$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: o7GWSsAM/lvcHyFTlzZrO8EDwCuP9tJZprQXJPqk8R4= Subject key identifier: C0:5E:90:22:5F:87:BA:48:EA:CF:B2:E7:B1:7F:A7:12:D8:A2:9E:74 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 505ED18C98E05B35B279F0932C33F9F1BFB93C44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 0169 Signing time: Sat 19 Jul 2025 15:20:40 +0000 Manifest this update: Sat 19 Jul 2025 15:15:40 +0000 Manifest next update: Wed 23 Jul 2025 03:19:40 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) 2: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: lPHF3bHMesxXk4rDWwx7kW6kJ3+X+f3ehRpDbWYaWpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5e:d1:8c:98:e0:5b:35:b2:79:f0:93:2c:33:f9:f1:bf:b9:3c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Jul 19 15:15:40 2025 GMT Not After : Jul 23 03:19:40 2025 GMT Subject: CN=C05E90225F87BA48EACFB2E7B17FA712D8A29E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:60:ef:1c:c7:62:74:01:a5:2f:ae:32:19:47: 17:fe:2a:8e:93:97:48:43:64:94:5d:f5:98:09:57: 17:60:b2:76:af:52:59:21:db:cb:01:a4:e4:c9:f6: 46:29:73:ff:40:70:6e:a0:2d:7d:eb:7d:f1:a1:bc: 09:e0:a9:50:f6:97:b2:9c:9a:85:2f:0a:17:88:84: c2:a3:34:d7:16:57:6b:6b:03:03:30:8c:68:48:fb: b3:c2:e6:24:01:0d:a6:27:42:89:99:80:b6:36:38: ff:24:38:3a:39:cc:66:0c:3c:af:65:b5:3c:4e:96: 7a:14:76:9f:00:75:b8:5d:bb:d3:b6:c0:96:8c:06: 96:6b:4e:d4:45:de:f1:c1:0e:93:22:e7:ae:73:ff: a1:17:a2:00:c5:5f:bd:a2:2d:a5:03:ee:f0:8a:dc: 59:95:58:24:fa:3d:7d:19:7d:d6:3b:9d:08:da:1b: d4:69:0c:f5:06:e1:85:f1:47:f4:7f:6f:3f:39:80: b8:5c:44:1b:f5:e9:85:b7:97:ac:4e:6d:e8:e1:e5: 49:be:f4:e8:b1:a1:08:9e:eb:c3:d6:88:2d:11:7d: 26:d6:87:c2:38:76:0c:6c:26:48:d7:fc:de:a2:16: 1a:e3:14:41:59:89:10:eb:f8:45:6a:ab:e4:e7:12: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:90:22:5F:87:BA:48:EA:CF:B2:E7:B1:7F:A7:12:D8:A2:9E:74 X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:f0:08:f6:46:7b:38:33:1c:7b:f2:46:8d:04:3c:b4:8d: 2d:8b:9d:da:12:bc:2c:b1:b2:93:87:f0:eb:d8:17:60:cc:7a: 45:c6:83:70:56:46:81:92:c3:09:ad:60:5d:5e:28:64:1a:55: 63:bd:7d:a5:ce:ab:1b:e6:13:7e:46:76:f8:30:33:9f:35:11: da:1f:4c:d9:4e:b2:15:a6:f6:fe:0c:6d:0c:38:9f:75:6d:02: ee:f5:cc:68:f0:ce:85:ce:1f:d0:0c:73:fa:96:fc:6b:b3:2c: 4e:df:b9:2b:05:11:1b:5d:02:87:a7:2c:2a:09:05:dc:bb:a7: 53:27:ea:2c:5b:ac:cb:d8:50:8d:b6:f3:37:92:e5:f1:a8:82: 6a:b1:b2:57:a8:02:4c:c2:f7:45:3a:d0:93:e2:3b:74:ef:f3: 97:84:42:ef:72:39:9b:f6:3e:84:96:ed:5e:fc:44:79:1f:44: 7c:a2:14:25:2f:a0:d6:f1:ff:af:89:a6:55:e8:3b:f1:b6:b4: 7a:fc:76:29:f6:96:57:3b:ea:00:5a:a6:3b:fb:4d:25:fa:7f: 60:b2:92:c4:a5:21:b8:95:f7:b1:0c:25:b6:f3:92:47:0f:e6: 28:79:75:2d:a7:9e:89:5f:f8:58:d6:f1:cf:86:bc:2d:8c:b0: d9:53:27:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUF7RjJjgWzWyefCTLDP58b+5PEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA3MTkxNTE1NDBaFw0yNTA3MjMwMzE5NDBaMDMxMTAvBgNV BAMTKEMwNUU5MDIyNUY4N0JBNDhFQUNGQjJFN0IxN0ZBNzEyRDhBMjlFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYO8cx2J0AaUvrjIZRxf+Ko6T l0hDZJRd9ZgJVxdgsnavUlkh28sBpOTJ9kYpc/9AcG6gLX3rffGhvAngqVD2l7Kc moUvCheIhMKjNNcWV2trAwMwjGhI+7PC5iQBDaYnQomZgLY2OP8kODo5zGYMPK9l tTxOlnoUdp8Adbhdu9O2wJaMBpZrTtRF3vHBDpMi565z/6EXogDFX72iLaUD7vCK 3FmVWCT6PX0ZfdY7nQjaG9RpDPUG4YXxR/R/bz85gLhcRBv16YW3l6xObejh5Um+ 9OixoQie68PWiC0RfSbWh8I4dgxsJkjX/N6iFhrjFEFZiRDr+EVqq+TnEsrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwF6QIl+Hukjqz7LnsX+nEtiinnQwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV/8Aj2Rns4Mxx78kaNBDy0jS2LndoSvCyx spOH8OvYF2DMekXGg3BWRoGSwwmtYF1eKGQaVWO9faXOqxvmE35GdvgwM581Edof TNlOshWm9v4MbQw4n3VtAu71zGjwzoXOH9AMc/qW/GuzLE7fuSsFERtdAoenLCoJ Bdy7p1Mn6ixbrMvYUI228zeS5fGogmqxsleoAkzC90U60JPiO3Tv85eEQu9yOZv2 PoSW7V78RHkfRHyiFCUvoNbx/6+JplXoO/G2tHr8din2llc76gBapjv7TSX6f2Cy ksSlIbiV97EMJbbzkkcP5ih5dS2nnolf+FjW8c+GvC2MsNlTJ4A= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:53 2025 by rpki-client