$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: Fnit6FtSjpMP5PSHcCPrjygYXQmyYuPfOqcopnWGwL8= Subject key identifier: 4F:A4:E8:A7:85:2C:A6:4A:27:D8:7A:45:17:27:8B:6A:17:5B:12:E4 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 7434B33C392DFDE6EC43A412A8EC8E8F6AD41B68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 04CD Signing time: Sun 11 May 2025 22:30:50 +0000 Manifest this update: Sun 11 May 2025 22:25:50 +0000 Manifest next update: Thu 15 May 2025 03:36:50 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 6yavDvIc4pSEZOii3wG3tpQ49E/AOM1JrdsShPejo+c=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: nxYOm0XXR50V6GnhRaIQYUBF2UG5sIA0HyaLTjhPLDc=) 3: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: yp6Pc3xwQXMbcfrg5AlBG9/yetf5+1YXRAtsvGt2vZY=) 4: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: Pzwwc/DaRh7douIe0O7l7uQ+2W5v06vmWKYPm+xMR5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 03:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:34:b3:3c:39:2d:fd:e6:ec:43:a4:12:a8:ec:8e:8f:6a:d4:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: May 11 22:25:50 2025 GMT Not After : May 15 03:36:50 2025 GMT Subject: CN=4FA4E8A7852CA64A27D87A4517278B6A175B12E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:8a:b3:a3:ef:d5:6d:48:4c:8a:05:3a:de: e0:25:8f:35:b1:4e:db:94:c8:fc:73:4a:87:1e:c2: 05:0e:4d:5b:0c:0b:6f:ed:0a:9b:8e:38:df:52:cb: a0:0a:4c:0c:70:9f:ec:f5:cf:3d:ec:b8:36:6a:20: cb:27:06:31:bb:94:15:dc:ba:03:81:53:c2:f7:8e: 6a:a9:bc:e4:dd:a4:e7:97:31:3b:ab:94:47:b8:8f: eb:23:d7:36:40:fc:36:62:f3:36:df:1f:8c:c7:2e: 75:1f:78:80:84:6a:15:19:fe:17:96:ec:12:95:19: d1:be:21:23:69:0b:38:42:91:18:69:7b:09:cf:e2: ae:3e:de:fe:a2:ba:f6:28:80:f6:29:df:70:17:73: 2b:7e:19:1e:e1:f8:a8:0b:d9:d6:62:68:bc:34:e9: 36:69:6a:18:76:c9:97:fc:a6:68:a0:02:cc:e3:75: d2:4e:f0:63:9b:c6:70:1f:9f:d9:75:09:4a:0f:7f: 6f:43:d2:26:a1:c9:a2:dd:62:f6:5d:cb:9f:13:7c: 1e:a5:93:16:c7:12:71:f8:0a:22:65:6c:23:34:39: 56:fc:32:36:1e:16:95:04:e6:11:a9:84:88:fe:49: ac:50:1f:b3:9c:3e:89:1e:55:d5:ac:04:0f:14:e9: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:E8:A7:85:2C:A6:4A:27:D8:7A:45:17:27:8B:6A:17:5B:12:E4 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ea:b0:70:48:8d:f7:74:4e:af:73:e3:78:41:ab:0b:b0:37: 35:8d:d2:77:39:57:6b:44:f6:0c:53:87:ec:b8:37:03:66:39: cd:df:4f:2d:47:9d:9c:b7:91:b7:a4:27:03:0f:07:ff:64:27: 9e:43:f5:db:b1:a0:80:03:27:39:ff:d1:25:6d:99:f7:34:09: 69:56:6e:cc:7b:3a:e0:60:4e:93:a2:07:ba:5a:5e:c8:8b:da: 5d:f1:d3:3c:a3:5f:67:77:dd:b1:c1:6d:05:53:49:f9:27:f2: e1:d3:d1:37:8f:1e:4d:8b:6e:c3:bb:98:9d:84:5f:e6:6d:8e: 59:d1:64:6b:8b:32:4a:bc:61:26:4f:de:d8:a3:a8:be:05:9d: ea:0a:b2:5c:85:c0:19:7e:b5:74:ca:09:42:aa:90:5f:78:76: 85:67:00:96:58:60:a6:88:f5:d3:67:35:4e:13:a8:00:65:65: 46:01:1d:66:c0:5e:76:61:69:ab:a8:11:28:57:28:f3:cf:d8: c5:5b:b9:b7:b4:fa:70:45:09:c9:fa:d8:67:52:33:59:bf:7a: fc:c0:f0:74:7c:df:69:fd:45:2c:92:de:bd:17:d4:88:1d:04: 01:7f:29:22:66:fd:8f:2f:cd:3d:49:3c:3a:2a:f4:4b:5e:d8: 39:f5:83:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDSzPDkt/ebsQ6QSqOyOj2rUG2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTA1MTEyMjI1NTBaFw0yNTA1MTUwMzM2NTBaMDMxMTAvBgNV BAMTKDRGQTRFOEE3ODUyQ0E2NEEyN0Q4N0E0NTE3Mjc4QjZBMTc1QjEyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Y4qzo+/VbUhMigU63uAljzWx TtuUyPxzSocewgUOTVsMC2/tCpuOON9Sy6AKTAxwn+z1zz3suDZqIMsnBjG7lBXc ugOBU8L3jmqpvOTdpOeXMTurlEe4j+sj1zZA/DZi8zbfH4zHLnUfeICEahUZ/heW 7BKVGdG+ISNpCzhCkRhpewnP4q4+3v6iuvYogPYp33AXcyt+GR7h+KgL2dZiaLw0 6TZpahh2yZf8pmigAszjddJO8GObxnAfn9l1CUoPf29D0iahyaLdYvZdy58TfB6l kxbHEnH4CiJlbCM0OVb8MjYeFpUE5hGphIj+SaxQH7OcPokeVdWsBA8U6VTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6Top4Uspkon2HpFFyeLahdbEuQwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnqsHBIjfd0Tq9z43hBqwuwNzWN0nc5V2tE 9gxTh+y4NwNmOc3fTy1HnZy3kbekJwMPB/9kJ55D9duxoIADJzn/0SVtmfc0CWlW bsx7OuBgTpOiB7paXsiL2l3x0zyjX2d33bHBbQVTSfkn8uHT0TePHk2LbsO7mJ2E X+ZtjlnRZGuLMkq8YSZP3tijqL4FneoKslyFwBl+tXTKCUKqkF94doVnAJZYYKaI 9dNnNU4TqABlZUYBHWbAXnZhaauoEShXKPPP2MVbube0+nBFCcn62GdSM1m/evzA 8HR832n9RSyS3r0X1IgdBAF/KSJm/Y8vzT1JPDoq9Ete2Dn1g5M= -----END CERTIFICATE-----Generated at Mon May 12 10:40:58 2025 by rpki-client