$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: Bm7iWKtCI03/kxD5By7BxRnxrDgPBop1ppfYpO5roTM= Subject key identifier: 82:73:B6:97:2D:D0:DF:92:3E:99:05:46:A4:DE:F3:12:33:77:64:0B Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 170CC5C2D28E2AA94471A3596BD92C19E11127AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01A8 Signing time: Sat 06 Sep 2025 15:31:45 +0000 Manifest this update: Sat 06 Sep 2025 15:26:45 +0000 Manifest next update: Wed 10 Sep 2025 02:25:45 +0000 Files and hashes: 1: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: B4XXH/LdSSKSnm24jqkXcYNGByz2OI5mGv9L3Qlbx+4=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:c5:c2:d2:8e:2a:a9:44:71:a3:59:6b:d9:2c:19:e1:11:27:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Sep 6 15:26:45 2025 GMT Not After : Sep 10 02:25:45 2025 GMT Subject: CN=8273B6972DD0DF923E990546A4DEF3123377640B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:7a:dd:9a:8a:ab:04:23:76:1c:ed:78:c3: 80:b5:a0:54:1f:b8:5b:f0:68:55:f1:b0:25:52:a6: 13:dc:a1:d1:ea:f1:5a:8a:dd:6d:2f:90:ae:56:42: 5c:8e:1f:93:4a:dc:96:0a:c2:e8:83:5a:1e:0b:0a: 47:dd:4a:2c:be:fa:83:c5:fe:ec:85:49:d9:53:2b: 91:cb:ce:ba:b3:8e:85:4f:b3:2a:78:2f:37:e5:d5: ef:1b:e6:41:d5:65:24:62:46:ca:a1:30:c1:0d:bf: c8:30:45:8c:ba:76:72:cb:38:72:d7:8a:75:00:2f: 20:76:35:3f:8a:cc:cd:f0:6e:bb:7b:7c:00:3d:9a: 7b:33:ea:f9:80:c8:ea:5f:43:7d:bf:81:6a:84:0c: 11:3c:32:2c:ca:0a:f7:f7:b3:db:1d:d9:e1:97:03: 17:4c:95:9c:e9:b9:02:5f:43:b7:d1:22:0d:58:eb: b3:90:de:02:3a:32:c8:8e:ea:b3:4d:d8:c8:bd:ea: 1a:d5:51:97:9c:af:7b:59:98:87:75:c6:4f:6f:08: 41:78:ff:92:81:ba:1f:b8:37:75:fb:b7:4b:ac:d6: ff:b2:d0:40:de:e3:0a:ea:42:79:df:05:14:9a:d0: 21:30:45:81:07:2c:5d:b8:02:13:5f:c3:20:b8:32: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:B6:97:2D:D0:DF:92:3E:99:05:46:A4:DE:F3:12:33:77:64:0B X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a7:cf:20:f1:19:3d:fb:d8:ea:33:d2:b4:8e:ea:30:23:de: 71:89:43:ab:0b:46:0b:e4:4a:c8:ee:02:e1:16:1e:a3:b7:c1: 36:a4:68:12:50:44:33:80:94:7d:70:5f:d8:ed:d6:6d:10:d6: 87:09:3a:55:ac:89:91:f2:8c:32:d0:8a:69:f3:ec:fd:99:31: eb:cc:f2:70:b2:07:ec:75:ce:31:f5:f2:3d:e0:c9:f9:6a:61: 09:e2:11:f9:1d:8f:04:e8:e3:ea:7d:28:2d:6c:48:47:04:ba: fe:92:ba:af:0a:86:d0:23:c6:06:7a:9a:de:0d:7e:6a:04:86: 43:5d:8b:82:eb:94:03:c2:6c:28:fe:74:19:a3:0f:58:10:6b: 6f:3f:53:82:91:3c:6b:6a:ca:c0:ef:8b:c4:96:d1:94:d9:27: 80:0c:01:b4:3d:76:7b:68:b4:08:ce:1e:f6:f5:1b:51:ac:2c: 92:0d:8e:9c:ec:2e:6e:d3:f7:4f:53:5b:f2:8d:40:9b:eb:09: 1e:37:12:9b:56:0b:bf:58:4c:89:09:29:37:ca:71:0a:71:6d: 11:5f:f6:8e:c9:03:de:35:87:a3:33:48:41:a4:b0:a0:ca:d2: 9c:70:a5:30:55:04:a0:61:81:8c:1d:6e:56:0d:db:69:60:f3: 68:5a:dd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwzFwtKOKqlEcaNZa9ksGeERJ68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA5MDYxNTI2NDVaFw0yNTA5MTAwMjI1NDVaMDMxMTAvBgNV BAMTKDgyNzNCNjk3MkREMERGOTIzRTk5MDU0NkE0REVGMzEyMzM3NzY0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOHrdmoqrBCN2HO14w4C1oFQf uFvwaFXxsCVSphPcodHq8VqK3W0vkK5WQlyOH5NK3JYKwuiDWh4LCkfdSiy++oPF /uyFSdlTK5HLzrqzjoVPsyp4Lzfl1e8b5kHVZSRiRsqhMMENv8gwRYy6dnLLOHLX inUALyB2NT+KzM3wbrt7fAA9mnsz6vmAyOpfQ32/gWqEDBE8MizKCvf3s9sd2eGX AxdMlZzpuQJfQ7fRIg1Y67OQ3gI6MsiO6rNN2Mi96hrVUZecr3tZmId1xk9vCEF4 /5KBuh+4N3X7t0us1v+y0EDe4wrqQnnfBRSa0CEwRYEHLF24AhNfwyC4MubrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnO2ly3Q35I+mQVGpN7zEjN3ZAswHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOnzyDxGT372Ooz0rSO6jAj3nGJQ6sLRgvk SsjuAuEWHqO3wTakaBJQRDOAlH1wX9jt1m0Q1ocJOlWsiZHyjDLQimnz7P2ZMevM 8nCyB+x1zjH18j3gyflqYQniEfkdjwTo4+p9KC1sSEcEuv6Suq8KhtAjxgZ6mt4N fmoEhkNdi4LrlAPCbCj+dBmjD1gQa28/U4KRPGtqysDvi8SW0ZTZJ4AMAbQ9dnto tAjOHvb1G1GsLJINjpzsLm7T909TW/KNQJvrCR43EptWC79YTIkJKTfKcQpxbRFf 9o7JA941h6MzSEGksKDK0pxwpTBVBKBhgYwdblYN22lg82ha3a0= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:23 2025 by rpki-client