$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: lEOUKoFN63/K1ldgoEi8NZvDDJDK8gSlhTaDq3g010E= Subject key identifier: 7B:6F:0F:03:4F:44:16:70:48:5D:8C:76:FD:A1:B1:32:EE:46:A6:A3 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 7EBC57F96F19FD4B5C8D1E1AE3B31985F868DFE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 016D Signing time: Fri 06 Jun 2025 09:00:04 +0000 Manifest this update: Fri 06 Jun 2025 08:55:04 +0000 Manifest next update: Mon 09 Jun 2025 14:08:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: buuEW4G7/mGJtmhl3CvF7z0r68yzrmW8pLFBJ+24AHw=) 3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bc:57:f9:6f:19:fd:4b:5c:8d:1e:1a:e3:b3:19:85:f8:68:df:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Jun 6 08:55:04 2025 GMT Not After : Jun 9 14:08:04 2025 GMT Subject: CN=7B6F0F034F441670485D8C76FDA1B132EE46A6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:ab:96:46:ed:bb:90:4c:a9:68:7e:3a:1d: 12:f2:0c:e1:f5:d8:cf:04:e8:7f:ff:fd:e8:19:be: 6c:1b:00:b7:eb:08:9e:33:1d:c4:b0:4a:96:17:f3: a1:aa:7e:d0:dd:c2:97:b4:74:7c:3f:a2:a8:ae:44: 8a:6b:7f:76:e7:ea:1e:5e:c5:1c:bc:38:7d:44:07: 55:81:61:e7:fc:a7:b1:8f:8a:52:f7:a2:7c:49:8a: f4:08:de:3e:51:06:21:b5:1f:21:27:d0:49:3f:a0: b6:02:42:77:fb:26:d3:c3:24:39:4a:c4:c3:d2:18: 4b:f0:9b:a3:d3:f3:72:d7:e3:2a:ad:c7:7e:df:6f: cd:2b:6d:57:07:f1:ce:3c:20:6b:e9:ea:ed:cd:4e: 06:b7:8e:47:00:51:b6:9a:96:73:a9:53:97:25:2b: 23:fb:38:6c:b6:a5:31:bd:4c:d4:11:e8:52:c9:1c: 24:8f:07:d8:06:1f:52:0b:18:ae:a4:f7:22:a2:b1: 83:93:68:98:81:ff:1a:3a:e6:06:c2:44:c4:8c:08: 41:9a:68:e9:d5:c8:d5:92:6b:86:8d:e6:69:a5:e6: 65:ad:ce:b9:cc:1b:bd:e8:3f:0c:ea:bb:e3:62:33: 88:17:3d:fe:b7:f5:f5:a1:2b:65:8c:b5:90:2d:59: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:0F:03:4F:44:16:70:48:5D:8C:76:FD:A1:B1:32:EE:46:A6:A3 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:72:02:9a:9d:04:1c:08:dc:48:f7:30:47:2c:62:1f:9a:79: 1d:09:98:44:28:4d:66:b5:27:f6:78:48:77:92:ce:42:6e:36: 4b:30:44:b8:60:ba:79:df:38:d1:7e:57:ef:6d:ea:b2:90:ff: cf:be:82:f8:9c:a5:98:ef:70:7a:11:b2:e5:09:82:6f:9d:7c: 73:22:88:e4:5b:45:ff:56:85:3b:e7:33:dd:82:cd:ab:e8:13: 93:a8:a3:eb:af:ea:e4:a3:a2:58:8e:73:b5:8d:f7:29:a5:db: 99:74:14:15:7b:ff:61:82:85:89:97:f6:e3:da:46:3e:85:75: af:4a:f7:a9:e9:35:29:aa:cb:0c:be:12:4d:a6:49:a0:d7:16: 38:14:f7:f8:28:11:95:0e:22:15:6a:af:ca:4f:53:7f:ca:4a: 83:11:83:93:55:78:91:c2:a4:15:74:1d:7b:62:c8:9b:8c:13: 6a:51:85:34:f3:e8:f5:ef:01:a1:e1:d6:b2:3e:9e:11:ea:b8: bf:25:6c:77:19:9a:92:82:6a:37:75:32:bd:d8:e5:03:b7:60: ad:17:19:94:39:0c:dc:2c:c8:42:08:c5:56:cb:f0:db:1c:f2: f6:aa:ea:d0:65:8d:c0:62:c8:ec:26:dd:4b:4b:10:33:ab:92: b8:72:85:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrxX+W8Z/UtcjR4a47MZhfho3+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA2MDYwODU1MDRaFw0yNTA2MDkxNDA4MDRaMDMxMTAvBgNV BAMTKDdCNkYwRjAzNEY0NDE2NzA0ODVEOEM3NkZEQTFCMTMyRUU0NkE2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuX6uWRu27kEypaH46HRLyDOH1 2M8E6H///egZvmwbALfrCJ4zHcSwSpYX86GqftDdwpe0dHw/oqiuRIprf3bn6h5e xRy8OH1EB1WBYef8p7GPilL3onxJivQI3j5RBiG1HyEn0Ek/oLYCQnf7JtPDJDlK xMPSGEvwm6PT83LX4yqtx37fb80rbVcH8c48IGvp6u3NTga3jkcAUbaalnOpU5cl KyP7OGy2pTG9TNQR6FLJHCSPB9gGH1ILGK6k9yKisYOTaJiB/xo65gbCRMSMCEGa aOnVyNWSa4aN5mml5mWtzrnMG73oPwzqu+NiM4gXPf639fWhK2WMtZAtWXsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe28PA09EFnBIXYx2/aGxMu5GpqMwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdyApqdBBwI3Ej3MEcsYh+aeR0JmEQoTWa1 J/Z4SHeSzkJuNkswRLhgunnfONF+V+9t6rKQ/8++gvicpZjvcHoRsuUJgm+dfHMi iORbRf9WhTvnM92CzavoE5Ooo+uv6uSjoliOc7WN9yml25l0FBV7/2GChYmX9uPa Rj6Fda9K96npNSmqywy+Ek2mSaDXFjgU9/goEZUOIhVqr8pPU3/KSoMRg5NVeJHC pBV0HXtiyJuME2pRhTTz6PXvAaHh1rI+nhHquL8lbHcZmpKCajd1Mr3Y5QO3YK0X GZQ5DNwsyEIIxVbL8Nsc8vaq6tBljcBiyOwm3UtLEDOrkrhyhYE= -----END CERTIFICATE-----Generated at Sun Jun 8 02:38:36 2025 by rpki-client