$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: /M9t/EFhiwGFsE8NKHcWtEZa4QXplIVKZAtes5pMDlI= Subject key identifier: BD:A0:3E:26:86:3D:7D:8D:DC:9A:8F:F8:DE:21:AF:5C:D7:98:CC:A7 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 3D6FC2C738F83D86B4D18979D12087F1992444A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01C4 Signing time: Wed 03 Sep 2025 10:22:08 +0000 Manifest this update: Wed 03 Sep 2025 10:17:08 +0000 Manifest next update: Sat 06 Sep 2025 19:33:08 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: K/AHqGYdat7djsXxK70ZMTtRK9fJC24w7V6TCvge4T0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6f:c2:c7:38:f8:3d:86:b4:d1:89:79:d1:20:87:f1:99:24:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Sep 3 10:17:08 2025 GMT Not After : Sep 6 19:33:08 2025 GMT Subject: CN=BDA03E26863D7D8DDC9A8FF8DE21AF5CD798CCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:82:98:4a:9f:bf:08:5f:f9:23:77:d9:23: a1:f6:e8:9d:0a:41:b1:17:94:43:26:20:c8:a4:8c: 32:75:7e:9d:90:e1:b2:21:57:c1:e5:69:8b:f5:19: c0:3d:76:44:37:81:a1:00:a0:7d:e2:f9:be:f4:b1: cb:f1:63:bd:5c:00:49:98:42:f4:ca:67:ea:67:95: 47:9d:1e:5b:c2:5b:71:05:0b:8d:83:21:fa:bc:d4: 02:32:4f:6c:df:a3:1c:4c:5d:6d:58:4f:01:76:23: 3f:fe:83:d6:86:56:3c:68:bb:31:77:42:a9:6b:89: 8e:be:6f:86:f8:ce:7c:51:46:b4:17:39:bc:00:e8: 26:08:be:73:92:50:52:db:8f:97:70:75:aa:ee:95: 3c:fa:77:06:77:9e:92:06:f7:6d:6e:ee:92:86:ed: 33:97:74:4f:71:ce:60:89:10:47:75:17:2a:07:22: b3:fc:cc:95:30:63:e3:2d:43:c8:d6:9d:36:47:49: 38:71:7a:67:b1:4a:60:b1:7e:45:2b:c2:e0:aa:a1: 4c:59:34:e2:20:12:9f:4f:25:a1:06:06:7f:e0:12: ee:f4:58:39:b3:d7:29:cf:ec:5b:53:04:56:7c:c1: 31:38:17:88:d9:12:62:d6:32:eb:2d:8f:76:18:4a: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A0:3E:26:86:3D:7D:8D:DC:9A:8F:F8:DE:21:AF:5C:D7:98:CC:A7 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5b:ef:e5:95:fd:b3:e1:38:94:02:61:09:5c:a2:58:c7:77: 7e:1c:ef:e5:64:0c:fd:38:93:9c:ec:79:71:74:50:e6:34:b6: 6a:bc:87:ed:e7:08:fb:9b:5f:c6:d0:f2:be:de:bd:1d:58:16: d8:6d:a4:03:40:b9:e2:39:d0:0d:6f:72:46:b4:2b:d1:6c:e4: 09:12:84:ea:1c:17:4d:dd:cc:1b:74:d6:8d:60:7d:09:f8:26: 04:a3:9d:ab:66:3c:e9:6d:0d:06:23:b2:29:51:01:85:73:ff: cd:ec:42:ef:3e:4c:21:67:46:58:9d:23:a8:2d:a9:e8:50:d6: a5:a3:37:be:f1:21:12:8e:c5:cb:29:77:21:c3:56:cb:91:ad: 9e:d1:a8:60:29:cb:ad:6a:a6:1d:8b:05:43:5d:be:ef:ec:8d: 82:0f:55:6a:5d:7a:07:57:ee:d7:55:0c:1e:3e:f4:35:ec:6e: 0a:dd:f0:86:41:10:b8:54:ac:d1:d3:83:ba:3d:f0:04:23:b1: 5f:1e:6e:54:2d:96:ea:fc:5c:21:e9:78:74:28:81:45:01:7d: 11:f6:d8:98:f1:ff:2d:2b:02:8a:e3:78:b5:9b:15:01:fa:27: 59:d1:05:bf:c5:74:f5:83:60:93:46:34:2e:31:d6:b6:55:22: 89:da:ff:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPW/Cxzj4PYa00Yl50SCH8ZkkRKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA5MDMxMDE3MDhaFw0yNTA5MDYxOTMzMDhaMDMxMTAvBgNV BAMTKEJEQTAzRTI2ODYzRDdEOEREQzlBOEZGOERFMjFBRjVDRDc5OENDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxoKYSp+/CF/5I3fZI6H26J0K QbEXlEMmIMikjDJ1fp2Q4bIhV8HlaYv1GcA9dkQ3gaEAoH3i+b70scvxY71cAEmY QvTKZ+pnlUedHlvCW3EFC42DIfq81AIyT2zfoxxMXW1YTwF2Iz/+g9aGVjxouzF3 QqlriY6+b4b4znxRRrQXObwA6CYIvnOSUFLbj5dwdarulTz6dwZ3npIG921u7pKG 7TOXdE9xzmCJEEd1FyoHIrP8zJUwY+MtQ8jWnTZHSThxemexSmCxfkUrwuCqoUxZ NOIgEp9PJaEGBn/gEu70WDmz1ynP7FtTBFZ8wTE4F4jZEmLWMustj3YYSsgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvaA+JoY9fY3cmo/43iGvXNeYzKcwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdb7+WV/bPhOJQCYQlcoljHd34c7+VkDP04 k5zseXF0UOY0tmq8h+3nCPubX8bQ8r7evR1YFthtpANAueI50A1vcka0K9Fs5AkS hOocF03dzBt01o1gfQn4JgSjnatmPOltDQYjsilRAYVz/83sQu8+TCFnRlidI6gt qehQ1qWjN77xIRKOxcspdyHDVsuRrZ7RqGApy61qph2LBUNdvu/sjYIPVWpdegdX 7tdVDB4+9DXsbgrd8IZBELhUrNHTg7o98AQjsV8eblQtlur8XCHpeHQogUUBfRH2 2Jjx/y0rAorjeLWbFQH6J1nRBb/FdPWDYJNGNC4x1rZVIona/64= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:52 2025 by rpki-client