$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: 12S3zgy/BQUs9aGzVHnxsBd7ukJ2ZjlqLU+YCPhHUjw= Subject key identifier: 9D:4D:94:E0:16:B3:AF:25:D9:C3:06:4C:2B:01:AB:91:F3:6F:5C:9C Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 39FE13CA0561CEE0B08C5F90F3C7E96689DC9F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 051E Signing time: Tue 04 Nov 2025 01:31:03 +0000 Manifest this update: Tue 04 Nov 2025 01:26:03 +0000 Manifest next update: Fri 07 Nov 2025 04:35:03 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 0G7OzYvpD3Wd0/oCxQPoqGBRoRxFdCoH5UrveFtVYb8=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fe:13:ca:05:61:ce:e0:b0:8c:5f:90:f3:c7:e9:66:89:dc:9f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Nov 4 01:26:03 2025 GMT Not After : Nov 7 04:35:03 2025 GMT Subject: CN=9D4D94E016B3AF25D9C3064C2B01AB91F36F5C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:02:a6:7e:de:f1:ca:5b:09:f2:c1:15:4f: f3:56:95:72:70:fe:e5:fd:a1:ee:d3:15:d7:2c:0b: 05:85:3c:0d:d8:0b:14:44:9f:fc:16:5c:50:06:aa: d7:c7:33:58:12:60:88:92:3c:53:ec:0c:55:bf:5c: 8e:41:cf:cc:4c:9d:ed:89:58:15:41:87:b8:56:79: e4:dc:44:c0:a1:79:c0:bb:f8:4b:c9:b9:92:9b:aa: 95:16:e2:e4:35:4c:01:0d:eb:98:38:43:70:5e:fd: 37:1d:6c:57:a9:0f:6a:d3:a3:25:36:9f:aa:3c:bc: 8f:51:8b:d8:8f:81:ea:74:b0:64:1a:a0:84:5f:a1: 47:bc:da:81:a8:99:55:cb:fa:2d:f5:73:16:88:36: 0a:9c:55:3d:d3:16:ad:9f:9a:bd:c2:f0:0e:2b:d1: 19:91:d5:84:cb:f5:9b:c8:a4:aa:61:19:84:9b:66: 7a:d4:ee:ec:d2:f1:f1:aa:45:58:6a:f4:5b:da:7f: bf:85:e5:8f:8f:9a:66:21:e4:f8:d6:c3:1e:c0:c0: 95:a6:fd:8b:c5:fb:ab:d0:3b:3a:af:d3:92:81:c2: c1:c0:71:79:02:5c:fe:a0:4a:4a:e3:e2:47:3e:2c: 1d:f2:b7:26:59:d3:6d:45:d3:ab:61:37:61:d5:6a: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:94:E0:16:B3:AF:25:D9:C3:06:4C:2B:01:AB:91:F3:6F:5C:9C X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f0:82:e6:19:bc:e9:65:14:e8:0a:86:f4:bf:70:1f:05:a6: 13:1a:c2:38:28:be:6b:67:07:46:ce:20:84:67:9f:6e:54:a3: 8e:a2:09:c6:c5:f0:c1:c4:05:20:0f:ea:0c:1f:de:a6:75:1e: 67:19:cd:8e:2d:50:8a:53:1a:b5:2e:ec:c1:06:57:1b:eb:0b: 69:6e:ce:7b:5a:ce:6a:32:c4:43:91:3a:eb:29:ca:29:9c:11: b2:df:7d:c9:7b:06:d2:57:14:a4:37:ee:f0:31:66:15:96:7b: 3b:a4:0d:11:11:a0:dc:77:44:f7:81:b0:22:d2:f8:0e:ce:14: bd:79:d8:83:5b:13:d3:ad:36:15:ff:8d:a5:76:95:d6:f6:74: cb:90:eb:2f:c7:95:9b:04:31:e9:5b:7a:e0:0d:23:b8:e7:12: 88:68:e2:b0:bc:54:48:8b:0b:29:3a:ad:7a:41:23:ae:56:f5: 05:5d:39:80:da:5d:02:3d:53:c0:7d:2a:2f:02:a7:28:7a:78: 28:c5:41:50:94:b3:6b:1f:24:ea:90:78:d1:00:38:e2:ba:4a: a6:fe:58:cc:94:f6:5e:e0:98:16:9b:c1:f6:40:01:33:a6:f1: fa:7c:42:0f:ec:d2:39:0f:40:ab:94:80:55:45:34:09:57:f7: a0:e1:84:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf4TygVhzuCwjF+Q88fpZoncn0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTExMDQwMTI2MDNaFw0yNTExMDcwNDM1MDNaMDMxMTAvBgNV BAMTKDlENEQ5NEUwMTZCM0FGMjVEOUMzMDY0QzJCMDFBQjkxRjM2RjVDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kgKmft7xylsJ8sEVT/NWlXJw /uX9oe7TFdcsCwWFPA3YCxREn/wWXFAGqtfHM1gSYIiSPFPsDFW/XI5Bz8xMne2J WBVBh7hWeeTcRMChecC7+EvJuZKbqpUW4uQ1TAEN65g4Q3Be/TcdbFepD2rToyU2 n6o8vI9Ri9iPgep0sGQaoIRfoUe82oGomVXL+i31cxaINgqcVT3TFq2fmr3C8A4r 0RmR1YTL9ZvIpKphGYSbZnrU7uzS8fGqRVhq9Fvaf7+F5Y+PmmYh5PjWwx7AwJWm /YvF+6vQOzqv05KBwsHAcXkCXP6gSkrj4kc+LB3ytyZZ021F06thN2HValTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnU2U4BazryXZwwZMKwGrkfNvXJwwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzwguYZvOllFOgKhvS/cB8FphMawjgovmtn B0bOIIRnn25Uo46iCcbF8MHEBSAP6gwf3qZ1HmcZzY4tUIpTGrUu7MEGVxvrC2lu zntazmoyxEOROuspyimcEbLffcl7BtJXFKQ37vAxZhWWezukDRERoNx3RPeBsCLS +A7OFL152INbE9OtNhX/jaV2ldb2dMuQ6y/HlZsEMelbeuANI7jnEoho4rC8VEiL Cyk6rXpBI65W9QVdOYDaXQI9U8B9Ki8Cpyh6eCjFQVCUs2sfJOqQeNEAOOK6Sqb+ WMyU9l7gmBabwfZAATOm8fp8Qg/s0jkPQKuUgFVFNAlX96DhhIQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:42 2025 by rpki-client