$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: FixeolHi1HZza+4R0hUkLv7MesGKXRdPYzTq3E/VHXo= Subject key identifier: 39:DC:A3:94:B0:F1:E4:B4:00:30:BE:00:E7:EF:2B:C6:85:A8:45:40 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 5ADB5EBCF8541F9DFD265AA73ACCE8170676599A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 018C Signing time: Mon 28 Apr 2025 09:42:07 +0000 Manifest this update: Mon 28 Apr 2025 09:37:07 +0000 Manifest next update: Thu 01 May 2025 10:40:07 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: AbturO2XiG0diWjFBpfLSpWGNli34Wol3s3FOt5Dd7g=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 10:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:db:5e:bc:f8:54:1f:9d:fd:26:5a:a7:3a:cc:e8:17:06:76:59:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Apr 28 09:37:07 2025 GMT Not After : May 1 10:40:07 2025 GMT Subject: CN=39DCA394B0F1E4B40030BE00E7EF2BC685A84540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:c0:b9:43:08:bd:cb:4a:9b:f3:36:88:b6: fa:11:e2:2f:15:23:07:0e:a1:16:30:ab:96:24:c1: b2:84:3c:55:11:3a:60:fc:9d:fb:05:4f:ab:aa:5c: a5:20:84:73:c3:6d:d3:9d:9f:ef:e5:0f:29:87:b4: 4c:95:e0:83:71:f5:93:5a:e0:8d:a1:cf:81:91:fb: 1b:16:43:e9:51:a5:28:61:a1:52:a9:30:80:d4:b0: 86:18:8b:36:18:ed:97:50:9b:a7:66:f8:bb:f3:ff: eb:a4:9c:c2:2e:04:44:d7:ee:05:39:d3:8b:83:ba: aa:92:85:52:4f:74:0b:b1:23:ea:16:c3:04:4e:c0: 11:2a:1d:a8:e7:0b:43:21:09:81:2e:7f:4e:cc:27: 01:b2:89:e7:41:b8:8a:23:e8:f6:b2:39:36:69:fd: 63:56:4a:74:1a:83:66:38:b1:19:c9:6b:0b:cb:5c: d6:0f:f6:99:5f:a3:3f:6c:ec:8c:72:d0:d3:78:f9: 78:1f:bd:4d:c6:6b:79:ea:83:61:d8:0f:57:88:eb: cf:93:1b:1e:5a:ce:71:eb:37:4f:cc:5f:2b:ba:66: 9a:b2:f0:8b:4a:a9:5e:95:02:e6:af:0f:cd:2c:ae: fa:d5:d5:fd:50:f9:34:bd:eb:71:b0:ac:3a:85:6e: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DC:A3:94:B0:F1:E4:B4:00:30:BE:00:E7:EF:2B:C6:85:A8:45:40 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d9:f0:d0:ca:14:be:db:0b:d2:93:de:66:f7:22:6e:de:cb: 53:23:fe:2e:42:d0:b2:a9:94:f1:be:16:0a:fa:bd:d0:fe:0d: 58:da:b3:c9:34:92:15:87:69:0d:c2:fb:63:5d:35:03:ce:f7: ed:c7:65:b2:e8:e3:09:d7:96:56:0c:f3:8c:f2:bd:c1:97:0a: 87:e9:4b:0e:ae:8f:0b:bc:aa:b7:65:ff:76:0d:ed:8b:57:25: 03:ca:ff:b0:64:d9:e1:9d:6c:da:0d:da:ac:14:50:64:f7:62: 53:49:d4:fd:3c:b4:ef:93:7e:8a:c0:da:ca:84:d5:6d:2c:d8: 10:29:24:db:f1:1f:32:6e:ee:4a:cb:23:22:4e:8b:4b:b3:dc: b1:03:1e:c2:16:8c:ef:71:bd:3c:e1:10:11:7c:11:e5:0b:3b: 02:77:fa:b5:48:a5:7d:56:1a:82:22:85:27:66:07:bf:25:5c: 17:d0:2e:ff:a8:52:ba:fb:cc:5a:6d:66:84:d7:69:7b:2c:b9: a5:cd:4a:58:1e:f6:e2:42:26:a7:c9:c1:c4:5d:71:5e:9c:7b: c0:ac:d2:f6:7c:8b:81:15:d9:d3:57:26:c3:07:54:1a:9e:ec: 96:15:94:5e:38:aa:43:50:65:37:ea:a1:e6:85:d8:1c:71:09: 98:37:9b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWttevPhUH539JlqnOszoFwZ2WZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTA0MjgwOTM3MDdaFw0yNTA1MDExMDQwMDdaMDMxMTAvBgNV BAMTKDM5RENBMzk0QjBGMUU0QjQwMDMwQkUwMEU3RUYyQkM2ODVBODQ1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicsC5Qwi9y0qb8zaItvoR4i8V IwcOoRYwq5YkwbKEPFUROmD8nfsFT6uqXKUghHPDbdOdn+/lDymHtEyV4INx9ZNa 4I2hz4GR+xsWQ+lRpShhoVKpMIDUsIYYizYY7ZdQm6dm+Lvz/+uknMIuBETX7gU5 04uDuqqShVJPdAuxI+oWwwROwBEqHajnC0MhCYEuf07MJwGyiedBuIoj6PayOTZp /WNWSnQag2Y4sRnJawvLXNYP9plfoz9s7Ixy0NN4+XgfvU3Ga3nqg2HYD1eI68+T Gx5aznHrN0/MXyu6Zpqy8ItKqV6VAuavD80srvrV1f1Q+TS963GwrDqFbnYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdyjlLDx5LQAML4A5+8rxoWoRUAwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/Z8NDKFL7bC9KT3mb3Im7ey1Mj/i5C0LKp lPG+Fgr6vdD+DVjas8k0khWHaQ3C+2NdNQPO9+3HZbLo4wnXllYM84zyvcGXCofp Sw6ujwu8qrdl/3YN7YtXJQPK/7Bk2eGdbNoN2qwUUGT3YlNJ1P08tO+TforA2sqE 1W0s2BApJNvxHzJu7krLIyJOi0uz3LEDHsIWjO9xvTzhEBF8EeULOwJ3+rVIpX1W GoIihSdmB78lXBfQLv+oUrr7zFptZoTXaXssuaXNSlge9uJCJqfJwcRdcV6ce8Cs 0vZ8i4EV2dNXJsMHVBqe7JYVlF44qkNQZTfqoeaF2BxxCZg3m9w= -----END CERTIFICATE-----Generated at Wed Apr 30 00:19:27 2025 by rpki-client