$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: zQn/M3hd7AQCV3KVOl6XDHhFOzhnvDDZBopRtME4Hc0= Subject key identifier: 1B:98:35:F4:A4:35:E0:13:20:F2:DB:70:60:28:15:22:84:7E:44:65 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 040B453DFEC23EAEA97A21BE06A706A9EA76AA01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 8B Signing time: Sat 19 Jul 2025 16:21:25 +0000 Manifest this update: Sat 19 Jul 2025 16:16:25 +0000 Manifest next update: Tue 22 Jul 2025 21:40:25 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=) 2: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: D+5dBpsefwDeX55AJmhPEpDpQaWbi3vPqNhI9ngBwNM=) 3: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=) 4: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=) 5: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=) 6: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=) 7: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0b:45:3d:fe:c2:3e:ae:a9:7a:21:be:06:a7:06:a9:ea:76:aa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Jul 19 16:16:25 2025 GMT Not After : Jul 22 21:40:25 2025 GMT Subject: CN=1B9835F4A435E01320F2DB7060281522847E4465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:69:9f:db:9b:d3:af:ce:7f:ce:57:64:8a:ff: 89:0b:5b:82:8a:b4:0c:bc:45:ca:e6:3c:98:92:64: aa:5a:d1:4c:93:68:fb:8a:41:ff:13:a4:a0:ef:b9: 82:76:e7:3f:a4:29:37:56:80:10:60:e5:76:f1:e0: 53:68:ae:3b:ed:78:1d:76:88:d1:17:06:e7:45:29: 9f:df:ff:a8:ba:d2:8e:1c:38:b9:69:7e:49:5f:4d: 8f:2e:a2:bc:06:e6:d3:6e:13:9a:84:96:1a:79:a0: 7c:b6:24:b6:ae:b0:e9:0d:a4:f3:23:a3:73:bc:40: b0:88:7b:71:fb:45:6c:b1:12:4d:41:3f:23:46:aa: 0f:ed:68:89:fe:53:3a:c3:5a:33:f3:c9:54:20:fc: 34:e6:a3:9b:4c:0c:0b:3d:ee:24:9d:95:4d:37:f0: 6f:0c:4e:bd:be:99:a3:41:f2:81:8b:86:ea:24:62: 2a:ba:00:48:7b:5d:74:96:4d:40:eb:ad:50:32:87: 94:14:7d:69:b5:cb:6b:dd:a8:0d:85:a7:46:01:9e: f2:28:55:1e:c9:41:fb:1f:9b:93:6e:35:39:5c:6d: 36:b7:a5:7e:29:d0:e6:1e:c5:6d:b1:f3:a7:ef:ea: 26:32:8d:c5:b9:f5:79:eb:b6:48:93:9e:31:cd:c8: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:98:35:F4:A4:35:E0:13:20:F2:DB:70:60:28:15:22:84:7E:44:65 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:15:37:15:f8:bc:5d:fb:d8:9a:e3:e1:93:97:1c:5c:54:0e: dc:e2:06:99:24:dc:04:73:df:a8:b7:4b:37:ea:91:48:79:08: 71:08:6a:88:9f:e6:19:99:50:eb:8f:f9:73:9c:52:b8:e5:2d: 64:ec:21:82:fc:ed:7c:02:0a:ab:19:7d:96:f7:e1:73:6f:55: a9:be:ab:4a:0d:df:13:8e:d8:83:b1:1f:53:25:4e:bf:52:e9: 5f:5a:47:63:d1:f4:6b:7c:c7:9c:9f:38:8b:89:18:83:4e:cf: 15:cc:cd:5a:39:29:e2:e2:e2:15:e9:9b:fd:6c:df:26:2a:fa: 17:63:66:e6:1f:5b:f7:93:3e:f7:b0:f6:de:56:05:d0:f2:58: 0c:47:e7:d7:c1:bd:75:3b:2e:a5:46:d0:84:73:02:a4:e5:27: db:40:ce:65:b7:ef:45:8d:1c:33:19:d5:40:4e:95:28:96:5b: cc:ca:0d:4b:30:42:5f:8f:66:d3:82:5f:bd:c0:09:da:72:e9: 69:92:82:93:d7:04:70:da:94:aa:5f:41:7c:ce:49:35:3f:f1: 60:ec:71:1b:5c:eb:89:2c:af:7d:64:4c:6a:06:ef:2b:3a:c8: f7:c0:f6:6e:0b:80:bf:79:35:09:d9:7f:84:93:dc:f5:67:9d: f0:6f:7d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAtFPf7CPq6peiG+BqcGqep2qgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA3MTkxNjE2MjVaFw0yNTA3MjIyMTQwMjVaMDMxMTAvBgNV BAMTKDFCOTgzNUY0QTQzNUUwMTMyMEYyREI3MDYwMjgxNTIyODQ3RTQ0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlaZ/bm9Ovzn/OV2SK/4kLW4KK tAy8RcrmPJiSZKpa0UyTaPuKQf8TpKDvuYJ25z+kKTdWgBBg5Xbx4FNorjvteB12 iNEXBudFKZ/f/6i60o4cOLlpfklfTY8uorwG5tNuE5qElhp5oHy2JLausOkNpPMj o3O8QLCIe3H7RWyxEk1BPyNGqg/taIn+UzrDWjPzyVQg/DTmo5tMDAs97iSdlU03 8G8MTr2+maNB8oGLhuokYiq6AEh7XXSWTUDrrVAyh5QUfWm1y2vdqA2Fp0YBnvIo VR7JQfsfm5NuNTlcbTa3pX4p0OYexW2x86fv6iYyjcW59XnrtkiTnjHNyN7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG5g19KQ14BMg8ttwYCgVIoR+RGUwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAVNxX4vF372Jrj4ZOXHFxUDtziBpkk3ARz 36i3SzfqkUh5CHEIaoif5hmZUOuP+XOcUrjlLWTsIYL87XwCCqsZfZb34XNvVam+ q0oN3xOO2IOxH1MlTr9S6V9aR2PR9Gt8x5yfOIuJGINOzxXMzVo5KeLi4hXpm/1s 3yYq+hdjZuYfW/eTPvew9t5WBdDyWAxH59fBvXU7LqVG0IRzAqTlJ9tAzmW370WN HDMZ1UBOlSiWW8zKDUswQl+PZtOCX73ACdpy6WmSgpPXBHDalKpfQXzOSTU/8WDs cRtc64ksr31kTGoG7ys6yPfA9m4LgL95NQnZf4ST3PVnnfBvfW0= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:25 2025 by rpki-client