$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: y1eBX9ZPcxnsTqisdoxTXOiwMBPTtxqUFI1gOr21lnk= Subject key identifier: E7:12:DA:0A:2C:AC:5A:5D:80:90:D4:29:11:A1:D4:5E:8E:25:71:75 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 2C3099746E1F8A2150837E196BA903CEFF1720A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 0171 Signing time: Wed 06 Aug 2025 21:30:39 +0000 Manifest this update: Wed 06 Aug 2025 21:25:39 +0000 Manifest next update: Sat 09 Aug 2025 21:30:39 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) 2: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: UU2M6vxVCIDcU3u5zZA4QE9biBZWj+5l31F/7cSteiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:99:74:6e:1f:8a:21:50:83:7e:19:6b:a9:03:ce:ff:17:20:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Aug 6 21:25:39 2025 GMT Not After : Aug 9 21:30:39 2025 GMT Subject: CN=E712DA0A2CAC5A5D8090D42911A1D45E8E257175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:de:1c:2b:29:4c:46:ee:5e:ef:aa:6e:b3: 90:f6:3f:2c:37:ca:9e:02:1b:b1:ce:6e:48:22:dc: cc:da:19:ae:59:a9:4b:38:90:03:72:c5:f1:a2:29: ca:ae:ea:3c:fa:be:92:4e:53:25:a0:23:28:a5:ca: 21:b3:69:b5:8c:be:09:f3:e2:1b:3a:e4:5f:02:df: 80:5f:bb:0c:12:14:11:67:9d:6a:50:39:37:eb:d9: 3a:4a:60:0b:5b:16:59:a9:79:eb:16:0b:41:bd:e1: b9:a4:5f:97:d1:50:f4:91:d2:07:c9:1d:38:84:b8: 6b:db:1b:3f:10:6c:7d:4c:18:fa:3d:82:60:b9:47: 47:e1:87:71:5e:2c:1a:cf:58:4d:53:d9:c9:d9:c8: d2:a1:ea:4b:a6:57:af:e3:35:ee:a5:33:d7:8e:dd: 14:79:08:51:56:7a:b5:a3:33:a7:27:1f:43:1a:e6: 15:07:72:65:7e:46:9e:f3:d2:4c:0e:27:e2:4b:df: 78:18:e3:7e:81:58:36:b0:15:9d:b6:ec:67:1f:fd: e3:be:c9:71:3b:2a:51:12:43:ed:91:7c:93:3e:86: eb:9a:bd:65:f0:c1:5e:59:30:c7:be:6f:0c:bf:cc: 79:90:48:05:bc:ed:7f:06:4a:a9:a2:68:b1:61:41: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:12:DA:0A:2C:AC:5A:5D:80:90:D4:29:11:A1:D4:5E:8E:25:71:75 X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:92:39:9b:60:32:29:28:80:d8:ef:a8:6f:30:89:ed:b3: f8:0d:27:fb:1a:79:06:03:2b:28:5a:7d:ce:9e:12:cc:1d:b4: 37:37:be:4f:36:6f:d3:ee:77:65:e2:fc:1e:5b:9e:49:a3:e6: 04:a5:b4:95:aa:f3:58:3a:6d:23:b2:85:54:38:20:b8:af:42: 2d:9b:e2:3e:82:72:ea:3d:19:99:fc:c0:d1:27:a1:b5:fa:26: 26:cb:c8:4a:84:96:3a:bd:1a:ea:b1:b5:3a:cc:79:22:f9:3a: 7f:25:43:5d:6f:89:a8:e1:06:22:02:23:a2:38:bb:e3:ea:63: 2f:68:f1:d3:45:6f:7e:ca:d2:ba:1a:9b:49:4a:9f:6d:88:e0: 29:5c:cd:18:6c:b3:f4:80:9f:a5:31:6a:24:cd:4f:1e:6a:7c: 4d:46:79:5f:11:7f:3e:28:83:ee:c6:96:cc:bb:e0:9a:0b:f5: a1:fd:dd:87:44:5b:dd:86:ce:06:f0:d6:15:9a:d9:e4:01:90: 89:59:d4:d5:67:5f:bd:00:6d:9c:f7:07:d1:31:9a:41:1a:66: ef:4e:4a:28:7f:52:ea:07:83:82:61:b4:aa:74:b7:75:5e:d8: e9:7f:c0:80:72:3f:55:2f:08:a7:ed:3e:c6:ee:3f:97:46:1b: 95:71:5c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDCZdG4fiiFQg34Za6kDzv8XIKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA4MDYyMTI1MzlaFw0yNTA4MDkyMTMwMzlaMDMxMTAvBgNV BAMTKEU3MTJEQTBBMkNBQzVBNUQ4MDkwRDQyOTExQTFENDVFOEUyNTcxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYN4cKylMRu5e76pus5D2Pyw3 yp4CG7HObkgi3MzaGa5ZqUs4kANyxfGiKcqu6jz6vpJOUyWgIyilyiGzabWMvgnz 4hs65F8C34BfuwwSFBFnnWpQOTfr2TpKYAtbFlmpeesWC0G94bmkX5fRUPSR0gfJ HTiEuGvbGz8QbH1MGPo9gmC5R0fhh3FeLBrPWE1T2cnZyNKh6kumV6/jNe6lM9eO 3RR5CFFWerWjM6cnH0Ma5hUHcmV+Rp7z0kwOJ+JL33gY436BWDawFZ227Gcf/eO+ yXE7KlESQ+2RfJM+huuavWXwwV5ZMMe+bwy/zHmQSAW87X8GSqmiaLFhQUsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xLaCiysWl2AkNQpEaHUXo4lcXUwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDikjmbYDIpKIDY76hvMInts/gNJ/saeQYD Kyhafc6eEswdtDc3vk82b9Pud2Xi/B5bnkmj5gSltJWq81g6bSOyhVQ4ILivQi2b 4j6Ccuo9GZn8wNEnobX6JibLyEqEljq9GuqxtTrMeSL5On8lQ11viajhBiICI6I4 u+PqYy9o8dNFb37K0roam0lKn22I4ClczRhss/SAn6UxaiTNTx5qfE1GeV8Rfz4o g+7Glsy74JoL9aH93YdEW92Gzgbw1hWa2eQBkIlZ1NVnX70AbZz3B9ExmkEaZu9O Sih/UuoHg4JhtKp0t3Ve2Ol/wIByP1UvCKftPsbuP5dGG5VxXHY= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:07 2025 by rpki-client