$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: PhSIyHZc1fzUmYzFZJJAHflcpSfWNcnSjIKFAK+kwW0= Subject key identifier: 3A:A9:A7:2F:07:00:4A:D6:43:7E:26:22:AB:BB:CC:D5:E8:04:80:A3 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 5D3954C5B774E65025B69082576799357EAF5B0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 04FB Signing time: Sat 23 Aug 2025 05:40:53 +0000 Manifest this update: Sat 23 Aug 2025 05:35:53 +0000 Manifest next update: Tue 26 Aug 2025 10:51:53 +0000 Files and hashes: 1: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) 3: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 4: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: GSM7tdCjfcUBaQpuK49Uq563KdKTgfpMLSgUd3n6QpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:39:54:c5:b7:74:e6:50:25:b6:90:82:57:67:99:35:7e:af:5b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Aug 23 05:35:53 2025 GMT Not After : Aug 26 10:51:53 2025 GMT Subject: CN=3AA9A72F07004AD6437E2622ABBBCCD5E80480A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:0f:8a:7a:2d:64:22:27:d1:68:4b:34:91: cc:6b:ee:96:64:bf:b1:06:c0:ec:66:b8:a3:fd:41: b8:ae:b4:f4:ac:dd:ea:96:4f:97:3c:28:07:ef:44: ca:0d:83:41:66:78:be:53:68:63:47:1e:b9:8f:e5: b2:fe:f3:4c:64:38:b2:4e:85:46:6d:49:db:d7:da: d9:14:74:17:37:cc:1f:83:aa:7e:ad:b4:6c:90:80: cc:40:97:e0:7c:e0:d2:b7:39:fc:fe:73:f5:41:f5: 43:5a:3a:56:45:26:f3:fd:8e:3a:0e:32:2e:85:a0: 05:8a:47:7e:4e:8e:ca:ae:df:4b:1f:87:6c:67:5d: 97:44:5c:11:59:e1:ea:4d:ce:a8:7c:14:fb:03:5e: 75:60:76:01:5e:1c:ec:db:37:fb:cb:e7:aa:3e:8c: 57:d1:77:f7:23:cd:7a:2b:ac:55:0d:ac:30:3c:3b: 54:0a:f6:e1:7f:a5:30:e0:2b:32:2f:5c:52:f9:73: 74:d6:e0:ad:6d:c1:8c:cb:e2:38:4c:c6:d7:83:69: 22:c9:41:86:15:2f:46:97:ec:c5:99:f3:0c:f6:53: 07:9e:ce:b2:4a:e7:f6:a3:37:8a:4a:77:7a:90:91: 6b:13:d5:4e:70:7c:2c:6b:7a:5b:8d:b9:67:e4:cb: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:A7:2F:07:00:4A:D6:43:7E:26:22:AB:BB:CC:D5:E8:04:80:A3 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:01:18:5b:4f:0c:b4:0b:2f:02:4d:49:64:2f:07:94:29: 24:67:0c:c0:b0:91:01:71:94:20:61:0b:9f:67:30:57:23:28: 79:86:12:cb:1b:ba:1d:0f:51:98:62:58:25:6c:a8:b8:42:15: d3:0d:53:47:cf:e7:c6:68:70:18:25:d0:f8:77:a7:cb:f2:e8: e0:82:c9:6b:03:da:c0:f0:ae:fa:96:7b:8f:bd:fd:c5:87:f0: 22:88:73:de:97:71:2f:aa:a6:a1:86:08:95:5d:fe:6e:ae:4e: 03:59:0b:a8:8d:33:5d:93:c4:d2:81:39:99:a8:a6:f8:fe:8d: 98:80:43:1f:66:6c:34:0b:ad:8c:05:c6:39:e0:f3:a4:9c:af: b4:e8:1b:ef:48:1c:f9:15:f7:dd:08:4e:c4:23:00:60:14:eb: 9d:1a:fe:da:15:6c:2a:ac:80:ff:73:77:3b:e6:69:10:ee:14: 2b:69:34:3d:eb:27:ca:57:16:34:c2:2e:a6:a4:ba:3b:50:05: 26:e6:b0:9b:89:80:19:02:04:c2:d5:a1:14:fe:87:5d:63:45: af:1b:c2:52:be:ef:1d:51:b7:57:a1:c6:d4:96:12:ac:4c:25: 15:be:12:f0:96:ba:3d:06:8c:c0:70:41:eb:94:6c:1c:f7:1e: 56:12:b9:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTlUxbd05lAltpCCV2eZNX6vWw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTA4MjMwNTM1NTNaFw0yNTA4MjYxMDUxNTNaMDMxMTAvBgNV BAMTKDNBQTlBNzJGMDcwMDRBRDY0MzdFMjYyMkFCQkJDQ0Q1RTgwNDgwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcug+Kei1kIifRaEs0kcxr7pZk v7EGwOxmuKP9QbiutPSs3eqWT5c8KAfvRMoNg0FmeL5TaGNHHrmP5bL+80xkOLJO hUZtSdvX2tkUdBc3zB+Dqn6ttGyQgMxAl+B84NK3Ofz+c/VB9UNaOlZFJvP9jjoO Mi6FoAWKR35Ojsqu30sfh2xnXZdEXBFZ4epNzqh8FPsDXnVgdgFeHOzbN/vL56o+ jFfRd/cjzXorrFUNrDA8O1QK9uF/pTDgKzIvXFL5c3TW4K1twYzL4jhMxteDaSLJ QYYVL0aX7MWZ8wz2UweezrJK5/ajN4pKd3qQkWsT1U5wfCxreluNuWfky9yPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqmnLwcAStZDfiYiq7vM1egEgKMwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmgARhbTwy0Cy8CTUlkLweUKSRnDMCwkQFx lCBhC59nMFcjKHmGEssbuh0PUZhiWCVsqLhCFdMNU0fP58ZocBgl0Ph3p8vy6OCC yWsD2sDwrvqWe4+9/cWH8CKIc96XcS+qpqGGCJVd/m6uTgNZC6iNM12TxNKBOZmo pvj+jZiAQx9mbDQLrYwFxjng86Scr7ToG+9IHPkV990ITsQjAGAU650a/toVbCqs gP9zdzvmaRDuFCtpND3rJ8pXFjTCLqakujtQBSbmsJuJgBkCBMLVoRT+h11jRa8b wlK+7x1Rt1ehxtSWEqxMJRW+EvCWuj0GjMBwQeuUbBz3HlYSuQI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:49 2025 by rpki-client