$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: 7jwIOB2PYHCw099pG2qZYfpkCNrO9STREGzitq5lsKI= Subject key identifier: 08:EE:E1:71:76:A7:21:FB:87:D3:B7:0C:78:4D:94:00:68:EC:91:28 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 586239EF04731650BC7B96BB249ACACCF1C06C58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 030F Signing time: Tue 29 Apr 2025 03:32:18 +0000 Manifest this update: Tue 29 Apr 2025 03:27:18 +0000 Manifest next update: Fri 02 May 2025 07:13:18 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 5YDbQXlnK09b2O3j8p89DxZ/bpW+QwqGsVBIPyUZGfw=) 2: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: lVVEQRaIbonJY374bXa4Eau4fPAIIr1m4g0jH3SuIpk=) 3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:62:39:ef:04:73:16:50:bc:7b:96:bb:24:9a:ca:cc:f1:c0:6c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Apr 29 03:27:18 2025 GMT Not After : May 2 07:13:18 2025 GMT Subject: CN=08EEE17176A721FB87D3B70C784D940068EC9128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:c8:69:50:0a:a5:3c:23:d8:fd:a5:92:dc: c6:33:cd:74:cd:2d:36:d2:87:96:aa:7a:1b:59:3b: b9:9c:47:67:a8:69:c2:fc:9d:ce:2f:c2:54:64:84: 05:30:1d:d4:0d:2b:b8:ba:77:41:47:60:12:2f:a8: 64:1e:2b:1b:70:09:c5:ad:f2:46:36:fd:b8:f2:2b: 80:f8:42:8f:8b:07:fe:26:e0:0d:32:0b:42:22:bf: 61:5c:b3:b6:38:60:1d:f6:29:de:7c:75:11:16:7c: 43:f7:92:3f:28:9a:05:96:1d:0d:97:58:de:7d:0d: 29:1a:98:66:bc:27:5a:d1:a3:c6:b2:64:42:60:9e: 45:cf:90:89:98:77:4d:e2:04:3e:98:6b:66:3a:88: d7:b2:9b:19:f1:8a:94:47:f7:e2:e4:d1:82:a8:b7: 63:ff:6e:e7:4b:af:c7:d8:4c:f7:30:b7:74:98:05: 41:36:62:b0:2d:c5:31:8c:10:ce:76:2d:a1:ab:db: 23:b0:8b:74:c8:25:21:30:7c:32:3c:13:02:84:17: 64:55:ec:70:26:4e:66:b3:60:f1:d1:fa:73:5d:c7: 88:25:85:e1:7a:df:eb:5d:41:b5:48:97:71:9f:b9: 11:69:7e:fe:90:07:dd:b9:e4:4d:d8:44:92:5d:74: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EE:E1:71:76:A7:21:FB:87:D3:B7:0C:78:4D:94:00:68:EC:91:28 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:04:0b:d3:b1:45:23:4d:d4:63:11:0a:f5:61:2e:ca:72:04: 52:af:e6:7f:38:5c:88:7a:99:ed:dd:7e:2e:e1:65:e7:c0:3a: cf:21:e9:f8:8b:59:73:ee:3f:28:5d:df:f1:45:16:02:67:7f: a0:8a:4f:84:85:03:fe:81:e5:29:7f:5b:92:97:2d:13:2e:9d: 1f:18:f7:0c:92:13:af:53:dc:c5:69:64:14:80:7c:e3:3b:76: 48:34:47:1a:df:42:c1:5b:86:2a:16:e9:db:24:ec:6a:ba:79: 6a:69:79:bb:dc:c7:82:9e:cd:42:9c:05:c5:7c:03:a2:d2:9b: 25:42:5f:ba:a1:15:11:f9:63:3e:b2:f5:b7:3f:52:d9:3e:00: 60:35:74:68:57:b2:64:1a:9d:36:92:db:db:cc:02:fe:ad:d1: b7:19:a8:f7:a3:c2:7f:78:d2:2e:06:52:86:ce:3a:a4:00:19: 62:5f:9a:06:67:80:fe:c2:98:e4:af:e1:e5:b3:ec:24:42:92: 43:55:6f:53:07:88:5d:d3:43:7b:f1:22:b2:fb:5d:ba:99:01: da:da:5d:e2:f7:f0:46:3e:92:ec:5f:56:2a:ca:fb:94:d8:d4: 5b:e9:a6:c6:9c:28:5f:25:de:7e:45:dd:57:ed:51:65:69:0e: 72:9a:66:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGI57wRzFlC8e5a7JJrKzPHAbFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA0MjkwMzI3MThaFw0yNTA1MDIwNzEzMThaMDMxMTAvBgNV BAMTKDA4RUVFMTcxNzZBNzIxRkI4N0QzQjcwQzc4NEQ5NDAwNjhFQzkxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVB8hpUAqlPCPY/aWS3MYzzXTN LTbSh5aqehtZO7mcR2eoacL8nc4vwlRkhAUwHdQNK7i6d0FHYBIvqGQeKxtwCcWt 8kY2/bjyK4D4Qo+LB/4m4A0yC0Iiv2Fcs7Y4YB32Kd58dREWfEP3kj8omgWWHQ2X WN59DSkamGa8J1rRo8ayZEJgnkXPkImYd03iBD6Ya2Y6iNeymxnxipRH9+Lk0YKo t2P/budLr8fYTPcwt3SYBUE2YrAtxTGMEM52LaGr2yOwi3TIJSEwfDI8EwKEF2RV 7HAmTmazYPHR+nNdx4glheF63+tdQbVIl3GfuRFpfv6QB9255E3YRJJddCKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCO7hcXanIfuH07cMeE2UAGjskSgwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkEC9OxRSNN1GMRCvVhLspyBFKv5n84XIh6 me3dfi7hZefAOs8h6fiLWXPuPyhd3/FFFgJnf6CKT4SFA/6B5Sl/W5KXLRMunR8Y 9wySE69T3MVpZBSAfOM7dkg0RxrfQsFbhioW6dsk7Gq6eWppebvcx4KezUKcBcV8 A6LSmyVCX7qhFRH5Yz6y9bc/Utk+AGA1dGhXsmQanTaS29vMAv6t0bcZqPejwn94 0i4GUobOOqQAGWJfmgZngP7CmOSv4eWz7CRCkkNVb1MHiF3TQ3vxIrL7XbqZAdra XeL38EY+kuxfVirK+5TY1FvppsacKF8l3n5F3VftUWVpDnKaZng= -----END CERTIFICATE-----Generated at Wed Apr 30 05:48:12 2025 by rpki-client