$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: wd2eyO9TVfxss1DGhIanBQ7Gnyx0DvlhBK1BfbYQyXQ= Subject key identifier: 49:59:B6:F1:1F:76:8E:4B:B6:50:4E:E9:6D:44:A0:DB:BE:44:55:1F Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 45A50459D73FFB45951CD3720CA2F63836874F11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01F6 Signing time: Sun 07 Sep 2025 09:40:01 +0000 Manifest this update: Sun 07 Sep 2025 09:35:01 +0000 Manifest next update: Wed 10 Sep 2025 17:00:01 +0000 Files and hashes: 1: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 2: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 3: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: euG0DfTmyyJTjk9ONxiZgBPTMRo73t/9zOIRSQMOMx4=) 4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a5:04:59:d7:3f:fb:45:95:1c:d3:72:0c:a2:f6:38:36:87:4f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Sep 7 09:35:01 2025 GMT Not After : Sep 10 17:00:01 2025 GMT Subject: CN=4959B6F11F768E4BB6504EE96D44A0DBBE44551F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ae:71:38:e1:f7:65:e6:5a:72:25:03:2d:df: 26:26:a2:70:7a:c5:66:c5:aa:82:7f:9f:7f:53:cc: 57:02:c3:4f:35:c6:f5:f0:78:51:9e:11:76:29:a4: 7d:c7:47:6e:03:d2:94:61:49:40:1c:0c:d7:fa:bf: ad:9d:e9:cb:97:a1:1e:46:88:e0:73:06:9a:ad:95: bc:38:1a:eb:ac:71:7a:0f:41:33:44:c7:ee:21:0d: 75:a8:17:26:5f:51:05:f4:2c:6a:ee:66:ef:ba:39: 47:86:14:76:f7:90:5d:63:14:04:c8:3f:e9:e0:0d: ed:9b:6a:17:a5:af:96:25:b9:26:c5:47:1b:50:75: b9:5b:00:19:1b:7e:ee:3a:15:da:da:1d:d3:47:c9: ee:c4:eb:79:1d:3e:5f:e8:38:f8:85:58:46:75:06: 2c:f9:09:38:4e:40:72:6f:9b:f1:d0:c3:c6:b5:6d: 64:7d:18:16:77:cc:c3:65:02:3c:4f:0b:6f:50:ff: 9d:d4:01:59:ea:e9:3a:e5:ed:33:98:8b:27:76:96: 0b:3c:56:c6:88:5c:74:33:e7:37:71:a2:01:46:af: 89:69:ed:af:12:02:10:ae:da:0a:b5:e5:e7:fd:6f: 34:d4:3d:81:e5:0d:4b:84:56:09:85:96:42:22:c3: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:59:B6:F1:1F:76:8E:4B:B6:50:4E:E9:6D:44:A0:DB:BE:44:55:1F X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2a:e0:cc:84:87:45:a7:1c:4b:63:da:1e:67:25:5c:f4:bf: 01:b8:3f:67:89:fa:93:14:0e:95:db:0a:8a:76:0b:8f:4b:17: 74:08:3c:de:28:2b:5a:a7:40:0a:e2:63:13:4b:8a:d5:73:96: b4:df:22:ca:b9:0b:28:e3:f4:7a:9e:67:69:00:3f:90:dd:81: a0:60:93:cd:d2:ca:68:41:03:ab:92:8c:f3:df:9a:67:e2:bf: 49:ea:46:e2:12:a6:4a:89:ac:01:f6:25:72:a6:71:f4:06:d0: f9:82:7e:e8:8e:12:f9:f2:ce:12:0a:41:ab:a5:6d:48:10:07: 09:8c:35:ae:8e:07:e1:80:a4:92:06:93:a6:cf:1d:20:f9:40: d1:0a:ce:c8:00:ba:e2:95:f1:b5:e7:e6:f4:d1:b3:85:ee:89: f3:9a:64:04:d4:70:69:49:77:0f:af:10:67:cc:97:f3:1e:64: f3:15:31:0f:f6:22:16:23:db:eb:79:45:da:88:0a:a8:a5:2e: 3b:98:31:a5:e9:b0:93:f7:77:54:18:8d:c2:45:9b:4c:01:a8: b5:15:17:9b:d1:0b:c4:0d:7b:03:41:e7:2f:01:22:bc:fb:75: 37:b3:6c:e6:9d:2e:6a:ec:97:cb:1a:9e:77:b6:9d:e2:1a:f3: c7:93:c1:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaUEWdc/+0WVHNNyDKL2ODaHTxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA5MDcwOTM1MDFaFw0yNTA5MTAxNzAwMDFaMDMxMTAvBgNV BAMTKDQ5NTlCNkYxMUY3NjhFNEJCNjUwNEVFOTZENDRBMERCQkU0NDU1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3rnE44fdl5lpyJQMt3yYmonB6 xWbFqoJ/n39TzFcCw081xvXweFGeEXYppH3HR24D0pRhSUAcDNf6v62d6cuXoR5G iOBzBpqtlbw4GuuscXoPQTNEx+4hDXWoFyZfUQX0LGruZu+6OUeGFHb3kF1jFATI P+ngDe2bahelr5YluSbFRxtQdblbABkbfu46FdraHdNHye7E63kdPl/oOPiFWEZ1 Biz5CThOQHJvm/HQw8a1bWR9GBZ3zMNlAjxPC29Q/53UAVnq6Trl7TOYiyd2lgs8 VsaIXHQz5zdxogFGr4lp7a8SAhCu2gq15ef9bzTUPYHlDUuEVgmFlkIiwxO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVm28R92jku2UE7pbUSg275EVR8wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwq4MyEh0WnHEtj2h5nJVz0vwG4P2eJ+pMU DpXbCop2C49LF3QIPN4oK1qnQAriYxNLitVzlrTfIsq5Cyjj9HqeZ2kAP5DdgaBg k83SymhBA6uSjPPfmmfiv0nqRuISpkqJrAH2JXKmcfQG0PmCfuiOEvnyzhIKQaul bUgQBwmMNa6OB+GApJIGk6bPHSD5QNEKzsgAuuKV8bXn5vTRs4XuifOaZATUcGlJ dw+vEGfMl/MeZPMVMQ/2IhYj2+t5RdqICqilLjuYMaXpsJP3d1QYjcJFm0wBqLUV F5vRC8QNewNB5y8BIrz7dTezbOadLmrsl8sanne2neIa88eTwXc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:19 2025 by rpki-client