$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: IJv+2FjkRsun/kklMAQS76PC5UH72aQeHnhjFu9lM38= Subject key identifier: E3:CF:D0:66:6F:97:C6:63:5C:81:A1:D7:F2:C0:35:6D:D6:BE:B1:B1 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 0FC23E706CE52FD01EAFC6FD3AAAD6BDEB3D8F6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 016E Signing time: Sun 07 Sep 2025 10:32:15 +0000 Manifest this update: Sun 07 Sep 2025 10:27:15 +0000 Manifest next update: Wed 10 Sep 2025 11:24:15 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) 2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: GsBI2PcRcs+VVN4rgylZrGa9gsRAtzLz8An3S6a8L3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c2:3e:70:6c:e5:2f:d0:1e:af:c6:fd:3a:aa:d6:bd:eb:3d:8f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Sep 7 10:27:15 2025 GMT Not After : Sep 10 11:24:15 2025 GMT Subject: CN=E3CFD0666F97C6635C81A1D7F2C0356DD6BEB1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:4a:61:6b:38:3f:1a:50:57:3e:e7:0e:6f: 5f:a4:65:68:57:0c:6b:76:f9:8b:7c:e7:19:01:2b: a0:03:d6:47:db:b6:83:38:2b:85:5e:80:ea:ea:21: c1:cb:71:36:f9:db:3d:e5:bc:8c:c4:40:5b:01:cb: f3:71:89:fb:e7:06:2f:a5:7c:e1:df:eb:ce:9d:a8: 3d:f6:af:88:d8:c4:e7:21:a2:8f:bd:1a:ab:58:f0: 3b:1f:7d:87:38:7a:d2:55:81:a2:25:0a:eb:1d:54: bb:d8:16:e8:c0:b3:48:38:b2:b1:f7:f3:70:7e:30: 7d:2f:12:76:6f:ba:f3:a1:30:9d:8c:7b:04:12:75: c5:f6:51:db:ae:3e:20:7e:15:53:5d:f4:de:f4:5d: 7f:80:62:67:45:41:ed:c4:0e:b0:06:a2:76:53:45: 0e:4c:5b:fd:a9:f9:d6:6f:e2:cd:5d:19:02:60:fb: 5d:1d:2b:c3:13:41:16:57:a6:db:49:f7:56:8e:17: 5f:c9:8a:a0:70:1c:b4:3a:e3:94:4f:3a:91:cb:d3: ca:ea:9a:db:f4:57:c2:25:cb:b9:4a:c9:d1:47:f1: 47:33:c9:dd:71:5d:db:ce:f9:23:15:35:0d:8f:a4: f7:97:60:d9:18:b9:a7:5f:d8:c8:e5:7a:b9:8c:e6: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CF:D0:66:6F:97:C6:63:5C:81:A1:D7:F2:C0:35:6D:D6:BE:B1:B1 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:38:c2:03:71:20:e2:c8:f0:53:82:91:8c:eb:31:0c:90:2b: 09:0a:57:68:3b:a3:de:8d:fa:ee:7f:ec:c9:70:28:96:cb:40: 60:fc:cb:7d:9b:c7:e6:34:51:2e:cf:9f:65:c1:69:ad:bf:25: 48:6c:a4:84:f3:8b:b5:7d:9a:ee:39:57:29:ca:36:13:e4:87: bd:5a:2f:cd:aa:38:bc:22:d0:05:e0:c0:8d:39:88:e8:6a:91: 8c:8a:ca:fc:37:72:80:2f:af:80:90:42:7b:41:cc:67:1c:e5: 93:e9:1f:f7:8a:ca:04:39:25:68:cf:4f:1c:18:57:00:3c:9f: 59:d6:cf:cd:88:9e:a1:6a:60:72:68:1e:63:cf:ae:fa:0c:92: 26:4a:9b:ce:d8:10:17:47:2f:0c:3b:5d:3b:1a:f9:4a:99:29: b5:02:f5:60:d2:d4:57:b1:19:3e:3a:de:b2:27:f1:1b:ae:1d: cc:35:9f:58:5e:a8:da:d0:0a:04:38:bd:10:74:0b:6c:ed:59: 84:f2:e9:85:80:0f:9a:ce:d4:a3:67:20:2b:8f:fa:3a:65:4f: b3:9e:d7:0c:cb:17:fc:e4:a2:47:8f:2d:04:56:ca:3b:1b:c0: 42:69:aa:a6:e4:1e:95:2e:3f:ca:24:0e:c8:24:04:95:be:1e: 11:f8:51:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8I+cGzlL9Aer8b9OqrWves9j2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTA5MDcxMDI3MTVaFw0yNTA5MTAxMTI0MTVaMDMxMTAvBgNV BAMTKEUzQ0ZEMDY2NkY5N0M2NjM1QzgxQTFEN0YyQzAzNTZERDZCRUIxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPu0phazg/GlBXPucOb1+kZWhX DGt2+Yt85xkBK6AD1kfbtoM4K4VegOrqIcHLcTb52z3lvIzEQFsBy/NxifvnBi+l fOHf686dqD32r4jYxOchoo+9GqtY8DsffYc4etJVgaIlCusdVLvYFujAs0g4srH3 83B+MH0vEnZvuvOhMJ2MewQSdcX2UduuPiB+FVNd9N70XX+AYmdFQe3EDrAGonZT RQ5MW/2p+dZv4s1dGQJg+10dK8MTQRZXpttJ91aOF1/JiqBwHLQ645RPOpHL08rq mtv0V8Ily7lKydFH8Uczyd1xXdvO+SMVNQ2PpPeXYNkYuadf2MjlermM5rnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48/QZm+XxmNcgaHX8sA1bda+sbEwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE84wgNxIOLI8FOCkYzrMQyQKwkKV2g7o96N +u5/7MlwKJbLQGD8y32bx+Y0US7Pn2XBaa2/JUhspITzi7V9mu45VynKNhPkh71a L82qOLwi0AXgwI05iOhqkYyKyvw3coAvr4CQQntBzGcc5ZPpH/eKygQ5JWjPTxwY VwA8n1nWz82InqFqYHJoHmPPrvoMkiZKm87YEBdHLww7XTsa+UqZKbUC9WDS1Fex GT463rIn8RuuHcw1n1heqNrQCgQ4vRB0C2ztWYTy6YWAD5rO1KNnICuP+jplT7Oe 1wzLF/zkokePLQRWyjsbwEJpqqbkHpUuP8okDsgkBJW+HhH4USw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:11 2025 by rpki-client