$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: Yr75Tv3rWLsXDdKg5ugQSlJ0K4giXLFUi4VKB+KUcS4= Subject key identifier: 87:34:43:D3:07:1E:5C:4C:6A:06:EA:47:61:A2:74:08:59:F7:ED:CD Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 41D2CB74909C902C9FB7CDEA222E49BF16676C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 02:51:02 +0000 Manifest this update: Fri 05 Sep 2025 02:46:02 +0000 Manifest next update: Mon 08 Sep 2025 03:38:02 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 9OcmyE9tDRaaE/lJe29PNVZ7ZIBbLigV6zQuJg3JQlk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:cb:74:90:9c:90:2c:9f:b7:cd:ea:22:2e:49:bf:16:67:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Sep 5 02:46:02 2025 GMT Not After : Sep 8 03:38:02 2025 GMT Subject: CN=873443D3071E5C4C6A06EA4761A2740859F7EDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:06:1f:8f:f7:50:13:60:8d:bb:19:3b:31: 5a:1a:cf:1f:e1:0e:10:01:09:68:57:96:55:a7:fe: 97:d1:85:5e:b7:4e:4d:09:46:52:a7:86:97:81:6b: 50:c6:d7:7c:9a:b5:ba:d8:73:52:42:4a:1b:6f:f9: fd:2c:69:a3:61:f4:ca:4b:f9:08:f4:4b:cf:2f:f4: 89:46:7e:91:c4:93:ce:df:bf:ab:4d:a1:6a:15:57: 59:0c:24:3e:97:f0:28:a5:02:96:13:bc:30:0c:ca: 27:6b:d6:44:f0:fd:8a:c9:af:ae:c6:88:74:df:32: 51:83:e2:65:30:57:11:95:45:eb:5c:d6:55:3d:a2: e5:57:f3:5b:d8:b5:cf:a1:04:4c:d2:2d:09:8a:4c: b7:d8:73:9f:1a:92:cd:8e:13:12:54:5d:40:ba:9c: 23:9e:4f:f8:30:62:26:01:3e:16:a2:d8:bb:da:88: 1c:85:38:72:e3:dc:4c:28:a9:dc:5b:73:ae:3c:31: a1:2e:80:06:57:20:80:e9:8c:16:70:b8:88:2a:1a: 34:be:fa:f9:2e:03:11:40:78:e4:08:ba:5e:8e:55: 18:81:7a:92:9a:85:96:2f:20:b6:3d:90:ce:53:51: 5d:46:a7:5d:1c:83:58:32:5c:d5:74:38:e4:1f:78: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:34:43:D3:07:1E:5C:4C:6A:06:EA:47:61:A2:74:08:59:F7:ED:CD X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:be:99:bd:bc:b5:cd:fc:19:2f:59:e9:68:ce:b7:1d:58:70: 8a:8e:89:68:db:2d:97:13:b2:82:d1:3d:6c:a4:c3:72:5e:b5: ea:0e:fc:fe:b4:dd:5c:62:d9:a8:0f:ac:fc:22:03:7e:aa:7d: 1c:dd:1c:f1:1b:aa:f7:a1:13:01:e6:27:50:10:c7:6f:1b:47: 06:e1:f4:6b:91:c0:9d:8c:6a:ab:17:50:88:02:86:83:de:8f: 35:ad:83:94:ab:18:ad:01:1e:7a:52:d3:40:ae:3f:c7:60:86: ff:db:86:c3:f4:2c:28:33:f9:a9:79:db:6d:da:85:aa:9d:eb: fb:c5:f3:8f:22:e4:5a:c0:af:22:11:70:8f:20:63:e5:80:4b: e1:59:1f:ef:b0:23:78:64:6b:d1:4c:09:fc:fc:0b:19:5c:e9: 5d:8d:53:cb:b1:20:c3:b1:b4:99:fb:ac:b2:a7:d1:2b:b5:da: b8:25:fd:96:4c:ed:71:e6:aa:47:8c:11:77:79:4f:04:0e:db: 4a:a0:01:47:78:02:b0:fa:14:85:de:a4:06:ec:54:7a:5a:43: b4:ca:61:b2:3f:e1:42:70:bf:7e:fc:8e:86:07:a9:25:8a:6c: 6d:01:ba:c8:9a:84:95:c1:10:74:88:76:bd:6d:e5:c8:b2:7a: bc:84:9b:48 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQdLLdJCckCyft83qIi5JvxZnbDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQzQzMDVBQTBCNjg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4 RTE2RURCMB4XDTI1MDkwNTAyNDYwMloXDTI1MDkwODAzMzgwMlowMzExMC8GA1UE AxMoODczNDQzRDMwNzFFNUM0QzZBMDZFQTQ3NjFBMjc0MDg1OUY3RURDRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjbBh+P91ATYI27GTsxWhrPH+EO EAEJaFeWVaf+l9GFXrdOTQlGUqeGl4FrUMbXfJq1uthzUkJKG2/5/Sxpo2H0ykv5 CPRLzy/0iUZ+kcSTzt+/q02hahVXWQwkPpfwKKUClhO8MAzKJ2vWRPD9ismvrsaI dN8yUYPiZTBXEZVF61zWVT2i5VfzW9i1z6EETNItCYpMt9hznxqSzY4TElRdQLqc I55P+DBiJgE+FqLYu9qIHIU4cuPcTCip3FtzrjwxoS6ABlcggOmMFnC4iCoaNL76 +S4DEUB45Ai6Xo5VGIF6kpqFli8gtj2QzlNRXUanXRyDWDJc1XQ45B94bZcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSHNEPTBx5cTGoG6kdhonQIWfftzTAfBgNVHSME GDAWgBTMQwWqC2hI39B2bP57QtK0SOFu2zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRl NDVjOWViLTNiYjYtNDIwMy04Yzg2LWYwOGI2NGRhM2VhOS8wL0NDNDMwNUFBMEI2 ODQ4REZEMDc2NkNGRTdCNDJEMkI0NDhFMTZFREIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DQzQzMDVBQTBCNjg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2 RURCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80ZTQ1YzllYi0zYmI2LTQyMDMtOGM4 Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBCNjg0OERGRDA3NjZDRkU3QjQyRDJC NDQ4RTE2RURCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAYL6Zvby1zfwZL1npaM63HVhwio6JaNstlxOy gtE9bKTDcl616g78/rTdXGLZqA+s/CIDfqp9HN0c8Ruq96ETAeYnUBDHbxtHBuH0 a5HAnYxqqxdQiAKGg96PNa2DlKsYrQEeelLTQK4/x2CG/9uGw/QsKDP5qXnbbdqF qp3r+8XzjyLkWsCvIhFwjyBj5YBL4Vkf77AjeGRr0UwJ/PwLGVzpXY1Ty7Egw7G0 mfussqfRK7XauCX9lkztceaqR4wRd3lPBA7bSqABR3gCsPoUhd6kBuxUelpDtMph sj/hQnC/fvyOhgepJYpsbQG6yJqElcEQdIh2vW3lyLJ6vISbSA== -----END CERTIFICATE-----Generated at Fri Sep 5 12:03:12 2025 by rpki-client