y9Y8b9+t J5bhcVn1n+XHxDRRW+Yt1ZNZec57QNXB7SF32ohKv4c62qcEIQEy+NSEuAxqbL5A udN7FenWalZ+YOQrLb0ArCvaoyrpl28vbXEQwYkM3EiVtr4tvgZnwBelRTMr6acr CAkDxjJGWkyfGTNdckQJ85F+Vr110AlN+is8bZYcOsWoCkGzo166NRZNFnEi64dN n1kDpLylB4w0ugNYeF+yy6+aCT/AIPPab4NmKJGaVp/mDRTXrVrAl5KqOKKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHvR+U+iCzT5D0xA0SAFA8IvRQQwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmaMh+OVhjWtqiLn0uuUSbULFRnIfzK4Ps+ 7HFGZnqGBZifolaqjd7KGqoxzzIwZskZob66pYPJVQBoPgK07PbIKxSuDGcycHTO qsgh5rxL6TdE4ZOcmGd+22MDpUNBSazMIbQgi3JuPvawoKwMFoEWIA7VeXmq0yA3 A5pYvQCZu8YgRv+niXBH9yhkSSP37qaUulZYFsKw50PwH2ZD17TlFQhJJwqDWIKq FU0vQmYbKrgg1cCVkbpXfMIKu7p3JMzFkKqIhlt4119ljt4iNGj2T+xnDhJoObIe LzPYLKkuCoJz45ejMtd/hrnDnIWqERdKilmvintgQgzA9PDIMoI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:36 2025 by rpki-client