$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: kOwjIY693/JnjXwU+0dliSoE8ydky9UHElMCGVB5120= Subject key identifier: 86:96:5D:F5:DF:AD:04:D7:63:6C:5C:36:2A:EC:D4:AF:FD:22:1B:98 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 54797D7890528BB619A4E73295826749A62BF006 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 010C Signing time: Tue 05 Aug 2025 02:11:22 +0000 Manifest this update: Tue 05 Aug 2025 02:06:22 +0000 Manifest next update: Fri 08 Aug 2025 09:11:22 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: j+CyFIuraCaP7XdAAvelfvPzeQbJ7B/dxtW4CXtgmjo=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: 4MuYHzl1Wb1zJWgI5ObAJyqCyoy5ctuFxNA88dYylf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:79:7d:78:90:52:8b:b6:19:a4:e7:32:95:82:67:49:a6:2b:f0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Aug 5 02:06:22 2025 GMT Not After : Aug 8 09:11:22 2025 GMT Subject: CN=86965DF5DFAD04D7636C5C362AECD4AFFD221B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:e6:a0:e0:0e:70:4d:55:da:a0:e0:78:76: 45:a7:06:d3:42:1a:c2:c0:50:47:53:78:0a:6d:2e: 5a:02:4c:5e:96:d8:44:73:ea:50:d0:d7:19:15:d5: 81:16:31:a0:41:a1:0c:cf:86:21:c7:45:b4:10:ea: 6b:da:f5:2f:3a:b8:ce:32:39:38:f6:2d:19:8d:88: 40:bf:80:23:30:31:58:ed:fe:3e:e6:a4:c4:7c:9f: 81:aa:ca:95:f9:bc:69:20:73:ed:57:28:84:18:a5: a5:62:51:56:08:ed:d4:1a:25:f6:6e:8b:2c:ab:8c: 1d:e2:88:ba:92:50:1a:6b:7c:bc:cd:41:da:bb:ec: fd:94:51:f3:1f:32:ed:26:dd:e6:a6:76:c3:62:ad: b1:90:31:83:ca:8a:25:b7:f8:0d:a1:43:96:b8:ae: 8a:81:e9:30:5b:4d:ab:02:50:d1:07:74:23:ea:55: 31:0b:61:24:1d:d1:fd:e5:9b:26:a0:bb:60:c0:4a: f5:48:48:90:1b:20:7c:34:db:68:e4:6a:7b:41:b6: 8a:27:03:a2:f9:e8:be:bd:a4:6f:7a:f5:31:0f:55: e9:71:c9:06:b0:7c:59:b1:c2:8f:60:bf:0c:59:53: 53:31:a4:62:1a:60:ff:d8:79:a4:99:f1:12:02:7f: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:5D:F5:DF:AD:04:D7:63:6C:5C:36:2A:EC:D4:AF:FD:22:1B:98 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5e:34:55:76:9d:3b:c4:b8:cb:4d:a1:49:48:62:ef:49:f6: 3c:64:be:77:02:5a:21:c4:b9:9b:eb:79:5b:5c:82:03:b6:f5: 25:82:c5:4a:18:e5:5c:d6:4a:0b:16:05:b7:f0:26:e8:97:b6: b0:5f:bc:d2:97:7a:6e:1b:b5:13:4b:99:e0:18:ae:08:d0:84: 5a:16:b6:f2:08:eb:93:06:cd:11:52:e3:8c:0c:1a:b1:a9:cc: a3:79:bf:c7:3d:f6:54:5f:e2:92:d0:4e:9b:c5:28:df:04:39: 13:f3:f1:6e:4b:c3:d2:5f:a2:9a:2b:81:47:20:60:23:60:63: e7:0a:77:c6:35:7b:42:14:64:fd:4d:33:c7:6b:f2:66:80:a6: 16:70:0c:e6:94:87:df:77:e3:ff:fc:5a:42:be:9d:e9:b3:d9: 81:e8:a5:13:69:34:8b:04:b5:5d:19:3c:5b:d7:85:fb:aa:74: 3c:46:c4:2a:4e:47:58:53:ce:81:31:11:10:9d:a7:4b:08:ff: a0:5b:93:10:be:98:6f:89:74:29:16:f7:28:bf:1f:6c:08:23: b0:f6:dc:6c:b0:dc:8a:56:b8:4f:ac:16:ed:5d:a6:d6:59:e6: 72:44:14:ff:6e:65:13:5f:04:81:cf:c8:c7:4f:76:58:df:e5: 6f:60:10:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHl9eJBSi7YZpOcylYJnSaYr8AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTA4MDUwMjA2MjJaFw0yNTA4MDgwOTExMjJaMDMxMTAvBgNV BAMTKDg2OTY1REY1REZBRDA0RDc2MzZDNUMzNjJBRUNENEFGRkQyMjFCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG+ag4A5wTVXaoOB4dkWnBtNC GsLAUEdTeAptLloCTF6W2ERz6lDQ1xkV1YEWMaBBoQzPhiHHRbQQ6mva9S86uM4y OTj2LRmNiEC/gCMwMVjt/j7mpMR8n4GqypX5vGkgc+1XKIQYpaViUVYI7dQaJfZu iyyrjB3iiLqSUBprfLzNQdq77P2UUfMfMu0m3eamdsNirbGQMYPKiiW3+A2hQ5a4 roqB6TBbTasCUNEHdCPqVTELYSQd0f3lmyagu2DASvVISJAbIHw022jkantBtoon A6L56L69pG969TEPVelxyQawfFmxwo9gvwxZU1MxpGIaYP/YeaSZ8RICf9xNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpZd9d+tBNdjbFw2KuzUr/0iG5gwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1eNFV2nTvEuMtNoUlIYu9J9jxkvncCWiHE uZvreVtcggO29SWCxUoY5VzWSgsWBbfwJuiXtrBfvNKXem4btRNLmeAYrgjQhFoW tvII65MGzRFS44wMGrGpzKN5v8c99lRf4pLQTpvFKN8EORPz8W5Lw9JfoporgUcg YCNgY+cKd8Y1e0IUZP1NM8dr8maAphZwDOaUh9934//8WkK+nemz2YHopRNpNIsE tV0ZPFvXhfuqdDxGxCpOR1hTzoExERCdp0sI/6BbkxC+mG+JdCkW9yi/H2wII7D2 3Gyw3IpWuE+sFu1dptZZ5nJEFP9uZRNfBIHPyMdPdljf5W9gEAQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:10 2025 by rpki-client