$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: lqvEva0kKRLbH9rumKelvuvvjmHt9J2WUFSOCJKoI9M= Subject key identifier: 58:FD:2F:F8:96:DF:B4:49:16:D7:1D:D9:75:A1:68:59:44:CE:DD:26 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 5C137838A85CE5CC2EC0007625483000F6CDB162 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 0515 Signing time: Mon 20 Oct 2025 01:10:53 +0000 Manifest this update: Mon 20 Oct 2025 01:05:53 +0000 Manifest next update: Thu 23 Oct 2025 12:27:53 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 2: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: 5V8fmSt+f2nmH9hAvrqNm5LsArT7FAefKT0NlTURbMY=) 3: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) 4: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:13:78:38:a8:5c:e5:cc:2e:c0:00:76:25:48:30:00:f6:cd:b1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Oct 20 01:05:53 2025 GMT Not After : Oct 23 12:27:53 2025 GMT Subject: CN=58FD2FF896DFB44916D71DD975A1685944CEDD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:1a:dc:59:bb:f8:a6:89:3c:fd:43:bb:cd: 95:41:c2:26:38:ea:7f:17:50:77:21:10:ea:d0:10: 59:2e:1b:31:16:17:2d:76:b7:94:38:a6:e4:58:e4: 00:de:38:c0:c7:ee:a6:83:8c:85:9c:c6:21:65:7a: 24:91:39:21:ca:2e:24:01:2e:6c:05:c8:96:46:95: 37:4e:68:2d:53:ac:b0:87:ce:0e:c2:42:c2:4f:99: 90:14:3a:4d:51:b2:42:ff:0b:39:c1:53:6a:46:88: 4c:ff:4d:07:66:f2:bb:f9:29:6a:22:3c:ea:4a:85: ff:3b:ef:49:ae:4f:c0:d9:8e:8f:f8:04:ab:4a:e2: 23:a5:f1:69:3c:fa:bc:73:5a:64:2a:12:f7:be:fa: d7:91:8e:f4:4a:71:e9:86:b4:e4:8a:34:ce:af:18: 05:ab:de:23:a9:1e:7e:f3:1f:50:e6:71:42:03:5f: 9a:04:d2:1e:c5:1b:d5:d9:ee:82:7f:2a:14:d4:85: db:1a:07:6e:b2:96:05:80:64:86:d6:84:41:ee:53: 3b:5b:e2:f4:2d:85:85:ac:1c:7b:52:2a:09:30:d2: e5:be:d9:c8:2c:92:3e:b0:c2:12:0d:23:e3:c0:15: 33:ca:81:06:25:2a:23:4e:a4:c7:ab:11:1b:27:7b: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:2F:F8:96:DF:B4:49:16:D7:1D:D9:75:A1:68:59:44:CE:DD:26 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ab:35:93:20:ef:96:29:f1:c8:9a:a0:e6:8b:68:92:ad:e1: ba:b4:e9:53:0d:d4:ac:6b:c0:07:1d:77:ba:07:6f:af:75:ad: 9f:22:fe:a1:c9:0b:50:1b:3b:6c:95:aa:23:3d:7d:a3:c8:b0: 68:07:42:0d:0f:c7:33:ee:16:b3:35:cd:68:7b:89:2d:70:2c: fd:6f:df:fc:f1:ea:14:ed:77:1f:1e:d0:3d:2e:0a:80:45:27: 4d:01:fb:94:41:91:35:18:d4:11:e4:09:06:6b:6a:23:a2:59: 03:78:6e:d1:73:8b:91:30:8d:0d:e4:12:55:01:ab:b1:42:5c: a7:90:90:ba:c7:1c:61:de:1d:4a:ac:03:d6:ef:93:b5:52:18: 68:be:f2:05:8e:6f:b7:73:91:13:11:61:a3:30:2e:87:c0:e1: 84:21:69:3a:2c:d6:d6:94:45:13:e0:9f:4e:cf:09:14:63:b8: 69:24:de:2b:eb:ea:f9:0f:0e:50:7a:13:61:a0:78:7c:fc:27: 58:89:8d:1f:fb:51:bb:4d:e1:83:b8:39:bd:b7:a9:31:4e:5a: 29:1d:ee:ee:e5:cf:cb:b3:af:3e:5a:7a:0e:f1:5c:31:2b:8c: a0:df:ac:92:28:7b:7e:77:c3:d0:07:d5:0d:aa:65:df:f1:5b: c4:8f:0b:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBN4OKhc5cwuwAB2JUgwAPbNsWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTEwMjAwMTA1NTNaFw0yNTEwMjMxMjI3NTNaMDMxMTAvBgNV BAMTKDU4RkQyRkY4OTZERkI0NDkxNkQ3MUREOTc1QTE2ODU5NDRDRUREMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUBrcWbv4pok8/UO7zZVBwiY4 6n8XUHchEOrQEFkuGzEWFy12t5Q4puRY5ADeOMDH7qaDjIWcxiFleiSROSHKLiQB LmwFyJZGlTdOaC1TrLCHzg7CQsJPmZAUOk1RskL/CznBU2pGiEz/TQdm8rv5KWoi POpKhf8770muT8DZjo/4BKtK4iOl8Wk8+rxzWmQqEve++teRjvRKcemGtOSKNM6v GAWr3iOpHn7zH1DmcUIDX5oE0h7FG9XZ7oJ/KhTUhdsaB26ylgWAZIbWhEHuUztb 4vQthYWsHHtSKgkw0uW+2cgskj6wwhINI+PAFTPKgQYlKiNOpMerERsnew2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWP0v+JbftEkW1x3ZdaFoWUTO3SYwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqrNZMg75Yp8ciaoOaLaJKt4bq06VMN1Kxr wAcdd7oHb691rZ8i/qHJC1AbO2yVqiM9faPIsGgHQg0PxzPuFrM1zWh7iS1wLP1v 3/zx6hTtdx8e0D0uCoBFJ00B+5RBkTUY1BHkCQZraiOiWQN4btFzi5EwjQ3kElUB q7FCXKeQkLrHHGHeHUqsA9bvk7VSGGi+8gWOb7dzkRMRYaMwLofA4YQhaTos1taU RRPgn07PCRRjuGkk3ivr6vkPDlB6E2GgeHz8J1iJjR/7UbtN4YO4Ob23qTFOWikd 7u7lz8uzrz5aeg7xXDErjKDfrJIoe353w9AH1Q2qZd/xW8SPC9E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:50 2025 by rpki-client