$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: u9LKOZ55sH07HFhkA4u9NtHlL60ZvkgwdBdbqq7gUus= Subject key identifier: B6:AC:32:D9:9A:38:41:2D:8F:2B:84:E3:96:90:2D:DE:7F:7B:8A:2A Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 5607D117B79F84F97F2856EB57A63989E03F8BCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 014A Signing time: Sat 10 May 2025 06:20:39 +0000 Manifest this update: Sat 10 May 2025 06:15:39 +0000 Manifest next update: Tue 13 May 2025 13:09:39 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) 2: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: aPeXnCzF4qM3sVsXJJpdS/IT9RfM61Enmtu/ioJfPO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 13:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:07:d1:17:b7:9f:84:f9:7f:28:56:eb:57:a6:39:89:e0:3f:8b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: May 10 06:15:39 2025 GMT Not After : May 13 13:09:39 2025 GMT Subject: CN=B6AC32D99A38412D8F2B84E396902DDE7F7B8A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:c5:2b:3f:97:20:09:fc:4d:da:13:b4:c7: 99:42:4c:d0:fb:dc:44:a8:18:05:eb:2d:12:03:c7: e6:c5:42:c4:41:a9:5c:64:99:d1:80:d1:b2:e8:7a: 1f:b0:ed:6b:22:ba:25:84:ec:6c:0f:2f:55:2a:67: fa:84:b3:a8:b9:61:1b:ae:47:87:d0:3c:eb:bd:c8: 9d:29:e3:6b:5b:48:f8:7d:8e:03:d9:3c:78:b4:e1: 85:69:52:b2:d6:ff:c5:78:ed:b4:e4:c4:e4:07:c5: ea:bb:d7:a8:3b:46:b2:8b:ac:6a:c4:67:dd:86:4b: e6:6c:2a:6d:a9:19:d3:d8:21:f0:e6:9d:22:28:aa: d2:25:fb:44:f1:a1:6e:3c:79:15:84:b5:7a:64:c4: 01:9b:ac:42:6e:ac:9d:6b:bd:17:7a:f1:33:af:06: 7c:d2:4a:da:7f:ec:dc:22:cc:d1:14:72:1a:e4:80: 19:84:23:fc:90:9e:62:e6:dc:59:46:e9:4b:f7:30: 2b:ca:71:a1:66:fd:6b:bd:66:29:05:8b:10:b9:92: 8e:b3:c5:95:d4:91:42:ad:1d:e3:59:c7:2b:ce:68: 15:42:ce:9c:0e:ac:f9:03:34:a1:66:d3:ad:1a:21: 27:f1:85:92:58:8b:b8:5d:34:06:7c:07:51:cb:49: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:32:D9:9A:38:41:2D:8F:2B:84:E3:96:90:2D:DE:7F:7B:8A:2A X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b3:a4:31:2a:35:41:10:e8:b3:cb:5f:5a:b8:9b:76:a3:16: 3f:d4:81:1f:6e:23:57:56:be:46:9d:a8:4f:9e:73:4f:ef:e3: 06:70:f0:df:fb:8d:4f:55:d4:16:82:1a:f5:0a:42:7a:f2:9c: dd:8d:aa:e6:ec:df:6f:b5:d4:8e:4c:b4:be:bc:e4:28:92:61: 29:35:86:5d:ad:39:f5:c9:79:6f:cf:d6:fe:e7:42:08:c0:78: fe:59:7f:80:4f:6c:90:f8:ca:b0:29:13:3f:20:bd:22:32:26: 7d:47:96:a5:96:33:0c:6b:08:a7:7a:be:0d:62:1d:29:99:c1: c5:cd:c6:ea:ff:12:43:28:0c:51:90:dc:9e:46:4c:71:de:08: 98:6d:55:51:b1:3c:ef:a9:ae:ba:ce:f3:80:45:3c:1c:5e:4a: ef:e5:0a:f9:46:b5:a8:7e:4f:4c:9b:99:7d:28:69:ed:ea:67: fe:2a:27:d6:eb:bc:f1:b1:cb:9f:12:33:05:36:87:dd:57:6f: ba:bd:40:a7:bd:46:e1:fe:19:db:c6:ad:b7:13:31:60:ec:93: ce:3c:81:29:b6:31:19:3f:7e:9e:af:d7:5d:d3:e3:1f:be:e0: fb:56:9a:ff:5d:6e:15:5f:eb:11:72:6a:15:ee:0b:90:94:f7: cf:7b:24:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgfRF7efhPl/KFbrV6Y5ieA/i80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA1MTAwNjE1MzlaFw0yNTA1MTMxMzA5MzlaMDMxMTAvBgNV BAMTKEI2QUMzMkQ5OUEzODQxMkQ4RjJCODRFMzk2OTAyRERFN0Y3QjhBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3cUrP5cgCfxN2hO0x5lCTND7 3ESoGAXrLRIDx+bFQsRBqVxkmdGA0bLoeh+w7WsiuiWE7GwPL1UqZ/qEs6i5YRuu R4fQPOu9yJ0p42tbSPh9jgPZPHi04YVpUrLW/8V47bTkxOQHxeq716g7RrKLrGrE Z92GS+ZsKm2pGdPYIfDmnSIoqtIl+0TxoW48eRWEtXpkxAGbrEJurJ1rvRd68TOv BnzSStp/7NwizNEUchrkgBmEI/yQnmLm3FlG6Uv3MCvKcaFm/Wu9ZikFixC5ko6z xZXUkUKtHeNZxyvOaBVCzpwOrPkDNKFm060aISfxhZJYi7hdNAZ8B1HLSe9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqwy2Zo4QS2PK4TjlpAt3n97iiowHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+zpDEqNUEQ6LPLX1q4m3ajFj/UgR9uI1dW vkadqE+ec0/v4wZw8N/7jU9V1BaCGvUKQnrynN2Nqubs32+11I5MtL685CiSYSk1 hl2tOfXJeW/P1v7nQgjAeP5Zf4BPbJD4yrApEz8gvSIyJn1HlqWWMwxrCKd6vg1i HSmZwcXNxur/EkMoDFGQ3J5GTHHeCJhtVVGxPO+prrrO84BFPBxeSu/lCvlGtah+ T0ybmX0oae3qZ/4qJ9brvPGxy58SMwU2h91Xb7q9QKe9RuH+GdvGrbcTMWDsk848 gSm2MRk/fp6v113T4x++4PtWmv9dbhVf6xFyahXuC5CU9897JJc= -----END CERTIFICATE-----Generated at Sun May 11 23:37:49 2025 by rpki-client