$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: pyeBgl63+4CpcCAcl1m7c3SyTX3Hd0sM6X51yL+7c00= Subject key identifier: CC:C1:C3:FB:61:CE:A2:E6:94:AB:B8:C1:BF:3D:BE:4D:77:FA:04:36 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 60255CCBFA7F5B7E9728928A1CEC7DAE40C5586C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 019B Signing time: Wed 06 Aug 2025 04:30:36 +0000 Manifest this update: Wed 06 Aug 2025 04:25:36 +0000 Manifest next update: Sat 09 Aug 2025 09:31:36 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 2: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: /r09b4PWlsbaQlncyZOdu4qX0ZrQt5EGFWtlRu07Pd4=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:25:5c:cb:fa:7f:5b:7e:97:28:92:8a:1c:ec:7d:ae:40:c5:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Aug 6 04:25:36 2025 GMT Not After : Aug 9 09:31:36 2025 GMT Subject: CN=CCC1C3FB61CEA2E694ABB8C1BF3DBE4D77FA0436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:36:b3:ab:61:66:e1:29:02:2e:ae:00:92: e9:89:db:47:46:5b:15:8f:57:6c:2c:e0:5c:f7:61: 19:ba:09:ad:e8:18:ec:0f:68:32:57:92:f0:3e:87: 5c:25:28:de:7f:ea:4c:21:67:a8:62:21:2f:30:4a: 8b:27:a6:e3:56:70:62:b1:c0:f5:ee:ca:cd:69:e1: 27:ec:a9:31:ea:ac:b0:91:b2:2c:3a:af:95:16:26: 27:20:c9:92:b9:ad:15:03:cf:ba:55:44:a8:67:9d: a7:ec:cd:77:49:e8:37:f7:bb:5d:af:eb:9f:25:1c: 11:91:6d:21:04:87:db:d6:04:1c:64:9f:c9:cd:75: 3e:5b:e7:4e:16:ce:27:f6:74:76:6a:a9:aa:23:ae: 06:09:5b:2c:4a:f3:90:cf:16:29:56:bc:71:2b:d0: 37:88:e1:1f:71:de:26:2e:a6:c5:5a:06:a7:c9:71: 06:67:0b:a1:6b:43:ec:1a:68:62:0d:42:fd:9e:50: fc:82:84:64:70:7b:a9:ba:41:85:8e:4c:69:5a:da: d8:df:83:e0:84:0f:8f:64:a4:b0:bb:b2:d5:74:ef: 71:75:ad:9c:b0:53:fa:71:62:8e:5c:d2:a5:6d:5f: 98:b9:af:90:a0:b9:8d:bf:9e:2b:a5:5e:c2:3b:7e: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C1:C3:FB:61:CE:A2:E6:94:AB:B8:C1:BF:3D:BE:4D:77:FA:04:36 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9e:40:15:b9:15:a7:0d:79:aa:25:7c:c1:84:f6:a4:33:4f: 55:80:6b:68:66:ef:3f:f6:16:7c:43:e1:98:c4:b0:46:0a:47: 1c:c2:e9:1f:4e:11:cd:5f:a6:7a:6a:a2:65:cc:55:44:2c:7c: 34:74:29:fd:0e:e9:1a:49:74:77:ea:ff:95:53:e6:55:33:f8: b1:46:b6:29:19:26:bd:9d:aa:b3:e1:d0:52:df:a2:8b:4f:7a: 86:ad:8e:26:ac:18:38:11:8d:41:36:d4:93:7b:68:b4:10:20: 11:55:d5:0d:76:64:18:25:1f:d3:64:62:d4:4a:fe:04:e0:0c: 64:b7:2c:6b:1b:a8:49:da:3a:db:e8:19:e3:94:ab:64:ca:91: 44:e3:59:e7:85:f8:aa:4e:67:7c:8c:55:1d:35:60:15:f8:7b: 7e:82:f5:93:39:23:87:fc:03:d2:37:b8:bf:e2:cf:3b:a9:fe: 13:14:eb:75:99:da:54:c3:62:29:95:62:74:f9:a2:2c:5e:23: 1e:02:2d:c1:14:f2:f5:c8:95:20:ad:d6:4a:10:d8:1f:33:20: c4:46:a0:a6:c1:af:3d:42:5a:32:44:61:76:1f:f1:61:f9:97: 76:e3:bb:d4:5a:5a:6f:8c:0c:d1:60:44:80:ac:4f:14:0b:89: 62:8c:12:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCVcy/p/W36XKJKKHOx9rkDFWGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA4MDYwNDI1MzZaFw0yNTA4MDkwOTMxMzZaMDMxMTAvBgNV BAMTKENDQzFDM0ZCNjFDRUEyRTY5NEFCQjhDMUJGM0RCRTRENzdGQTA0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSTazq2Fm4SkCLq4AkumJ20dG WxWPV2ws4Fz3YRm6Ca3oGOwPaDJXkvA+h1wlKN5/6kwhZ6hiIS8wSosnpuNWcGKx wPXuys1p4SfsqTHqrLCRsiw6r5UWJicgyZK5rRUDz7pVRKhnnafszXdJ6Df3u12v 658lHBGRbSEEh9vWBBxkn8nNdT5b504Wzif2dHZqqaojrgYJWyxK85DPFilWvHEr 0DeI4R9x3iYupsVaBqfJcQZnC6FrQ+waaGINQv2eUPyChGRwe6m6QYWOTGla2tjf g+CED49kpLC7stV073F1rZywU/pxYo5c0qVtX5i5r5CguY2/niulXsI7flZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMHD+2HOouaUq7jBvz2+TXf6BDYwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2eQBW5FacNeaolfMGE9qQzT1WAa2hm7z/2 FnxD4ZjEsEYKRxzC6R9OEc1fpnpqomXMVUQsfDR0Kf0O6RpJdHfq/5VT5lUz+LFG tikZJr2dqrPh0FLfootPeoatjiasGDgRjUE21JN7aLQQIBFV1Q12ZBglH9NkYtRK /gTgDGS3LGsbqEnaOtvoGeOUq2TKkUTjWeeF+KpOZ3yMVR01YBX4e36C9ZM5I4f8 A9I3uL/izzup/hMU63WZ2lTDYimVYnT5oixeIx4CLcEU8vXIlSCt1koQ2B8zIMRG oKbBrz1CWjJEYXYf8WH5l3bju9RaWm+MDNFgRICsTxQLiWKMEuA= -----END CERTIFICATE-----Generated at Thu Aug 7 07:19:20 2025 by rpki-client