$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: CctopOOjTh8IMBq7ZhkuBcGNCWSfl2dufvEXY6rYq0k= Subject key identifier: 56:D2:E7:48:23:02:39:39:DE:3F:9A:D3:B8:CF:92:67:22:79:1D:62 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 63CF02105137B98A88CBCA8F6F756224E53B33F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 033C Signing time: Tue 05 Aug 2025 01:22:22 +0000 Manifest this update: Tue 05 Aug 2025 01:17:22 +0000 Manifest next update: Fri 08 Aug 2025 05:20:22 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: tM0KLTIE7mhzE2hKIxXO9vjcIhX6wNsi33MZddciJDk=) 3: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cf:02:10:51:37:b9:8a:88:cb:ca:8f:6f:75:62:24:e5:3b:33:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Aug 5 01:17:22 2025 GMT Not After : Aug 8 05:20:22 2025 GMT Subject: CN=56D2E74823023939DE3F9AD3B8CF926722791D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:7a:5f:6e:5b:d6:20:a0:8b:05:f9:13:5f: 6e:c8:ec:58:e2:5c:65:f3:31:2f:b1:1e:91:b9:e3: 55:d2:35:70:e8:01:90:d4:7d:0e:c7:4d:4b:26:0d: ef:58:d5:a9:2b:1f:89:c0:46:b1:89:fd:8d:df:40: 7c:bc:ce:de:65:0b:0a:1c:6f:0d:88:de:4e:0a:bf: cd:96:06:9c:be:ae:4f:b7:87:9b:4d:be:79:94:86: 54:c2:fe:0b:4e:6e:64:9b:c3:ac:af:eb:41:94:43: d6:05:b5:4c:c9:05:39:3d:70:0e:56:f2:31:f4:d1: 44:16:ab:89:9f:0d:78:77:d5:17:1b:e7:7e:38:4d: c5:09:f4:17:c9:35:40:3a:b4:c7:9a:8e:ed:7a:0f: 64:09:04:ad:a7:35:52:88:32:90:90:a0:74:27:3b: 6d:88:c4:95:f1:d9:a0:a6:77:82:49:af:f5:d8:9f: 14:52:2b:a3:4b:4e:70:5b:61:64:74:e4:c2:aa:e7: 0f:eb:c0:9c:4c:82:c3:2c:b9:c9:21:25:fc:89:74: 68:75:b1:8a:48:97:78:01:73:84:9c:fd:53:68:4f: 35:b9:9c:65:d2:15:1d:09:be:7f:fa:f6:ef:15:8a: 8d:53:30:9a:a6:f3:af:f9:88:aa:0a:86:1c:42:83: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:E7:48:23:02:39:39:DE:3F:9A:D3:B8:CF:92:67:22:79:1D:62 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4d:b6:2e:af:7c:70:83:96:50:91:a2:1a:71:7d:5b:0d:79: eb:e9:f9:27:18:e8:38:bb:21:57:48:f9:c1:ee:37:66:69:1f: f6:1d:82:88:3e:e0:18:9e:b8:72:1d:ec:4c:45:b6:cd:77:eb: 54:3a:ef:e0:ff:d4:99:c6:86:7c:c0:33:86:47:58:48:0e:24: df:42:ce:6e:22:d9:f3:23:ee:95:5f:d7:18:2d:5c:45:ba:59: c1:fc:6c:a0:f9:2d:96:db:3f:40:90:b2:54:01:b7:bb:7b:67: b5:a6:4d:c2:d3:1c:54:29:6b:b1:c5:3d:0e:9a:5e:d0:0a:19: 32:6d:77:7d:1e:a7:15:db:98:4f:6f:ff:3a:b8:37:13:4d:cc: 37:26:f0:7f:f8:a8:b2:f4:e6:fe:a2:94:c5:b1:80:32:81:c6: f7:35:fd:f0:db:72:df:7c:a6:8e:e3:5d:37:79:bb:cd:15:93: 3c:5f:e9:ee:f3:b9:0f:b4:2e:ff:01:75:5d:37:e6:a9:f9:f3: 72:0c:f7:f6:5f:1d:df:cc:86:f3:4b:c5:34:bc:94:f1:d3:67: 1c:f2:b2:53:a9:79:bd:3a:75:3d:88:7f:6f:f0:c9:82:b0:a5: b6:79:c0:07:10:25:bd:88:fb:4d:11:68:d2:69:f9:b0:ce:da: e7:f3:24:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY88CEFE3uYqIy8qPb3ViJOU7M/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA4MDUwMTE3MjJaFw0yNTA4MDgwNTIwMjJaMDMxMTAvBgNV BAMTKDU2RDJFNzQ4MjMwMjM5MzlERTNGOUFEM0I4Q0Y5MjY3MjI3OTFENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1HpfblvWIKCLBfkTX27I7Fji XGXzMS+xHpG541XSNXDoAZDUfQ7HTUsmDe9Y1akrH4nARrGJ/Y3fQHy8zt5lCwoc bw2I3k4Kv82WBpy+rk+3h5tNvnmUhlTC/gtObmSbw6yv60GUQ9YFtUzJBTk9cA5W 8jH00UQWq4mfDXh31Rcb5344TcUJ9BfJNUA6tMeaju16D2QJBK2nNVKIMpCQoHQn O22IxJXx2aCmd4JJr/XYnxRSK6NLTnBbYWR05MKq5w/rwJxMgsMsuckhJfyJdGh1 sYpIl3gBc4Sc/VNoTzW5nGXSFR0Jvn/69u8Vio1TMJqm86/5iKoKhhxCg7+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtLnSCMCOTneP5rTuM+SZyJ5HWIwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZNti6vfHCDllCRohpxfVsNeevp+ScY6Di7 IVdI+cHuN2ZpH/Ydgog+4BieuHId7ExFts1361Q67+D/1JnGhnzAM4ZHWEgOJN9C zm4i2fMj7pVf1xgtXEW6WcH8bKD5LZbbP0CQslQBt7t7Z7WmTcLTHFQpa7HFPQ6a XtAKGTJtd30epxXbmE9v/zq4NxNNzDcm8H/4qLL05v6ilMWxgDKBxvc1/fDbct98 po7jXTd5u80Vkzxf6e7zuQ+0Lv8BdV035qn583IM9/ZfHd/MhvNLxTS8lPHTZxzy slOpeb06dT2If2/wyYKwpbZ5wAcQJb2I+00RaNJp+bDO2ufzJNY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:25:41 2025 by rpki-client