$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: l5j5EaLKSqiY0wuLKfyD72wR8zsY6KiBLxmreFKKWT8= Subject key identifier: DD:D0:EB:9B:9A:44:BD:EE:8B:C0:7E:09:13:CD:78:D5:9A:9D:86:94 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 131D7FE2F87ADC78EED58BF358A5DF0C1357CE5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: F0 Signing time: Sun 01 Jun 2025 20:01:18 +0000 Manifest this update: Sun 01 Jun 2025 19:56:18 +0000 Manifest next update: Thu 05 Jun 2025 07:59:18 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: Vz4llejm/FqNHXpV+7nIyjTVS6NsZqRwZNAbXMT4ryQ=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1d:7f:e2:f8:7a:dc:78:ee:d5:8b:f3:58:a5:df:0c:13:57:ce:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Jun 1 19:56:18 2025 GMT Not After : Jun 5 07:59:18 2025 GMT Subject: CN=DDD0EB9B9A44BDEE8BC07E0913CD78D59A9D8694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:59:24:b1:0c:37:08:2f:97:f6:fa:d8:51: 53:b1:b7:68:bd:5f:80:b1:2a:34:08:e7:48:39:8d: 15:78:0a:ee:03:34:55:ff:82:ce:ee:1e:57:28:5b: ea:9e:1a:ae:4a:dd:2e:37:2b:26:43:70:fd:34:ab: db:d0:60:57:8a:6f:00:5f:9a:cb:9e:6c:77:03:d7: 84:3c:d7:99:cc:01:0f:67:55:e3:44:e8:cb:2d:53: 1f:25:19:53:74:05:15:24:20:12:31:58:28:cc:5e: 57:a6:ac:51:10:85:2e:6c:4a:5f:b5:62:1b:43:1c: a5:a7:8c:32:13:b7:68:7c:20:81:a1:73:ed:e9:a6: 91:fa:40:a4:9b:37:4a:75:23:38:cb:41:02:b2:21: ff:f1:50:23:3e:ad:1a:45:ed:d1:20:03:1c:02:e8: 85:33:8a:cb:2d:bc:bf:e1:73:96:d9:bd:47:cc:f3: be:da:d6:55:d8:a1:a3:d7:21:92:2b:36:4d:0c:68: a7:ca:1e:67:64:3e:84:aa:8d:e5:12:52:4e:9c:91: 05:0d:65:45:05:67:0b:98:fe:7f:6e:5b:de:80:f1: ce:28:57:96:bf:f1:c6:00:41:56:e4:f7:71:34:cf: bb:8c:0e:80:13:b1:a9:0d:af:0f:29:67:9a:62:40: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:EB:9B:9A:44:BD:EE:8B:C0:7E:09:13:CD:78:D5:9A:9D:86:94 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:74:7a:1c:f4:e2:f6:72:b2:57:4b:d3:ab:54:bb:9f:0e:e5: a1:57:25:f3:37:4a:e9:83:b7:75:8f:8d:08:d8:0d:8d:bd:d8: 65:65:8e:5f:fe:1e:8d:94:60:2e:6f:56:5b:bf:03:fd:26:e8: b1:fb:42:d0:72:b7:bc:c1:03:27:49:f5:00:04:32:22:b2:92: bc:1f:a1:9f:dd:a2:2d:39:60:39:49:1d:d2:1c:2b:59:1e:04: ac:8b:6d:95:21:f0:73:6d:54:42:00:56:6d:6e:37:a5:ce:22: ae:14:d2:66:05:ce:94:bc:7a:7b:ac:fc:fe:ea:4c:72:84:7f: 6f:6d:54:d1:ff:32:97:c0:90:9a:31:cb:17:10:1e:12:10:80: cf:86:48:bb:42:ca:aa:74:41:77:c5:78:aa:b4:31:2a:5b:df: 68:b0:4b:18:25:c6:e9:55:cf:14:b8:83:ab:4e:ae:4b:e9:e6: 13:6a:24:ab:be:42:5d:9e:af:2f:a3:54:31:42:38:e4:e4:25: 49:97:2f:71:44:bb:51:6d:12:6e:cc:65:44:cd:ed:a8:9f:64: c1:61:8c:6e:24:07:30:81:ab:70:53:a2:40:d7:c1:fc:4c:55: 45:70:24:27:bf:ff:69:a7:8e:1e:8c:17:01:6a:87:48:44:f2: aa:d5:69:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEx1/4vh63Hju1YvzWKXfDBNXzl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA2MDExOTU2MThaFw0yNTA2MDUwNzU5MThaMDMxMTAvBgNV BAMTKERERDBFQjlCOUE0NEJERUU4QkMwN0UwOTEzQ0Q3OEQ1OUE5RDg2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcnlkksQw3CC+X9vrYUVOxt2i9 X4CxKjQI50g5jRV4Cu4DNFX/gs7uHlcoW+qeGq5K3S43KyZDcP00q9vQYFeKbwBf msuebHcD14Q815nMAQ9nVeNE6MstUx8lGVN0BRUkIBIxWCjMXlemrFEQhS5sSl+1 YhtDHKWnjDITt2h8IIGhc+3pppH6QKSbN0p1IzjLQQKyIf/xUCM+rRpF7dEgAxwC 6IUzisstvL/hc5bZvUfM877a1lXYoaPXIZIrNk0MaKfKHmdkPoSqjeUSUk6ckQUN ZUUFZwuY/n9uW96A8c4oV5a/8cYAQVbk93E0z7uMDoATsakNrw8pZ5piQH79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dDrm5pEve6LwH4JE8141ZqdhpQwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ0ehz04vZysldL06tUu58O5aFXJfM3SumD t3WPjQjYDY292GVljl/+Ho2UYC5vVlu/A/0m6LH7QtByt7zBAydJ9QAEMiKykrwf oZ/doi05YDlJHdIcK1keBKyLbZUh8HNtVEIAVm1uN6XOIq4U0mYFzpS8enus/P7q THKEf29tVNH/MpfAkJoxyxcQHhIQgM+GSLtCyqp0QXfFeKq0MSpb32iwSxglxulV zxS4g6tOrkvp5hNqJKu+Ql2ery+jVDFCOOTkJUmXL3FEu1FtEm7MZUTN7aifZMFh jG4kBzCBq3BTokDXwfxMVUVwJCe//2mnjh6MFwFqh0hE8qrVaYY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:34 2025 by rpki-client