$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: TVrLbyurdXbm5jcHTBvMWSqeAEklmwUNSCbIXt0xHH0= Subject key identifier: 4B:92:E9:D4:B4:BF:FF:19:24:D1:CF:E2:52:26:68:27:97:C4:EF:BE Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 354C74347E4307BFBD509FF5CB8BAFD09E260FE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 0167 Signing time: Fri 22 Aug 2025 15:32:17 +0000 Manifest this update: Fri 22 Aug 2025 15:27:17 +0000 Manifest next update: Mon 25 Aug 2025 17:01:17 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) 2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: 6vA1kc0BxcSlRJFGjtslHwiS6zyZOYV1I3q3mt73ssY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4c:74:34:7e:43:07:bf:bd:50:9f:f5:cb:8b:af:d0:9e:26:0f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Aug 22 15:27:17 2025 GMT Not After : Aug 25 17:01:17 2025 GMT Subject: CN=4B92E9D4B4BFFF1924D1CFE25226682797C4EFBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:b0:90:85:54:ce:fb:f2:a3:55:ac:3e:2b: 68:86:c3:73:87:0a:9d:2f:d7:39:1b:b3:bf:41:ed: 2a:98:7f:3b:15:54:09:43:8c:21:3c:06:a2:2a:b0: 5f:7a:74:a0:b5:79:ea:a8:7c:ed:52:67:bf:8d:15: 98:c7:f3:75:3a:61:bb:36:90:90:a5:b1:3d:2b:3c: fc:1f:f6:b5:37:04:30:24:24:d8:55:0a:53:80:39: c6:15:f4:1e:20:76:51:c5:c6:48:5c:23:51:bf:49: c8:19:93:07:43:8a:66:9d:6e:ed:e4:8e:8e:95:a6: 53:90:8d:6b:90:ec:d5:75:26:41:07:df:d0:cf:a6: cd:d5:58:10:1a:2c:e1:98:76:99:48:2f:be:42:ca: 6d:df:ce:c1:e0:e6:d8:6a:9a:7a:2c:0b:b1:63:f3: 31:aa:3a:67:0a:31:a8:c5:18:7e:1c:93:77:10:a5: ec:92:0b:2f:4c:cc:8e:c3:a1:b5:40:80:b8:f8:83: 2c:52:6a:89:40:b0:b5:2e:f5:48:05:96:aa:3a:68: ed:87:97:fd:da:30:48:e6:4e:6d:da:ff:48:c7:7b: c9:35:72:14:56:2e:90:39:41:20:c5:f2:94:88:02: 43:cf:7e:b2:2a:b2:84:fe:93:64:37:1d:b7:79:eb: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:E9:D4:B4:BF:FF:19:24:D1:CF:E2:52:26:68:27:97:C4:EF:BE X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fc:de:33:84:a7:5f:6b:61:34:c6:c6:93:39:77:a1:58:ab: 2f:77:d0:9c:fb:ac:6c:3a:c3:bc:ce:6b:99:6a:7d:50:a4:27: e6:ea:a4:cd:53:2b:69:d4:a3:ce:f2:ab:7f:2f:ad:45:31:9b: 5d:6e:e0:42:e8:92:14:a8:c8:0b:a2:31:1d:80:e1:a8:af:e9: 0e:af:e9:c3:2b:0d:3c:01:36:ad:43:7e:87:7a:d6:02:e7:55: 2e:59:e9:24:e0:15:7f:ac:4d:c9:f1:57:d8:d2:cb:9f:68:eb: dc:17:60:f4:18:9e:7d:af:b8:a5:4d:c6:6e:43:91:9b:b8:5c: eb:29:9b:ff:b3:98:62:ae:75:cb:49:bb:a6:ea:f0:a5:61:e8: 79:51:e0:db:4e:da:15:43:f2:72:41:c4:d1:25:36:c8:ce:54: 18:27:c3:40:d4:01:b9:ac:a8:37:fa:c8:67:2b:9a:94:4f:59: 8a:03:cf:20:a0:82:8b:c3:60:70:7c:07:3a:8d:f5:aa:3c:71: 31:5b:5b:93:2b:7b:dc:1e:96:d2:9c:c3:0a:e1:00:cd:54:e4: 3f:dc:3f:39:2c:45:88:e7:52:18:24:2d:cb:c0:91:b6:89:a9: 20:f6:be:51:e7:0a:6c:7e:b7:bb:d4:fd:28:e8:df:27:dd:8d: e0:c2:90:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUx0NH5DB7+9UJ/1y4uv0J4mD+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTA4MjIxNTI3MTdaFw0yNTA4MjUxNzAxMTdaMDMxMTAvBgNV BAMTKDRCOTJFOUQ0QjRCRkZGMTkyNEQxQ0ZFMjUyMjY2ODI3OTdDNEVGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyLCQhVTO+/KjVaw+K2iGw3OH Cp0v1zkbs79B7SqYfzsVVAlDjCE8BqIqsF96dKC1eeqofO1SZ7+NFZjH83U6Ybs2 kJClsT0rPPwf9rU3BDAkJNhVClOAOcYV9B4gdlHFxkhcI1G/ScgZkwdDimadbu3k jo6VplOQjWuQ7NV1JkEH39DPps3VWBAaLOGYdplIL75Cym3fzsHg5thqmnosC7Fj 8zGqOmcKMajFGH4ck3cQpeySCy9MzI7DobVAgLj4gyxSaolAsLUu9UgFlqo6aO2H l/3aMEjmTm3a/0jHe8k1chRWLpA5QSDF8pSIAkPPfrIqsoT+k2Q3Hbd562kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS5Lp1LS//xkk0c/iUiZoJ5fE774wHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn83jOEp19rYTTGxpM5d6FYqy930Jz7rGw6 w7zOa5lqfVCkJ+bqpM1TK2nUo87yq38vrUUxm11u4ELokhSoyAuiMR2A4aiv6Q6v 6cMrDTwBNq1Dfod61gLnVS5Z6STgFX+sTcnxV9jSy59o69wXYPQYnn2vuKVNxm5D kZu4XOspm/+zmGKudctJu6bq8KVh6HlR4NtO2hVD8nJBxNElNsjOVBgnw0DUAbms qDf6yGcrmpRPWYoDzyCggovDYHB8BzqN9ao8cTFbW5Mre9weltKcwwrhAM1U5D/c PzksRYjnUhgkLcvAkbaJqSD2vlHnCmx+t7vU/Sjo3yfdjeDCkM4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:13 2025 by rpki-client