$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: TmOHI80Eazzf+TiRgbtOeQhd2NB/MpAxS7LXq+36q20= Subject key identifier: 4A:CD:56:EE:DA:09:47:CD:18:63:DA:3B:9E:DC:62:F7:1E:74:CC:CA Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 061CD5DC4CD7AC6A42D2ADC5CF3DD7264E2B94B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01E8 Signing time: Wed 06 Aug 2025 20:50:01 +0000 Manifest this update: Wed 06 Aug 2025 20:45:01 +0000 Manifest next update: Sat 09 Aug 2025 22:17:01 +0000 Files and hashes: 1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: WBskW3UAyWSpj/O0nhGutb3WcEVH0nFo/QVp6TzD/n4=) 2: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1c:d5:dc:4c:d7:ac:6a:42:d2:ad:c5:cf:3d:d7:26:4e:2b:94:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Aug 6 20:45:01 2025 GMT Not After : Aug 9 22:17:01 2025 GMT Subject: CN=4ACD56EEDA0947CD1863DA3B9EDC62F71E74CCCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:dd:1e:90:d5:db:98:95:8f:32:df:88:35: bf:97:d4:7d:16:49:e7:06:c7:eb:54:cf:7a:82:28: 76:e1:f8:40:62:38:22:e7:73:1e:11:5e:47:de:5d: 4f:cc:af:bf:3a:0b:c3:b2:1a:b7:b7:04:70:6f:96: 06:78:a0:2a:3c:ab:f4:d3:6c:a4:80:25:e4:60:3b: 46:c8:a7:25:b8:00:6c:d7:fb:1b:9a:e1:35:64:62: 22:ad:b0:92:77:2c:55:11:d8:36:a4:09:ef:cf:9f: e9:d3:50:51:b1:1a:e5:a1:b3:d2:c0:8c:6a:10:30: fc:48:11:ef:92:91:46:6d:d4:c4:e9:53:7a:6a:6a: 82:41:3d:e4:59:f8:00:03:88:3f:70:3a:0a:1b:4b: 4f:17:03:63:62:9f:77:92:7b:c3:0e:65:98:1a:af: 2e:c5:2a:b7:ae:71:ba:3d:28:48:0f:07:ac:47:ab: 17:b2:2a:7a:45:e1:85:5e:b3:b5:93:dd:69:1e:df: 6c:25:94:fd:b8:10:af:1d:cc:38:6e:48:d6:46:6e: ca:2b:27:c7:05:bd:cf:7d:31:7f:29:33:0e:57:2d: 33:47:e5:1d:87:cf:44:af:04:24:82:09:16:27:95: e1:70:7d:07:42:b2:75:cd:e9:e6:b4:f4:3e:ff:07: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:56:EE:DA:09:47:CD:18:63:DA:3B:9E:DC:62:F7:1E:74:CC:CA X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:91:a7:b3:dc:b5:8d:51:8e:15:fa:dc:a2:55:3d:a8:e0:3c: c6:2e:dd:ce:06:30:30:21:9a:05:20:e1:7a:f4:6f:bc:c8:28: f6:94:26:18:15:8a:e4:26:6e:b2:c9:e2:db:33:76:c6:f7:e8: 98:5f:a6:dd:f3:56:ad:d8:f8:2e:b7:ef:37:7c:ed:43:f2:1f: 45:78:70:99:5e:fb:6e:b4:ff:1d:b1:1f:3f:f2:ad:6b:fe:08: 39:39:fe:e7:59:fd:47:fe:f4:a1:1b:90:f5:63:4c:3d:17:f4: 79:8a:a1:c7:b5:8b:e6:46:49:06:41:9a:cb:59:44:93:fd:93: 56:39:fa:2f:42:6a:0c:3d:7a:20:16:3e:53:9c:59:50:3e:08: 93:69:35:ea:fb:44:03:2e:ed:5c:e6:b0:13:c8:e4:81:b1:a9: 5e:78:d8:92:f4:e6:ee:84:cd:b9:70:92:96:1a:7a:54:0c:08: 4f:3f:a7:69:bd:54:24:5b:b9:88:86:94:34:26:a8:34:7f:7b: bb:fb:b2:85:f8:60:90:fd:18:c8:95:5f:7f:ad:ce:a3:e0:15: 87:d0:1d:67:3e:fd:e8:9a:85:b6:2b:7d:70:45:7c:4d:38:08: c1:b6:e8:6f:c1:6c:2d:ef:df:99:6c:14:8a:62:52:da:fd:7f: d7:08:f9:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhzV3EzXrGpC0q3Fzz3XJk4rlLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA4MDYyMDQ1MDFaFw0yNTA4MDkyMjE3MDFaMDMxMTAvBgNV BAMTKDRBQ0Q1NkVFREEwOTQ3Q0QxODYzREEzQjlFREM2MkY3MUU3NENDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykd0ekNXbmJWPMt+INb+X1H0W SecGx+tUz3qCKHbh+EBiOCLncx4RXkfeXU/Mr786C8OyGre3BHBvlgZ4oCo8q/TT bKSAJeRgO0bIpyW4AGzX+xua4TVkYiKtsJJ3LFUR2DakCe/Pn+nTUFGxGuWhs9LA jGoQMPxIEe+SkUZt1MTpU3pqaoJBPeRZ+AADiD9wOgobS08XA2Nin3eSe8MOZZga ry7FKreucbo9KEgPB6xHqxeyKnpF4YVes7WT3Wke32wllP24EK8dzDhuSNZGbsor J8cFvc99MX8pMw5XLTNH5R2Hz0SvBCSCCRYnleFwfQdCsnXN6ea09D7/BxWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSs1W7toJR80YY9o7ntxi9x50zMowHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2Rp7PctY1RjhX63KJVPajgPMYu3c4GMDAh mgUg4Xr0b7zIKPaUJhgViuQmbrLJ4tszdsb36Jhfpt3zVq3Y+C637zd87UPyH0V4 cJle+260/x2xHz/yrWv+CDk5/udZ/Uf+9KEbkPVjTD0X9HmKoce1i+ZGSQZBmstZ RJP9k1Y5+i9Cagw9eiAWPlOcWVA+CJNpNer7RAMu7VzmsBPI5IGxqV542JL05u6E zblwkpYaelQMCE8/p2m9VCRbuYiGlDQmqDR/e7v7soX4YJD9GMiVX3+tzqPgFYfQ HWc+/eiahbYrfXBFfE04CMG26G/BbC3v35lsFIpiUtr9f9cI+R0= -----END CERTIFICATE-----Generated at Thu Aug 7 04:59:53 2025 by rpki-client