$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: GwuobGsYv57bArUVyF8PCPT6aSfJfm+qjnAE8vHep8k= Subject key identifier: 5F:26:CF:B8:FC:CE:1B:EA:83:35:A3:93:13:61:DC:AF:CE:26:48:7E Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 663BF01DA58668A050AB74D689511B2417C9D1F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: EE Signing time: Sat 23 Aug 2025 13:00:40 +0000 Manifest this update: Sat 23 Aug 2025 12:55:40 +0000 Manifest next update: Wed 27 Aug 2025 00:51:40 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 4: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: rE27xBJRyE+H+yGG1eQDZZ5jt1Zq4zM9W0ID1r6iLrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3b:f0:1d:a5:86:68:a0:50:ab:74:d6:89:51:1b:24:17:c9:d1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Aug 23 12:55:40 2025 GMT Not After : Aug 27 00:51:40 2025 GMT Subject: CN=5F26CFB8FCCE1BEA8335A3931361DCAFCE26487E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:14:f0:6a:a5:3e:0e:6c:06:35:9d:60:9b: 52:b6:31:6f:c7:69:ae:34:c9:b9:45:a7:b9:29:11: 47:e9:39:2d:b4:a0:4e:ff:7f:55:05:95:d9:72:1c: 6d:88:86:22:47:3d:3e:74:cf:24:0f:39:30:ae:60: a2:f0:26:29:3d:a7:42:7f:15:25:9b:85:98:8e:49: 50:8b:68:1a:76:5d:b0:b5:20:2d:61:ee:9f:da:17: a2:40:fc:c2:ac:ae:39:e3:c1:f8:98:4d:cb:bb:09: 09:74:c5:fd:6c:b9:88:ed:e0:07:60:ea:8d:d5:c5: d5:60:92:4f:cc:f9:e6:31:34:7c:99:73:50:bd:eb: 21:6c:8b:a0:07:11:9d:84:88:43:31:40:11:c4:15: d2:6e:a2:7f:b8:4f:fe:e6:91:24:63:54:e3:cd:54: 84:3b:d2:65:21:96:06:14:74:d6:f3:69:d0:3c:1d: 79:95:86:51:b3:72:0e:86:1a:db:d7:7b:46:92:34: 65:67:f6:dd:df:dd:81:0f:a3:d0:6b:2d:dc:5c:6f: e6:74:1a:0d:2c:3b:7a:0f:74:fe:e9:0d:99:94:2b: 64:30:1a:27:54:01:7c:40:eb:bf:7a:a8:2d:22:9b: ac:67:a7:79:b3:71:a2:3a:04:46:f8:e1:d2:ad:fd: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:26:CF:B8:FC:CE:1B:EA:83:35:A3:93:13:61:DC:AF:CE:26:48:7E X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bf:a1:0c:64:2e:d5:ec:25:76:3f:12:05:51:3d:94:e8:50: e3:f7:7f:26:d3:65:a6:d9:1a:80:19:eb:5b:aa:38:e4:ec:db: b2:b9:2c:b0:be:ab:5a:fc:15:92:20:85:9e:4f:5b:9d:61:58: 90:37:e2:63:d4:45:91:39:16:be:dd:e8:00:2f:c3:3f:ee:23: 87:cf:e6:08:38:5e:53:51:13:e2:08:9e:4e:66:92:dc:3f:78: 47:d6:9a:6a:6f:4a:02:3e:17:49:9d:25:3d:eb:eb:39:c6:ec: 6f:a0:67:3f:c4:1e:c6:5a:6a:a0:01:58:d8:c3:35:5e:d2:f5: a2:5e:64:fb:29:ca:af:7f:44:d3:71:54:27:99:cb:2f:14:b4: c1:99:36:45:35:94:50:8c:29:fe:b0:c3:f9:c4:27:e3:2e:a8: 3e:57:87:88:f2:46:50:b9:d5:a3:41:93:a7:30:fa:b0:49:a8: cf:c8:ee:b0:30:ed:79:8c:5e:ad:b0:e4:d1:dd:a0:f2:87:55: 71:cb:69:fd:41:78:ce:75:3f:94:64:e8:6e:32:fb:45:31:cd: a6:46:04:a3:9b:25:18:d1:bf:c9:04:36:8d:85:d8:49:77:3a: 0c:0a:a9:40:f7:75:81:9e:a1:16:fd:9c:cd:b7:f1:73:bb:31: 28:e0:27:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjvwHaWGaKBQq3TWiVEbJBfJ0fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA4MjMxMjU1NDBaFw0yNTA4MjcwMDUxNDBaMDMxMTAvBgNV BAMTKDVGMjZDRkI4RkNDRTFCRUE4MzM1QTM5MzEzNjFEQ0FGQ0UyNjQ4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJhTwaqU+DmwGNZ1gm1K2MW/H aa40yblFp7kpEUfpOS20oE7/f1UFldlyHG2IhiJHPT50zyQPOTCuYKLwJik9p0J/ FSWbhZiOSVCLaBp2XbC1IC1h7p/aF6JA/MKsrjnjwfiYTcu7CQl0xf1suYjt4Adg 6o3VxdVgkk/M+eYxNHyZc1C96yFsi6AHEZ2EiEMxQBHEFdJuon+4T/7mkSRjVOPN VIQ70mUhlgYUdNbzadA8HXmVhlGzcg6GGtvXe0aSNGVn9t3f3YEPo9BrLdxcb+Z0 Gg0sO3oPdP7pDZmUK2QwGidUAXxA6796qC0im6xnp3mzcaI6BEb44dKt/bI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXybPuPzOG+qDNaOTE2Hcr84mSH4wHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu/oQxkLtXsJXY/EgVRPZToUOP3fybTZabZ GoAZ61uqOOTs27K5LLC+q1r8FZIghZ5PW51hWJA34mPURZE5Fr7d6AAvwz/uI4fP 5gg4XlNRE+IInk5mktw/eEfWmmpvSgI+F0mdJT3r6znG7G+gZz/EHsZaaqABWNjD NV7S9aJeZPspyq9/RNNxVCeZyy8UtMGZNkU1lFCMKf6ww/nEJ+MuqD5Xh4jyRlC5 1aNBk6cw+rBJqM/I7rAw7XmMXq2w5NHdoPKHVXHLaf1BeM51P5Rk6G4y+0UxzaZG BKObJRjRv8kENo2F2El3OgwKqUD3dYGeoRb9nM238XO7MSjgJ4Y= -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:48 2025 by rpki-client