$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: eayanSBxJGZ36JI12+PXG+01M1NzNl87JRK4z6AUncE= Subject key identifier: DE:79:2C:8C:99:6F:57:98:8A:8F:7D:F6:65:EC:28:D8:80:D3:65:6E Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 03BC18224DB044171261386C2584F86E9EA3BBC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 0195 Signing time: Thu 04 Sep 2025 10:30:04 +0000 Manifest this update: Thu 04 Sep 2025 10:25:04 +0000 Manifest next update: Sun 07 Sep 2025 16:48:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: RBy6ZIKjlqJeJwnAp87eEvSiYwA+lqpyQax/3CzK+C0=) 3: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bc:18:22:4d:b0:44:17:12:61:38:6c:25:84:f8:6e:9e:a3:bb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Sep 4 10:25:04 2025 GMT Not After : Sep 7 16:48:04 2025 GMT Subject: CN=DE792C8C996F57988A8F7DF665EC28D880D3656E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:dc:81:1d:f0:ca:a1:05:43:63:a6:55:b8: e4:d2:f7:23:a2:ed:9d:9d:be:3b:4d:06:41:40:79: 9c:19:2f:39:e9:18:85:d6:19:4b:87:1f:02:ff:a1: d2:5d:3b:6d:3a:01:2a:8e:f1:56:b1:f1:fd:2d:a7: eb:c1:ee:19:8d:e0:d0:3d:45:ad:01:64:87:82:df: 12:8a:a9:af:76:b3:97:56:b1:ad:4c:10:4d:4a:39: ce:c8:7c:d2:17:ee:6b:16:72:76:2e:6f:da:d4:65: 7e:4a:ee:df:85:2f:14:10:d4:8e:9f:89:70:77:5e: 4c:a3:1d:e4:40:63:4c:38:ca:cb:fe:0e:b1:e6:57: c6:5b:3f:c6:24:3d:6a:de:47:a2:08:82:47:b7:3b: e9:cd:e6:ab:e6:57:87:32:1c:cd:71:6d:dc:e6:7e: 95:9c:30:aa:ac:96:7e:ab:de:d2:a7:e6:e0:35:da: 30:73:4f:df:4f:0b:01:09:62:5d:7d:d2:f6:30:6c: 57:ba:bf:7d:d4:4d:1f:87:27:07:49:9f:b7:74:af: 8e:af:10:6e:3e:80:49:b0:99:0b:9b:40:1e:22:d9: 3e:7a:23:ac:ec:71:96:5c:97:14:cc:5f:17:7d:0c: 94:dd:61:9c:94:e9:74:96:f4:c9:08:c0:60:7a:6b: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:2C:8C:99:6F:57:98:8A:8F:7D:F6:65:EC:28:D8:80:D3:65:6E X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:17:80:f3:ca:14:32:42:11:79:a7:49:06:cc:ab:ee:e9: ed:72:65:8b:f1:fc:36:aa:b2:74:1d:ed:5b:0f:11:04:03:0a: 4f:a6:42:2d:e4:09:c8:75:4b:aa:0b:03:5d:4f:bd:e7:71:a2: 7f:50:13:21:d0:a4:c1:9c:40:eb:14:04:8a:cf:63:ed:83:ee: 9d:55:64:0b:c5:88:42:b0:e1:5e:19:d1:ce:75:d0:5e:a7:d3: a0:09:9e:f1:71:2f:5a:1c:fb:82:3e:6a:84:3e:3a:90:02:38: 9b:9f:7c:21:da:a0:e4:4d:c3:88:40:64:0b:6b:ab:f1:29:d1: 8e:4c:60:87:ab:0a:be:62:29:52:f8:25:4a:c6:8e:9b:79:db: 25:d4:7e:7d:4c:af:57:70:06:44:a9:fe:8a:6f:f1:b1:97:d2: 18:9c:ac:c1:e9:5a:96:b9:84:fe:21:4c:a3:e7:b4:2e:82:dc: 0b:fd:49:22:aa:59:a5:50:bd:60:c2:e2:d2:7d:4a:30:6b:d6: a1:0e:3e:b6:a6:90:c3:54:ba:56:32:5e:7d:74:85:fb:4a:63: 30:47:af:70:2a:e1:10:b9:5f:50:e7:bc:d4:d8:7f:35:77:69: 31:94:8e:77:d6:e2:1a:ef:6c:7d:2c:42:ac:19:52:8f:d4:29: 88:dc:18:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7wYIk2wRBcSYThsJYT4bp6ju8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA5MDQxMDI1MDRaFw0yNTA5MDcxNjQ4MDRaMDMxMTAvBgNV BAMTKERFNzkyQzhDOTk2RjU3OTg4QThGN0RGNjY1RUMyOEQ4ODBEMzY1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3dyBHfDKoQVDY6ZVuOTS9yOi 7Z2dvjtNBkFAeZwZLznpGIXWGUuHHwL/odJdO206ASqO8Vax8f0tp+vB7hmN4NA9 Ra0BZIeC3xKKqa92s5dWsa1MEE1KOc7IfNIX7msWcnYub9rUZX5K7t+FLxQQ1I6f iXB3XkyjHeRAY0w4ysv+DrHmV8ZbP8YkPWreR6IIgke3O+nN5qvmV4cyHM1xbdzm fpWcMKqsln6r3tKn5uA12jBzT99PCwEJYl190vYwbFe6v33UTR+HJwdJn7d0r46v EG4+gEmwmQubQB4i2T56I6zscZZclxTMXxd9DJTdYZyU6XSW9MkIwGB6a0jvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3nksjJlvV5iKj332Zewo2IDTZW4wHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8TF4DzyhQyQhF5p0kGzKvu6e1yZYvx/Daq snQd7VsPEQQDCk+mQi3kCch1S6oLA11Pvedxon9QEyHQpMGcQOsUBIrPY+2D7p1V ZAvFiEKw4V4Z0c510F6n06AJnvFxL1oc+4I+aoQ+OpACOJuffCHaoORNw4hAZAtr q/Ep0Y5MYIerCr5iKVL4JUrGjpt52yXUfn1Mr1dwBkSp/opv8bGX0hicrMHpWpa5 hP4hTKPntC6C3Av9SSKqWaVQvWDC4tJ9SjBr1qEOPramkMNUulYyXn10hftKYzBH r3Aq4RC5X1DnvNTYfzV3aTGUjnfW4hrvbH0sQqwZUo/UKYjcGEo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client