$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: yxAc3dmIPmQpF1zg2hQ7fEERsF8j1sQpS+yKAJV+200= Subject key identifier: 89:BD:72:59:B3:E5:19:9C:DF:47:12:05:F1:F4:12:28:53:59:6C:D2 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 2F349AFF36BF4B19F2DD04A9BB9BD1B9B55683CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 0180 Signing time: Fri 17 Oct 2025 20:22:16 +0000 Manifest this update: Fri 17 Oct 2025 20:17:16 +0000 Manifest next update: Tue 21 Oct 2025 07:16:16 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) 2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: 2F3kVNzt73UxDn8N/svSHzG36MUG7zm3RwYJeCTwkgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 07:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:34:9a:ff:36:bf:4b:19:f2:dd:04:a9:bb:9b:d1:b9:b5:56:83:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Oct 17 20:17:16 2025 GMT Not After : Oct 21 07:16:16 2025 GMT Subject: CN=89BD7259B3E5199CDF471205F1F4122853596CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4d:95:49:2e:aa:68:18:15:21:e4:64:ae:8f: d9:ae:93:a0:2b:27:07:a8:22:02:0a:ae:16:0a:2f: 6e:b0:a0:ba:f4:a9:99:23:cc:a0:6d:24:57:f1:27: a3:ad:9a:80:76:f0:f2:6e:d6:60:e6:38:98:d2:f4: a7:41:9a:28:c4:cb:b7:9b:1e:c6:a8:b7:a6:9a:dc: 69:b0:54:a9:14:f7:b6:e9:79:a3:b1:09:19:53:6b: 59:a7:99:b0:19:33:68:23:a7:c7:7e:74:c8:e2:3e: 52:5f:0e:e9:c7:26:03:80:52:ea:ef:fa:a4:f1:ca: db:04:b0:a9:22:e8:e7:59:6b:75:b5:aa:b1:d3:df: 5b:2e:e3:51:33:95:92:d8:27:09:c6:26:17:2f:b5: 16:d6:3e:9c:be:3f:f5:f0:41:c3:4a:a9:e0:f9:b0: ef:d7:9d:27:d4:ca:e8:70:87:78:b9:17:bf:25:cf: 31:f2:8d:30:67:04:2b:69:a9:5a:35:15:06:77:80: 4c:98:2d:8b:5b:d7:9c:bc:db:82:98:73:13:49:2d: 94:77:7d:b5:c4:8a:cc:d4:76:0b:41:a0:37:cd:fc: 6b:1e:64:29:44:12:a7:ce:8a:4b:a3:58:66:cd:a8: 6f:db:4f:53:95:a0:3d:c2:f7:2c:c8:2b:46:b0:47: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:72:59:B3:E5:19:9C:DF:47:12:05:F1:F4:12:28:53:59:6C:D2 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:72:70:31:d4:b9:8a:72:1a:ab:e2:82:e0:dc:b1:f2:66:61: 3c:81:5b:af:cd:5d:c9:73:67:86:55:dd:a5:9b:d0:45:c3:c2: 44:a3:fa:06:f0:c8:ea:f1:ec:b9:4e:31:6f:af:45:52:cc:59: 0c:0a:b2:aa:03:7b:c0:ba:bf:dd:27:92:e2:35:62:d1:9e:75: dc:03:83:69:32:30:01:e7:c3:78:cc:55:5a:43:85:59:00:94: 5c:61:b9:b0:d4:6d:9e:0e:94:6e:22:1f:1e:6f:9a:6c:9d:18: 7d:e7:1b:b3:5f:6b:ce:37:7a:93:6e:5f:2d:32:9b:90:c1:26: 0d:9b:13:c9:5c:91:2b:30:f8:4c:93:82:7a:98:8f:91:61:69: f9:ae:db:0a:79:a9:92:e2:ce:4a:24:41:9e:57:ec:70:3c:c8: 82:3e:ae:bf:e6:57:41:b6:31:c0:10:5d:31:8d:d2:9a:19:29: 59:22:49:a4:8a:30:44:f6:fe:0b:27:c2:94:f1:50:1e:1f:dc: 98:45:91:ee:fd:27:ea:14:d9:dd:b6:0f:5c:2c:7a:e9:cc:49: f0:b7:cf:33:cb:0e:5e:a5:96:1d:37:d9:37:39:b3:0f:1a:23: dc:c1:fd:41:06:ac:53:b2:b4:20:dc:62:40:1d:a7:46:f6:b2: 91:11:ba:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzSa/za/Sxny3QSpu5vRubVWg8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTEwMTcyMDE3MTZaFw0yNTEwMjEwNzE2MTZaMDMxMTAvBgNV BAMTKDg5QkQ3MjU5QjNFNTE5OUNERjQ3MTIwNUYxRjQxMjI4NTM1OTZDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTZVJLqpoGBUh5GSuj9muk6Ar JweoIgIKrhYKL26woLr0qZkjzKBtJFfxJ6OtmoB28PJu1mDmOJjS9KdBmijEy7eb Hsaot6aa3GmwVKkU97bpeaOxCRlTa1mnmbAZM2gjp8d+dMjiPlJfDunHJgOAUurv +qTxytsEsKki6OdZa3W1qrHT31su41EzlZLYJwnGJhcvtRbWPpy+P/XwQcNKqeD5 sO/XnSfUyuhwh3i5F78lzzHyjTBnBCtpqVo1FQZ3gEyYLYtb15y824KYcxNJLZR3 fbXEiszUdgtBoDfN/GseZClEEqfOikujWGbNqG/bT1OVoD3C9yzIK0awRxmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUib1yWbPlGZzfRxIF8fQSKFNZbNIwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhycDHUuYpyGqviguDcsfJmYTyBW6/NXclz Z4ZV3aWb0EXDwkSj+gbwyOrx7LlOMW+vRVLMWQwKsqoDe8C6v90nkuI1YtGeddwD g2kyMAHnw3jMVVpDhVkAlFxhubDUbZ4OlG4iHx5vmmydGH3nG7Nfa843epNuXy0y m5DBJg2bE8lckSsw+EyTgnqYj5Fhafmu2wp5qZLizkokQZ5X7HA8yII+rr/mV0G2 McAQXTGN0poZKVkiSaSKMET2/gsnwpTxUB4f3JhFke79J+oU2d22D1wseunMSfC3 zzPLDl6llh032Tc5sw8aI9zB/UEGrFOytCDcYkAdp0b2spERumo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:00 2025 by rpki-client