$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: PlJPqnokH5FipOnnc2gg5d4VAaYF7linFl4d3lTWl7U= Subject key identifier: 73:8F:3E:F5:40:4E:77:EA:87:5B:2E:7C:50:58:9F:F3:8A:D8:CB:4E Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 51851B818923685ED8D2B4E89A38873869A95002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0326 Signing time: Mon 16 Jun 2025 12:12:21 +0000 Manifest this update: Mon 16 Jun 2025 12:07:21 +0000 Manifest next update: Thu 19 Jun 2025 14:52:21 +0000 Files and hashes: 1: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 2: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 5SHsWxafEkBraptY8+M5Na58VbBiWSUfi6aw1e6msBg=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:85:1b:81:89:23:68:5e:d8:d2:b4:e8:9a:38:87:38:69:a9:50:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Jun 16 12:07:21 2025 GMT Not After : Jun 19 14:52:21 2025 GMT Subject: CN=738F3EF5404E77EA875B2E7C50589FF38AD8CB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:95:eb:b7:6e:85:46:61:1b:7b:1b:0a:5a: 2d:62:e0:fe:bb:a6:fd:d6:55:71:7a:35:b0:39:7b: 84:3f:6e:26:39:b6:12:22:8a:3f:3e:cf:13:88:2b: 28:49:6c:e5:ea:dd:3a:2a:95:98:21:94:a8:ce:f6: 3e:85:0e:46:5a:50:ad:7d:6d:06:33:32:95:31:ce: 78:aa:0e:2e:d2:32:70:d5:8e:af:e3:61:86:ac:8a: ba:af:ea:3d:40:f3:28:ab:5c:12:32:6e:5d:f2:35: e0:f7:65:2d:ac:82:d2:4a:51:c4:47:fb:5d:09:fd: 24:1d:ba:25:3d:3e:7f:39:c9:a0:2c:c9:b4:03:24: a8:db:95:c4:a3:36:89:4f:4e:c6:91:95:e5:be:2d: a4:2f:f3:24:6d:48:88:62:0e:ec:48:f9:70:62:1c: 35:ad:20:12:f1:7e:97:49:6f:ff:ca:0b:15:83:e0: eb:3f:9c:8a:92:c0:d1:e4:2e:bb:ee:d9:39:eb:7f: ac:12:38:f5:66:4c:bc:4f:ff:2c:d4:0b:3e:82:25: 31:ee:06:5d:0b:dc:c4:f2:59:80:74:a4:6b:29:cb: a3:2c:82:65:84:64:a2:fa:f5:33:14:ef:2a:e4:45: ce:7a:13:11:de:8c:a3:a3:26:00:80:34:d4:e5:de: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:3E:F5:40:4E:77:EA:87:5B:2E:7C:50:58:9F:F3:8A:D8:CB:4E X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:31:57:99:9c:45:a6:dd:71:ed:d8:8c:78:6d:e8:85:d8:5d: c5:4f:45:49:aa:51:08:6c:78:13:d5:18:aa:3b:d9:61:78:93: 8a:6c:4a:62:56:d9:9d:e7:9f:44:e5:3b:4b:67:1c:0e:e9:69: 63:7e:e9:be:af:c4:18:df:aa:90:42:1f:46:24:47:45:c8:78: ed:ac:a7:a0:78:eb:63:8b:0f:3b:b2:66:d6:ab:df:f6:28:35: 8c:4c:6d:d8:b7:a3:1e:d5:30:58:3b:2f:49:20:68:b7:b7:b0: 62:7d:91:8c:92:73:e0:df:9d:7f:28:f2:fc:a4:da:da:59:2e: 62:ea:55:85:d8:45:4a:1f:7b:8d:17:99:1b:65:ee:76:e5:39: 8d:b8:0d:72:9d:bb:82:ec:de:77:3b:be:78:fa:11:99:d8:33: db:86:52:90:22:53:74:7a:00:cf:58:10:56:71:55:2a:1a:3c: 95:69:fd:5b:81:5f:ea:2e:c7:f8:2f:41:99:1f:6a:ca:5d:89: 81:c5:50:6a:8f:3c:7a:20:ab:b8:28:85:17:b3:98:61:af:cf: 1f:94:80:ab:f9:81:71:ec:0a:b2:c4:d9:ad:d3:bd:a6:87:08: 8c:df:df:2b:e5:eb:6c:43:5b:c6:33:22:5d:33:0a:eb:7d:f6: e0:91:a1:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYUbgYkjaF7Y0rTomjiHOGmpUAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA2MTYxMjA3MjFaFw0yNTA2MTkxNDUyMjFaMDMxMTAvBgNV BAMTKDczOEYzRUY1NDA0RTc3RUE4NzVCMkU3QzUwNTg5RkYzOEFEOENCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsZXrt26FRmEbexsKWi1i4P67 pv3WVXF6NbA5e4Q/biY5thIiij8+zxOIKyhJbOXq3ToqlZghlKjO9j6FDkZaUK19 bQYzMpUxzniqDi7SMnDVjq/jYYasirqv6j1A8yirXBIybl3yNeD3ZS2sgtJKUcRH +10J/SQduiU9Pn85yaAsybQDJKjblcSjNolPTsaRleW+LaQv8yRtSIhiDuxI+XBi HDWtIBLxfpdJb//KCxWD4Os/nIqSwNHkLrvu2Tnrf6wSOPVmTLxP/yzUCz6CJTHu Bl0L3MTyWYB0pGspy6MsgmWEZKL69TMU7yrkRc56ExHejKOjJgCANNTl3iVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc48+9UBOd+qHWy58UFif84rYy04wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQxV5mcRabdce3YjHht6IXYXcVPRUmqUQhs eBPVGKo72WF4k4psSmJW2Z3nn0TlO0tnHA7paWN+6b6vxBjfqpBCH0YkR0XIeO2s p6B462OLDzuyZtar3/YoNYxMbdi3ox7VMFg7L0kgaLe3sGJ9kYySc+DfnX8o8vyk 2tpZLmLqVYXYRUofe40XmRtl7nblOY24DXKdu4Ls3nc7vnj6EZnYM9uGUpAiU3R6 AM9YEFZxVSoaPJVp/VuBX+oux/gvQZkfaspdiYHFUGqPPHogq7gohRezmGGvzx+U gKv5gXHsCrLE2a3TvaaHCIzf3yvl62xDW8YzIl0zCut99uCRoX8= -----END CERTIFICATE-----Generated at Wed Jun 18 02:13:15 2025 by rpki-client