$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: vCR53177pw4G5q2DNOua7Q3EqY82Ump+5wH5t7PTwhY= Subject key identifier: FB:E5:09:4D:DA:A1:7C:A1:26:B1:1B:7E:39:95:DC:48:82:D8:5A:E3 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 7E7DE1781E1A9044B58868802F067A5F1AE9CFCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 0149 Signing time: Sun 15 Jun 2025 23:02:13 +0000 Manifest this update: Sun 15 Jun 2025 22:57:13 +0000 Manifest next update: Thu 19 Jun 2025 07:07:13 +0000 Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) 2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: VbkDg3NRk4gGr35X0yiB6JoImJHzZcSjm68SddZK+Ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7d:e1:78:1e:1a:90:44:b5:88:68:80:2f:06:7a:5f:1a:e9:cf:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Jun 15 22:57:13 2025 GMT Not After : Jun 19 07:07:13 2025 GMT Subject: CN=FBE5094DDAA17CA126B11B7E3995DC4882D85AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:97:8d:09:b1:cd:8c:17:02:62:22:7c:7a: e4:41:23:80:74:17:21:22:4c:70:ab:2d:b0:3c:38: 1e:4c:8a:bb:c2:25:51:44:7e:c4:a0:dc:b9:32:4c: 80:11:7c:95:d8:75:4c:85:91:c2:73:43:33:77:fd: 15:fd:ab:7d:ca:62:28:76:30:fd:b1:b3:fd:60:33: 0b:8f:1f:ce:d9:00:5b:be:5f:0e:f0:14:fb:0a:5c: 4a:c7:e3:7c:46:88:fa:81:af:01:03:b6:53:2b:6b: 62:68:5d:b6:41:76:b1:80:1d:33:1b:9b:47:59:e7: 10:c0:e2:5e:29:03:15:d3:73:f2:1b:c1:b1:63:43: 5d:c6:73:0c:92:17:db:19:86:e3:ce:bd:68:b1:19: 53:c4:3b:8d:81:6b:4d:57:86:be:34:e8:4a:52:04: ac:d5:78:52:06:2a:90:71:c8:6b:d0:8a:65:97:c7: ba:c0:be:2c:3a:78:d3:ad:85:25:dd:3e:82:a8:1d: e4:23:19:10:e5:96:dc:ec:ac:00:c6:d5:0f:0e:ea: be:fa:7e:ac:64:66:ea:48:9a:0a:3d:a9:5a:75:42: 8e:f2:1f:14:2c:73:58:f6:aa:22:fd:4f:e3:01:69: c0:f6:4b:7d:ea:d2:6e:13:e3:dc:3c:0a:67:05:b5: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:09:4D:DA:A1:7C:A1:26:B1:1B:7E:39:95:DC:48:82:D8:5A:E3 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:52:66:ff:28:5b:0f:31:b8:80:6a:41:12:a7:b4:0a:94:d2: 53:89:a4:0d:5a:49:b7:a5:45:17:da:62:7f:3a:f5:96:fd:ca: 17:59:3b:39:c2:81:6c:d6:64:31:1f:a6:9c:62:52:25:f5:c4: c7:bb:c1:f4:ee:79:0c:e6:8c:bd:7b:56:27:f0:82:2b:cf:f6: 22:45:40:23:7f:a9:b7:11:40:97:52:91:04:5b:d9:d2:e8:3d: ed:22:55:b0:b8:3f:e1:a5:d6:51:c4:91:6f:82:4a:ab:b4:49: 2d:1c:21:11:2a:34:35:fe:66:ed:1b:a5:7d:da:9b:a3:fe:3c: a6:64:40:fd:c9:0f:8b:25:98:71:62:00:9a:19:78:f5:94:47: b7:f3:8f:1f:a8:5a:17:07:90:98:aa:d9:84:06:24:f3:0f:98: f1:02:b2:30:59:88:8d:e8:d0:cf:01:5f:2b:32:45:76:e5:b5: 60:dd:49:32:02:2a:94:48:23:63:01:53:14:0d:0c:23:8e:27: cb:39:15:a6:dc:b9:77:88:63:6b:da:2b:e1:75:ae:40:ca:fc: 4b:74:e1:5c:df:3b:b2:7b:03:87:59:ea:36:15:ae:90:4a:c9: 67:38:cc:96:df:0e:4c:63:6b:64:7c:a7:fc:95:75:55:6a:33: e0:16:53:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfn3heB4akES1iGiALwZ6Xxrpz8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTA2MTUyMjU3MTNaFw0yNTA2MTkwNzA3MTNaMDMxMTAvBgNV BAMTKEZCRTUwOTREREFBMTdDQTEyNkIxMUI3RTM5OTVEQzQ4ODJEODVBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0peNCbHNjBcCYiJ8euRBI4B0 FyEiTHCrLbA8OB5MirvCJVFEfsSg3LkyTIARfJXYdUyFkcJzQzN3/RX9q33KYih2 MP2xs/1gMwuPH87ZAFu+Xw7wFPsKXErH43xGiPqBrwEDtlMra2JoXbZBdrGAHTMb m0dZ5xDA4l4pAxXTc/IbwbFjQ13GcwySF9sZhuPOvWixGVPEO42Ba01Xhr406EpS BKzVeFIGKpBxyGvQimWXx7rAviw6eNOthSXdPoKoHeQjGRDlltzsrADG1Q8O6r76 fqxkZupImgo9qVp1Qo7yHxQsc1j2qiL9T+MBacD2S33q0m4T49w8CmcFtXwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++UJTdqhfKEmsRt+OZXcSILYWuMwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpSZv8oWw8xuIBqQRKntAqU0lOJpA1aSbel RRfaYn869Zb9yhdZOznCgWzWZDEfppxiUiX1xMe7wfTueQzmjL17VifwgivP9iJF QCN/qbcRQJdSkQRb2dLoPe0iVbC4P+Gl1lHEkW+CSqu0SS0cIREqNDX+Zu0bpX3a m6P+PKZkQP3JD4slmHFiAJoZePWUR7fzjx+oWhcHkJiq2YQGJPMPmPECsjBZiI3o 0M8BXysyRXbltWDdSTICKpRII2MBUxQNDCOOJ8s5FabcuXeIY2vaK+F1rkDK/Et0 4VzfO7J7A4dZ6jYVrpBKyWc4zJbfDkxja2R8p/yVdVVqM+AWU5I= -----END CERTIFICATE-----Generated at Tue Jun 17 12:54:14 2025 by rpki-client