$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: k026p66uQlNiJILNuNcgbmNLZ99NTX5380HpOAWwGus= Subject key identifier: 0F:4B:01:4B:C5:2A:14:AD:45:13:68:9D:F6:F8:CD:27:F1:F1:41:BE Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 444DBBF1DC69450C72FE6F732BF35697206645E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 02:03:30 +0000 Manifest this update: Mon 02 Jun 2025 01:58:30 +0000 Manifest next update: Thu 05 Jun 2025 03:26:30 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: PG2lypYkeWDle43P1kmYXHX3mvnxNOAQyClEvnD2SP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4d:bb:f1:dc:69:45:0c:72:fe:6f:73:2b:f3:56:97:20:66:45:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Jun 2 01:58:30 2025 GMT Not After : Jun 5 03:26:30 2025 GMT Subject: CN=0F4B014BC52A14AD4513689DF6F8CD27F1F141BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:54:a0:93:ce:82:c8:f4:c8:82:f1:43:c4: 2f:d5:52:ed:d6:5a:04:16:af:62:e6:e3:ec:9c:25: d2:0a:e4:6b:5b:15:98:8b:f7:78:95:1f:ab:a8:60: 87:95:f5:3c:6d:30:fb:df:f9:13:6c:14:0e:e9:df: 1b:03:ad:ad:48:33:7c:63:b3:c7:fd:17:97:e2:dc: 0e:eb:89:b1:f6:51:81:0f:34:09:96:84:63:9c:bf: cb:03:28:b9:bc:59:70:ae:80:97:32:c1:e6:95:a6: a2:52:51:5f:88:6e:83:ac:7a:8e:4a:49:c2:e1:dc: 84:56:ab:79:4f:92:66:4a:24:10:49:9c:0f:d0:f6: b6:72:20:06:a1:5f:a6:cc:04:d0:bc:bb:c0:11:d2: b9:fe:2b:1e:16:65:39:5f:de:9d:1a:fc:c7:ac:a2: 2c:09:f5:14:a1:e4:a6:5e:00:02:5a:6b:f4:a0:91: 6f:d7:ee:c7:fe:a0:47:24:aa:2a:bb:df:3b:d7:83: fa:57:06:13:f1:35:5e:4b:8d:8c:68:de:f2:90:58: fa:db:51:ff:30:5d:d6:9c:50:9f:20:13:71:aa:90: ec:4c:46:1c:e3:40:c2:0d:e7:7c:23:bd:9a:e6:96: 21:7b:ae:be:1a:f4:73:05:20:0b:67:86:17:97:7b: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:01:4B:C5:2A:14:AD:45:13:68:9D:F6:F8:CD:27:F1:F1:41:BE X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1c:ec:f5:d0:17:7a:40:77:7d:a6:3a:82:4e:03:db:6e:a8: 6c:9d:7a:bd:37:8a:56:3c:5a:cb:37:8d:8a:49:43:d8:fa:7b: 2e:df:b9:be:18:b0:3c:4b:8e:93:e5:9d:d1:ce:8f:ea:f6:1e: b0:49:2b:4d:6d:2b:85:f0:ad:db:30:4f:f5:bf:ac:ba:bc:bc: 94:5d:4b:e3:11:04:56:c1:72:a9:cd:d9:67:34:93:07:7c:c6: fa:74:e8:c9:9b:02:ca:7b:68:a3:2f:85:87:48:bb:a8:b9:71: f4:63:5d:1c:3d:bc:e9:82:04:7f:4f:91:d3:d5:3f:fb:68:97: 76:00:f6:b2:d3:2c:f0:ea:ac:1c:13:d3:08:15:37:d1:f8:d4: 5c:09:db:c4:2c:2f:3d:17:57:7f:ba:a3:07:98:e8:49:6e:e9: 4f:33:e7:ee:07:12:fc:01:c4:f0:d1:86:a6:17:9c:d5:76:dd: bf:59:43:24:17:6e:e1:60:35:cc:eb:ad:46:be:93:57:09:77: 89:13:ac:88:10:ac:92:97:e5:32:11:21:8c:ca:59:ff:f7:bc: 74:4a:eb:e3:64:5f:13:0b:32:5e:91:b4:cf:12:b0:c5:36:43: 73:2b:41:cf:05:68:7b:47:5f:d8:69:e0:b5:0e:64:1b:dd:95: d8:d9:e0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURE278dxpRQxy/m9zK/NWlyBmReMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTA2MDIwMTU4MzBaFw0yNTA2MDUwMzI2MzBaMDMxMTAvBgNV BAMTKDBGNEIwMTRCQzUyQTE0QUQ0NTEzNjg5REY2RjhDRDI3RjFGMTQxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3lSgk86CyPTIgvFDxC/VUu3W WgQWr2Lm4+ycJdIK5GtbFZiL93iVH6uoYIeV9TxtMPvf+RNsFA7p3xsDra1IM3xj s8f9F5fi3A7ribH2UYEPNAmWhGOcv8sDKLm8WXCugJcyweaVpqJSUV+IboOseo5K ScLh3IRWq3lPkmZKJBBJnA/Q9rZyIAahX6bMBNC8u8AR0rn+Kx4WZTlf3p0a/Mes oiwJ9RSh5KZeAAJaa/SgkW/X7sf+oEckqiq73zvXg/pXBhPxNV5LjYxo3vKQWPrb Uf8wXdacUJ8gE3GqkOxMRhzjQMIN53wjvZrmliF7rr4a9HMFIAtnhheXe1mfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD0sBS8UqFK1FE2id9vjNJ/HxQb4wHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMc7PXQF3pAd32mOoJOA9tuqGyder03ilY8 Wss3jYpJQ9j6ey7fub4YsDxLjpPlndHOj+r2HrBJK01tK4XwrdswT/W/rLq8vJRd S+MRBFbBcqnN2Wc0kwd8xvp06MmbAsp7aKMvhYdIu6i5cfRjXRw9vOmCBH9PkdPV P/tol3YA9rLTLPDqrBwT0wgVN9H41FwJ28QsLz0XV3+6oweY6Elu6U8z5+4HEvwB xPDRhqYXnNV23b9ZQyQXbuFgNczrrUa+k1cJd4kTrIgQrJKX5TIRIYzKWf/3vHRK 6+NkXxMLMl6RtM8SsMU2Q3MrQc8FaHtHX9hp4LUOZBvdldjZ4Cc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:21 2025 by rpki-client