$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: Is3Br9CmIMHLUbDXycDQw84Xaoz5TlV/2Lte4QKmYj8= Subject key identifier: 1D:34:89:40:3C:3F:46:76:20:77:44:E2:2B:F7:B2:7B:FF:14:2F:06 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 61BE2C24A5BE9119DE1AF477C30E35CFFD5CED82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: DE Signing time: Thu 05 Jun 2025 13:40:02 +0000 Manifest this update: Thu 05 Jun 2025 13:35:02 +0000 Manifest next update: Mon 09 Jun 2025 00:52:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: O/5u8HwSiZVHIlwijxrGN5ipJtvHMne13QU1+kU2KY4=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 00:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:be:2c:24:a5:be:91:19:de:1a:f4:77:c3:0e:35:cf:fd:5c:ed:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Jun 5 13:35:02 2025 GMT Not After : Jun 9 00:52:02 2025 GMT Subject: CN=1D3489403C3F4676207744E22BF7B27BFF142F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:da:ba:d4:f1:6a:a9:7c:6d:f3:db:aa:0c: 9e:78:a9:80:da:fe:c9:0f:84:05:3a:e8:f0:02:b0: 9d:8a:07:a3:3a:10:8a:4b:08:52:a0:fb:1f:17:68: d3:30:71:92:a8:2e:c2:22:df:9e:d0:e3:74:10:2e: 51:06:75:a2:60:67:d2:4a:e2:c6:ca:44:96:c0:36: d1:24:33:2d:66:4c:21:5d:17:62:db:22:7d:85:17: 55:99:59:89:f3:4c:99:36:c0:08:5f:f6:dd:8e:33: e7:1b:b0:d7:5a:4e:46:6a:36:55:9f:87:74:84:97: 3a:57:d3:34:d7:74:e1:0a:d6:b8:64:73:52:5c:ca: 94:97:94:36:0c:d4:51:7b:85:76:45:56:ed:37:15: d6:8c:e6:70:d6:1b:3a:e8:c3:93:17:6b:14:ad:42: 47:c2:47:ab:ad:3a:22:a8:03:cf:a8:4d:50:82:48: 08:af:86:ff:cc:ba:db:5f:8a:97:7b:d5:0d:3c:e8: 31:6c:0b:98:35:05:13:ab:93:99:be:70:dd:bc:70: 04:47:16:12:f9:8a:d2:3a:0d:90:45:37:89:d0:32: b7:16:08:a6:ec:d2:3d:7b:c4:16:76:7a:94:6b:a9: e2:71:26:09:8a:90:45:47:64:89:2e:c2:74:a6:1d: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:89:40:3C:3F:46:76:20:77:44:E2:2B:F7:B2:7B:FF:14:2F:06 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ae:a0:6c:c2:45:fb:af:48:0c:24:9a:5f:bb:bd:86:1e:db: 2a:20:17:b8:95:34:da:d5:ee:51:b5:35:c3:45:35:74:7d:7b: bf:96:8f:12:70:95:43:10:de:2d:be:b7:77:40:59:de:56:9a: 56:3a:5b:8c:11:6f:ec:52:c9:d9:84:9e:8d:46:f7:74:a1:9b: 07:f8:04:65:f4:c2:d4:ed:f3:84:98:3f:34:c0:35:1a:bb:c4: 2d:e3:bb:02:04:1a:85:cc:66:78:1c:67:a1:e4:11:61:07:6f: 74:63:fb:11:0c:b0:3e:c0:a8:9d:96:2f:be:e3:b0:d3:b1:2f: 07:9d:e2:ce:49:d0:f0:79:fe:d3:15:27:fe:22:f7:35:14:59: ab:ef:b9:df:fb:a7:52:fe:76:dd:d2:29:d0:24:dd:5a:44:0d: 76:5b:c3:60:65:a9:97:52:28:2d:6e:4f:2b:93:9c:45:98:8e: c1:8f:a1:0a:40:a8:f6:81:88:5d:cc:3a:b4:35:2d:5a:1a:61: 31:78:26:64:d6:91:e2:9b:02:0a:9d:1e:16:35:ff:13:9c:f1: 85:e5:17:74:4e:36:e9:97:17:31:0f:13:99:82:87:ee:c2:04: 36:1d:61:c3:ce:38:8f:2d:c9:62:bb:46:f1:0f:ed:f8:dc:a2: a6:5e:ed:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYb4sJKW+kRneGvR3ww41z/1c7YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTA2MDUxMzM1MDJaFw0yNTA2MDkwMDUyMDJaMDMxMTAvBgNV BAMTKDFEMzQ4OTQwM0MzRjQ2NzYyMDc3NDRFMjJCRjdCMjdCRkYxNDJGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxddq61PFqqXxt89uqDJ54qYDa /skPhAU66PACsJ2KB6M6EIpLCFKg+x8XaNMwcZKoLsIi357Q43QQLlEGdaJgZ9JK 4sbKRJbANtEkMy1mTCFdF2LbIn2FF1WZWYnzTJk2wAhf9t2OM+cbsNdaTkZqNlWf h3SElzpX0zTXdOEK1rhkc1JcypSXlDYM1FF7hXZFVu03FdaM5nDWGzrow5MXaxSt QkfCR6utOiKoA8+oTVCCSAivhv/Muttfipd71Q086DFsC5g1BROrk5m+cN28cARH FhL5itI6DZBFN4nQMrcWCKbs0j17xBZ2epRrqeJxJgmKkEVHZIkuwnSmHQkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTSJQDw/RnYgd0TiK/eye/8ULwYwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSuoGzCRfuvSAwkml+7vYYe2yogF7iVNNrV 7lG1NcNFNXR9e7+WjxJwlUMQ3i2+t3dAWd5WmlY6W4wRb+xSydmEno1G93Shmwf4 BGX0wtTt84SYPzTANRq7xC3juwIEGoXMZngcZ6HkEWEHb3Rj+xEMsD7AqJ2WL77j sNOxLwed4s5J0PB5/tMVJ/4i9zUUWavvud/7p1L+dt3SKdAk3VpEDXZbw2BlqZdS KC1uTyuTnEWYjsGPoQpAqPaBiF3MOrQ1LVoaYTF4JmTWkeKbAgqdHhY1/xOc8YXl F3RONumXFzEPE5mCh+7CBDYdYcPOOI8tyWK7RvEP7fjcoqZe7d0= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:07 2025 by rpki-client