$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: PtRHY0k4oeMHtToT3cj67tWi9vLtwvP7Y2/gBqgQ8e0= Subject key identifier: 77:AE:50:AA:3C:81:03:D1:59:06:6F:8E:F8:94:8F:17:0D:E3:85:15 Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 5F743FB22FBD66165D24AACEC846FF73F2AE18A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0210 Signing time: Wed 05 Nov 2025 05:20:01 +0000 Manifest this update: Wed 05 Nov 2025 05:15:01 +0000 Manifest next update: Sat 08 Nov 2025 16:50:01 +0000 Files and hashes: 1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: afWeukmvpROm5W0werfnK7Lx2YBhNasBWGsq8pUmtXw=) 2: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:74:3f:b2:2f:bd:66:16:5d:24:aa:ce:c8:46:ff:73:f2:ae:18:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Nov 5 05:15:01 2025 GMT Not After : Nov 8 16:50:01 2025 GMT Subject: CN=77AE50AA3C8103D159066F8EF8948F170DE38515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:4c:cc:c0:18:ba:38:f3:e9:9e:7f:a6:9e: 97:fa:34:0a:e5:e7:33:e7:57:a3:d6:78:9b:73:cd: bf:12:eb:44:0b:04:93:a9:8b:31:07:25:e6:3d:7f: 87:62:89:ff:ad:ca:8f:2b:77:d9:61:56:e1:89:a6: 49:65:3c:79:f7:ca:59:1c:61:2d:1e:d6:aa:8c:9f: 5e:dc:18:3b:dc:78:e1:5c:6a:df:76:c4:03:39:62: 73:bf:fc:5f:87:b8:ec:fb:29:59:3d:07:fa:40:b4: 7d:b3:d1:cb:db:68:1f:74:f4:65:84:75:f2:05:ad: 82:c0:d5:2d:bb:66:16:3c:d6:81:c7:c3:c5:1a:7e: 82:ca:72:0f:13:28:bd:c0:1f:7f:47:f7:05:07:2b: 22:33:d8:1f:0e:a5:14:fa:52:d7:b0:29:fa:34:05: 22:32:9d:e3:c2:4a:1d:d7:ae:67:7b:26:9f:13:7c: 1a:25:64:2c:8a:eb:be:2b:bc:4f:2c:03:20:96:43: a9:44:58:cc:c1:8e:b7:fb:fc:f4:03:0c:ae:3a:d1: d7:15:5a:b2:79:60:93:f7:3b:26:cd:b1:aa:3e:05: 6d:eb:b9:5e:04:ce:a5:24:a5:19:d9:5d:4c:84:8d: e0:b2:de:2a:d5:6a:7f:07:1f:eb:7f:aa:ad:33:5a: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AE:50:AA:3C:81:03:D1:59:06:6F:8E:F8:94:8F:17:0D:E3:85:15 X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:38:df:53:8b:5c:44:0c:cc:25:72:82:0b:8d:2a:b1:4a:0a: 3b:dd:ab:d0:90:26:19:22:51:8c:e2:76:9f:92:15:15:41:a4: 14:c8:38:ef:cd:df:44:99:e2:c4:e0:66:bc:d7:1f:16:7a:a8: 78:98:36:53:44:67:fa:c1:fe:fe:14:14:0d:b8:03:07:8c:a3: 12:62:32:3b:33:3a:f1:28:21:28:e0:ff:03:83:79:99:80:04: 39:32:87:a6:0e:5f:ae:94:c9:b7:71:ad:32:51:4e:81:67:1b: 90:6e:b1:0f:cf:9e:62:15:04:26:f6:ef:d3:da:c6:49:55:2f: 92:b5:bc:6b:25:7e:5c:17:0e:d6:db:38:42:09:99:cf:7b:4d: 34:80:2d:5c:d5:d0:fb:ec:e9:95:73:74:7b:30:c8:df:b1:e0: 86:09:91:22:ab:91:d8:87:e1:0d:15:03:e6:da:d6:7d:8b:50: f5:35:b7:86:eb:29:12:f9:7d:82:a9:57:d3:b1:97:4b:17:a4: da:41:2c:51:66:28:3d:8b:22:4e:80:58:c3:f8:be:6e:83:fe: ee:2f:03:d0:c0:3e:b1:bd:38:fb:90:ee:5d:a4:d9:43:55:87: f4:d7:42:96:d2:9a:dc:23:0d:d5:0c:b9:46:df:34:25:26:5a: e1:07:49:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3Q/si+9ZhZdJKrOyEb/c/KuGKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTExMDUwNTE1MDFaFw0yNTExMDgxNjUwMDFaMDMxMTAvBgNV BAMTKDc3QUU1MEFBM0M4MTAzRDE1OTA2NkY4RUY4OTQ4RjE3MERFMzg1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AkzMwBi6OPPpnn+mnpf6NArl 5zPnV6PWeJtzzb8S60QLBJOpizEHJeY9f4diif+tyo8rd9lhVuGJpkllPHn3ylkc YS0e1qqMn17cGDvceOFcat92xAM5YnO//F+HuOz7KVk9B/pAtH2z0cvbaB909GWE dfIFrYLA1S27ZhY81oHHw8UafoLKcg8TKL3AH39H9wUHKyIz2B8OpRT6UtewKfo0 BSIynePCSh3Xrmd7Jp8TfBolZCyK674rvE8sAyCWQ6lEWMzBjrf7/PQDDK460dcV WrJ5YJP3OybNsao+BW3ruV4EzqUkpRnZXUyEjeCy3irVan8HH+t/qq0zWmUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd65QqjyBA9FZBm+O+JSPFw3jhRUwHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk431OLXEQMzCVygguNKrFKCjvdq9CQJhki UYzidp+SFRVBpBTIOO/N30SZ4sTgZrzXHxZ6qHiYNlNEZ/rB/v4UFA24AweMoxJi MjszOvEoISjg/wODeZmABDkyh6YOX66UybdxrTJRToFnG5BusQ/PnmIVBCb279Pa xklVL5K1vGslflwXDtbbOEIJmc97TTSALVzV0Pvs6ZVzdHswyN+x4IYJkSKrkdiH 4Q0VA+ba1n2LUPU1t4brKRL5fYKpV9Oxl0sXpNpBLFFmKD2LIk6AWMP4vm6D/u4v A9DAPrG9OPuQ7l2k2UNVh/TXQpbSmtwjDdUMuUbfNCUmWuEHSaw= -----END CERTIFICATE-----Generated at Thu Nov 6 05:31:19 2025 by rpki-client