$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: 2xxVO/lm3cH/y65w7ugT/3Mxkflbi4IBLR8Lh6Cn/BU= Subject key identifier: 2A:FA:DF:C0:1C:91:4A:D1:D6:68:42:0B:74:0D:54:4E:8B:90:AF:12 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 0EF097F387F9F5B468111B497876BF9D9819936F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 0172 Signing time: Wed 07 May 2025 17:31:45 +0000 Manifest this update: Wed 07 May 2025 17:26:45 +0000 Manifest next update: Sat 10 May 2025 19:59:45 +0000 Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: dHjZ5I1fWtblAKTFHLBuqRfGI9LS0rIKpM6/DyHNrgc=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 19:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f0:97:f3:87:f9:f5:b4:68:11:1b:49:78:76:bf:9d:98:19:93:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: May 7 17:26:45 2025 GMT Not After : May 10 19:59:45 2025 GMT Subject: CN=2AFADFC01C914AD1D668420B740D544E8B90AF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:46:b1:ae:e0:fc:28:b5:8e:dd:f2:84:3f: 85:6a:49:2c:d1:72:6f:a0:6a:d1:68:36:a2:60:61: 80:bb:61:51:4e:e5:91:5a:31:2e:39:53:51:87:03: f8:42:9d:83:97:6d:6c:77:8f:f6:90:cf:28:76:26: 7a:c0:30:ba:f7:47:7a:b5:58:8f:a5:0e:20:8c:2e: 25:87:72:a4:4c:e6:fb:94:89:9f:f1:88:8a:05:e0: 6a:0f:b9:63:3a:ff:62:3e:96:71:72:18:9c:ec:53: d1:53:7a:0f:04:f8:ff:5c:f9:aa:34:04:e6:14:cb: 64:24:42:6a:3a:1e:a5:45:b8:e1:50:ff:5e:ae:21: 25:94:d0:c8:86:3e:f3:2c:ee:d4:69:c9:36:46:92: e3:7e:cc:3a:fa:95:35:fc:72:1c:5c:d9:b4:04:92: 7f:a7:b4:f2:5a:1d:64:9b:4d:bc:dc:13:3c:e8:4a: a0:e7:82:29:ba:89:d1:d2:11:f5:43:ac:f3:1e:0f: b2:f3:3d:b6:63:b5:f6:b3:e9:d3:f2:3d:fd:c1:f8: 46:a7:54:6a:2e:92:39:d4:5b:54:9d:c4:60:7e:9a: c8:fe:0c:0d:22:bd:2b:56:6e:08:1a:a8:b9:e9:a3: 1d:90:a5:94:9c:81:65:9b:05:35:d0:ee:66:5e:e1: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FA:DF:C0:1C:91:4A:D1:D6:68:42:0B:74:0D:54:4E:8B:90:AF:12 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1d:c5:15:6c:ba:30:97:a8:f4:64:61:1e:e7:27:8b:6d:aa: 52:29:65:83:40:d2:de:f3:11:8d:74:47:c8:db:97:cc:52:07: 4f:0c:eb:5c:f3:b2:b9:1e:00:db:e2:ff:c9:77:fa:44:00:ee: 60:a5:11:57:27:8a:59:00:c2:11:31:80:f4:1a:2e:7c:c7:a8: b5:cb:4a:92:03:f8:67:8a:a8:e5:78:61:69:77:d5:5d:a7:3c: 52:37:9a:d0:b5:5b:5e:59:c5:94:e6:eb:bf:b8:90:38:9f:84: 7f:a4:e0:9e:bd:ea:94:46:3e:ce:cf:56:d7:e6:d4:11:6c:56: 4e:1a:67:7f:a5:9d:74:10:86:e2:61:59:97:3f:2b:02:3a:85: 0e:c4:2c:9c:88:b5:3e:03:a7:4b:df:49:09:00:d4:0f:c6:16: 4b:a0:c5:5d:15:cf:1a:3f:a3:f7:ec:98:89:f8:c1:82:0c:5c: c9:c2:10:2a:73:ad:a0:83:3f:55:cd:14:51:36:11:44:27:78: e3:f4:39:72:74:10:ea:eb:75:47:a7:0d:0e:b1:15:eb:1e:83: c8:ab:a2:dd:83:02:4f:a2:3b:c0:64:72:7f:6a:7c:ed:13:d9: 30:42:4f:25:86:94:33:e0:e5:bb:2a:4a:d3:a7:66:32:3d:95: d3:d9:3d:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvCX84f59bRoERtJeHa/nZgZk28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA1MDcxNzI2NDVaFw0yNTA1MTAxOTU5NDVaMDMxMTAvBgNV BAMTKDJBRkFERkMwMUM5MTRBRDFENjY4NDIwQjc0MEQ1NDRFOEI5MEFGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ukaxruD8KLWO3fKEP4VqSSzR cm+gatFoNqJgYYC7YVFO5ZFaMS45U1GHA/hCnYOXbWx3j/aQzyh2JnrAMLr3R3q1 WI+lDiCMLiWHcqRM5vuUiZ/xiIoF4GoPuWM6/2I+lnFyGJzsU9FTeg8E+P9c+ao0 BOYUy2QkQmo6HqVFuOFQ/16uISWU0MiGPvMs7tRpyTZGkuN+zDr6lTX8chxc2bQE kn+ntPJaHWSbTbzcEzzoSqDngim6idHSEfVDrPMeD7LzPbZjtfaz6dPyPf3B+Ean VGoukjnUW1SdxGB+msj+DA0ivStWbggaqLnpox2QpZScgWWbBTXQ7mZe4WLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKvrfwByRStHWaEILdA1UTouQrxIwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsdxRVsujCXqPRkYR7nJ4ttqlIpZYNA0t7z EY10R8jbl8xSB08M61zzsrkeANvi/8l3+kQA7mClEVcnilkAwhExgPQaLnzHqLXL SpID+GeKqOV4YWl31V2nPFI3mtC1W15ZxZTm67+4kDifhH+k4J696pRGPs7PVtfm 1BFsVk4aZ3+lnXQQhuJhWZc/KwI6hQ7ELJyItT4Dp0vfSQkA1A/GFkugxV0Vzxo/ o/fsmIn4wYIMXMnCECpzraCDP1XNFFE2EUQneOP0OXJ0EOrrdUenDQ6xFeseg8ir ot2DAk+iO8Bkcn9qfO0T2TBCTyWGlDPg5bsqStOnZjI9ldPZPaI= -----END CERTIFICATE-----Generated at Fri May 9 05:44:37 2025 by rpki-client