$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: WK91h+GlaYdXUc0Si/3oazQyBy8giyqYIAf/97VXM2E= Subject key identifier: D8:98:52:53:94:82:DF:AE:A1:97:84:41:98:37:60:C6:B9:2C:1C:57 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 7C64E435114B9B984BAB034D6DD96CD4CA05C520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 0189 Signing time: Fri 08 Aug 2025 18:40:04 +0000 Manifest this update: Fri 08 Aug 2025 18:35:04 +0000 Manifest next update: Tue 12 Aug 2025 04:45:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) 2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 3: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: 8fhORIdvrwLeKeHHIyQeHRiq7TPJqo3TAjXpMIJ/bfg=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:64:e4:35:11:4b:9b:98:4b:ab:03:4d:6d:d9:6c:d4:ca:05:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Aug 8 18:35:04 2025 GMT Not After : Aug 12 04:45:04 2025 GMT Subject: CN=D89852539482DFAEA1978441983760C6B92C1C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:d1:c1:f9:3c:b6:fe:da:a6:05:1a:57:4c: fd:70:5a:79:91:61:b0:48:21:7e:81:f9:39:0c:6c: c4:e8:dc:fc:8a:22:89:0a:d3:86:2c:cd:22:22:72: 3d:c4:ea:04:a5:06:a2:73:69:66:b4:0f:15:93:f5: 03:2e:18:2b:52:0a:a3:62:27:f8:1f:71:6a:ac:66: 9c:fe:33:7c:f2:34:be:1c:88:86:20:d6:a3:1a:47: 28:36:60:6b:74:11:93:8e:4b:33:4b:a6:5f:83:cc: dd:5a:b1:0b:e0:f7:71:92:e9:2e:df:24:b8:c2:8a: 0a:50:c2:a7:b7:b7:5f:eb:88:f6:a1:42:20:00:6c: 45:f1:ad:ad:9f:b4:4c:28:3b:0f:3c:92:4e:d7:f5: b5:66:a3:af:9e:d5:53:19:b8:e6:54:31:dc:4d:63: 44:ed:ce:46:26:76:e1:5f:70:51:c7:1a:7c:79:b7: 4c:d8:55:8f:b2:70:85:e4:67:89:06:cf:27:0d:00: 9f:0f:63:14:2a:09:f6:a0:94:6c:03:1b:fb:43:53: e0:47:15:8a:fc:c9:5e:cf:10:a4:9e:67:30:ac:24: fe:01:3b:3c:ee:5a:f3:b4:b9:d9:27:ed:46:77:20: 62:e8:a0:87:8b:e7:b7:00:81:c0:77:60:c3:d8:1d: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:52:53:94:82:DF:AE:A1:97:84:41:98:37:60:C6:B9:2C:1C:57 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:db:e0:2d:d4:50:d7:93:f8:d3:fe:1c:14:a7:f4:53:84:92: 4d:e6:3d:0a:4a:a0:52:cf:48:f7:9d:24:f9:6d:c3:56:fa:f7: 2f:6c:88:0f:d9:c3:c0:72:eb:00:42:ce:c3:a7:5b:53:d4:64: 57:e2:7e:1d:5e:e6:71:3d:f7:91:ac:69:a4:e8:bc:d2:9e:b9: fc:bd:db:50:e7:e8:2c:ac:25:97:35:24:e0:c6:b0:a2:c5:9e: aa:a4:a2:bc:91:3f:a3:0a:b3:32:55:26:27:1b:44:10:02:b0: ad:99:02:dc:72:55:e6:17:fa:97:e5:64:ee:72:d1:1d:bc:5d: 53:9a:aa:f6:c3:f0:dc:1c:76:d2:6a:36:5c:2e:21:a2:28:ec: f6:06:d1:cf:9c:be:8e:79:d8:c7:bb:a3:d5:07:a1:42:9e:f0: d0:64:4a:56:3e:0e:98:b2:9c:85:9b:8b:72:a8:da:1d:7e:66: ea:cc:48:9d:1b:3a:4e:57:ca:a2:9e:94:07:c2:33:fc:df:91: 77:10:82:b5:dc:3c:d1:52:ed:8c:36:05:3d:1e:82:38:a3:23: d5:a7:93:52:b5:e8:6b:b7:27:2c:18:06:28:17:e3:ed:65:34: 76:74:c2:0d:9b:e0:14:fa:3e:7e:3e:dd:9f:67:a9:0c:74:4a: 28:19:f1:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGTkNRFLm5hLqwNNbdls1MoFxSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTA4MDgxODM1MDRaFw0yNTA4MTIwNDQ1MDRaMDMxMTAvBgNV BAMTKEQ4OTg1MjUzOTQ4MkRGQUVBMTk3ODQ0MTk4Mzc2MEM2QjkyQzFDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZA9HB+Ty2/tqmBRpXTP1wWnmR YbBIIX6B+TkMbMTo3PyKIokK04YszSIicj3E6gSlBqJzaWa0DxWT9QMuGCtSCqNi J/gfcWqsZpz+M3zyNL4ciIYg1qMaRyg2YGt0EZOOSzNLpl+DzN1asQvg93GS6S7f JLjCigpQwqe3t1/riPahQiAAbEXxra2ftEwoOw88kk7X9bVmo6+e1VMZuOZUMdxN Y0TtzkYmduFfcFHHGnx5t0zYVY+ycIXkZ4kGzycNAJ8PYxQqCfaglGwDG/tDU+BH FYr8yV7PEKSeZzCsJP4BOzzuWvO0udkn7UZ3IGLooIeL57cAgcB3YMPYHYtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2JhSU5SC366hl4RBmDdgxrksHFcwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7b4C3UUNeT+NP+HBSn9FOEkk3mPQpKoFLP SPedJPltw1b69y9siA/Zw8By6wBCzsOnW1PUZFfifh1e5nE995GsaaTovNKeufy9 21Dn6CysJZc1JODGsKLFnqqkoryRP6MKszJVJicbRBACsK2ZAtxyVeYX+pflZO5y 0R28XVOaqvbD8NwcdtJqNlwuIaIo7PYG0c+cvo552Me7o9UHoUKe8NBkSlY+Dpiy nIWbi3Ko2h1+ZurMSJ0bOk5XyqKelAfCM/zfkXcQgrXcPNFS7Yw2BT0egjijI9Wn k1K16Gu3JywYBigX4+1lNHZ0wg2b4BT6Pn4+3Z9nqQx0SigZ8U4= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:43 2025 by rpki-client