$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: OkmgYj3UU5BiuTNQO+2ldZovAT69aE7GeUMcZLjx5aI= Subject key identifier: 8F:E7:1B:9A:95:BF:D6:76:C9:32:09:65:C8:B1:03:3A:4D:8E:D3:FA Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 66AD2890D6C67E5FFCE32ACB635B48E9289CE35F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 0185 Signing time: Fri 05 Sep 2025 19:21:08 +0000 Manifest this update: Fri 05 Sep 2025 19:16:08 +0000 Manifest next update: Tue 09 Sep 2025 03:32:08 +0000 Files and hashes: 1: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: tzY1XNU5cVp0pp1q9NAQ2OMSeEZ2zfRfv6jNIeP9/Ac=) 2: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: rGZahub80BwO+X6Rdv+HpgQA3La7isQa4HmuqdPJups=) 3: 3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa (hash: KLg+Fz2BzcIwd4SxZ1zeV5yC0o2hRKcPTvTH6A9r9sk=) 4: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: zG4bUujzmzqdwkICkCb1gdMUqEbOsnXYVfCYSY0KH6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ad:28:90:d6:c6:7e:5f:fc:e3:2a:cb:63:5b:48:e9:28:9c:e3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Sep 5 19:16:08 2025 GMT Not After : Sep 9 03:32:08 2025 GMT Subject: CN=8FE71B9A95BFD676C9320965C8B1033A4D8ED3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:c4:d6:87:c9:02:09:32:c5:d4:e9:24:11: f7:b9:07:35:49:dc:b3:c7:bd:0c:5f:b7:02:97:a4: 28:df:ba:d3:60:4e:5a:76:67:25:48:f3:95:18:9e: b9:ee:66:2a:86:8c:2f:8c:73:ab:5d:4f:73:85:b7: b9:ea:1c:9a:79:1a:6e:46:62:0f:e9:f2:64:33:9c: 44:5c:b3:cc:22:57:ef:44:d7:23:61:c8:c7:db:3f: 68:72:11:30:7b:b7:25:70:4b:72:19:32:14:bc:47: 2e:f5:0f:02:9f:89:29:d8:53:22:9b:01:b2:66:7d: 7a:42:ca:0d:61:b9:7a:31:91:20:28:b3:7a:75:d6: 12:4a:2e:3d:c2:94:1e:78:63:bd:aa:76:08:0e:41: 76:ba:09:a7:34:f8:b2:16:7a:5d:a6:05:32:b0:a7: 37:a7:b1:ed:5f:3f:7d:c9:96:a8:85:20:3b:73:81: 75:25:31:3e:e7:23:69:dc:de:28:e6:48:9d:fa:ff: a4:d6:9a:b8:68:cf:25:0f:22:3a:a9:c2:26:c2:de: 00:5c:b9:14:89:31:86:fb:c7:c2:30:32:56:29:28: bc:0c:92:16:5e:ca:e1:6a:dd:dc:2a:9b:1c:6a:f7: f9:85:7f:8e:90:58:2d:ed:68:7f:62:ff:ff:9a:86: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:1B:9A:95:BF:D6:76:C9:32:09:65:C8:B1:03:3A:4D:8E:D3:FA X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5e:da:7e:a3:2c:0d:f4:dc:6a:21:ee:17:1c:76:bb:d8:13: 81:64:22:b7:41:3b:c6:a0:78:ad:c3:42:8c:a0:9a:40:ea:77: fe:16:f9:f3:38:54:49:3c:d8:8c:ff:09:22:54:67:6a:15:db: c7:90:62:88:d2:84:36:a8:3d:ad:d2:55:9e:dd:07:c0:d6:17: d3:6a:d2:fa:b9:c7:e7:68:3b:30:1f:59:3a:d0:7c:7a:19:2d: 9e:da:07:11:d1:04:89:ce:55:82:d9:99:d0:a6:2e:dc:8f:7f: 29:a8:ad:2d:e2:62:9c:9c:e3:a0:d9:41:3b:2b:5f:a3:db:a1: b2:24:a9:73:13:2b:90:62:d7:fc:c2:74:fb:a4:55:2e:44:84: 64:1b:dd:19:0d:28:67:dc:e0:1e:88:6f:48:a5:ff:31:7d:2e: 05:55:4f:82:65:76:1d:fe:dd:51:45:04:a1:d8:00:76:8f:2a: bb:6f:ba:20:c9:53:b7:83:71:9c:63:0c:d7:ac:f8:75:7f:b9: de:3d:c4:7a:bc:3f:a7:b6:4d:ae:84:04:67:7a:cb:9d:0f:64: 0b:66:a2:84:3f:5a:9b:39:19:0e:24:25:cc:4e:aa:1d:83:ef: 15:bb:4e:e1:1d:cd:70:0f:d8:29:c4:2d:62:4e:84:31:36:2d: 00:f4:43:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZq0okNbGfl/84yrLY1tI6Sic418wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNTA5MDUxOTE2MDhaFw0yNTA5MDkwMzMyMDhaMDMxMTAvBgNV BAMTKDhGRTcxQjlBOTVCRkQ2NzZDOTMyMDk2NUM4QjEwMzNBNEQ4RUQzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWMTWh8kCCTLF1OkkEfe5BzVJ 3LPHvQxftwKXpCjfutNgTlp2ZyVI85UYnrnuZiqGjC+Mc6tdT3OFt7nqHJp5Gm5G Yg/p8mQznERcs8wiV+9E1yNhyMfbP2hyETB7tyVwS3IZMhS8Ry71DwKfiSnYUyKb AbJmfXpCyg1huXoxkSAos3p11hJKLj3ClB54Y72qdggOQXa6Cac0+LIWel2mBTKw pzense1fP33JlqiFIDtzgXUlMT7nI2nc3ijmSJ36/6TWmrhozyUPIjqpwibC3gBc uRSJMYb7x8IwMlYpKLwMkhZeyuFq3dwqmxxq9/mFf46QWC3taH9i//+ahiDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+cbmpW/1nbJMgllyLEDOk2O0/owHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVe2n6jLA303Goh7hccdrvYE4FkIrdBO8ag eK3DQoygmkDqd/4W+fM4VEk82Iz/CSJUZ2oV28eQYojShDaoPa3SVZ7dB8DWF9Nq 0vq5x+doOzAfWTrQfHoZLZ7aBxHRBInOVYLZmdCmLtyPfymorS3iYpyc46DZQTsr X6PbobIkqXMTK5Bi1/zCdPukVS5EhGQb3RkNKGfc4B6Ib0il/zF9LgVVT4Jldh3+ 3VFFBKHYAHaPKrtvuiDJU7eDcZxjDNes+HV/ud49xHq8P6e2Ta6EBGd6y50PZAtm ooQ/Wps5GQ4kJcxOqh2D7xW7TuEdzXAP2CnELWJOhDE2LQD0Q7k= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client