$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: sERRQzG1y4JUT36fcd21SllGOUExn3iuyUnZo+hV15Q= Subject key identifier: 0B:02:70:80:B1:81:FB:93:15:04:61:81:BC:63:BA:0A:DD:BC:6E:FB Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 5909FF80DD94C8DD55B9547B6F249E11EA4501D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01A1 Signing time: Sun 15 Jun 2025 18:32:09 +0000 Manifest this update: Sun 15 Jun 2025 18:27:09 +0000 Manifest next update: Thu 19 Jun 2025 02:09:09 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: 92f3kb6HWIHbOtgCBxQ6lFUdWOMeaTJ1NP3/IUYCvLY=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:09:ff:80:dd:94:c8:dd:55:b9:54:7b:6f:24:9e:11:ea:45:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Jun 15 18:27:09 2025 GMT Not After : Jun 19 02:09:09 2025 GMT Subject: CN=0B027080B181FB9315046181BC63BA0ADDBC6EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:24:e1:05:8c:86:82:0f:25:68:28:53:26: c6:fb:98:53:94:1a:19:1b:f8:98:ad:cb:2c:bd:36: f8:29:f6:b2:6e:22:49:28:61:e3:5a:b4:28:51:e0: 2e:37:bc:3b:4e:64:55:3c:f4:f7:06:42:b5:d9:72: d2:0d:8a:a6:58:cc:55:74:b7:80:75:e1:bc:5d:85: fc:1c:38:4d:2d:76:5f:7f:2a:bd:8c:4e:b5:11:b7: f7:87:43:ff:d8:f4:5c:cb:37:52:5e:1a:51:38:c6: 4f:19:13:18:e3:2f:d8:b5:bf:92:11:a7:4f:ae:0e: 26:d0:81:55:54:51:99:0a:bc:f8:58:51:fe:a9:d5: f4:f7:5d:2c:1f:27:87:a1:f4:95:59:9e:94:2a:48: fb:71:ad:a5:e1:7a:b6:6f:46:d9:de:ef:f3:07:73: 51:81:14:53:59:b5:da:66:1f:81:37:fb:30:67:c9: 20:34:6b:9a:5b:71:df:1a:74:ac:97:1d:7a:85:6e: 1c:32:88:c7:df:46:7a:12:4b:d5:96:c1:6f:8f:2b: b0:68:b2:48:4a:ae:05:b0:79:f2:c0:c4:39:44:6e: fb:23:08:85:b6:af:77:0c:8a:0b:44:70:df:9b:58: 0d:f4:42:43:44:cc:17:86:27:71:9a:8b:1a:ac:7d: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:02:70:80:B1:81:FB:93:15:04:61:81:BC:63:BA:0A:DD:BC:6E:FB X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b3:ea:e5:a1:22:7f:2a:a9:ce:99:f1:46:f6:aa:0a:ee:7d: 8a:d2:b8:6b:1f:a0:96:4e:61:f9:92:f3:8e:8a:5d:11:4f:1f: 4e:f0:fc:dc:52:53:b5:8d:d1:dc:2c:80:9c:3b:af:cc:91:a7: 85:c6:a6:2b:b1:ba:73:71:50:e7:84:f8:ce:d1:4a:66:69:8c: 50:38:17:e7:db:05:2b:d8:7e:23:ad:bd:92:6b:2f:a3:9e:6f: af:46:74:2a:ff:42:77:a1:38:b9:29:d4:48:61:82:ed:40:a2: 81:b7:7a:c4:dc:8e:e6:86:02:19:b8:55:fe:96:a3:23:20:49: 05:cc:c0:42:2b:13:27:9a:f2:e6:ba:43:c0:8f:e8:b3:74:fd: 57:d3:21:1b:d2:13:0c:14:94:de:56:c8:55:b3:26:b5:f1:7d: 4c:84:0c:4b:68:77:24:b5:67:89:ae:cd:3b:18:5c:a4:e6:49: e5:b6:42:bf:e4:61:c9:f0:4b:35:f2:9e:70:c2:e9:b0:2f:af: af:d4:7d:e9:03:72:5e:21:6d:be:26:2c:06:18:a1:9b:10:01: 12:75:73:c8:aa:da:78:35:45:52:6b:e1:99:ee:15:cf:03:86: 62:b6:e9:91:1e:37:00:d3:a8:40:1b:cc:c7:9f:99:3a:f8:40: c3:9f:33:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQn/gN2UyN1VuVR7bySeEepFAdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA2MTUxODI3MDlaFw0yNTA2MTkwMjA5MDlaMDMxMTAvBgNV BAMTKDBCMDI3MDgwQjE4MUZCOTMxNTA0NjE4MUJDNjNCQTBBRERCQzZFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziCThBYyGgg8laChTJsb7mFOU Ghkb+Jityyy9Nvgp9rJuIkkoYeNatChR4C43vDtOZFU89PcGQrXZctINiqZYzFV0 t4B14bxdhfwcOE0tdl9/Kr2MTrURt/eHQ//Y9FzLN1JeGlE4xk8ZExjjL9i1v5IR p0+uDibQgVVUUZkKvPhYUf6p1fT3XSwfJ4eh9JVZnpQqSPtxraXherZvRtne7/MH c1GBFFNZtdpmH4E3+zBnySA0a5pbcd8adKyXHXqFbhwyiMffRnoSS9WWwW+PK7Bo skhKrgWwefLAxDlEbvsjCIW2r3cMigtEcN+bWA30QkNEzBeGJ3GaixqsfUIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCwJwgLGB+5MVBGGBvGO6Ct28bvswHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+z6uWhIn8qqc6Z8Ub2qgrufYrSuGsfoJZO YfmS846KXRFPH07w/NxSU7WN0dwsgJw7r8yRp4XGpiuxunNxUOeE+M7RSmZpjFA4 F+fbBSvYfiOtvZJrL6Oeb69GdCr/QnehOLkp1Ehhgu1AooG3esTcjuaGAhm4Vf6W oyMgSQXMwEIrEyea8ua6Q8CP6LN0/VfTIRvSEwwUlN5WyFWzJrXxfUyEDEtodyS1 Z4muzTsYXKTmSeW2Qr/kYcnwSzXynnDC6bAvr6/UfekDcl4hbb4mLAYYoZsQARJ1 c8iq2ng1RVJr4ZnuFc8DhmK26ZEeNwDTqEAbzMefmTr4QMOfM3I= -----END CERTIFICATE-----Generated at Tue Jun 17 09:50:58 2025 by rpki-client