$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: spnQtny7+rGvxDLJu5eNtAxjP473uuTxPqC7GfoIbMg= Subject key identifier: 14:95:7C:41:8B:5A:D3:94:98:B8:51:AD:27:21:B2:38:92:FB:26:B8 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 196BFE058DF749D5932FF4EF0A5B70A447BA61BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 034A Signing time: Fri 05 Sep 2025 11:52:27 +0000 Manifest this update: Fri 05 Sep 2025 11:47:27 +0000 Manifest next update: Mon 08 Sep 2025 20:42:27 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 4: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: VJDjaU8TkBBEoxZbxAsSd+0hDYwMVfiuM9C6ssrfuNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:fe:05:8d:f7:49:d5:93:2f:f4:ef:0a:5b:70:a4:47:ba:61:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Sep 5 11:47:27 2025 GMT Not After : Sep 8 20:42:27 2025 GMT Subject: CN=14957C418B5AD39498B851AD2721B23892FB26B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:85:c9:02:ff:0e:c4:15:d4:da:1e:85:ea: bd:d6:19:d9:8c:41:2c:2d:c7:59:86:31:4e:67:50: fb:22:b2:6d:cf:96:23:b6:46:27:01:bf:b1:44:f3: bd:93:ef:25:7c:b3:10:43:69:36:4a:5d:3c:0c:c2: 9e:0f:8e:5f:32:c7:0f:6f:3d:e7:d9:1a:f9:16:cf: 2e:6b:b2:3b:ca:9d:a9:1a:0e:11:62:80:fa:79:06: d7:1a:44:14:c5:4a:83:db:1c:16:74:46:15:9c:21: b8:8f:22:17:be:59:13:06:6b:37:e7:31:28:46:65: cc:aa:c6:e0:c4:84:e2:11:9d:d6:52:0b:ca:8c:d5: bc:c9:1b:bb:32:f0:c2:d4:d7:4c:79:2c:a7:6f:f6: 61:f7:ec:b4:74:da:a5:c1:54:ee:17:8c:08:90:13: 18:38:b9:ac:4c:56:1e:d1:93:9f:5e:ad:f6:80:07: 25:23:ef:97:87:39:1c:16:5a:9a:70:71:24:1e:49: 14:d5:74:7b:fc:56:da:d8:32:6d:33:4b:bf:e3:98: 4e:47:6e:49:2a:08:3e:37:75:28:e9:b1:96:8d:62: e4:be:79:9d:f7:64:f3:93:0b:51:45:e6:e3:6d:85: 48:7e:c5:6f:2b:dc:76:b3:91:0e:92:2f:5c:4f:ea: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:7C:41:8B:5A:D3:94:98:B8:51:AD:27:21:B2:38:92:FB:26:B8 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f6:3e:35:4a:a9:db:72:b4:7c:16:6c:c2:3e:f6:01:ca:21:8d: e0:ef:2b:fa:15:31:26:6a:4b:43:c4:8d:4b:ec:03:7d:ec:c4: 42:78:61:8f:75:fb:fd:6b:7f:bf:68:18:0a:9d:35:40:0e:5c: c9:43:d6:db:6a:db:a1:1f:7a:68:e6:9b:45:18:fd:6f:1d:06: 4a:fa:e6:af:56:0d:19:93:1e:ad:67:95:1a:5c:32:b2:6c:ed: 0e:a7:26:d9:bd:91:e1:b5:e0:46:5f:66:af:0e:31:e2:5c:12: 6a:65:8d:90:5b:23:93:40:4f:ce:81:e6:5e:01:63:ed:6d:cb: f9:0a:51:d0:5e:a3:fd:05:bd:bf:b4:c1:d7:15:c8:28:64:4c: 0d:e2:3e:a5:56:b9:06:0a:f7:5e:d0:5f:91:05:47:c5:e6:1e: 66:39:60:23:52:5b:32:21:09:0a:9b:de:b0:b2:df:47:d2:24: 00:11:2f:7b:fb:cb:d4:57:46:03:6b:c7:9c:99:9f:08:31:02: cf:2a:f8:ac:49:42:55:6f:46:33:7a:dd:39:d4:fa:5d:c1:a2: 3b:0b:f0:d1:1a:b0:08:b0:75:53:23:e5:4d:2c:2d:12:45:ae: 70:e7:11:99:50:27:6e:ed:60:9d:bf:ed:84:55:06:33:09:e2: 52:11:55:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWv+BY33SdWTL/TvCltwpEe6YbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA5MDUxMTQ3MjdaFw0yNTA5MDgyMDQyMjdaMDMxMTAvBgNV BAMTKDE0OTU3QzQxOEI1QUQzOTQ5OEI4NTFBRDI3MjFCMjM4OTJGQjI2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q4XJAv8OxBXU2h6F6r3WGdmM QSwtx1mGMU5nUPsism3PliO2RicBv7FE872T7yV8sxBDaTZKXTwMwp4Pjl8yxw9v PefZGvkWzy5rsjvKnakaDhFigPp5BtcaRBTFSoPbHBZ0RhWcIbiPIhe+WRMGazfn MShGZcyqxuDEhOIRndZSC8qM1bzJG7sy8MLU10x5LKdv9mH37LR02qXBVO4XjAiQ Exg4uaxMVh7Rk59erfaAByUj75eHORwWWppwcSQeSRTVdHv8VtrYMm0zS7/jmE5H bkkqCD43dSjpsZaNYuS+eZ33ZPOTC1FF5uNthUh+xW8r3HazkQ6SL1xP6guFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJV8QYta05SYuFGtJyGyOJL7JrgwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPY+NUqp23K0fBZswj72AcohjeDvK/oVMSZq S0PEjUvsA33sxEJ4YY91+/1rf79oGAqdNUAOXMlD1ttq26Efemjmm0UY/W8dBkr6 5q9WDRmTHq1nlRpcMrJs7Q6nJtm9keG14EZfZq8OMeJcEmpljZBbI5NAT86B5l4B Y+1ty/kKUdBeo/0Fvb+0wdcVyChkTA3iPqVWuQYK917QX5EFR8XmHmY5YCNSWzIh CQqb3rCy30fSJAARL3v7y9RXRgNrx5yZnwgxAs8q+KxJQlVvRjN63TnU+l3BojsL 8NEasAiwdVMj5U0sLRJFrnDnEZlQJ27tYJ2/7YRVBjMJ4lIRVVI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:14 2025 by rpki-client