$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: 1TS3oCAAZkdMnLjmnN2JrpPA2zS/z+Zl+zxrJXmDZ+c= Subject key identifier: B2:7F:2C:7B:FB:D3:56:86:CC:34:B4:7D:0F:DC:E6:3F:48:96:CC:9A Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 72CD06708E1D03AD083D744CE97B01483A2E5C3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 0192 Signing time: Sun 19 Oct 2025 06:00:39 +0000 Manifest this update: Sun 19 Oct 2025 05:55:39 +0000 Manifest next update: Wed 22 Oct 2025 06:24:39 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: sqppop2iID7lTJczdKwfOT9fOP+elxbXYUAzPnE6c+w=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cd:06:70:8e:1d:03:ad:08:3d:74:4c:e9:7b:01:48:3a:2e:5c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Oct 19 05:55:39 2025 GMT Not After : Oct 22 06:24:39 2025 GMT Subject: CN=B27F2C7BFBD35686CC34B47D0FDCE63F4896CC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:4e:ec:31:de:16:5b:08:2f:a9:80:b0:d2: 0b:82:27:94:40:f5:40:f3:a3:1e:55:09:d6:ef:91: 20:98:ad:43:c9:c7:51:ee:6b:8a:34:f7:55:dd:a3: 88:70:72:70:40:44:60:03:44:9a:de:c9:76:ea:ba: 64:5b:b0:ba:74:e0:4a:8f:10:13:78:f2:9b:6a:bc: 92:d6:42:13:ac:1c:8d:9d:9a:6e:2f:b3:54:0a:a7: 84:31:67:42:30:07:d1:29:c2:54:d5:10:60:99:70: 86:54:bc:f5:d4:e6:d9:a0:85:b6:51:18:f5:30:49: 19:cb:09:4b:17:85:d3:71:2f:31:d0:31:88:a4:6a: 7e:12:dd:a3:8a:35:c7:39:ca:58:e9:3f:1d:46:89: 73:a2:96:8e:38:4b:7e:c3:90:f4:05:f2:54:c1:50: 7c:a8:51:f8:62:e6:5b:87:0f:4f:96:a0:19:44:77: 09:a2:71:31:5f:f9:a1:81:77:d4:be:38:5d:dd:d3: 99:71:7d:d4:88:14:49:dc:c1:db:a5:14:2f:ed:9f: c5:c4:ef:3a:00:9a:95:1f:e4:4f:b7:c6:1c:3a:2a: 08:bf:4c:ca:06:c3:41:70:b2:d0:21:18:f0:5c:74: be:4d:32:ca:47:f3:d4:0b:c6:a8:67:2e:74:68:13: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:2C:7B:FB:D3:56:86:CC:34:B4:7D:0F:DC:E6:3F:48:96:CC:9A X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:96:6d:b3:4a:59:2a:8c:61:2d:0b:08:66:ca:97:a7:05:62: 8d:b2:18:3e:e0:31:2e:da:12:e5:7a:c5:b2:29:96:80:1b:57: 2a:5b:c7:01:01:c2:bf:6b:68:67:0a:77:d0:8d:f0:1b:f1:8f: dc:b5:fd:7b:48:a3:9f:2b:8e:8a:5b:ef:49:80:c4:a2:eb:c8: 66:28:72:d0:1e:69:79:03:15:f2:1b:44:08:83:88:1a:78:e9: e9:e2:4d:11:c4:ab:5c:40:9c:99:76:13:6f:6e:06:5e:3c:7f: b2:61:d2:cb:ea:56:0f:c0:f4:5f:e3:5b:48:b6:32:18:54:50: 62:0e:57:0e:1c:18:16:4e:61:c3:73:1a:c7:05:0d:25:40:c5: 4d:ea:e4:38:e2:db:5a:8d:46:91:d5:aa:5e:52:2e:b9:e0:66: 75:59:98:a2:0e:16:6b:8d:98:f0:86:4b:05:72:8b:a0:1d:ea: f0:06:c1:41:27:a6:0e:dc:6b:45:03:57:3c:33:a6:89:25:19: 32:e6:f8:de:f0:9f:8d:1f:60:3d:49:c6:20:ee:37:f0:6a:32: e0:73:8e:9d:7c:60:97:6d:fe:36:7d:b6:1e:81:1e:7e:ef:4b: b2:4b:4b:d1:42:ea:2a:9b:18:86:e8:86:96:0d:58:54:f3:fd: b2:4f:31:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcs0GcI4dA60IPXRM6XsBSDouXDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTEwMTkwNTU1MzlaFw0yNTEwMjIwNjI0MzlaMDMxMTAvBgNV BAMTKEIyN0YyQzdCRkJEMzU2ODZDQzM0QjQ3RDBGRENFNjNGNDg5NkNDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRU7sMd4WWwgvqYCw0guCJ5RA 9UDzox5VCdbvkSCYrUPJx1Hua4o091Xdo4hwcnBARGADRJreyXbqumRbsLp04EqP EBN48ptqvJLWQhOsHI2dmm4vs1QKp4QxZ0IwB9EpwlTVEGCZcIZUvPXU5tmghbZR GPUwSRnLCUsXhdNxLzHQMYikan4S3aOKNcc5yljpPx1GiXOilo44S37DkPQF8lTB UHyoUfhi5luHD0+WoBlEdwmicTFf+aGBd9S+OF3d05lxfdSIFEncwdulFC/tn8XE 7zoAmpUf5E+3xhw6Kgi/TMoGw0FwstAhGPBcdL5NMspH89QLxqhnLnRoE1eRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsn8se/vTVobMNLR9D9zmP0iWzJowHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGWbbNKWSqMYS0LCGbKl6cFYo2yGD7gMS7a EuV6xbIploAbVypbxwEBwr9raGcKd9CN8Bvxj9y1/XtIo58rjopb70mAxKLryGYo ctAeaXkDFfIbRAiDiBp46eniTRHEq1xAnJl2E29uBl48f7Jh0svqVg/A9F/jW0i2 MhhUUGIOVw4cGBZOYcNzGscFDSVAxU3q5Dji21qNRpHVql5SLrngZnVZmKIOFmuN mPCGSwVyi6Ad6vAGwUEnpg7ca0UDVzwzpoklGTLm+N7wn40fYD1JxiDuN/BqMuBz jp18YJdt/jZ9th6BHn7vS7JLS9FC6iqbGIbohpYNWFTz/bJPMRQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:03 2025 by rpki-client