$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: fvkrl7ZFbpTFEYAFSEoC1u5eMMl7gIqd+goY7DV+3Vw= Subject key identifier: E4:78:0D:84:1E:64:46:7C:3B:15:94:03:F7:1C:99:EF:28:5B:F2:2E Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 1BABDCE1B27D76F1A548B80CA4076D5382CAA66F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 051B Signing time: Tue 28 Oct 2025 00:41:03 +0000 Manifest this update: Tue 28 Oct 2025 00:36:03 +0000 Manifest next update: Fri 31 Oct 2025 01:51:03 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: +SJFaZJWaXcwVDRioTMoL/DZvjzNiefrZp6qqfk8mnM=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 01:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ab:dc:e1:b2:7d:76:f1:a5:48:b8:0c:a4:07:6d:53:82:ca:a6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Oct 28 00:36:03 2025 GMT Not After : Oct 31 01:51:03 2025 GMT Subject: CN=E4780D841E64467C3B159403F71C99EF285BF22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:fd:76:82:9a:3d:e4:72:9a:96:ca:71:d5: 96:ff:3f:5b:ee:e4:b3:3e:d9:7a:7f:9f:bc:95:c6: 29:9a:b3:0f:bf:a1:19:6e:8e:ec:39:6b:fb:2b:6b: 30:c3:67:01:c5:62:b0:7a:0c:f3:45:6c:c6:f0:3b: 06:f8:a5:a2:ca:5e:dd:9e:5c:56:97:7c:58:5d:f7: d7:14:98:ba:4a:67:70:7d:8a:e3:f0:8f:5b:59:ba: be:a3:a3:7f:ef:10:f7:3b:ab:a3:41:6e:11:07:45: bf:c9:58:01:dd:6b:c2:73:a8:6e:f0:a4:2e:e8:96: 41:9c:d8:49:e0:00:17:57:7f:26:af:5d:9f:19:74: e5:c6:85:0e:9a:30:37:e2:04:69:b1:fc:dc:95:fe: 81:bf:15:28:36:4c:47:77:03:e3:26:3c:0b:c1:12: 4e:dd:27:d5:43:b6:9a:67:1c:e3:a1:59:dc:43:de: 93:6a:a1:6b:11:eb:75:e0:27:d6:56:06:64:e1:e1: 60:d1:79:d2:97:2b:52:d4:aa:fb:c3:aa:28:61:5e: 2c:a0:87:b9:ca:61:65:b9:84:7b:22:70:1b:3d:80: 72:f5:06:ac:4a:29:d4:23:5e:42:7f:de:7e:03:4f: 9e:aa:0e:44:1b:21:65:f0:5f:2d:99:c2:cc:6d:ae: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:78:0D:84:1E:64:46:7C:3B:15:94:03:F7:1C:99:EF:28:5B:F2:2E X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d4:fa:08:8c:69:21:dc:57:0d:9f:2b:b9:a8:b7:09:d3:2a: f7:a6:9f:93:aa:75:a3:91:33:b2:75:69:4e:a5:e1:c3:b7:52: 7e:4e:59:2b:49:5e:0b:40:d4:d7:72:ed:f7:45:67:d3:5b:f6: 9f:3a:ef:11:7f:69:d1:a6:59:e6:a7:35:3e:f3:ca:f5:28:37: c8:3d:ce:61:aa:1c:6c:34:94:70:dc:3d:48:fd:9f:04:1e:62: 68:04:85:dd:c6:54:c6:f9:c1:5f:35:ec:d4:4e:91:38:c8:4f: 8e:be:7f:28:cd:7c:09:8a:6b:b8:9a:3a:d8:1b:39:b4:76:e6: 70:cd:48:aa:09:a8:1b:a3:25:81:33:45:74:2a:b8:bc:df:28: 4d:16:f1:c6:6a:6d:43:0e:6d:be:7f:2d:9c:5d:b4:68:3d:64: fe:f9:7c:6c:ab:f9:6b:1a:6f:5b:b5:d2:69:09:e1:db:95:7c: d2:34:65:b5:21:35:18:35:50:93:92:38:06:ad:8d:e0:b6:79: d1:a1:c7:31:12:80:64:83:72:30:9c:f4:e2:a4:39:ff:06:68: 72:7e:ea:32:08:45:d8:05:88:7d:c4:6d:ae:12:ba:69:66:03: 85:07:58:d5:f6:c0:f0:ce:92:d7:f0:a6:74:c8:d9:3b:05:4d: 81:b6:96:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6vc4bJ9dvGlSLgMpAdtU4LKpm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTEwMjgwMDM2MDNaFw0yNTEwMzEwMTUxMDNaMDMxMTAvBgNV BAMTKEU0NzgwRDg0MUU2NDQ2N0MzQjE1OTQwM0Y3MUM5OUVGMjg1QkYyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09/12gpo95HKalspx1Zb/P1vu 5LM+2Xp/n7yVximasw+/oRlujuw5a/srazDDZwHFYrB6DPNFbMbwOwb4paLKXt2e XFaXfFhd99cUmLpKZ3B9iuPwj1tZur6jo3/vEPc7q6NBbhEHRb/JWAHda8JzqG7w pC7olkGc2EngABdXfyavXZ8ZdOXGhQ6aMDfiBGmx/NyV/oG/FSg2TEd3A+MmPAvB Ek7dJ9VDtppnHOOhWdxD3pNqoWsR63XgJ9ZWBmTh4WDRedKXK1LUqvvDqihhXiyg h7nKYWW5hHsicBs9gHL1BqxKKdQjXkJ/3n4DT56qDkQbIWXwXy2ZwsxtroXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5HgNhB5kRnw7FZQD9xyZ7yhb8i4wHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHU+giMaSHcVw2fK7motwnTKvemn5OqdaOR M7J1aU6l4cO3Un5OWStJXgtA1Ndy7fdFZ9Nb9p867xF/adGmWeanNT7zyvUoN8g9 zmGqHGw0lHDcPUj9nwQeYmgEhd3GVMb5wV817NROkTjIT46+fyjNfAmKa7iaOtgb ObR25nDNSKoJqBujJYEzRXQquLzfKE0W8cZqbUMObb5/LZxdtGg9ZP75fGyr+Wsa b1u10mkJ4duVfNI0ZbUhNRg1UJOSOAatjeC2edGhxzESgGSDcjCc9OKkOf8GaHJ+ 6jIIRdgFiH3Eba4SumlmA4UHWNX2wPDOktfwpnTI2TsFTYG2luY= -----END CERTIFICATE-----Generated at Tue Oct 28 08:28:30 2025 by rpki-client