$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: mzggdAtqFKguDptU9+p6qOPzOZQgtvKl8UUpUYE0rBE= Subject key identifier: 05:6D:A8:39:74:24:F5:7B:1A:49:58:D4:70:57:71:9D:B4:24:C7:4F Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 0C11B2CF501E7C8E6EC7CFB0DBADA3A30D82191A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 015B Signing time: Tue 17 Jun 2025 19:20:39 +0000 Manifest this update: Tue 17 Jun 2025 19:15:39 +0000 Manifest next update: Fri 20 Jun 2025 22:23:39 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: hO/zC5nF7a4Fe9VXp7PHUxJBXsSj95lwDW8a9sVZDkc=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:11:b2:cf:50:1e:7c:8e:6e:c7:cf:b0:db:ad:a3:a3:0d:82:19:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Jun 17 19:15:39 2025 GMT Not After : Jun 20 22:23:39 2025 GMT Subject: CN=056DA8397424F57B1A4958D47057719DB424C74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:c4:cd:41:3e:3d:34:d8:da:a4:42:73:40: 57:f0:04:ac:7a:8a:60:57:f1:2e:77:d5:5e:ec:86: 6a:bd:77:b9:0b:9d:07:f2:6d:a5:5b:8e:52:43:c6: d5:1f:56:39:23:10:2c:ec:2c:ca:5c:ac:9c:d7:ca: 6a:ca:11:23:99:9f:6a:08:da:e5:ef:17:98:81:6c: 6e:ee:ad:3a:cb:98:fb:de:44:43:0b:15:e0:84:5c: 2f:70:43:d5:7e:69:ad:e1:e6:3e:bf:ed:16:97:4d: 9c:a5:fc:93:4e:86:43:cd:b7:b9:d8:72:4f:05:18: cb:9f:66:eb:b7:a5:7d:a8:4b:68:a0:42:3f:7d:28: 04:15:ce:df:54:a1:06:7f:15:0a:6a:6b:16:cb:2e: 7a:89:89:45:eb:71:64:0a:44:e6:15:4b:60:c2:34: e6:0a:f8:8e:ba:83:b5:0d:dc:11:db:20:57:57:d4: e9:b1:39:cc:38:ec:9f:ae:ff:5b:5d:6f:f0:f7:7d: 94:67:9a:2c:33:8e:ff:31:b5:33:69:ad:9a:de:42: fb:d6:df:df:b2:e0:ea:b7:70:7a:da:37:a9:b4:73: 6b:fe:1e:74:ff:1d:5b:d2:1b:8e:b6:9f:a9:ae:de: ef:a2:90:29:44:7b:63:fe:b1:46:6f:83:06:03:e6: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6D:A8:39:74:24:F5:7B:1A:49:58:D4:70:57:71:9D:B4:24:C7:4F X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:94:6c:45:02:de:b4:69:47:5d:c8:1a:39:d1:fc:c5:aa:8c: 5a:cf:e6:f3:5f:3a:9a:20:02:ac:bc:39:ca:e6:30:9c:04:9e: 4f:55:89:b6:f2:96:f4:48:db:7c:d0:91:e7:df:aa:7f:19:b9: df:ab:aa:5b:f6:38:df:76:1b:f1:ef:bc:88:19:23:11:5f:9f: 09:99:d4:95:98:aa:c5:2d:36:35:83:25:98:95:5c:2d:1e:ca: 89:e3:60:e2:17:24:7b:a7:8d:21:e3:8a:b2:57:e2:ce:05:5b: 48:c9:bd:bd:22:31:6e:d9:3a:e5:e1:29:f7:34:dd:4e:3a:ef: 9c:63:62:1a:a1:aa:a1:7a:06:c8:1d:8b:0a:7a:31:a9:48:2e: c4:5b:86:3b:4a:60:46:71:0c:fa:87:b2:6c:42:00:e2:68:2c: 14:c6:64:f5:b4:a7:72:26:aa:4b:1e:3e:f0:de:78:5a:64:58: a6:f4:40:68:5f:fa:10:c3:16:f3:ba:3a:b7:8e:3d:53:56:78: 3b:a3:ee:91:f0:66:19:6f:c0:b8:94:91:2c:8c:3c:f9:29:e2: f0:a1:38:86:f4:66:f1:45:44:b1:98:cc:c4:dc:22:72:cc:1d: b2:70:d8:84:ef:1b:3b:85:84:a4:51:77:bc:52:5d:8a:5d:ec: e8:2c:4f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBGyz1AefI5ux8+w262jow2CGRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTA2MTcxOTE1MzlaFw0yNTA2MjAyMjIzMzlaMDMxMTAvBgNV BAMTKDA1NkRBODM5NzQyNEY1N0IxQTQ5NThENDcwNTc3MTlEQjQyNEM3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOisTNQT49NNjapEJzQFfwBKx6 imBX8S531V7shmq9d7kLnQfybaVbjlJDxtUfVjkjECzsLMpcrJzXymrKESOZn2oI 2uXvF5iBbG7urTrLmPveREMLFeCEXC9wQ9V+aa3h5j6/7RaXTZyl/JNOhkPNt7nY ck8FGMufZuu3pX2oS2igQj99KAQVzt9UoQZ/FQpqaxbLLnqJiUXrcWQKROYVS2DC NOYK+I66g7UN3BHbIFdX1OmxOcw47J+u/1tdb/D3fZRnmiwzjv8xtTNprZreQvvW 39+y4Oq3cHraN6m0c2v+HnT/HVvSG462n6mu3u+ikClEe2P+sUZvgwYD5qslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBW2oOXQk9XsaSVjUcFdxnbQkx08wHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyUbEUC3rRpR13IGjnR/MWqjFrP5vNfOpog Aqy8OcrmMJwEnk9VibbylvRI23zQkeffqn8Zud+rqlv2ON92G/HvvIgZIxFfnwmZ 1JWYqsUtNjWDJZiVXC0eyonjYOIXJHunjSHjirJX4s4FW0jJvb0iMW7ZOuXhKfc0 3U4675xjYhqhqqF6Bsgdiwp6MalILsRbhjtKYEZxDPqHsmxCAOJoLBTGZPW0p3Im qksePvDeeFpkWKb0QGhf+hDDFvO6OreOPVNWeDuj7pHwZhlvwLiUkSyMPPkp4vCh OIb0ZvFFRLGYzMTcInLMHbJw2ITvGzuFhKRRd7xSXYpd7OgsTwY= -----END CERTIFICATE-----Generated at Wed Jun 18 05:20:07 2025 by rpki-client