$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: mNcSpK/Syj5NE5HIeu637xQ96Codr+szBW/fCov1Up4= Subject key identifier: B7:86:B2:61:6F:64:C5:69:FF:B5:F4:6E:1C:FF:B1:09:D4:D3:52:4D Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 6B7DA8409101ED8B13FEA9377EDCD8DB81DD21BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01CC Signing time: Wed 04 Jun 2025 03:30:01 +0000 Manifest this update: Wed 04 Jun 2025 03:25:01 +0000 Manifest next update: Sat 07 Jun 2025 11:03:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 4: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 5: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: XjOFOcIAPDsgZBOs+0s/t/6HY6uPNezf/MH/ZHX5/CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7d:a8:40:91:01:ed:8b:13:fe:a9:37:7e:dc:d8:db:81:dd:21:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Jun 4 03:25:01 2025 GMT Not After : Jun 7 11:03:01 2025 GMT Subject: CN=B786B2616F64C569FFB5F46E1CFFB109D4D3524D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:2b:1f:1a:c6:9b:81:5a:de:33:f8:4f:76: 48:e2:e4:6b:45:23:42:71:49:31:ab:77:3a:d5:94: 22:37:e7:06:73:be:47:b6:63:11:d6:3a:72:52:88: f3:1b:3d:76:02:d1:fc:25:c5:21:8d:bf:d2:07:6a: 2c:4e:1f:05:7f:7a:aa:14:d2:38:8f:95:ec:e4:ef: b7:f0:ed:3b:54:0f:0f:db:86:52:94:0a:21:71:34: fa:bb:4c:6f:1b:64:50:16:b0:d7:db:a6:41:23:69: 31:de:c7:7d:86:0c:fb:b7:a1:0c:9a:5f:2f:1a:2e: 05:cf:59:3c:9b:8b:5a:a0:ab:fd:9f:27:f3:d4:26: af:73:65:a9:b5:d2:fd:4b:07:d4:7e:05:6a:d5:e5: b6:66:c4:4f:05:88:1b:b7:cb:04:c4:f8:9e:bf:3f: 4f:5e:0f:56:2e:4d:d7:57:cd:9b:25:20:4e:2a:b4: af:9d:af:a0:c2:41:0f:a1:91:6f:2f:c6:e1:f6:1d: a8:6c:8e:97:cb:0b:83:98:ba:5d:9f:e6:dc:17:77: d8:f3:59:a2:d2:00:11:ee:46:5c:90:be:ae:5b:b5: 16:c9:42:08:e7:4a:1a:4a:38:d3:35:e0:41:76:af: 6f:65:2a:3d:94:19:71:c8:52:d7:7c:94:0f:d0:6e: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:B2:61:6F:64:C5:69:FF:B5:F4:6E:1C:FF:B1:09:D4:D3:52:4D X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:02:32:50:77:4e:c3:d6:ac:98:c9:20:bb:3e:0d:04:37:19: 97:5f:a4:2a:25:e3:95:d6:58:7f:01:e1:33:ff:ac:f0:8b:20: 65:05:7c:9e:2e:58:3f:ed:c2:89:b5:e3:64:d2:60:e3:05:97: 4e:a3:62:1b:2c:87:0a:6a:68:21:8a:fe:3a:43:74:2f:d3:1b: 24:0a:d3:4f:1f:d9:02:78:f0:f4:84:82:b2:71:d9:ee:5c:38: 94:ad:1a:83:67:8f:fd:3f:9b:d8:ba:0e:79:57:b5:9e:de:6b: 88:ef:89:5c:1b:1f:9d:55:fc:2a:05:eb:3c:98:80:83:47:e7: 7f:1e:91:2b:5b:76:0d:1e:2c:12:6a:f5:e4:b7:44:26:46:fa: 20:67:c2:db:72:05:cd:2b:38:ba:ac:a4:bc:09:94:26:6c:87: d8:f1:b2:29:9c:00:bf:60:78:75:c7:c6:f5:eb:0e:d6:df:69: 05:54:2a:1c:61:67:24:5d:db:b0:e3:7a:67:2a:a9:5b:b3:2f: cb:b1:3d:1b:b3:50:d5:7b:24:65:96:6c:ec:b6:a4:d6:86:b8: 2b:92:a2:ef:ed:8f:d2:3b:fa:84:f8:86:ce:0f:65:98:b7:9b: dc:20:b2:36:b3:f3:15:bc:0e:da:ef:8b:6c:8f:c2:62:d2:5e: f0:fe:e2:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa32oQJEB7YsT/qk3ftzY24HdIbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA2MDQwMzI1MDFaFw0yNTA2MDcxMTAzMDFaMDMxMTAvBgNV BAMTKEI3ODZCMjYxNkY2NEM1NjlGRkI1RjQ2RTFDRkZCMTA5RDREMzUyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQCsfGsabgVreM/hPdkji5GtF I0JxSTGrdzrVlCI35wZzvke2YxHWOnJSiPMbPXYC0fwlxSGNv9IHaixOHwV/eqoU 0jiPlezk77fw7TtUDw/bhlKUCiFxNPq7TG8bZFAWsNfbpkEjaTHex32GDPu3oQya Xy8aLgXPWTybi1qgq/2fJ/PUJq9zZam10v1LB9R+BWrV5bZmxE8FiBu3ywTE+J6/ P09eD1YuTddXzZslIE4qtK+dr6DCQQ+hkW8vxuH2HahsjpfLC4OYul2f5twXd9jz WaLSABHuRlyQvq5btRbJQgjnShpKONM14EF2r29lKj2UGXHIUtd8lA/Qbi0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4ayYW9kxWn/tfRuHP+xCdTTUk0wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUCMlB3TsPWrJjJILs+DQQ3GZdfpCol45XW WH8B4TP/rPCLIGUFfJ4uWD/twom142TSYOMFl06jYhsshwpqaCGK/jpDdC/TGyQK 008f2QJ48PSEgrJx2e5cOJStGoNnj/0/m9i6DnlXtZ7ea4jviVwbH51V/CoF6zyY gINH538ekStbdg0eLBJq9eS3RCZG+iBnwttyBc0rOLqspLwJlCZsh9jxsimcAL9g eHXHxvXrDtbfaQVUKhxhZyRd27DjemcqqVuzL8uxPRuzUNV7JGWWbOy2pNaGuCuS ou/tj9I7+oT4hs4PZZi3m9wgsjaz8xW8Dtrvi2yPwmLSXvD+4tw= -----END CERTIFICATE-----Generated at Thu Jun 5 19:40:45 2025 by rpki-client