$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: AxN35Ae8Y3SPS4GMG+JxdM28G55rCUw+tPzIr1NS0GM= Subject key identifier: 21:EE:1E:61:17:93:6C:12:B5:7A:12:94:6F:CE:DA:8A:F1:02:CB:65 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 27846CE200142FA6BD6EF774F582C78A9577D1F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 011A Signing time: Fri 05 Sep 2025 21:11:21 +0000 Manifest this update: Fri 05 Sep 2025 21:06:21 +0000 Manifest next update: Mon 08 Sep 2025 22:13:21 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: k9UbpcXn+vqmMUfWbfOfMo156t2AzVuTxFkk+c7SJTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:84:6c:e2:00:14:2f:a6:bd:6e:f7:74:f5:82:c7:8a:95:77:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Sep 5 21:06:21 2025 GMT Not After : Sep 8 22:13:21 2025 GMT Subject: CN=21EE1E6117936C12B57A12946FCEDA8AF102CB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:a4:50:bf:6f:bc:aa:d4:d4:47:61:d1:f0: 4e:45:8a:ff:22:df:56:93:a2:2e:0d:66:d0:0a:a7: e9:1b:51:6c:90:0f:2b:33:9b:9e:4d:7e:cf:63:59: 45:0e:3b:4a:81:c3:23:6d:2e:9d:6b:8a:26:c0:b8: ed:2d:c7:2a:d7:48:74:ff:11:0d:43:3b:c5:62:5f: 4e:e8:2b:45:c1:7d:3a:a6:98:20:2e:24:da:dd:83: b7:48:e2:55:ca:59:87:b0:27:7d:22:01:4d:12:ca: af:be:76:d8:cb:6d:1e:06:ae:c1:f8:12:1f:9c:6f: e9:79:37:74:80:1e:1d:4d:ba:67:cb:26:a0:e1:5e: 1d:6c:63:38:96:a9:09:e6:5c:11:3d:21:8f:58:63: c8:df:55:52:26:80:1c:6a:e2:29:87:e2:c9:72:43: f0:9c:0b:79:8f:ee:a1:27:be:af:e0:39:13:31:7a: b0:2c:7e:88:d2:a6:32:15:fa:47:ab:83:42:cd:d4: d0:c1:55:35:8d:ee:3d:40:39:37:86:a2:c1:ad:93: 29:f4:88:83:4b:66:d3:01:04:82:d0:da:c3:c6:29: 91:44:a6:6a:69:e1:b5:b0:5c:69:40:85:67:92:2b: a1:53:fc:4a:66:29:5e:5f:96:e2:e0:4f:9b:17:21: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:1E:61:17:93:6C:12:B5:7A:12:94:6F:CE:DA:8A:F1:02:CB:65 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:82:95:27:3f:24:31:ac:f6:3f:36:06:e9:dd:70:d0:81:5a: 83:f3:39:aa:0f:28:2b:f6:ba:79:76:41:ea:59:32:54:a1:eb: 03:ad:ba:1f:85:d1:66:b4:5b:15:75:4e:20:f3:f5:e3:2f:65: 30:04:69:85:ba:72:26:68:b8:64:aa:0f:f7:38:fa:9f:79:f5: 4d:2a:5b:b5:42:08:1c:5c:e5:54:e4:e7:c8:a8:c7:c3:78:90: 5c:54:17:8a:79:66:0a:f5:63:51:5e:11:01:77:42:1b:37:bf: b9:07:bf:77:bf:a2:ed:1c:75:ce:20:ac:7d:24:6c:03:66:37: 4f:a6:60:a4:06:e3:5d:1a:83:58:06:3c:f7:76:5e:95:5b:64: 1c:64:16:79:6a:99:ff:6e:d0:39:cd:90:ad:3e:9c:1b:f6:d1: 8f:6a:ec:ad:00:f9:cb:eb:e6:04:91:56:cb:7e:01:42:ba:73: cb:94:42:0e:0c:a1:68:5d:52:65:fd:62:5f:d9:e5:7c:d0:4c: 59:89:4e:cb:75:3c:e1:88:8f:c0:2b:34:ec:7d:5e:c9:17:56: 92:60:b8:03:90:e3:69:52:de:74:c3:b5:0f:f9:28:99:01:1d: 21:9f:b1:c7:06:7f:0e:30:ea:fc:e1:f0:1c:ee:a4:79:72:f3: ba:71:7e:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4Rs4gAUL6a9bvd09YLHipV30fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA5MDUyMTA2MjFaFw0yNTA5MDgyMjEzMjFaMDMxMTAvBgNV BAMTKDIxRUUxRTYxMTc5MzZDMTJCNTdBMTI5NDZGQ0VEQThBRjEwMkNCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYqRQv2+8qtTUR2HR8E5Fiv8i 31aToi4NZtAKp+kbUWyQDyszm55Nfs9jWUUOO0qBwyNtLp1riibAuO0txyrXSHT/ EQ1DO8ViX07oK0XBfTqmmCAuJNrdg7dI4lXKWYewJ30iAU0Syq++dtjLbR4GrsH4 Eh+cb+l5N3SAHh1NumfLJqDhXh1sYziWqQnmXBE9IY9YY8jfVVImgBxq4imH4sly Q/CcC3mP7qEnvq/gORMxerAsfojSpjIV+kerg0LN1NDBVTWN7j1AOTeGosGtkyn0 iINLZtMBBILQ2sPGKZFEpmpp4bWwXGlAhWeSK6FT/EpmKV5fluLgT5sXIT9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIe4eYReTbBK1ehKUb87aivECy2UwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiClSc/JDGs9j82BundcNCBWoPzOaoPKCv2 unl2QepZMlSh6wOtuh+F0Wa0WxV1TiDz9eMvZTAEaYW6ciZouGSqD/c4+p959U0q W7VCCBxc5VTk58iox8N4kFxUF4p5Zgr1Y1FeEQF3Qhs3v7kHv3e/ou0cdc4grH0k bANmN0+mYKQG410ag1gGPPd2XpVbZBxkFnlqmf9u0DnNkK0+nBv20Y9q7K0A+cvr 5gSRVst+AUK6c8uUQg4MoWhdUmX9Yl/Z5XzQTFmJTst1POGIj8ArNOx9XskXVpJg uAOQ42lS3nTDtQ/5KJkBHSGfsccGfw4w6vzh8BzupHly87pxfrw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:11 2025 by rpki-client