$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: WLo1/a6hAZbh9lB2e3xEuztE0wDNwHtSK5UgQP8LNKw= Subject key identifier: 0A:AF:8F:36:3A:6E:35:E9:CD:C1:C6:DD:DD:DB:B0:39:97:C0:10:7D Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 0FBFF289A6ADEF796C7FDAF8EEF08E730560841A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 0154 Signing time: Sun 01 Jun 2025 18:20:38 +0000 Manifest this update: Sun 01 Jun 2025 18:15:38 +0000 Manifest next update: Thu 05 Jun 2025 02:19:38 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: lP3MqjSabtp2TS3uP2EX3zANW2ck2p8qfJfhTgMyk0Y=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bf:f2:89:a6:ad:ef:79:6c:7f:da:f8:ee:f0:8e:73:05:60:84:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Jun 1 18:15:38 2025 GMT Not After : Jun 5 02:19:38 2025 GMT Subject: CN=0AAF8F363A6E35E9CDC1C6DDDDDBB03997C0107D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:fa:16:12:69:6f:aa:20:f5:8d:e4:2b:b8: a3:3c:c0:6d:47:8e:db:83:db:1f:b3:e7:46:a1:2a: 23:9f:59:4b:91:9e:e6:14:54:5a:02:59:16:e4:77: 09:7b:3f:51:be:f6:cd:43:81:96:38:81:9b:70:7a: 94:6c:30:84:2a:18:8c:cb:3f:3f:5a:fe:43:c3:58: 51:6a:39:c6:3d:64:65:00:17:bb:86:a3:92:08:8e: 45:e0:6c:60:2d:22:b4:aa:68:60:fb:cb:c1:19:da: 5a:a4:60:ea:aa:0b:12:a2:d0:aa:09:5b:e0:d5:bb: 11:0c:2c:e3:e5:62:74:be:97:1c:76:d8:a7:78:81: 48:b2:c7:11:3a:13:99:3c:e0:ab:1d:f7:09:05:a5: 2e:7f:73:bb:dc:eb:fe:85:9d:38:2e:16:25:57:41: 6b:4c:ac:a7:f5:07:25:6a:16:16:91:05:db:63:14: ed:03:b1:67:e6:a4:15:51:ee:12:cd:0d:d3:68:bb: 3f:39:4f:c4:cf:af:f2:5c:96:25:9c:d9:bd:12:47: 09:0e:f7:ca:1c:be:4e:28:50:3f:47:d0:1a:5d:34: c1:d8:13:69:bc:2a:f0:ae:f9:6f:cd:42:f2:77:08: e6:af:66:0b:b2:c4:24:1b:a7:7b:4a:cf:2e:d6:a7: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AF:8F:36:3A:6E:35:E9:CD:C1:C6:DD:DD:DB:B0:39:97:C0:10:7D X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:5d:55:c2:6d:0c:6a:16:1f:56:36:be:cf:c3:a3:cd:bd: d1:0c:cc:1b:5e:88:e0:cc:2a:ee:eb:47:73:73:3e:cc:bd:fe: be:5a:e0:29:66:3b:26:ac:3b:3f:38:fd:de:da:b7:45:6c:0e: 92:7d:99:e5:de:b7:50:40:6f:79:f8:66:9c:98:12:33:01:b9: 9c:1a:05:f0:fd:73:70:ce:e5:d7:6c:cd:88:6d:65:68:80:49: 73:7a:b0:e2:a7:ba:97:7a:77:9c:bc:4f:69:e1:96:3d:d2:ce: cf:5d:c1:a9:72:d0:b5:de:70:62:c8:50:be:b2:7c:1b:01:95: dd:58:4b:7f:f1:a4:1b:81:f3:bd:9a:e9:2e:e5:b8:d0:be:f2: f8:ab:4b:1c:4a:c6:d1:f5:c5:16:4b:26:3c:0b:52:3d:24:ac: 89:77:e6:b3:38:e4:ef:86:6b:98:bb:ad:e6:6c:1c:d1:a6:29: 64:f5:7f:6b:15:2e:37:8e:be:c4:b4:18:57:fe:a0:9e:75:b0: 24:16:9b:1d:49:1e:9f:0d:df:b1:38:08:35:dd:c9:d7:40:29: 11:23:9d:7e:8b:22:8f:15:b2:b6:07:d0:73:b2:7b:23:33:41: 3d:0b:23:78:07:5c:6d:a9:4a:f3:8d:94:3b:a4:69:a2:ca:4e: f6:9e:9c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7/yiaat73lsf9r47vCOcwVghBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA2MDExODE1MzhaFw0yNTA2MDUwMjE5MzhaMDMxMTAvBgNV BAMTKDBBQUY4RjM2M0E2RTM1RTlDREMxQzZEREREREJCMDM5OTdDMDEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTQvoWEmlvqiD1jeQruKM8wG1H jtuD2x+z50ahKiOfWUuRnuYUVFoCWRbkdwl7P1G+9s1DgZY4gZtwepRsMIQqGIzL Pz9a/kPDWFFqOcY9ZGUAF7uGo5IIjkXgbGAtIrSqaGD7y8EZ2lqkYOqqCxKi0KoJ W+DVuxEMLOPlYnS+lxx22Kd4gUiyxxE6E5k84Ksd9wkFpS5/c7vc6/6FnTguFiVX QWtMrKf1ByVqFhaRBdtjFO0DsWfmpBVR7hLNDdNouz85T8TPr/JcliWc2b0SRwkO 98ocvk4oUD9H0BpdNMHYE2m8KvCu+W/NQvJ3COavZguyxCQbp3tKzy7Wp/ZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCq+PNjpuNenNwcbd3duwOZfAEH0wHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMLXVXCbQxqFh9WNr7Pw6PNvdEMzBteiODM Ku7rR3NzPsy9/r5a4ClmOyasOz84/d7at0VsDpJ9meXet1BAb3n4ZpyYEjMBuZwa BfD9c3DO5ddszYhtZWiASXN6sOKnupd6d5y8T2nhlj3Szs9dwaly0LXecGLIUL6y fBsBld1YS3/xpBuB872a6S7luNC+8virSxxKxtH1xRZLJjwLUj0krIl35rM45O+G a5i7reZsHNGmKWT1f2sVLjeOvsS0GFf+oJ51sCQWmx1JHp8N37E4CDXdyddAKREj nX6LIo8VsrYH0HOyeyMzQT0LI3gHXG2pSvONlDukaaLKTvaenAY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:52 2025 by rpki-client