$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: 4nzGrfajaQaLjxM41R0HSdEIjFVWULtMMFNmnd+PfXs= Subject key identifier: 85:30:51:73:0E:5B:DE:82:6F:8E:94:66:6A:B7:39:0D:89:78:1B:1E Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 248CAB85A01ADF3524A56E6C41779B49FE1ACF82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0364 Signing time: Mon 03 Nov 2025 14:22:20 +0000 Manifest this update: Mon 03 Nov 2025 14:17:20 +0000 Manifest next update: Fri 07 Nov 2025 00:59:20 +0000 Files and hashes: 1: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 2: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: BtRwUwTh21fv8dWzBjq7XaC0gn3njqaQWgxkqeoB1w0=) 4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8c:ab:85:a0:1a:df:35:24:a5:6e:6c:41:77:9b:49:fe:1a:cf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Nov 3 14:17:20 2025 GMT Not After : Nov 7 00:59:20 2025 GMT Subject: CN=853051730E5BDE826F8E94666AB7390D89781B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:ac:f7:ef:86:bc:80:40:49:41:91:2a:4b: 7d:73:56:a4:0b:75:a4:b8:8c:2b:24:3f:e3:93:cc: 78:09:59:52:3a:3c:3d:5a:ae:cb:b4:09:aa:55:ac: 46:6a:ad:5f:5c:13:17:49:19:08:b8:aa:93:39:c9: e5:a1:e0:d6:e6:c7:e3:55:47:d4:94:8d:e7:70:b2: f9:a2:3d:23:5b:b3:4e:6c:35:34:44:ae:ca:ec:6f: 98:72:d8:e5:af:2f:b2:17:11:65:38:51:b3:8d:07: 74:f8:2b:44:92:f1:8e:43:98:57:50:d3:32:bd:22: 82:8f:32:b7:9c:ac:b3:24:67:bd:8f:1e:aa:18:f6: e3:97:95:c6:23:28:68:ea:10:78:1d:25:f0:5b:b8: 6e:0e:37:d8:42:02:d0:f2:8a:7e:ec:66:34:6e:e8: ca:71:d8:55:ae:60:dc:09:30:53:da:31:84:08:f6: 30:34:76:6b:f0:06:14:ef:a5:f6:fc:47:bf:14:f9: ef:97:94:87:e1:42:c4:43:55:70:59:ea:f7:f7:77: 36:16:ca:75:d0:67:0d:1e:88:f9:45:91:ca:0f:35: b0:5c:19:b0:f0:5b:23:ac:89:9d:ec:e0:6c:85:85: e0:6f:74:10:30:72:41:5d:45:1e:74:d2:b1:49:e7: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:51:73:0E:5B:DE:82:6F:8E:94:66:6A:B7:39:0D:89:78:1B:1E X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7a:51:94:16:b2:9c:85:eb:ea:05:58:0a:e9:88:29:d7:63: b6:9f:26:bf:fb:b1:5b:b9:d6:d1:92:3e:ea:28:cd:c0:62:ba: 2d:d2:dc:f6:c9:2d:13:51:19:50:69:d6:98:b5:e0:82:62:5c: af:e4:9f:0b:94:92:76:d4:c5:c3:37:aa:58:65:72:87:da:5f: 5a:5f:15:4e:96:8a:b7:09:21:b1:7b:60:19:da:a5:84:2e:78: 3c:58:86:b0:18:9f:6b:2d:b0:c0:bf:a4:9a:73:4e:f7:66:9b: a4:0a:91:e0:3b:dd:a0:9b:87:24:fd:85:16:08:b1:ad:d2:61: 25:bd:c5:af:e4:6c:c1:ff:14:8b:87:88:d1:8a:23:dd:2c:c7: cb:f3:11:8e:b2:d6:0e:3f:32:42:bf:7f:8f:ca:b2:79:d7:d6: 42:bb:f0:cc:c2:c8:f4:54:28:eb:dc:be:71:05:3d:8a:6b:d6: ac:1e:fe:6d:59:e4:fc:ad:46:ac:a3:d8:af:b0:84:91:1b:aa: 86:d6:eb:3a:ac:d5:47:f1:f9:8d:9b:dc:51:45:b6:39:2f:77: 95:9f:d7:ac:6b:22:ba:68:26:6a:cb:01:c0:ff:a6:e9:f4:85: a5:2d:e2:34:92:ee:a1:5d:fe:15:88:96:75:1c:5a:ce:a8:6f: dc:a7:de:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIyrhaAa3zUkpW5sQXebSf4az4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTExMDMxNDE3MjBaFw0yNTExMDcwMDU5MjBaMDMxMTAvBgNV BAMTKDg1MzA1MTczMEU1QkRFODI2RjhFOTQ2NjZBQjczOTBEODk3ODFCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74az374a8gEBJQZEqS31zVqQL daS4jCskP+OTzHgJWVI6PD1arsu0CapVrEZqrV9cExdJGQi4qpM5yeWh4Nbmx+NV R9SUjedwsvmiPSNbs05sNTRErsrsb5hy2OWvL7IXEWU4UbONB3T4K0SS8Y5DmFdQ 0zK9IoKPMrecrLMkZ72PHqoY9uOXlcYjKGjqEHgdJfBbuG4ON9hCAtDyin7sZjRu 6Mpx2FWuYNwJMFPaMYQI9jA0dmvwBhTvpfb8R78U+e+XlIfhQsRDVXBZ6vf3dzYW ynXQZw0eiPlFkcoPNbBcGbDwWyOsiZ3s4GyFheBvdBAwckFdRR500rFJ553nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhTBRcw5b3oJvjpRmarc5DYl4Gx4wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADF6UZQWspyF6+oFWArpiCnXY7afJr/7sVu5 1tGSPuoozcBiui3S3PbJLRNRGVBp1pi14IJiXK/knwuUknbUxcM3qlhlcofaX1pf FU6WircJIbF7YBnapYQueDxYhrAYn2stsMC/pJpzTvdmm6QKkeA73aCbhyT9hRYI sa3SYSW9xa/kbMH/FIuHiNGKI90sx8vzEY6y1g4/MkK/f4/KsnnX1kK78MzCyPRU KOvcvnEFPYpr1qwe/m1Z5PytRqyj2K+whJEbqobW6zqs1Ufx+Y2b3FFFtjkvd5Wf 16xrIrpoJmrLAcD/pun0haUt4jSS7qFd/hWIlnUcWs6ob9yn3sU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:35 2025 by rpki-client