$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: X0CmQDZN/eqwT83Q/FnyTIWcVBLolel08D1CEA1yJdw= Subject key identifier: 50:BE:07:6D:FB:16:7F:82:10:39:54:50:DD:1F:63:B1:45:D1:C9:94 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 1C12800FFA16B02A09E2F23E4187B4148272216A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 04E4 Signing time: Tue 01 Jul 2025 20:30:53 +0000 Manifest this update: Tue 01 Jul 2025 20:25:53 +0000 Manifest next update: Sat 05 Jul 2025 07:50:53 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 2: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) 3: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: DuBne2re4YG++CKhxDNyqE2ZejcmsLjUYaqifKyRq78=) 4: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:12:80:0f:fa:16:b0:2a:09:e2:f2:3e:41:87:b4:14:82:72:21:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Jul 1 20:25:53 2025 GMT Not After : Jul 5 07:50:53 2025 GMT Subject: CN=50BE076DFB167F8210395450DD1F63B145D1C994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:32:f1:15:d0:1e:04:e9:b0:15:07:c0:c8: 17:88:01:e1:4d:08:50:bd:6b:55:95:33:85:47:83: 64:f6:fb:90:4d:79:cc:84:ff:81:a4:d4:6e:06:a0: c5:91:9c:74:36:c4:fe:56:bd:e7:49:d7:cd:3e:68: e3:0a:77:7d:40:41:18:34:f1:03:fe:ec:ab:29:4c: b4:05:c9:e7:9a:7f:66:29:80:54:7c:43:c3:0f:5f: 17:98:34:b5:6f:c5:44:2c:35:5b:8c:42:3f:fc:d2: 51:58:34:1f:62:eb:bb:7d:2b:b6:d4:03:bf:74:79: 6e:e8:af:cc:8a:6c:43:a7:f9:58:e5:54:40:0d:28: 8e:42:f4:71:52:dd:06:e9:e0:6f:12:20:c1:ac:e6: 72:43:b2:f1:64:a5:0d:18:30:c0:d3:1d:90:bf:9c: f6:42:55:61:8b:12:ee:37:f2:a9:46:3a:ba:48:03: ce:e2:2b:91:8a:a2:58:6b:0e:ef:37:80:38:12:85: 83:00:cb:02:d2:d4:2e:db:04:fa:2e:4d:83:6e:eb: e4:2f:ff:76:41:0e:29:88:e0:84:a6:7d:f5:6d:16: b2:91:8e:bc:e7:60:b0:05:24:26:67:28:a6:1b:a5: 9d:92:4a:ca:2a:8e:8f:0b:54:03:81:f6:df:4f:38: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BE:07:6D:FB:16:7F:82:10:39:54:50:DD:1F:63:B1:45:D1:C9:94 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:92:97:03:3c:bb:0e:a7:70:85:56:7d:1e:de:9e:7f:cf:6d: 15:64:87:aa:d4:d0:32:c7:b7:55:2a:64:e7:95:0c:14:22:5e: 8f:c9:71:6d:73:70:cb:08:f1:15:0a:a6:d9:db:fd:3b:33:bc: 5a:d5:fe:eb:20:06:8e:0c:cf:fa:6d:1f:b7:81:b1:f0:e8:e6: 13:da:1b:f0:94:5f:9d:b5:83:99:fc:60:a9:40:59:f9:0e:82: 3a:c9:ab:a3:60:43:9b:59:45:45:c4:47:24:7d:56:d4:94:4d: 2b:a1:d2:58:62:3d:9e:f5:42:b9:94:89:e1:fb:67:98:13:7e: 07:4c:ab:6a:bb:e9:86:9a:a8:ae:ba:d4:9a:07:24:db:1b:4b: da:0a:c5:53:02:97:d4:fe:79:14:90:a4:92:f8:2d:d0:43:05: 5e:2d:fb:63:59:fd:4c:a9:0d:3c:ee:a5:e5:ac:a6:38:6c:81: 2a:42:22:d3:03:c0:1a:02:bd:a7:bf:0c:bc:e1:60:72:a4:f8: 75:2f:5b:0b:e9:d4:36:f8:70:4b:34:db:4f:bd:29:4d:43:a4: 6b:a0:30:cb:48:90:60:52:73:f4:70:3c:a6:b2:ca:26:e1:db: 2b:b3:af:aa:55:1d:02:39:ad:2b:e3:a8:3b:b7:29:10:12:c8: fa:62:6a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBKAD/oWsCoJ4vI+QYe0FIJyIWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTA3MDEyMDI1NTNaFw0yNTA3MDUwNzUwNTNaMDMxMTAvBgNV BAMTKDUwQkUwNzZERkIxNjdGODIxMDM5NTQ1MEREMUY2M0IxNDVEMUM5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwTLxFdAeBOmwFQfAyBeIAeFN CFC9a1WVM4VHg2T2+5BNecyE/4Gk1G4GoMWRnHQ2xP5WvedJ180+aOMKd31AQRg0 8QP+7KspTLQFyeeaf2YpgFR8Q8MPXxeYNLVvxUQsNVuMQj/80lFYNB9i67t9K7bU A790eW7or8yKbEOn+VjlVEANKI5C9HFS3Qbp4G8SIMGs5nJDsvFkpQ0YMMDTHZC/ nPZCVWGLEu438qlGOrpIA87iK5GKolhrDu83gDgShYMAywLS1C7bBPouTYNu6+Qv /3ZBDimI4ISmffVtFrKRjrznYLAFJCZnKKYbpZ2SSsoqjo8LVAOB9t9POGfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUL4HbfsWf4IQOVRQ3R9jsUXRyZQwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeSlwM8uw6ncIVWfR7enn/PbRVkh6rU0DLH t1UqZOeVDBQiXo/JcW1zcMsI8RUKptnb/TszvFrV/usgBo4Mz/ptH7eBsfDo5hPa G/CUX521g5n8YKlAWfkOgjrJq6NgQ5tZRUXERyR9VtSUTSuh0lhiPZ71QrmUieH7 Z5gTfgdMq2q76YaaqK661JoHJNsbS9oKxVMCl9T+eRSQpJL4LdBDBV4t+2NZ/Uyp DTzupeWspjhsgSpCItMDwBoCvae/DLzhYHKk+HUvWwvp1Db4cEs020+9KU1DpGug MMtIkGBSc/RwPKayyibh2yuzr6pVHQI5rSvjqDu3KRASyPpiahc= -----END CERTIFICATE-----Generated at Wed Jul 2 10:29:44 2025 by rpki-client