$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: ktQZlzUpICa1VCIaZjCE6cmHRBu55/dKzSxqPqO6pN0= Subject key identifier: E8:6C:21:3B:34:D7:78:AE:E6:37:11:48:94:84:08:F2:61:4D:77:BB Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 56DB4145266A2B437CC9DB3FA1BF5B4318AFF0E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: F1 Signing time: Sat 30 Aug 2025 10:00:39 +0000 Manifest this update: Sat 30 Aug 2025 09:55:39 +0000 Manifest next update: Tue 02 Sep 2025 18:36:39 +0000 Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: KaOEpDvLaBuB22YviKTHfvIAdo4dm2WlutXgwb/KOhI=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:db:41:45:26:6a:2b:43:7c:c9:db:3f:a1:bf:5b:43:18:af:f0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Aug 30 09:55:39 2025 GMT Not After : Sep 2 18:36:39 2025 GMT Subject: CN=E86C213B34D778AEE6371148948408F2614D77BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:6d:d9:75:af:c5:97:f1:55:f1:10:c5:69: 87:e5:e6:f4:07:b5:ba:74:4a:09:d3:9a:1e:83:74: 6b:4e:b5:11:09:02:1e:d3:c1:c3:63:5f:c0:5d:7e: 05:b0:2f:b4:0c:be:7a:ec:a6:53:44:b2:db:73:1d: e8:2a:54:2f:41:d3:a1:03:60:8c:b4:73:58:59:f9: ec:fe:39:dc:79:d9:ef:a0:07:5e:7e:58:bf:86:1d: 6d:e4:2e:67:74:04:e0:aa:f8:31:c6:fb:e1:af:ef: 80:85:10:c5:69:60:33:fc:99:3a:48:1f:03:17:40: da:4b:a2:ea:c0:70:7e:4b:bc:66:a5:98:48:a8:2c: ef:98:4a:02:45:77:28:5d:f5:11:97:4b:20:9a:a1: 57:e3:25:9d:01:63:1d:0a:09:33:37:9d:be:f4:15: 36:8b:6b:b5:14:e2:21:39:74:cb:44:34:7b:ec:2b: b6:38:db:14:68:3a:7d:78:74:ff:d7:96:fd:cd:53: 9b:98:fc:91:86:5f:ad:39:db:16:21:8e:e0:4b:07: 6d:ce:7f:1e:ec:65:40:55:b9:37:49:ea:87:43:c4: f6:c4:de:7d:2f:fb:55:6a:37:d8:8e:7a:99:13:36: 54:fe:2f:d7:be:a5:b4:f5:0e:38:c2:10:6c:37:c4: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:21:3B:34:D7:78:AE:E6:37:11:48:94:84:08:F2:61:4D:77:BB X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:35:1d:e8:24:29:43:d8:a5:e9:62:30:d1:16:7b:5e:c7: 7f:46:b9:fe:0a:97:7d:79:9d:47:0a:cd:bd:43:0c:5e:71:2d: 09:c1:02:a9:33:21:20:8d:e8:16:87:ae:d7:c6:61:58:c7:0e: 66:43:bc:ad:e2:20:10:93:08:f8:5c:00:73:5e:ac:31:e6:65: ab:b3:4c:8c:0c:1e:ca:70:5b:94:a6:63:fd:b8:d6:2c:f3:b3: ef:0b:40:c2:68:a7:2d:77:67:9d:44:55:c3:91:52:8b:3d:ca: bb:89:51:58:b2:4e:94:7d:29:ab:6c:e2:1b:2c:02:e6:7b:31: c5:6b:1b:6e:17:04:a8:45:f5:c3:14:aa:34:f6:1b:9a:a0:31: 9a:e1:82:ee:e9:c7:2e:8c:73:43:af:9f:2d:6a:eb:04:ca:d6: 38:c4:56:09:b8:b0:f7:d5:04:01:73:cc:24:a8:63:be:e9:41: 4d:6b:ca:05:19:d2:03:e7:bc:ba:b8:c8:36:54:c6:5a:c5:e7: 4f:07:f1:d0:b7:33:3c:c5:c6:f5:31:7c:9f:2c:00:ea:7a:ee: db:5b:03:49:95:17:7d:f1:fe:ee:4d:5e:fc:d3:9f:71:1d:a3: 94:7b:08:3f:00:3f:9a:9e:88:58:fb:64:3f:a9:66:b7:a2:cb: 7e:f7:00:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVttBRSZqK0N8yds/ob9bQxiv8OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA4MzAwOTU1MzlaFw0yNTA5MDIxODM2MzlaMDMxMTAvBgNV BAMTKEU4NkMyMTNCMzRENzc4QUVFNjM3MTE0ODk0ODQwOEYyNjE0RDc3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjG3Zda/Fl/FV8RDFaYfl5vQH tbp0SgnTmh6DdGtOtREJAh7TwcNjX8BdfgWwL7QMvnrsplNEsttzHegqVC9B06ED YIy0c1hZ+ez+Odx52e+gB15+WL+GHW3kLmd0BOCq+DHG++Gv74CFEMVpYDP8mTpI HwMXQNpLourAcH5LvGalmEioLO+YSgJFdyhd9RGXSyCaoVfjJZ0BYx0KCTM3nb70 FTaLa7UU4iE5dMtENHvsK7Y42xRoOn14dP/Xlv3NU5uY/JGGX6052xYhjuBLB23O fx7sZUBVuTdJ6odDxPbE3n0v+1VqN9iOepkTNlT+L9e+pbT1DjjCEGw3xBoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GwhOzTXeK7mNxFIlIQI8mFNd7swHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXDNR3oJClD2KXpYjDRFntex39Guf4Kl315 nUcKzb1DDF5xLQnBAqkzISCN6BaHrtfGYVjHDmZDvK3iIBCTCPhcAHNerDHmZauz TIwMHspwW5SmY/241izzs+8LQMJopy13Z51EVcORUos9yruJUViyTpR9Kats4hss AuZ7McVrG24XBKhF9cMUqjT2G5qgMZrhgu7pxy6Mc0Ovny1q6wTK1jjEVgm4sPfV BAFzzCSoY77pQU1rygUZ0gPnvLq4yDZUxlrF508H8dC3MzzFxvUxfJ8sAOp67ttb A0mVF33x/u5NXvzTn3Edo5R7CD8AP5qeiFj7ZD+pZreiy373AFk= -----END CERTIFICATE-----Generated at Sun Aug 31 05:56:59 2025 by rpki-client