$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: ECrPz6P/OV8XG15T/Vt433t+APIfoU6Lq87/n4qcdrE= Subject key identifier: E3:18:E3:D9:27:47:32:2D:A6:B7:65:BF:FA:32:4F:51:A8:6B:3D:F6 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 0D1526404C8EE44A74F7E4421CE9165A2F7ECC86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 04E1 Signing time: Tue 17 Jun 2025 07:21:02 +0000 Manifest this update: Tue 17 Jun 2025 07:16:02 +0000 Manifest next update: Fri 20 Jun 2025 15:33:02 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: 1Yy8ZTTcrM5LitsyzYU3vFQUoZXwsrOiI4geqq9myyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 15:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:15:26:40:4c:8e:e4:4a:74:f7:e4:42:1c:e9:16:5a:2f:7e:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Jun 17 07:16:02 2025 GMT Not After : Jun 20 15:33:02 2025 GMT Subject: CN=E318E3D92747322DA6B765BFFA324F51A86B3DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:77:39:cc:e4:6b:31:0e:46:bd:af:e9:ea: ed:38:69:13:a1:d4:1a:8a:fa:36:43:6b:8b:68:59: f6:4a:61:fa:22:4b:41:bf:40:67:e9:a0:c5:af:35: a0:a7:78:2b:77:d3:bd:54:8a:07:65:23:46:83:c6: 23:b7:47:70:85:c3:84:db:3e:01:04:c5:d2:84:1c: 48:04:1f:6f:99:c5:9a:56:3e:66:fd:ca:cf:8f:99: 47:53:2c:e1:2b:26:bc:cd:13:96:7e:85:bc:26:c7: 56:cd:30:38:71:8d:25:43:cd:8d:cd:f5:0f:80:23: 22:b3:7f:4c:06:90:34:2e:0a:0b:f2:ff:fa:75:4e: c6:d2:07:b6:9f:2e:73:69:eb:44:17:eb:ff:9c:b7: 79:91:a5:88:f6:29:5b:c7:7e:35:45:dc:52:26:0f: ad:28:ef:43:6d:95:be:f3:e7:9f:ab:e3:a9:c3:1b: 73:3f:33:ce:a3:45:e9:ca:ca:9a:39:a1:14:70:14: 3c:ce:c0:99:7a:8b:f1:df:85:a7:4a:47:00:78:64: 33:a9:16:02:93:6f:22:5e:f8:15:38:49:f2:65:81: 0e:d9:3f:e3:14:ac:32:58:54:b1:b3:b6:d2:6e:68: 90:9b:d8:d7:e7:9b:06:d5:c2:6a:78:ff:d5:87:08: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:E3:D9:27:47:32:2D:A6:B7:65:BF:FA:32:4F:51:A8:6B:3D:F6 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7f:40:ef:25:e8:78:a4:fc:67:d2:69:86:78:b4:3f:15:89: 0b:09:17:9b:a0:27:d7:34:ec:42:cd:84:ca:43:1c:e6:f2:fd: 43:da:53:c4:9e:c5:f9:08:9d:db:e1:ab:fd:11:97:b8:39:ec: b1:22:f0:ef:8d:1b:d0:c8:6e:b6:dd:bb:6e:d7:34:57:6a:97: 71:7b:9a:aa:4e:f9:08:a4:cf:79:74:c4:d5:71:34:5e:0b:17: 81:9e:4d:d6:b4:de:50:63:52:a8:33:fe:a2:38:9a:a0:18:cc: 58:6a:b8:7c:d7:50:84:32:56:c2:97:73:e1:8b:3d:db:70:e0: 4b:09:ba:90:e2:e8:f7:4d:a3:5f:a3:e8:22:cf:e2:ce:19:dc: 72:8e:3f:d9:2a:9c:05:83:c0:db:1a:7c:a7:b5:aa:32:dc:a3: 95:14:ca:66:93:29:4f:8f:d7:1c:62:64:93:26:e6:43:e4:05: 74:e6:e9:83:74:a0:7a:df:bd:94:c0:c1:bf:26:a3:26:48:d2: 93:c6:a7:66:71:3b:aa:71:5d:d6:6f:98:8a:fa:da:10:49:df: 35:c3:08:d3:65:ad:72:29:1c:cf:f8:e2:18:77:e1:36:0c:ce: 38:5e:5c:a3:56:6e:c5:1a:a5:aa:70:f9:e8:36:14:5d:23:76: 79:cd:5b:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRUmQEyO5Ep09+RCHOkWWi9+zIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTA2MTcwNzE2MDJaFw0yNTA2MjAxNTMzMDJaMDMxMTAvBgNV BAMTKEUzMThFM0Q5Mjc0NzMyMkRBNkI3NjVCRkZBMzI0RjUxQTg2QjNERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQnc5zORrMQ5Gva/p6u04aROh 1BqK+jZDa4toWfZKYfoiS0G/QGfpoMWvNaCneCt3071UigdlI0aDxiO3R3CFw4Tb PgEExdKEHEgEH2+ZxZpWPmb9ys+PmUdTLOErJrzNE5Z+hbwmx1bNMDhxjSVDzY3N 9Q+AIyKzf0wGkDQuCgvy//p1TsbSB7afLnNp60QX6/+ct3mRpYj2KVvHfjVF3FIm D60o70Ntlb7z55+r46nDG3M/M86jRenKypo5oRRwFDzOwJl6i/HfhadKRwB4ZDOp FgKTbyJe+BU4SfJlgQ7ZP+MUrDJYVLGzttJuaJCb2NfnmwbVwmp4/9WHCPQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xjj2SdHMi2mt2W/+jJPUahrPfYwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp/QO8l6Hik/GfSaYZ4tD8ViQsJF5ugJ9c0 7ELNhMpDHOby/UPaU8SexfkIndvhq/0Rl7g57LEi8O+NG9DIbrbdu27XNFdql3F7 mqpO+Qikz3l0xNVxNF4LF4GeTda03lBjUqgz/qI4mqAYzFhquHzXUIQyVsKXc+GL Pdtw4EsJupDi6PdNo1+j6CLP4s4Z3HKOP9kqnAWDwNsafKe1qjLco5UUymaTKU+P 1xxiZJMm5kPkBXTm6YN0oHrfvZTAwb8moyZI0pPGp2ZxO6pxXdZvmIr62hBJ3zXD CNNlrXIpHM/44hh34TYMzjheXKNWbsUapapw+eg2FF0jdnnNW+o= -----END CERTIFICATE-----Generated at Wed Jun 18 00:08:13 2025 by rpki-client