$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: wBxTI8eglZEYvKp8mGQKok4rcQ0Bnk+V1s0K83jfLKA= Subject key identifier: 82:3B:68:A2:34:6A:B1:2A:0D:88:EE:41:B0:84:6D:AE:E7:ED:C8:2B Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 79790CAF71C4D23FD3AF9F18BE1A0DBFCF2C07A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 017E Signing time: Wed 04 Jun 2025 03:11:47 +0000 Manifest this update: Wed 04 Jun 2025 03:06:47 +0000 Manifest next update: Sat 07 Jun 2025 12:07:47 +0000 Files and hashes: 1: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: i4bciBA8Gke4AkHwJ4FyMoCdGDU9LJAolwUd5Jp8HyY=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:79:0c:af:71:c4:d2:3f:d3:af:9f:18:be:1a:0d:bf:cf:2c:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Jun 4 03:06:47 2025 GMT Not After : Jun 7 12:07:47 2025 GMT Subject: CN=823B68A2346AB12A0D88EE41B0846DAEE7EDC82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:88:7a:69:ee:b4:aa:4d:ea:60:68:bb:9b:76: 71:b6:5b:2e:c3:99:2b:f3:12:53:58:82:a8:a8:03: e3:33:0a:35:13:09:4d:ce:20:a1:a6:90:26:a4:0c: 76:19:6f:7d:32:e9:47:53:18:7a:ed:d7:19:8f:fb: 0b:61:61:0d:b8:9f:4e:f6:25:d4:7e:00:09:1d:32: 2c:08:df:89:21:c7:01:e2:a0:b7:c8:89:05:d2:12: 4b:4b:2a:f6:b8:2d:68:b8:1d:a0:fa:fd:09:be:31: 56:8e:fd:6d:8a:9f:a1:44:02:b2:40:8c:08:02:89: 36:a2:90:7d:5b:2d:6d:60:89:88:ae:11:89:5d:d4: 59:a1:a9:e3:8f:1a:0f:1e:0d:bb:c7:09:c9:22:ec: d9:f0:17:cd:9e:44:cc:7d:b0:f2:fa:f1:58:65:3a: c7:83:fb:77:9f:c6:2e:e5:b5:f5:68:72:6a:f9:0a: 6d:68:bc:5a:27:e8:24:df:94:38:6c:20:a7:7c:6b: f9:d8:89:a4:6c:70:f1:4b:44:26:5b:7b:88:a6:e3: 0d:a0:0b:04:b5:e5:da:9a:28:31:1e:1c:16:a9:a4: 9f:c6:af:f4:2a:12:a0:c9:93:89:24:92:8b:22:e4: 4d:e3:5a:d1:24:ed:d6:35:99:7e:0c:89:e1:0f:07: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3B:68:A2:34:6A:B1:2A:0D:88:EE:41:B0:84:6D:AE:E7:ED:C8:2B X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:87:9a:a3:6a:15:d6:a4:e9:89:a0:44:2d:f0:fd:35:0d:20: e0:88:0c:5e:cb:bc:d9:5a:04:02:bb:f9:a1:40:79:fa:56:66: f5:09:9b:e2:6b:80:c1:8d:d9:2b:f4:6c:f2:0e:1d:3a:52:c3: 37:52:95:ae:46:a1:b9:cf:8b:be:ae:d2:05:46:3c:80:b8:d2: cc:e4:ef:f0:68:80:e8:4b:ee:7c:07:92:ef:d3:df:bb:de:72: 90:60:7b:a5:a1:a7:e3:f7:89:49:2f:0b:63:51:40:95:00:99: 2c:7b:27:50:21:8d:9e:97:a9:06:66:98:55:a6:69:d5:a9:7c: 4e:b4:dd:93:68:3c:12:fd:96:61:7a:60:cb:6f:65:8b:c5:50: f8:54:b8:a0:02:58:ee:2c:d1:ef:1d:fe:c5:8c:c1:46:9d:61: 7a:a1:bd:c5:00:d0:0d:17:0c:69:5f:e4:ad:16:fd:8c:e9:b5: a8:72:c5:4e:28:c0:6e:3c:df:37:73:38:63:6a:b2:37:72:c5: 13:28:63:06:c5:4b:3c:28:2b:5a:fa:3c:85:6a:82:98:55:08: 9f:11:9a:7c:15:31:ff:c3:63:c2:fb:25:c6:2e:94:66:0b:09: ce:3a:f8:88:4d:ef:9f:bc:a3:1a:18:55:ee:87:43:37:ec:e3: 48:7f:1f:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXkMr3HE0j/Tr58YvhoNv88sB6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA2MDQwMzA2NDdaFw0yNTA2MDcxMjA3NDdaMDMxMTAvBgNV BAMTKDgyM0I2OEEyMzQ2QUIxMkEwRDg4RUU0MUIwODQ2REFFRTdFREM4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwiHpp7rSqTepgaLubdnG2Wy7D mSvzElNYgqioA+MzCjUTCU3OIKGmkCakDHYZb30y6UdTGHrt1xmP+wthYQ24n072 JdR+AAkdMiwI34khxwHioLfIiQXSEktLKva4LWi4HaD6/Qm+MVaO/W2Kn6FEArJA jAgCiTaikH1bLW1giYiuEYld1FmhqeOPGg8eDbvHCcki7NnwF82eRMx9sPL68Vhl OseD+3efxi7ltfVocmr5Cm1ovFon6CTflDhsIKd8a/nYiaRscPFLRCZbe4im4w2g CwS15dqaKDEeHBappJ/Gr/QqEqDJk4kkkosi5E3jWtEk7dY1mX4MieEPB+6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjtoojRqsSoNiO5BsIRtruftyCswHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWHmqNqFdak6YmgRC3w/TUNIOCIDF7LvNla BAK7+aFAefpWZvUJm+JrgMGN2Sv0bPIOHTpSwzdSla5GobnPi76u0gVGPIC40szk 7/BogOhL7nwHku/T37vecpBge6Whp+P3iUkvC2NRQJUAmSx7J1AhjZ6XqQZmmFWm adWpfE603ZNoPBL9lmF6YMtvZYvFUPhUuKACWO4s0e8d/sWMwUadYXqhvcUA0A0X DGlf5K0W/YzptahyxU4owG483zdzOGNqsjdyxRMoYwbFSzwoK1r6PIVqgphVCJ8R mnwVMf/DY8L7JcYulGYLCc46+IhN75+8oxoYVe6HQzfs40h/H88= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:44 2025 by rpki-client