$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: v6KoAYqRF/5oBx+Sw6MMGiXfDNlwI5xcweHS+AJB27U= Subject key identifier: 13:BD:20:03:C6:72:26:40:70:90:DC:3A:4E:89:90:22:DD:CE:D4:F2 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 10D29DF57E9B3E5125B991E37914FBC077AC3F91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0105 Signing time: Sun 20 Jul 2025 06:41:18 +0000 Manifest this update: Sun 20 Jul 2025 06:36:18 +0000 Manifest next update: Wed 23 Jul 2025 08:28:18 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: g6jIt9nDLUBKna+Dp6wEQSGFZAVC4juxNYDDRMKTYns=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d2:9d:f5:7e:9b:3e:51:25:b9:91:e3:79:14:fb:c0:77:ac:3f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Jul 20 06:36:18 2025 GMT Not After : Jul 23 08:28:18 2025 GMT Subject: CN=13BD2003C67226407090DC3A4E899022DDCED4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:c5:a7:12:1a:a9:10:78:17:c3:a8:e9:2a: 4d:15:60:62:4b:28:31:c4:50:20:85:cb:b9:95:93: c0:8b:15:78:66:16:11:29:22:1d:27:e9:6c:c7:97: bb:11:c7:08:84:cb:9a:70:f2:6c:8a:11:89:9f:d4: e0:29:57:16:9e:a6:6d:7b:87:8c:6a:1a:e1:f8:26: 44:13:3e:72:aa:6c:43:ea:8d:89:5b:d6:a4:54:2f: 75:a1:f9:a0:3e:e2:7f:79:84:ac:e1:7f:8b:bb:9c: 67:33:b4:98:58:f8:50:8a:0c:7a:14:95:36:29:41: 98:84:36:a3:f0:10:b6:08:10:44:54:ff:52:e0:93: 4b:cb:87:68:9e:46:d0:7e:c8:61:da:36:bc:07:9e: 3d:e4:73:d6:92:6c:29:6d:3c:a8:cf:71:0c:2a:80: 9a:01:eb:53:00:09:7d:b6:a8:4d:58:53:26:d6:f0: a2:bb:7e:10:82:6f:bb:7e:09:3e:51:91:83:13:dc: e4:6d:14:6c:d5:8a:0f:0b:5e:27:f6:97:06:cb:ef: a2:55:11:65:6a:3c:a3:95:ed:4e:a9:b1:10:ef:7d: 3d:61:e2:ac:ac:61:e4:f7:47:51:a0:aa:fe:a3:11: a7:03:c2:ed:4e:17:4a:e9:54:32:3d:7c:b7:4c:99: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BD:20:03:C6:72:26:40:70:90:DC:3A:4E:89:90:22:DD:CE:D4:F2 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4d:9c:bc:12:b5:7e:54:a2:78:80:39:09:7b:fb:85:38:c9: 0b:e6:bf:16:c1:0d:21:20:d0:8a:36:aa:91:79:83:34:59:c1: 29:6c:56:35:2d:ae:24:9b:03:b6:30:f8:fa:d3:e8:64:f9:f2: e9:ca:40:98:73:89:63:fe:6c:4a:22:f4:6e:4c:bc:02:40:8e: ed:89:02:a1:3e:d4:a3:71:ad:27:81:68:d8:79:3f:78:5a:0d: a6:cd:8a:bd:35:76:aa:12:3e:03:34:8f:56:e6:1b:dc:d8:96: ba:cd:86:77:50:c3:35:09:68:53:29:63:13:c3:80:63:c2:da: d9:b2:96:38:80:56:43:78:54:42:e4:35:24:ac:2a:ce:f5:c5: 73:12:ed:db:af:c7:cd:fc:e7:91:b7:f4:b2:01:74:04:d5:09: ec:f5:d9:15:00:d7:3d:80:60:e0:8d:dc:e8:7e:e8:6e:d2:da: 00:21:ba:eb:51:a7:50:7c:a1:51:ec:f5:96:47:86:3c:f3:30: 2e:89:ba:b6:d9:71:24:e4:42:c9:d2:d2:da:b6:a0:1f:f6:2b: eb:f7:2c:3d:1c:5c:01:bd:6c:48:ef:67:11:16:0b:d9:bf:9a: aa:4f:bd:08:9b:d3:9a:e0:0d:83:40:b9:c2:88:5a:40:3d:d6: 91:bb:aa:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENKd9X6bPlEluZHjeRT7wHesP5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA3MjAwNjM2MThaFw0yNTA3MjMwODI4MThaMDMxMTAvBgNV BAMTKDEzQkQyMDAzQzY3MjI2NDA3MDkwREMzQTRFODk5MDIyRERDRUQ0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARMWnEhqpEHgXw6jpKk0VYGJL KDHEUCCFy7mVk8CLFXhmFhEpIh0n6WzHl7sRxwiEy5pw8myKEYmf1OApVxaepm17 h4xqGuH4JkQTPnKqbEPqjYlb1qRUL3Wh+aA+4n95hKzhf4u7nGcztJhY+FCKDHoU lTYpQZiENqPwELYIEERU/1Lgk0vLh2ieRtB+yGHaNrwHnj3kc9aSbCltPKjPcQwq gJoB61MACX22qE1YUybW8KK7fhCCb7t+CT5RkYMT3ORtFGzVig8LXif2lwbL76JV EWVqPKOV7U6psRDvfT1h4qysYeT3R1Ggqv6jEacDwu1OF0rpVDI9fLdMmeKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE70gA8ZyJkBwkNw6TomQIt3O1PIwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZNnLwStX5UoniAOQl7+4U4yQvmvxbBDSEg 0Io2qpF5gzRZwSlsVjUtriSbA7Yw+PrT6GT58unKQJhziWP+bEoi9G5MvAJAju2J AqE+1KNxrSeBaNh5P3haDabNir01dqoSPgM0j1bmG9zYlrrNhndQwzUJaFMpYxPD gGPC2tmyljiAVkN4VELkNSSsKs71xXMS7duvx83855G39LIBdATVCez12RUA1z2A YOCN3Oh+6G7S2gAhuutRp1B8oVHs9ZZHhjzzMC6JurbZcSTkQsnS0tq2oB/2K+v3 LD0cXAG9bEjvZxEWC9m/mqpPvQib05rgDYNAucKIWkA91pG7qtU= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:01 2025 by rpki-client