$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: Yg/XkrZFoPB5eWB/CMhhGUFOuoaMdfBxVOIetUw8GWk= Subject key identifier: BD:33:0D:AE:F6:4E:37:F9:B9:E1:B0:A6:2B:31:3B:EA:16:82:29:18 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 72C7E39989C813DA1E6E7F5E3368DD6B70FAC3CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01B0 Signing time: Mon 03 Nov 2025 19:20:04 +0000 Manifest this update: Mon 03 Nov 2025 19:15:04 +0000 Manifest next update: Fri 07 Nov 2025 00:14:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: OR4AIEJ1bVo143NsB5FsXWEfQ3JFtwQmVpy4uOcHWfI=) 3: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:e3:99:89:c8:13:da:1e:6e:7f:5e:33:68:dd:6b:70:fa:c3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Nov 3 19:15:04 2025 GMT Not After : Nov 7 00:14:04 2025 GMT Subject: CN=BD330DAEF64E37F9B9E1B0A62B313BEA16822918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:ec:d8:a6:d7:b5:71:a1:3f:32:91:66:83: 08:86:1e:a5:0f:bf:c9:86:4c:85:54:d7:18:fa:ec: 23:8d:17:ce:07:05:c2:c8:85:0e:ec:dc:bc:35:2c: db:bc:f5:bf:1c:90:c1:06:78:34:ea:15:11:89:c6: a9:e8:cf:d5:f7:f8:72:c4:bf:29:9b:5e:55:54:e5: da:39:c5:83:11:26:68:d2:42:e6:a0:0f:33:9c:d3: be:eb:77:67:b3:89:79:84:b0:61:7a:5a:77:71:2a: 58:2b:83:34:15:09:42:00:72:79:2a:23:e6:bc:f6: 57:7f:ed:34:0d:b5:b5:c4:eb:9d:cb:1f:b0:c6:4c: c2:bb:6a:ba:d8:74:04:2b:8b:2c:68:d4:14:62:3f: d3:24:d2:29:2d:ae:36:b2:4c:68:0c:46:41:3e:19: aa:7c:34:39:95:4c:c7:19:6d:57:52:f6:90:68:0f: d1:60:43:4f:bf:6f:05:ed:f7:e0:3e:03:83:9b:fc: 9a:32:47:d4:4b:6b:e0:66:d0:f8:11:bc:a3:f3:60: 26:54:96:91:14:0f:fc:78:f4:06:71:be:38:e5:03: f2:a9:04:8d:02:1f:4b:dd:c1:5a:b9:58:a8:a7:ed: 8a:df:ed:fc:e0:7e:08:62:27:5d:ec:40:3a:83:eb: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:0D:AE:F6:4E:37:F9:B9:E1:B0:A6:2B:31:3B:EA:16:82:29:18 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:03:63:35:49:b6:3b:48:55:0a:94:a4:45:8d:1e:78:ee:46: 5c:2a:3b:6a:13:70:22:a8:0f:f0:8b:2b:d1:97:5a:e7:72:66: b5:d9:29:7c:21:02:d3:e5:ec:82:3f:78:7a:38:4f:ad:1e:7a: d6:e8:d5:c5:83:31:b4:d0:56:1e:95:32:d2:b4:0a:da:65:ce: 95:27:36:ce:d3:3c:d5:bf:e0:66:15:a3:cb:d1:73:6a:c3:ab: 2e:21:30:4f:9a:25:34:15:c8:7c:cd:27:56:fe:7f:be:28:26: 0f:02:ff:d7:88:d8:47:cb:ad:f9:35:e7:d8:d3:c6:e2:8d:68: 26:53:2a:f8:3f:95:b1:07:3d:f6:45:c2:b0:0a:44:b9:a6:d7: 01:4f:d9:30:17:a9:b3:e3:a9:28:90:35:3f:ae:72:56:2b:36: 69:04:16:7f:72:84:be:c0:34:06:31:f6:7f:53:6a:d8:1d:b8: bb:33:72:e4:59:b1:3a:b2:31:16:d8:90:9b:b2:67:57:d0:dd: 7e:1f:8b:b5:6d:e3:8e:48:df:97:17:d9:6e:98:01:86:ff:f0: c9:79:50:6e:18:7c:6c:8d:39:23:f7:72:da:c2:7f:9e:bc:2e: c9:5a:7f:0a:ad:f9:0e:90:ac:43:39:9d:aa:3f:1e:e2:ea:59: 32:d4:16:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsfjmYnIE9oebn9eM2jda3D6w84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTExMDMxOTE1MDRaFw0yNTExMDcwMDE0MDRaMDMxMTAvBgNV BAMTKEJEMzMwREFFRjY0RTM3RjlCOUUxQjBBNjJCMzEzQkVBMTY4MjI5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPuzYpte1caE/MpFmgwiGHqUP v8mGTIVU1xj67CONF84HBcLIhQ7s3Lw1LNu89b8ckMEGeDTqFRGJxqnoz9X3+HLE vymbXlVU5do5xYMRJmjSQuagDzOc077rd2eziXmEsGF6WndxKlgrgzQVCUIAcnkq I+a89ld/7TQNtbXE653LH7DGTMK7arrYdAQriyxo1BRiP9Mk0iktrjayTGgMRkE+ Gap8NDmVTMcZbVdS9pBoD9FgQ0+/bwXt9+A+A4Ob/JoyR9RLa+Bm0PgRvKPzYCZU lpEUD/x49AZxvjjlA/KpBI0CH0vdwVq5WKin7Yrf7fzgfghiJ13sQDqD64szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTMNrvZON/m54bCmKzE76haCKRgwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHADYzVJtjtIVQqUpEWNHnjuRlwqO2oTcCKo D/CLK9GXWudyZrXZKXwhAtPl7II/eHo4T60eetbo1cWDMbTQVh6VMtK0CtplzpUn Ns7TPNW/4GYVo8vRc2rDqy4hME+aJTQVyHzNJ1b+f74oJg8C/9eI2EfLrfk159jT xuKNaCZTKvg/lbEHPfZFwrAKRLmm1wFP2TAXqbPjqSiQNT+uclYrNmkEFn9yhL7A NAYx9n9TatgduLszcuRZsTqyMRbYkJuyZ1fQ3X4fi7Vt445I35cX2W6YAYb/8Ml5 UG4YfGyNOSP3ctrCf568Lslafwqt+Q6QrEM5nao/HuLqWTLUFho= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:16 2025 by rpki-client