$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: YpQAPZmGfampX996ZuIHKsXd5gLvLOD5UStzZEdIXSg= Subject key identifier: 73:31:32:64:09:41:92:D9:6D:4D:1F:90:20:F0:4B:36:03:38:CE:6A Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 4152BAA301D667F360BEED48019971CA323C4496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 0161 Signing time: Tue 01 Jul 2025 17:50:38 +0000 Manifest this update: Tue 01 Jul 2025 17:45:38 +0000 Manifest next update: Sat 05 Jul 2025 03:25:38 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: S/pYGZLwQAsFhoqKFVfh1P2tB+mrnw8OoHJsnf1b9Js=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:52:ba:a3:01:d6:67:f3:60:be:ed:48:01:99:71:ca:32:3c:44:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Jul 1 17:45:38 2025 GMT Not After : Jul 5 03:25:38 2025 GMT Subject: CN=73313264094192D96D4D1F9020F04B360338CE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:11:62:ce:45:dd:37:87:75:67:68:d3:df:f1: c4:f3:fd:d6:72:1b:77:f0:16:0b:e3:7e:77:72:14: f2:7b:08:d3:ed:5f:2d:7a:7a:12:8a:85:9c:57:a7: 3c:ee:a3:0b:ad:26:df:13:60:ca:d0:11:92:6f:21: ef:44:23:33:6e:f5:1c:5d:6a:c7:50:13:fe:3a:1e: 36:47:0b:41:d3:5f:ce:ef:9c:d6:05:f5:15:d8:b4: 02:85:e8:43:b8:91:5e:d6:cd:0c:66:39:62:42:19: a7:4c:e7:16:4e:97:7a:cd:60:cf:b3:0b:31:e6:72: e8:23:be:f4:f9:ec:b3:e8:cf:1a:6c:62:f2:a5:35: d5:43:b0:86:46:28:f8:23:01:3f:61:f0:67:ec:70: a3:77:d2:a1:fa:fc:8f:ac:89:40:99:8b:c6:34:00: 7b:f7:56:1f:cf:c7:3d:52:ef:c4:79:65:46:5f:f9: 2d:44:b8:7c:83:b0:9d:81:32:25:f9:52:3b:88:50: 50:d7:18:19:5b:7b:38:47:08:bb:93:81:52:7d:3b: b4:9e:f1:01:96:70:33:a9:24:a6:d3:e0:a2:04:27: c4:b2:53:e5:22:49:ff:1d:6b:0c:69:9e:5d:5b:25: d1:8f:14:72:a9:2a:85:81:2c:1e:43:31:89:00:39: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:32:64:09:41:92:D9:6D:4D:1F:90:20:F0:4B:36:03:38:CE:6A X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:f5:b5:3a:68:8c:8c:20:86:86:dd:da:e2:7f:fd:14:31: ff:4f:16:38:ae:81:80:16:98:2e:bb:02:b0:cc:f4:61:20:51: ff:ad:e6:88:01:8a:06:d8:93:fd:af:8b:cc:d0:06:30:70:d5: 25:ac:f0:75:db:cd:8b:eb:a0:e8:12:65:52:c6:84:63:92:b5: 10:25:90:4f:33:90:0c:4d:8c:73:c3:5d:36:d9:4a:f8:9c:54: 56:7c:0f:3d:16:98:fd:7f:90:a3:65:4e:96:df:6f:7c:8a:07: 9b:c8:f7:0f:02:ba:98:94:ce:06:f3:0f:3d:9d:50:92:f2:3a: 7b:e0:67:1e:29:7f:a8:b0:5d:93:d8:50:17:28:b5:36:7a:2c: f4:8e:7d:aa:d8:11:b7:1e:a7:9b:4e:d6:3b:91:40:1c:e7:41: f8:37:43:96:6b:fd:05:f1:4d:53:4e:88:c7:9e:cf:fe:6a:5b: 5e:62:b5:1f:fa:b1:99:da:56:3c:48:fc:e4:c0:d3:95:14:b1: 3f:9d:4c:a5:5e:73:20:29:f6:55:f0:79:62:24:a2:d2:1e:e1: 34:f8:1f:47:45:a4:27:54:28:7a:fb:d6:0b:f6:98:d4:99:77: c3:f8:e8:68:85:63:47:20:c0:1f:75:94:75:bd:ad:99:a0:d7: 00:89:88:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVK6owHWZ/Ngvu1IAZlxyjI8RJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA3MDExNzQ1MzhaFw0yNTA3MDUwMzI1MzhaMDMxMTAvBgNV BAMTKDczMzEzMjY0MDk0MTkyRDk2RDREMUY5MDIwRjA0QjM2MDMzOENFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwEWLORd03h3VnaNPf8cTz/dZy G3fwFgvjfndyFPJ7CNPtXy16ehKKhZxXpzzuowutJt8TYMrQEZJvIe9EIzNu9Rxd asdQE/46HjZHC0HTX87vnNYF9RXYtAKF6EO4kV7WzQxmOWJCGadM5xZOl3rNYM+z CzHmcugjvvT57LPozxpsYvKlNdVDsIZGKPgjAT9h8GfscKN30qH6/I+siUCZi8Y0 AHv3Vh/Pxz1S78R5ZUZf+S1EuHyDsJ2BMiX5UjuIUFDXGBlbezhHCLuTgVJ9O7Se 8QGWcDOpJKbT4KIEJ8SyU+UiSf8dawxpnl1bJdGPFHKpKoWBLB5DMYkAOWQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczEyZAlBktltTR+QIPBLNgM4zmowHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP29bU6aIyMIIaG3drif/0UMf9PFjiugYAW mC67ArDM9GEgUf+t5ogBigbYk/2vi8zQBjBw1SWs8HXbzYvroOgSZVLGhGOStRAl kE8zkAxNjHPDXTbZSvicVFZ8Dz0WmP1/kKNlTpbfb3yKB5vI9w8CupiUzgbzDz2d UJLyOnvgZx4pf6iwXZPYUBcotTZ6LPSOfarYEbcep5tO1juRQBznQfg3Q5Zr/QXx TVNOiMeez/5qW15itR/6sZnaVjxI/OTA05UUsT+dTKVecyAp9lXweWIkotIe4TT4 H0dFpCdUKHr71gv2mNSZd8P46GiFY0cgwB91lHW9rZmg1wCJiOg= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:06 2025 by rpki-client