$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: OKZiaEkLuc22N5FSRaElC32pHvjHgjETqmof7ODiHb0= Subject key identifier: F5:8A:5A:66:BD:B2:1C:EC:2D:2B:43:20:53:49:81:3E:DB:68:94:DC Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 7FB790A8263470C95220580DB83FE1F2C7432DA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 0171 Signing time: Sat 14 Jun 2025 22:50:04 +0000 Manifest this update: Sat 14 Jun 2025 22:45:04 +0000 Manifest next update: Wed 18 Jun 2025 02:45:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: lgaCC9EDpXP0VQ4QiYq3lfgopQOJTWlx0nNtsG2oBbQ=) 3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:90:a8:26:34:70:c9:52:20:58:0d:b8:3f:e1:f2:c7:43:2d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Jun 14 22:45:04 2025 GMT Not After : Jun 18 02:45:04 2025 GMT Subject: CN=F58A5A66BDB21CEC2D2B43205349813EDB6894DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:5e:6f:08:67:57:46:0d:68:e3:a1:b3:c0: 4d:82:14:32:45:77:a9:a6:d0:91:59:90:7c:47:01: b0:93:9a:b3:44:dd:15:fd:f6:a4:d9:40:4e:1b:25: 67:1a:ac:3f:89:38:61:3c:1f:4e:85:79:51:af:8c: 57:1d:c7:74:e4:84:64:f7:eb:90:a4:f2:8c:0a:92: c3:59:b6:f5:11:12:80:f2:7d:a4:f4:58:73:d0:ff: cc:bb:4f:cb:ae:24:59:06:1a:ea:59:44:f1:0f:eb: bd:9a:b5:19:ae:5e:16:90:22:45:ac:f5:6f:bf:ae: 0f:20:14:0f:27:b7:1f:c9:69:c9:87:e7:85:ac:19: 70:8c:45:3f:d4:61:5c:94:1e:c3:71:bf:c5:bc:fa: c6:3c:24:42:a0:ab:34:14:cf:3d:a9:26:c8:11:20: 1f:23:ff:1e:8b:1a:57:73:1d:4d:e0:a3:97:ae:54: a0:5f:03:d0:7f:01:fe:7f:77:e8:f1:76:dc:88:f1: 50:47:8f:55:1b:e7:a9:a9:6b:91:bd:69:93:09:7a: 15:fb:13:0f:24:ee:e7:66:d4:f4:8c:a9:ea:ae:87: 33:2e:79:c5:fa:5f:0e:d2:a2:95:eb:c8:5d:00:45: b7:bf:6b:bb:14:2f:2d:5d:e5:46:a7:c4:d2:88:cd: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8A:5A:66:BD:B2:1C:EC:2D:2B:43:20:53:49:81:3E:DB:68:94:DC X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:9b:0f:21:fd:76:ca:1f:2d:e1:d9:17:be:0b:00:56:5e: a3:4f:8a:94:d7:e2:06:e9:9c:2e:34:15:f2:51:2a:54:52:04: d2:00:a2:45:db:2c:b9:24:e1:d9:8c:34:d2:65:9a:b6:3e:1c: 5d:54:fa:20:04:30:6e:4f:d7:0a:38:d7:d3:dd:db:c1:0d:6a: a7:ea:2c:e5:39:e6:ea:44:7d:70:b8:26:85:20:38:12:f2:12: 59:bc:ea:ee:73:b4:16:b2:09:f2:9a:94:41:28:88:05:74:02: db:64:a2:98:19:47:b7:51:6d:dc:4f:d4:26:d9:12:d7:38:fb: 0d:e0:b1:20:fb:19:74:20:df:b2:3a:58:96:46:cd:5c:82:4d: e0:5c:be:8f:77:e4:3f:de:b6:67:67:14:7d:c8:93:fd:74:23: 23:d9:24:52:77:c1:81:1a:49:ba:2e:1c:5c:dd:e1:db:e5:c5: 5d:b5:3f:20:f8:bf:35:a0:c3:83:b3:9e:47:0f:88:d0:36:14: c8:cd:cc:67:da:71:a9:ca:9e:b0:3f:04:cb:b6:42:16:b2:ba: 06:a6:1f:31:7c:aa:c3:ed:36:ee:e9:42:cb:f9:2f:7d:81:b3: 83:7b:88:64:9a:62:c0:f4:7f:a3:e3:ab:d0:4c:d5:68:79:e8: c9:b7:a0:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7eQqCY0cMlSIFgNuD/h8sdDLacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA2MTQyMjQ1MDRaFw0yNTA2MTgwMjQ1MDRaMDMxMTAvBgNV BAMTKEY1OEE1QTY2QkRCMjFDRUMyRDJCNDMyMDUzNDk4MTNFREI2ODk0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi415vCGdXRg1o46GzwE2CFDJF d6mm0JFZkHxHAbCTmrNE3RX99qTZQE4bJWcarD+JOGE8H06FeVGvjFcdx3TkhGT3 65Ck8owKksNZtvUREoDyfaT0WHPQ/8y7T8uuJFkGGupZRPEP672atRmuXhaQIkWs 9W+/rg8gFA8ntx/JacmH54WsGXCMRT/UYVyUHsNxv8W8+sY8JEKgqzQUzz2pJsgR IB8j/x6LGldzHU3go5euVKBfA9B/Af5/d+jxdtyI8VBHj1Ub56mpa5G9aZMJehX7 Ew8k7udm1PSMqequhzMuecX6Xw7SopXryF0ARbe/a7sULy1d5UanxNKIzZDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9YpaZr2yHOwtK0MgU0mBPttolNwwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmRmw8h/XbKHy3h2Re+CwBWXqNPipTX4gbp nC40FfJRKlRSBNIAokXbLLkk4dmMNNJlmrY+HF1U+iAEMG5P1wo419Pd28ENaqfq LOU55upEfXC4JoUgOBLyElm86u5ztBayCfKalEEoiAV0AttkopgZR7dRbdxP1CbZ Etc4+w3gsSD7GXQg37I6WJZGzVyCTeBcvo935D/etmdnFH3Ik/10IyPZJFJ3wYEa SbouHFzd4dvlxV21PyD4vzWgw4OznkcPiNA2FMjNzGfacanKnrA/BMu2Qhayugam HzF8qsPtNu7pQsv5L32Bs4N7iGSaYsD0f6Pjq9BM1Wh56Mm3oAU= -----END CERTIFICATE-----Generated at Mon Jun 16 21:34:14 2025 by rpki-client