$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: XfEG43B8utikNjIZ/TEsMQN4UwFSWgjdLFrjNFFXYKg= Subject key identifier: 74:B7:BF:3E:0A:1D:F2:C4:35:D9:2B:46:63:06:51:CF:22:55:E3:A9 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 76F3EEDF17C1F5E06B7C533913FBE85C2357A09A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 0158 Signing time: Sun 20 Apr 2025 09:00:04 +0000 Manifest this update: Sun 20 Apr 2025 08:55:04 +0000 Manifest next update: Wed 23 Apr 2025 12:51:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 2: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 3: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: 7CZxasMaBF24T+GfYiqBScD4dLb1vENq8NMgtPO0Iao=) 4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 11:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f3:ee:df:17:c1:f5:e0:6b:7c:53:39:13:fb:e8:5c:23:57:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Apr 20 08:55:04 2025 GMT Not After : Apr 23 12:51:04 2025 GMT Subject: CN=74B7BF3E0A1DF2C435D92B46630651CF2255E3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:d8:35:96:a2:dc:7f:0e:06:cd:e8:da:3a: 77:f2:7f:22:69:f3:b3:a7:53:10:d6:32:38:6f:fe: 95:bf:7b:e3:dd:73:0a:67:f8:fd:97:ed:8f:bf:24: 48:4e:07:3f:b6:08:59:c3:de:d4:ca:ca:4a:9b:36: 2f:96:b5:3a:d2:6f:53:eb:01:f2:a0:b6:b4:00:e8: 23:33:d2:e2:15:7c:c9:18:56:a8:7e:83:8f:56:e6: 35:9b:20:9c:f2:e2:63:63:8c:e4:93:4a:29:f8:c9: e0:16:54:b6:4f:37:81:3d:50:2c:fe:42:37:42:f6: 34:0d:ed:50:5a:07:5a:b4:e3:93:5d:b4:7f:2d:6f: de:29:7a:0f:5b:28:95:86:00:d2:30:bc:09:05:49: 68:37:5e:a6:39:9c:c1:60:68:04:2c:75:b6:d2:93: 07:42:f5:04:b9:85:5a:b8:a6:34:71:b9:6c:c2:80: d7:2f:b4:72:d7:5f:0b:b3:1d:05:aa:f4:59:d7:14: b3:7e:d1:c3:4a:b1:26:dc:f4:7e:11:dc:85:9f:d6: 02:78:59:ac:32:3f:7b:81:9c:cc:e3:1c:6c:e1:6a: 43:91:b3:60:1d:5a:eb:8b:f4:21:06:bb:e0:83:72: 1b:df:5a:3c:09:3c:ba:01:d5:ed:84:d7:fa:fa:fd: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:BF:3E:0A:1D:F2:C4:35:D9:2B:46:63:06:51:CF:22:55:E3:A9 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:25:65:86:4a:13:fe:1e:a4:61:52:12:b5:e8:c5:ed:14:67: 29:b5:4d:c6:01:cc:70:8f:fe:17:61:db:b1:ea:0c:9d:78:fb: d7:63:87:79:e8:1d:56:25:a8:ce:e9:26:59:66:1e:ed:fa:45: f1:79:a2:92:22:63:2e:dc:35:40:a4:b0:ec:34:b7:2d:15:e7: ac:f9:7d:ab:7c:50:de:60:fb:fc:df:9c:92:d6:f6:54:71:18: 29:f5:02:31:22:63:02:1b:c8:7c:ef:4a:9f:ee:f3:fb:19:61: a6:c5:ac:2f:27:cb:12:79:14:63:0a:d3:d4:ef:dc:b2:7c:30: b0:1d:9a:03:19:c3:36:7c:3d:44:43:c8:2c:14:f3:4e:19:88: 5f:b2:a4:3f:49:60:7a:a4:56:31:4b:04:ca:9d:dd:6c:e1:b7: 51:61:45:30:da:30:ca:0b:12:fb:c2:13:c0:41:96:8a:7a:ef: a6:5f:ad:12:cb:0d:ac:3c:d5:eb:78:61:a7:83:e0:c1:73:d5: a1:f5:43:71:32:fc:f6:d9:a8:fd:1d:d2:e0:ed:86:76:26:a3: 86:e8:7c:75:b9:fc:f4:f0:34:e3:16:4b:59:d0:dd:1a:f9:51: 31:28:ee:cc:05:3d:d2:cc:a9:89:28:8f:34:cb:a0:af:47:f4: 3f:f5:53:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvPu3xfB9eBrfFM5E/voXCNXoJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA0MjAwODU1MDRaFw0yNTA0MjMxMjUxMDRaMDMxMTAvBgNV BAMTKDc0QjdCRjNFMEExREYyQzQzNUQ5MkI0NjYzMDY1MUNGMjI1NUUzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5Ng1lqLcfw4GzejaOnfyfyJp 87OnUxDWMjhv/pW/e+Pdcwpn+P2X7Y+/JEhOBz+2CFnD3tTKykqbNi+WtTrSb1Pr AfKgtrQA6CMz0uIVfMkYVqh+g49W5jWbIJzy4mNjjOSTSin4yeAWVLZPN4E9UCz+ QjdC9jQN7VBaB1q045NdtH8tb94peg9bKJWGANIwvAkFSWg3XqY5nMFgaAQsdbbS kwdC9QS5hVq4pjRxuWzCgNcvtHLXXwuzHQWq9FnXFLN+0cNKsSbc9H4R3IWf1gJ4 WawyP3uBnMzjHGzhakORs2AdWuuL9CEGu+CDchvfWjwJPLoB1e2E1/r6/clpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLe/Pgod8sQ12StGYwZRzyJV46kwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGclZYZKE/4epGFSErXoxe0UZym1TcYBzHCP /hdh27HqDJ14+9djh3noHVYlqM7pJllmHu36RfF5opIiYy7cNUCksOw0ty0V56z5 fat8UN5g+/zfnJLW9lRxGCn1AjEiYwIbyHzvSp/u8/sZYabFrC8nyxJ5FGMK09Tv 3LJ8MLAdmgMZwzZ8PURDyCwU804ZiF+ypD9JYHqkVjFLBMqd3Wzht1FhRTDaMMoL EvvCE8BBlop676ZfrRLLDaw81et4YaeD4MFz1aH1Q3Ey/PbZqP0d0uDthnYmo4bo fHW5/PTwNOMWS1nQ3Rr5UTEo7swFPdLMqYkojzTLoK9H9D/1U4M= -----END CERTIFICATE-----Generated at Sun Apr 20 14:40:37 2025 by rpki-client