$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: B4zBmt2gqw8izULqw9uBU97NldMVBxD0Nipj7MIzLiI= Subject key identifier: 3C:1F:14:C3:7B:33:BC:23:6D:97:24:1F:A9:EA:40:35:5A:16:98:DC Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 43EE3F526C430A4B6987B8B4E85F5B9DE32D0438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01A1 Signing time: Thu 21 Aug 2025 16:41:44 +0000 Manifest this update: Thu 21 Aug 2025 16:36:44 +0000 Manifest next update: Mon 25 Aug 2025 00:22:44 +0000 Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: sAIJqE1J8AmT+4osEcaBx+5TSokL23zrYRTe4kJKKLc=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ee:3f:52:6c:43:0a:4b:69:87:b8:b4:e8:5f:5b:9d:e3:2d:04:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Aug 21 16:36:44 2025 GMT Not After : Aug 25 00:22:44 2025 GMT Subject: CN=3C1F14C37B33BC236D97241FA9EA40355A1698DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:d2:67:83:59:a8:60:76:0d:37:e3:8e:b4: 21:90:be:1c:b3:2e:92:23:f0:f0:da:36:5e:21:fc: 88:11:cf:10:a0:7a:32:f4:50:13:12:39:89:db:ad: 71:4d:9b:f6:5d:42:c8:08:38:2a:50:49:f4:8e:49: ea:53:c7:15:78:f1:8f:c6:20:e9:23:cb:1e:06:6e: 19:af:18:b6:00:62:5a:64:59:50:c3:32:b6:5a:4e: c6:b4:a9:a8:89:fd:1e:c9:c5:26:ed:52:61:0d:db: 61:e0:dd:6d:d9:be:53:e2:0f:8b:9b:96:42:60:da: 7b:f5:73:10:4a:32:39:c8:57:30:ec:a8:72:ad:dd: 36:c4:65:d3:85:ca:fa:7f:73:07:d1:e4:12:14:80: 4e:bf:2e:8c:9e:6a:0f:a3:9b:ea:1b:a8:c0:2e:03: 19:4e:85:24:f8:12:09:13:90:62:35:14:19:9a:56: f8:75:71:25:73:60:ec:3e:4e:92:76:b7:e6:aa:95: 43:6e:d3:c5:18:8a:6f:be:e9:e5:68:2a:15:63:49: 39:84:1d:ef:14:dd:c0:f7:5e:81:94:0d:50:c9:a6: d1:4c:f2:5e:cc:29:7b:8f:27:e6:08:9c:99:d6:a7: 55:bf:eb:8e:2b:be:54:4a:60:d0:24:7c:9f:0f:fd: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:14:C3:7B:33:BC:23:6D:97:24:1F:A9:EA:40:35:5A:16:98:DC X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:56:e2:2c:4d:41:61:85:c0:ac:d0:f4:77:a0:eb:e9:43:aa: bf:61:a4:37:75:db:54:6e:5b:cf:ad:ec:cf:6d:b0:b6:d8:08: 76:13:74:04:d2:31:3a:f9:3a:65:db:ee:57:a6:e4:4e:c4:e3: e1:f7:f0:2d:2a:f4:5d:6d:ad:5d:34:ce:43:a9:fa:e3:67:a9: ba:78:c0:23:74:ff:08:0c:ce:d9:5b:99:d6:f8:73:f6:ae:7f: 41:b9:c8:ec:f0:1b:55:89:fd:aa:9e:b2:3f:bd:36:a2:ac:d1: 13:b5:bb:4c:34:ce:34:3c:a0:ec:e6:2e:d9:4e:37:13:7c:8f: 41:e7:dc:e2:d4:12:8a:ab:81:00:90:0e:70:0d:a5:23:47:6d: 35:4a:28:4c:c1:ed:1a:be:01:0b:62:b8:fd:a1:86:8a:0c:d0: d4:12:8c:6d:dd:33:2e:e1:02:ad:1b:e1:3c:fc:56:e2:35:8b: 6e:ac:56:4f:b1:a3:fb:86:da:4d:21:75:cc:29:db:47:59:70: 4d:06:5b:62:65:cf:30:66:9e:3c:e8:50:ad:fd:d6:40:4e:d7: 7f:11:35:0d:3d:87:14:0a:44:fd:45:61:d1:24:15:00:a7:d1: ec:94:94:8e:69:e6:2d:f6:20:f9:c4:c6:67:d0:2a:1d:e3:39: 52:37:73:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+4/UmxDCktph7i06F9bneMtBDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA4MjExNjM2NDRaFw0yNTA4MjUwMDIyNDRaMDMxMTAvBgNV BAMTKDNDMUYxNEMzN0IzM0JDMjM2RDk3MjQxRkE5RUE0MDM1NUExNjk4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm89Jng1moYHYNN+OOtCGQvhyz LpIj8PDaNl4h/IgRzxCgejL0UBMSOYnbrXFNm/ZdQsgIOCpQSfSOSepTxxV48Y/G IOkjyx4GbhmvGLYAYlpkWVDDMrZaTsa0qaiJ/R7JxSbtUmEN22Hg3W3ZvlPiD4ub lkJg2nv1cxBKMjnIVzDsqHKt3TbEZdOFyvp/cwfR5BIUgE6/Loyeag+jm+obqMAu AxlOhST4EgkTkGI1FBmaVvh1cSVzYOw+TpJ2t+aqlUNu08UYim++6eVoKhVjSTmE He8U3cD3XoGUDVDJptFM8l7MKXuPJ+YInJnWp1W/644rvlRKYNAkfJ8P/SxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPB8Uw3szvCNtlyQfqepANVoWmNwwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtW4ixNQWGFwKzQ9Heg6+lDqr9hpDd121Ru W8+t7M9tsLbYCHYTdATSMTr5OmXb7lem5E7E4+H38C0q9F1trV00zkOp+uNnqbp4 wCN0/wgMztlbmdb4c/auf0G5yOzwG1WJ/aqesj+9NqKs0RO1u0w0zjQ8oOzmLtlO NxN8j0Hn3OLUEoqrgQCQDnANpSNHbTVKKEzB7Rq+AQtiuP2hhooM0NQSjG3dMy7h Aq0b4Tz8VuI1i26sVk+xo/uG2k0hdcwp20dZcE0GW2JlzzBmnjzoUK391kBO138R NQ09hxQKRP1FYdEkFQCn0eyUlI5p5i32IPnExmfQKh3jOVI3c6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:19 2025 by rpki-client