$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: zBTp6KfrJrSFpYWU0wYhdrufRYb55K0ntfgeQBLWAd0= Subject key identifier: EE:B2:D9:63:24:1C:81:68:E7:C1:C9:3D:87:4D:85:EE:51:9F:E1:70 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 1457B3FCC5534E22865BA7143B0A8CDF17960165 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: A2 Signing time: Sat 19 Jul 2025 17:22:10 +0000 Manifest this update: Sat 19 Jul 2025 17:17:10 +0000 Manifest next update: Tue 22 Jul 2025 18:33:10 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U=) 3: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: gia6+ZAujTYTMGRvqwy9JG+jztIXPN60/JNcA85dylY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:57:b3:fc:c5:53:4e:22:86:5b:a7:14:3b:0a:8c:df:17:96:01:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Jul 19 17:17:10 2025 GMT Not After : Jul 22 18:33:10 2025 GMT Subject: CN=EEB2D963241C8168E7C1C93D874D85EE519FE170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:f7:38:ef:13:5d:e5:3f:71:49:89:fa:fa: 28:57:bb:b3:ff:54:7a:1c:e3:b0:22:55:30:2c:03: 2a:6f:06:0d:8a:da:9d:60:a1:e2:58:72:ae:a4:c5: 72:2c:e2:55:6c:36:be:81:1a:3a:9c:a9:74:2e:51: bb:a9:51:fc:71:ed:ee:a9:83:84:77:2d:7c:cf:5e: 2c:41:db:0d:14:62:19:c3:a8:22:06:ef:83:c2:5e: 44:c9:84:c2:ff:55:06:40:81:5f:ca:15:a9:97:dc: 5c:fc:1a:cf:a1:e3:8e:67:2b:0d:0f:1d:b3:86:2b: 03:61:9e:9b:80:aa:e7:95:89:96:bf:ac:4d:d7:e9: 7f:c6:14:c7:10:25:73:91:a8:17:24:c8:8d:36:57: 88:63:c7:70:cf:36:9c:26:23:e1:17:6b:3a:c4:c1: 03:ce:eb:c2:38:8b:f7:26:af:a4:a0:ce:62:28:8e: 1f:40:0f:09:97:cf:36:a7:9c:64:99:95:d8:af:89: 5a:b8:55:58:c2:4b:df:a8:af:87:51:0a:c4:76:38: 51:0d:55:9e:2b:ad:83:1f:f1:f9:34:78:ea:ae:0b: 27:93:da:ae:9f:e3:27:e1:d2:ef:93:ca:94:35:7e: 31:1f:97:7e:93:55:bf:7a:91:1b:06:6d:a6:e2:c3: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:D9:63:24:1C:81:68:E7:C1:C9:3D:87:4D:85:EE:51:9F:E1:70 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:1e:ad:7e:4d:17:04:44:92:f5:2d:86:78:f0:af:8c:e4: 2f:8b:b1:c2:25:d1:77:22:47:05:8a:f6:25:5b:f5:89:a1:e7: aa:c0:c3:3e:54:8c:44:11:ca:a3:5a:6f:b5:c8:b8:77:fa:5a: d7:4c:41:10:be:e8:b6:96:eb:bd:cc:b3:40:20:76:a2:53:84: b7:c6:5f:f7:15:e0:ac:13:09:02:fb:5a:ca:bf:e1:cd:91:c4: 6d:85:eb:cd:31:9e:20:91:8c:a8:b1:90:19:6e:c7:6c:04:1e: 32:ce:0e:a1:4b:8d:ec:f5:d7:cd:d8:c2:22:d8:37:b0:52:79: a8:83:16:8d:b2:25:6c:ea:c9:52:d8:bd:73:7c:a5:d3:47:1b: 24:2b:c4:b1:e3:f4:64:2a:ba:82:9d:0e:96:d4:50:91:66:d9: b8:2b:b4:b7:f9:db:70:5f:a9:e2:3a:e4:2b:18:75:db:29:b9: 41:85:3a:5e:26:45:c1:17:fa:b8:a2:5c:1e:c9:5e:21:35:0b: 59:5d:ff:9a:53:13:62:d3:ae:8f:21:bb:a7:fa:6c:01:83:56: ec:50:1c:5e:42:b7:73:a5:e2:1e:9e:50:0a:10:2c:88:05:58: ae:b4:84:97:8a:67:93:02:f3:ee:77:13:f3:bc:27:a1:aa:69: eb:bd:dd:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFez/MVTTiKGW6cUOwqM3xeWAWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA3MTkxNzE3MTBaFw0yNTA3MjIxODMzMTBaMDMxMTAvBgNV BAMTKEVFQjJEOTYzMjQxQzgxNjhFN0MxQzkzRDg3NEQ4NUVFNTE5RkUxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkfc47xNd5T9xSYn6+ihXu7P/ VHoc47AiVTAsAypvBg2K2p1goeJYcq6kxXIs4lVsNr6BGjqcqXQuUbupUfxx7e6p g4R3LXzPXixB2w0UYhnDqCIG74PCXkTJhML/VQZAgV/KFamX3Fz8Gs+h445nKw0P HbOGKwNhnpuAqueViZa/rE3X6X/GFMcQJXORqBckyI02V4hjx3DPNpwmI+EXazrE wQPO68I4i/cmr6SgzmIojh9ADwmXzzannGSZldiviVq4VVjCS9+or4dRCsR2OFEN VZ4rrYMf8fk0eOquCyeT2q6f4yfh0u+TypQ1fjEfl36TVb96kRsGbabiw1aLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rLZYyQcgWjnwck9h02F7lGf4XAwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/pHq1+TRcERJL1LYZ48K+M5C+LscIl0Xci RwWK9iVb9Ymh56rAwz5UjEQRyqNab7XIuHf6WtdMQRC+6LaW673Ms0AgdqJThLfG X/cV4KwTCQL7Wsq/4c2RxG2F680xniCRjKixkBlux2wEHjLODqFLjez1183YwiLY N7BSeaiDFo2yJWzqyVLYvXN8pdNHGyQrxLHj9GQquoKdDpbUUJFm2bgrtLf523Bf qeI65CsYddspuUGFOl4mRcEX+riiXB7JXiE1C1ld/5pTE2LTro8hu6f6bAGDVuxQ HF5Ct3Ol4h6eUAoQLIgFWK60hJeKZ5MC8+53E/O8J6Gqaeu93fI= -----END CERTIFICATE-----Generated at Mon Jul 21 10:38:25 2025 by rpki-client