$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: qtvDjh1wZ+FCLnI4/d5Ndn+P7dl+pBNUlG/39edR7uQ= Subject key identifier: 9C:73:8E:F1:6D:F9:3F:08:EA:4D:52:5F:63:38:C4:18:68:80:5E:AC Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 1D166259104D945BB47EE37E27351AF28CF1B4B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 017E Signing time: Wed 03 Sep 2025 20:20:40 +0000 Manifest this update: Wed 03 Sep 2025 20:15:40 +0000 Manifest next update: Sun 07 Sep 2025 08:14:40 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) 2: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: sUa9vowt9jOG0GBKbudPLPD2sv2XRQ6Pgmw5iOK7i3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:16:62:59:10:4d:94:5b:b4:7e:e3:7e:27:35:1a:f2:8c:f1:b4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Sep 3 20:15:40 2025 GMT Not After : Sep 7 08:14:40 2025 GMT Subject: CN=9C738EF16DF93F08EA4D525F6338C41868805EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:9d:1c:06:99:d0:5a:3f:3e:01:6c:08:ea: a0:4a:37:76:dd:a9:42:11:07:d7:30:8e:82:ba:fc: 08:fc:18:44:78:b2:ca:ee:70:d5:31:30:54:44:b3: c2:5b:66:a1:a8:80:23:9b:c8:3b:e5:f8:89:51:48: cd:c6:72:36:44:2d:e6:29:cc:6b:ae:23:82:ec:ae: 45:71:35:85:c3:41:42:f7:db:dc:3c:af:f8:53:37: 9d:13:ec:1c:c8:99:4b:29:ab:5a:80:57:0c:1c:af: 51:89:6d:ac:60:62:6e:84:40:f4:68:14:99:80:cf: 63:19:f2:70:16:6b:00:e1:9d:a0:3f:02:4d:2d:c9: 15:5c:ea:36:7d:f2:83:c8:65:54:4f:f9:b7:b2:c7: 8c:d9:a3:0d:cd:41:02:60:a2:79:53:0a:c1:93:07: f9:2c:7b:95:67:8c:b5:d2:7c:7e:fe:bf:3b:c3:52: 6c:8c:fb:33:3f:a7:66:ac:40:09:86:07:5a:9a:e1: 61:2f:4f:56:3f:25:3c:4e:5d:59:da:f5:33:b0:d8: 65:95:1c:75:d1:2a:55:6f:6a:30:d0:14:e1:50:4d: b7:1e:57:8a:77:0f:07:47:ea:67:46:19:c3:22:4f: 01:50:8a:f8:ec:5c:d0:5e:d2:96:e2:ba:d7:e8:bb: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:8E:F1:6D:F9:3F:08:EA:4D:52:5F:63:38:C4:18:68:80:5E:AC X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ae:6a:65:22:cf:67:cb:18:b1:5e:79:07:61:64:df:b5:cf: 66:8e:6a:c6:28:1c:92:fa:d1:df:62:4e:be:34:4d:03:4a:2d: ea:5c:a4:9a:d5:47:db:5d:53:80:dd:54:f4:0c:eb:06:30:4b: 6d:66:4f:fc:43:c4:8b:54:4d:07:2f:19:3b:a7:98:ee:00:1c: 1b:26:7c:89:49:11:b3:ca:a1:0a:8b:4e:65:c8:be:d4:d7:f5: 7d:e0:7f:8f:b9:16:c9:6c:6f:ae:3c:fc:3b:07:6d:cf:03:b5: 87:eb:41:74:a4:7a:aa:6a:b1:5c:d4:57:1c:27:bf:6b:f8:48: 05:5b:2b:36:ce:92:35:51:6d:cd:e2:4a:32:a7:98:8e:60:b2: 9e:2b:bf:c4:e8:c9:43:3f:76:26:73:d1:48:7f:a2:7e:85:cd: a1:bb:87:40:2a:ea:46:67:8c:60:c1:39:b6:fc:67:b2:41:a1: a9:bf:b0:a5:a4:65:28:02:a0:5c:b4:a4:90:9b:ad:12:21:c3: ad:81:49:0b:81:c2:6b:ac:62:ab:f5:3f:96:cb:92:02:99:97: a8:80:36:45:b2:2c:8b:b4:15:89:72:9f:e2:aa:d6:43:12:a8: 41:f1:69:44:3a:43:ef:df:29:d0:10:f0:76:a4:ff:3c:5e:0c: 1a:9a:f2:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRZiWRBNlFu0fuN+JzUa8ozxtLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA5MDMyMDE1NDBaFw0yNTA5MDcwODE0NDBaMDMxMTAvBgNV BAMTKDlDNzM4RUYxNkRGOTNGMDhFQTRENTI1RjYzMzhDNDE4Njg4MDVFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeJ0cBpnQWj8+AWwI6qBKN3bd qUIRB9cwjoK6/Aj8GER4ssrucNUxMFREs8JbZqGogCObyDvl+IlRSM3GcjZELeYp zGuuI4LsrkVxNYXDQUL329w8r/hTN50T7BzImUspq1qAVwwcr1GJbaxgYm6EQPRo FJmAz2MZ8nAWawDhnaA/Ak0tyRVc6jZ98oPIZVRP+beyx4zZow3NQQJgonlTCsGT B/kse5VnjLXSfH7+vzvDUmyM+zM/p2asQAmGB1qa4WEvT1Y/JTxOXVna9TOw2GWV HHXRKlVvajDQFOFQTbceV4p3DwdH6mdGGcMiTwFQivjsXNBe0pbiutfouzIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHOO8W35PwjqTVJfYzjEGGiAXqwwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWuamUiz2fLGLFeeQdhZN+1z2aOasYoHJL6 0d9iTr40TQNKLepcpJrVR9tdU4DdVPQM6wYwS21mT/xDxItUTQcvGTunmO4AHBsm fIlJEbPKoQqLTmXIvtTX9X3gf4+5Fslsb648/DsHbc8DtYfrQXSkeqpqsVzUVxwn v2v4SAVbKzbOkjVRbc3iSjKnmI5gsp4rv8ToyUM/diZz0Uh/on6FzaG7h0Aq6kZn jGDBObb8Z7JBoam/sKWkZSgCoFy0pJCbrRIhw62BSQuBwmusYqv1P5bLkgKZl6iA NkWyLIu0FYlyn+Kq1kMSqEHxaUQ6Q+/fKdAQ8Hak/zxeDBqa8jM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:09 2025 by rpki-client