$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: iAxHQW8+dAo+UJgyZyMjIYBMtgtOD9ajFRAjK+23cS0= Subject key identifier: E3:CF:E7:E9:B0:CD:F7:EA:DF:F8:52:98:33:D3:FD:F4:7C:22:26:1D Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 28C26E404967187321AD592CBD5EA0DE264A7C17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 0192 Signing time: Sat 19 Jul 2025 17:51:43 +0000 Manifest this update: Sat 19 Jul 2025 17:46:43 +0000 Manifest next update: Tue 22 Jul 2025 21:02:43 +0000 Files and hashes: 1: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) 3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: pUXhZpF+TVzy4XS7WtkFiRd9LCs0LvvmuBZ4HikTpXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c2:6e:40:49:67:18:73:21:ad:59:2c:bd:5e:a0:de:26:4a:7c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Jul 19 17:46:43 2025 GMT Not After : Jul 22 21:02:43 2025 GMT Subject: CN=E3CFE7E9B0CDF7EADFF8529833D3FDF47C22261D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:00:32:be:c4:2e:85:7d:57:a2:b8:b2:35: ad:e0:5d:16:7d:7f:06:18:38:f4:b5:f5:99:47:3e: 59:1c:63:f8:e5:35:0a:a8:c2:dc:7d:ef:89:85:07: a9:94:c0:bc:d0:71:05:18:24:76:62:4b:f5:50:9f: 10:0d:68:04:04:c7:b3:3b:0d:16:36:4b:e9:f6:b7: f2:be:36:67:f8:f2:8b:bf:44:8b:1f:1e:20:0f:c9: 64:02:3b:62:23:9e:88:34:1f:23:65:68:f9:56:a4: a3:df:7f:63:67:8b:6e:ed:b9:a5:0f:2a:6a:9d:21: 08:6c:58:e7:94:9a:5b:cd:3b:04:fd:83:81:2f:52: 0f:f4:75:b2:29:02:34:12:17:7a:09:a3:58:47:c5: ab:95:e7:53:0c:fb:cf:d5:ae:65:0e:68:0a:d9:a0: d3:0d:79:f6:3c:4e:38:4b:4b:bf:6e:b1:e4:93:5b: 8a:ec:27:1c:4d:4b:90:ba:00:13:b4:70:71:74:15: d3:d7:99:60:77:89:fc:0f:fd:8c:e1:d8:b7:64:13: 7a:54:5a:8b:9e:b3:11:a2:73:5f:fb:84:53:cc:bf: ed:de:ed:b7:34:60:1e:90:03:0f:c5:5a:de:04:d2: 49:ac:9e:3b:66:af:99:d1:1a:5c:61:38:0a:a5:f6: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CF:E7:E9:B0:CD:F7:EA:DF:F8:52:98:33:D3:FD:F4:7C:22:26:1D X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:81:b7:24:59:f9:62:db:5a:af:50:42:be:9f:5a:73:bf: d4:d0:2a:28:42:19:ba:60:91:a4:8d:32:a4:99:75:4c:96:a3: a1:25:69:77:f7:bf:a1:27:80:6f:69:13:a8:ca:6a:1b:e5:f7: 7e:af:0e:66:5e:2f:2a:e8:f3:24:bc:cb:52:fa:f4:4f:96:bf: 63:b1:53:6b:7a:ef:b3:b1:0c:c1:cb:97:8c:22:ab:91:a8:80: a3:5f:24:d6:4e:2b:a5:54:8b:a1:6b:11:c4:d8:ff:26:c9:4e: 41:a8:d1:a3:ba:1c:fe:37:a5:88:2d:d0:92:6f:a0:dd:ac:c1: f9:01:a9:ed:33:0b:0e:e3:a8:1a:51:f0:e0:44:50:8d:4b:1b: 89:bc:9c:c9:9a:05:5c:71:cc:77:67:a2:df:b7:cf:56:81:e6: 53:36:2f:36:49:bb:3a:80:6a:6f:6f:be:5c:f4:c6:e2:07:50: 1d:37:3c:a6:5a:e3:a6:ec:48:31:3c:d5:dd:23:4f:bf:70:ff: 2b:f2:20:4f:f7:97:e0:94:1d:5f:b9:17:47:a8:38:b8:1c:78: 47:ff:f4:3f:1e:cc:b4:fb:dc:9a:44:3c:38:23:8d:30:77:0e: 2f:d1:46:50:be:8b:54:43:c0:13:9e:7f:0e:de:bf:69:f7:1f: 78:ac:59:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMJuQElnGHMhrVksvV6g3iZKfBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA3MTkxNzQ2NDNaFw0yNTA3MjIyMTAyNDNaMDMxMTAvBgNV BAMTKEUzQ0ZFN0U5QjBDREY3RUFERkY4NTI5ODMzRDNGREY0N0MyMjI2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40AAyvsQuhX1XoriyNa3gXRZ9 fwYYOPS19ZlHPlkcY/jlNQqowtx974mFB6mUwLzQcQUYJHZiS/VQnxANaAQEx7M7 DRY2S+n2t/K+Nmf48ou/RIsfHiAPyWQCO2Ijnog0HyNlaPlWpKPff2Nni27tuaUP KmqdIQhsWOeUmlvNOwT9g4EvUg/0dbIpAjQSF3oJo1hHxauV51MM+8/VrmUOaArZ oNMNefY8TjhLS79useSTW4rsJxxNS5C6ABO0cHF0FdPXmWB3ifwP/Yzh2LdkE3pU WouesxGic1/7hFPMv+3e7bc0YB6QAw/FWt4E0kmsnjtmr5nRGlxhOAql9iUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48/n6bDN9+rf+FKYM9P99HwiJh0wHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJifgbckWfli21qvUEK+n1pzv9TQKihCGbpg kaSNMqSZdUyWo6ElaXf3v6EngG9pE6jKahvl936vDmZeLyro8yS8y1L69E+Wv2Ox U2t677OxDMHLl4wiq5GogKNfJNZOK6VUi6FrEcTY/ybJTkGo0aO6HP43pYgt0JJv oN2swfkBqe0zCw7jqBpR8OBEUI1LG4m8nMmaBVxxzHdnot+3z1aB5lM2LzZJuzqA am9vvlz0xuIHUB03PKZa46bsSDE81d0jT79w/yvyIE/3l+CUHV+5F0eoOLgceEf/ 9D8ezLT73JpEPDgjjTB3Di/RRlC+i1RDwBOefw7ev2n3H3isWac= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:29 2025 by rpki-client