$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: D78PIGfjKxKRoM1raBAIpz0J503JibANIQYbuw8dkvM= Subject key identifier: 05:BE:03:DD:60:9F:FF:45:E3:62:7B:F9:05:8A:7A:29:AF:47:92:4D Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 458F515820CC4F3005E58197EB100D391F407917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01E0 Signing time: Tue 04 Nov 2025 05:22:08 +0000 Manifest this update: Tue 04 Nov 2025 05:17:08 +0000 Manifest next update: Fri 07 Nov 2025 08:56:08 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: dp61Et36G02p4vbMg4BH23upviHD0widj4en9fCFFEc=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:51:58:20:cc:4f:30:05:e5:81:97:eb:10:0d:39:1f:40:79:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Nov 4 05:17:08 2025 GMT Not After : Nov 7 08:56:08 2025 GMT Subject: CN=05BE03DD609FFF45E3627BF9058A7A29AF47924D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:cd:cf:e1:16:19:3d:b0:d1:4f:cf:60:ea: b9:75:36:60:b0:38:0f:62:bc:2f:d9:25:a4:27:51: e0:1b:40:97:22:3b:79:e4:d4:77:70:f1:21:57:aa: 95:81:83:4c:78:b7:55:e2:7f:2f:67:bf:c1:39:30: a2:45:ab:6b:68:3d:22:56:cb:1c:90:b7:e0:1b:a5: e4:44:40:4f:71:fc:ab:82:64:42:b1:fb:4f:fa:b4: 11:1a:fd:35:5d:48:0b:47:ed:78:05:db:c1:d1:3d: 35:1b:dc:6a:36:93:37:88:cd:c2:f5:7c:1f:a1:21: 4f:cd:65:53:e6:d7:62:4c:9f:46:59:7f:ed:29:37: 8f:94:12:72:f3:f2:95:7b:8a:38:cd:f0:d9:1e:32: f4:6e:5f:f6:7f:ac:26:4a:49:0d:23:27:c1:3f:c6: 7a:7c:9c:f4:a5:4d:ea:d8:d7:fe:81:f2:24:55:88: 8e:70:b4:50:a0:70:71:c9:66:e7:48:d4:d6:d3:5f: ad:00:32:51:e4:70:79:7d:8f:38:96:8a:e0:3c:5d: 56:53:17:53:19:04:ea:22:9e:3d:70:9a:82:de:3c: 56:6e:9b:d9:47:e8:fc:5a:93:55:2b:ce:53:00:cf: 9c:c5:4c:f4:87:e6:85:01:42:e4:d2:23:ce:bd:f5: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BE:03:DD:60:9F:FF:45:E3:62:7B:F9:05:8A:7A:29:AF:47:92:4D X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:62:c2:e1:6e:ce:eb:df:13:e6:3a:f2:7a:d7:c0:0d:d7:cc: 12:59:3a:ee:3c:4c:f8:5b:00:e1:0d:fa:bf:b6:43:d3:90:41: a4:a9:73:3e:b3:a2:63:1a:c2:d8:e2:ad:50:52:e1:11:f9:02: 62:c2:0c:8f:7a:05:fd:33:31:70:17:62:b2:03:b3:8b:1c:6c: a7:54:f6:91:cb:77:e7:16:09:96:9e:3d:0a:ea:ff:21:30:39: 1b:c8:51:d4:d3:7d:fa:84:0c:fe:e2:a0:16:e8:a3:c3:b0:c8: 6a:df:08:03:b0:4a:ac:88:8e:06:29:89:70:eb:9b:6a:55:af: 9d:97:cc:dd:67:76:59:db:9c:59:bd:57:f3:a6:39:6e:0b:f6: 6d:82:e3:84:04:33:15:71:f2:fc:55:c2:36:5f:c2:73:24:80: 8d:9c:06:e5:e3:7b:33:de:15:89:c5:ea:72:e1:6c:9f:13:10: 7f:9a:77:3c:b4:82:5f:db:dc:cd:d9:0e:aa:67:a1:b4:93:ab: 3f:e9:11:36:2e:cc:71:15:b4:5e:74:bf:ef:52:ac:19:24:21: 8d:9f:eb:c3:9e:ed:dd:c7:9c:15:32:d6:9f:6a:ae:8a:aa:c8: e8:54:ff:a4:a8:b6:f5:65:09:16:cc:1a:e7:76:ea:76:e9:0b: b4:48:ec:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY9RWCDMTzAF5YGX6xANOR9AeRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTExMDQwNTE3MDhaFw0yNTExMDcwODU2MDhaMDMxMTAvBgNV BAMTKDA1QkUwM0RENjA5RkZGNDVFMzYyN0JGOTA1OEE3QTI5QUY0NzkyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAM3P4RYZPbDRT89g6rl1NmCw OA9ivC/ZJaQnUeAbQJciO3nk1Hdw8SFXqpWBg0x4t1Xify9nv8E5MKJFq2toPSJW yxyQt+AbpeREQE9x/KuCZEKx+0/6tBEa/TVdSAtH7XgF28HRPTUb3Go2kzeIzcL1 fB+hIU/NZVPm12JMn0ZZf+0pN4+UEnLz8pV7ijjN8NkeMvRuX/Z/rCZKSQ0jJ8E/ xnp8nPSlTerY1/6B8iRViI5wtFCgcHHJZudI1NbTX60AMlHkcHl9jziWiuA8XVZT F1MZBOoinj1wmoLePFZum9lH6Pxak1UrzlMAz5zFTPSH5oUBQuTSI8699X8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBb4D3WCf/0XjYnv5BYp6Ka9Hkk0wHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9iwuFuzuvfE+Y68nrXwA3XzBJZOu48TPhb AOEN+r+2Q9OQQaSpcz6zomMawtjirVBS4RH5AmLCDI96Bf0zMXAXYrIDs4scbKdU 9pHLd+cWCZaePQrq/yEwORvIUdTTffqEDP7ioBboo8OwyGrfCAOwSqyIjgYpiXDr m2pVr52XzN1ndlnbnFm9V/OmOW4L9m2C44QEMxVx8vxVwjZfwnMkgI2cBuXjezPe FYnF6nLhbJ8TEH+adzy0gl/b3M3ZDqpnobSTqz/pETYuzHEVtF50v+9SrBkkIY2f 68Oe7d3HnBUy1p9qroqqyOhU/6SotvVlCRbMGud26nbpC7RI7Ns= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:29 2025 by rpki-client