$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: JnphIaAp8mJDNhI8N+WgEO3w2AVxqfiM+0PDZVV60zs= Subject key identifier: BB:F6:39:52:A3:33:62:51:88:0C:E4:E9:41:44:3C:BD:EC:E5:F1:3B Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 6DA8DCC02A871263C5FDC58CEF64D4BAC8DC79FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01BB Signing time: Sat 26 Apr 2025 23:50:01 +0000 Manifest this update: Sat 26 Apr 2025 23:45:01 +0000 Manifest next update: Wed 30 Apr 2025 08:51:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 2: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: +xNnx4/ObVR/9RL9eXXTq7Ebrtd5GPhCAcOKmCL9TN0=) 3: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 08:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a8:dc:c0:2a:87:12:63:c5:fd:c5:8c:ef:64:d4:ba:c8:dc:79:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Apr 26 23:45:01 2025 GMT Not After : Apr 30 08:51:01 2025 GMT Subject: CN=BBF63952A3336251880CE4E941443CBDECE5F13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:fb:ec:e9:4a:e5:a5:1e:b1:0e:22:d4:97: d3:56:35:52:52:3b:bc:5d:7b:f9:19:fb:d5:87:8f: bc:4b:53:6c:62:41:b8:bd:7b:13:15:f2:bf:e6:9c: 6e:60:00:f1:6c:1e:f1:5a:52:9f:ba:75:3d:35:77: ea:37:45:1f:ec:31:ce:7c:7e:13:75:4c:0d:c1:90: 0b:43:a9:45:e5:c4:c8:dc:39:e8:04:e2:8a:d6:d1: 27:fe:8f:b5:bd:9e:4a:33:f4:9b:09:f9:b0:02:03: 91:2b:3b:8c:9a:1c:25:ef:56:e7:18:11:1c:fe:33: 14:5b:11:73:76:96:1d:0d:c3:d9:26:0b:2d:ad:c2: b3:c1:f4:54:26:20:29:d3:82:42:a9:cf:a1:ab:80: 2a:36:0b:2e:21:43:91:f1:33:e5:bd:a6:05:3d:7b: c9:b0:5d:b1:8b:2c:5d:c1:82:4f:84:c9:24:a2:f4: 30:f6:6e:49:db:3f:e2:9c:c0:3c:16:af:0f:c5:33: 46:4f:6f:d8:e2:81:47:b6:69:e6:f6:5f:64:08:86: 0c:75:9a:0e:43:42:8c:d9:28:0b:45:d4:4d:6b:d4: 7e:be:90:a4:d6:4b:c3:7e:c1:33:3c:de:44:28:ea: 5f:9a:93:e1:40:8c:21:23:dc:3b:24:50:6d:8f:26: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F6:39:52:A3:33:62:51:88:0C:E4:E9:41:44:3C:BD:EC:E5:F1:3B X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bb:54:d8:fe:f1:9a:61:90:d4:24:df:14:c2:04:94:be:80: 80:83:49:2a:17:34:74:89:cd:29:8d:65:a3:fb:f3:4d:36:b7: 67:78:79:a2:50:b9:31:3e:00:49:3b:f9:70:e1:18:4d:fb:a4: 9d:09:dd:39:9f:4e:4e:3b:c0:93:a2:de:17:d1:a1:9f:ba:7c: 17:f0:01:d1:99:96:f6:f8:61:d7:6f:03:b9:74:b3:1c:8f:2d: 79:30:cb:36:12:4c:fd:6c:f7:d2:8a:36:76:82:d5:f6:88:a3: b3:6f:8f:19:89:4d:18:c7:00:57:c9:a1:55:6d:82:ee:c9:f4: bd:c7:27:16:b5:8b:0a:e0:7a:b0:98:73:a6:8b:95:e0:99:5b: 84:e6:ea:b9:d6:46:b8:71:4f:ba:9c:c5:a3:fd:f5:c0:b3:4e: 8c:d7:6f:6a:d9:a3:7c:01:6f:9b:50:2f:48:98:05:55:84:7e: 1f:85:0a:bc:c6:a9:35:a3:3f:8c:a3:92:34:25:e3:89:84:ae: 64:10:d0:85:c2:e9:e2:b9:8c:ea:00:f5:45:4e:0c:87:45:c8: 7b:2e:3f:be:47:1e:c9:b4:7a:2b:bd:b5:f1:99:2d:6d:fd:df: fa:be:82:fb:c8:e2:c5:0c:b6:14:f9:a0:fe:57:88:91:ac:67: 47:1f:86:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbajcwCqHEmPF/cWM72TUusjcefowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA0MjYyMzQ1MDFaFw0yNTA0MzAwODUxMDFaMDMxMTAvBgNV BAMTKEJCRjYzOTUyQTMzMzYyNTE4ODBDRTRFOTQxNDQzQ0JERUNFNUYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2u/vs6UrlpR6xDiLUl9NWNVJS O7xde/kZ+9WHj7xLU2xiQbi9exMV8r/mnG5gAPFsHvFaUp+6dT01d+o3RR/sMc58 fhN1TA3BkAtDqUXlxMjcOegE4orW0Sf+j7W9nkoz9JsJ+bACA5ErO4yaHCXvVucY ERz+MxRbEXN2lh0Nw9kmCy2twrPB9FQmICnTgkKpz6GrgCo2Cy4hQ5HxM+W9pgU9 e8mwXbGLLF3Bgk+EySSi9DD2bknbP+KcwDwWrw/FM0ZPb9jigUe2aeb2X2QIhgx1 mg5DQozZKAtF1E1r1H6+kKTWS8N+wTM83kQo6l+ak+FAjCEj3DskUG2PJgiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/Y5UqMzYlGIDOTpQUQ8vezl8TswHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq7VNj+8ZphkNQk3xTCBJS+gICDSSoXNHSJ zSmNZaP78002t2d4eaJQuTE+AEk7+XDhGE37pJ0J3TmfTk47wJOi3hfRoZ+6fBfw AdGZlvb4YddvA7l0sxyPLXkwyzYSTP1s99KKNnaC1faIo7NvjxmJTRjHAFfJoVVt gu7J9L3HJxa1iwrgerCYc6aLleCZW4Tm6rnWRrhxT7qcxaP99cCzTozXb2rZo3wB b5tQL0iYBVWEfh+FCrzGqTWjP4yjkjQl44mErmQQ0IXC6eK5jOoA9UVODIdFyHsu P75HHsm0eiu9tfGZLW393/q+gvvI4sUMthT5oP5XiJGsZ0cfhvQ= -----END CERTIFICATE-----Generated at Sun Apr 27 18:22:12 2025 by rpki-client