$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: 46vjyEfynQG4WSmRWdjQP5CGP8yHPY7jEBXciVf1w/o= Subject key identifier: D2:F1:65:DF:54:54:8B:45:49:D4:37:76:C7:40:F5:18:81:46:F0:1E Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 65039F8EFC149260AEE15BE0F07887F30DA70387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 019D Signing time: Fri 06 Jun 2025 14:52:09 +0000 Manifest this update: Fri 06 Jun 2025 14:47:09 +0000 Manifest next update: Tue 10 Jun 2025 00:56:09 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: y/AWNi8hhiqmZbDyOqD/bjY4hVdsO9Vz7RpZWwb6Hp0=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:03:9f:8e:fc:14:92:60:ae:e1:5b:e0:f0:78:87:f3:0d:a7:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Jun 6 14:47:09 2025 GMT Not After : Jun 10 00:56:09 2025 GMT Subject: CN=D2F165DF54548B4549D43776C740F5188146F01E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:4a:27:2d:6f:9a:06:ff:52:de:8e:d4:76:0f: 62:44:fd:3c:d3:e2:37:5d:34:40:56:57:6f:00:6c: fb:14:c7:c1:d1:2b:0a:6e:aa:d8:e3:e4:93:69:5e: b1:95:35:96:82:e1:76:09:ec:61:5f:4b:c3:80:b0: bd:a2:b3:65:21:5a:e4:ab:57:1e:92:8f:0c:03:83: 58:24:d8:b4:04:3d:d7:2e:1d:63:69:d0:e8:dc:af: 45:c2:e0:54:68:1c:7d:c2:5f:10:54:df:4c:cf:9a: 69:5f:73:50:f2:64:83:65:83:92:9f:69:3b:0e:3a: 3a:1c:8a:37:c6:e3:db:c7:cb:aa:9c:70:f6:95:ea: 1d:d9:9b:07:a8:4b:1b:8c:35:5f:34:53:9b:43:dd: 9f:fd:72:e3:43:5a:30:ad:a0:61:3b:7e:b0:e9:ae: 81:32:18:32:7b:c8:eb:6c:55:f2:48:60:9b:4c:e2: e2:96:4b:f0:89:5a:a4:07:57:95:4f:f9:d2:16:15: 4f:32:a6:d0:9e:88:ea:af:1b:5a:59:59:4b:a4:42: ab:df:31:88:bf:c2:f9:14:70:a3:34:c6:6a:f0:00: 3a:da:63:c9:e4:c5:2b:e2:22:30:23:1a:0c:ed:4c: ce:ad:aa:3f:8c:95:7c:bf:f0:88:c8:30:6a:bf:6c: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:65:DF:54:54:8B:45:49:D4:37:76:C7:40:F5:18:81:46:F0:1E X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:55:fe:cf:76:b4:6d:0a:0e:1e:ba:1c:ef:77:62:e3:04:18: 23:06:8c:43:55:61:28:42:ba:99:f5:44:aa:19:a7:77:ac:0a: 16:74:67:d8:3e:d1:15:ba:e3:d2:df:38:88:38:e1:28:a8:67: 27:13:a5:ce:1b:47:e8:b5:2d:01:7a:76:df:f8:4b:84:0b:cd: 5e:d7:35:c5:6a:dd:55:1a:d6:ef:62:a4:0f:17:6f:06:47:39: 39:63:9a:e3:01:7a:5b:b2:22:cb:9c:60:8f:27:0c:23:7e:a8: e2:c7:3c:4e:19:16:32:a4:d8:aa:33:61:41:78:0f:68:60:06: 1b:b9:57:c5:6b:08:6b:a9:95:fe:e5:f0:d3:58:53:10:91:02: 32:91:7b:91:e1:d0:b0:b0:56:70:3d:1b:f9:62:f3:3d:98:cd: 34:1f:d5:12:48:90:c4:7f:2a:aa:bc:86:84:f2:22:ed:a7:0d: 31:0a:3c:07:0c:4e:19:93:8d:37:dc:8a:3c:62:fc:b8:a5:41: 33:18:ae:89:25:3d:3e:98:89:da:7c:34:d8:c8:a1:cb:e0:dd: 3e:c1:a5:83:26:f0:83:fb:0a:a2:20:db:3e:d9:e4:0c:eb:b9: b7:11:01:6e:3d:03:d6:0a:d5:b5:19:ba:97:e9:c9:24:55:75: c8:d2:45:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQOfjvwUkmCu4Vvg8HiH8w2nA4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA2MDYxNDQ3MDlaFw0yNTA2MTAwMDU2MDlaMDMxMTAvBgNV BAMTKEQyRjE2NURGNTQ1NDhCNDU0OUQ0Mzc3NkM3NDBGNTE4ODE0NkYwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8Sictb5oG/1LejtR2D2JE/TzT 4jddNEBWV28AbPsUx8HRKwpuqtjj5JNpXrGVNZaC4XYJ7GFfS8OAsL2is2UhWuSr Vx6SjwwDg1gk2LQEPdcuHWNp0Ojcr0XC4FRoHH3CXxBU30zPmmlfc1DyZINlg5Kf aTsOOjocijfG49vHy6qccPaV6h3ZmweoSxuMNV80U5tD3Z/9cuNDWjCtoGE7frDp roEyGDJ7yOtsVfJIYJtM4uKWS/CJWqQHV5VP+dIWFU8yptCeiOqvG1pZWUukQqvf MYi/wvkUcKM0xmrwADraY8nkxSviIjAjGgztTM6tqj+MlXy/8IjIMGq/bOuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vFl31RUi0VJ1Dd2x0D1GIFG8B4wHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5V/s92tG0KDh66HO93YuMEGCMGjENVYShC upn1RKoZp3esChZ0Z9g+0RW649LfOIg44SioZycTpc4bR+i1LQF6dt/4S4QLzV7X NcVq3VUa1u9ipA8XbwZHOTljmuMBeluyIsucYI8nDCN+qOLHPE4ZFjKk2KozYUF4 D2hgBhu5V8VrCGuplf7l8NNYUxCRAjKRe5Hh0LCwVnA9G/li8z2YzTQf1RJIkMR/ Kqq8hoTyIu2nDTEKPAcMThmTjTfcijxi/LilQTMYroklPT6Yidp8NNjIocvg3T7B pYMm8IP7CqIg2z7Z5AzrubcRAW49A9YK1bUZupfpySRVdcjSRRY= -----END CERTIFICATE-----Generated at Sun Jun 8 12:44:31 2025 by rpki-client