$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: 9fkbc7MQMRq/1omSL/FIYjuN+gjn5WibUKKMsbBPt7Q= Subject key identifier: 1B:EB:9A:C3:61:99:FD:6C:8F:93:3A:F5:15:06:52:5C:0F:F7:36:D3 Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 4E665FB1698A98ABE6ECFF236FD45FF982330CD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 015F Signing time: Tue 05 Aug 2025 00:13:10 +0000 Manifest this update: Tue 05 Aug 2025 00:08:10 +0000 Manifest next update: Fri 08 Aug 2025 03:34:10 +0000 Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: eplABFyY1ecuL1wEGeIOOrlPuS7SEDle+CErNMXqIyM=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:66:5f:b1:69:8a:98:ab:e6:ec:ff:23:6f:d4:5f:f9:82:33:0c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: Aug 5 00:08:10 2025 GMT Not After : Aug 8 03:34:10 2025 GMT Subject: CN=1BEB9AC36199FD6C8F933AF51506525C0FF736D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:3b:fc:5a:67:81:81:5f:8f:1c:c3:1f:0f: ba:e8:29:92:ce:19:56:9e:0d:c7:93:af:6f:ec:30: e9:42:2b:fc:57:c3:4f:03:25:56:76:4b:a9:72:b7: fc:e0:75:c8:5d:ab:32:c6:8d:f3:ea:28:60:c9:d9: 7c:34:fa:55:ed:c2:1a:7e:28:ec:c0:b4:d8:c5:69: 4a:79:9e:93:df:ef:51:34:57:f3:ba:d8:da:35:b3: 4f:4a:67:8d:01:3b:7f:ba:04:3f:44:a8:39:20:ea: 89:2e:16:b8:5c:25:d4:76:6f:3e:58:ca:31:c8:0e: 1a:60:46:43:f9:4e:06:be:8e:91:fc:b2:8a:87:33: fb:1f:97:c0:88:31:3a:14:05:9d:35:32:1b:09:96: bd:b7:e0:6b:18:2f:13:19:e1:8d:d7:b7:ae:e4:38: e4:05:35:56:f9:51:6d:03:c6:c1:05:58:92:1b:4f: 07:09:c1:b8:be:3b:49:b2:a8:ef:69:8c:71:86:9d: 04:ba:e7:a6:b3:3c:52:ba:4a:eb:88:87:71:3c:e7: 4b:bb:d3:a6:28:4c:f4:e3:61:08:ce:4f:d3:31:02: a7:06:19:5e:82:91:8a:72:19:c4:67:79:cf:f0:d1: 22:e3:bd:fc:85:83:a7:fe:d0:7d:20:14:6d:86:d8: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:9A:C3:61:99:FD:6C:8F:93:3A:F5:15:06:52:5C:0F:F7:36:D3 X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:42:07:2f:db:91:c3:d8:6e:8b:28:d1:b0:ea:17:ea:f1:bc: d9:dd:6a:ae:84:57:65:e0:36:2f:06:94:20:3e:e0:7f:4f:58: 62:1f:da:da:46:de:bc:e6:0b:f3:8f:64:da:9c:16:93:6a:b4: 4f:d3:42:ea:36:ad:55:a8:0d:e5:cc:05:cd:d8:a7:85:0d:51: 77:b8:b1:d4:2e:57:e0:03:1e:aa:f0:d8:6b:2e:d7:72:40:9e: 8c:46:25:3e:ca:5b:67:40:e5:d6:63:fc:8b:6c:2a:61:4b:2c: 36:70:16:f5:cb:9f:3c:f9:6a:39:47:ca:e4:be:5b:a1:9e:30: 6b:d3:a1:81:f8:2f:18:e0:3a:7a:7d:a2:e1:05:51:91:f4:41: ce:28:4a:4e:b6:0d:fc:4a:56:84:59:ed:24:da:ac:38:6d:83: 9f:66:67:4a:57:9e:3c:d0:2c:8d:8f:26:dc:fa:67:ce:b9:7e: 5e:ef:66:02:5f:02:47:19:89:6e:41:7f:7f:26:ed:d9:44:31: 6f:4e:58:a5:d4:8f:ac:88:2e:39:ca:45:55:54:a0:b4:8a:e6: 4b:ce:95:7d:de:c0:6c:c5:72:ec:0a:d6:3d:10:f0:bd:3d:26: b6:ef:57:cb:29:9b:9e:47:42:40:32:63:5c:80:78:d3:3a:78: db:69:53:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmZfsWmKmKvm7P8jb9Rf+YIzDNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNTA4MDUwMDA4MTBaFw0yNTA4MDgwMzM0MTBaMDMxMTAvBgNV BAMTKDFCRUI5QUMzNjE5OUZENkM4RjkzM0FGNTE1MDY1MjVDMEZGNzM2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgITv8WmeBgV+PHMMfD7roKZLO GVaeDceTr2/sMOlCK/xXw08DJVZ2S6lyt/zgdchdqzLGjfPqKGDJ2Xw0+lXtwhp+ KOzAtNjFaUp5npPf71E0V/O62No1s09KZ40BO3+6BD9EqDkg6okuFrhcJdR2bz5Y yjHIDhpgRkP5Tga+jpH8soqHM/sfl8CIMToUBZ01MhsJlr234GsYLxMZ4Y3Xt67k OOQFNVb5UW0DxsEFWJIbTwcJwbi+O0myqO9pjHGGnQS656azPFK6SuuIh3E850u7 06YoTPTjYQjOT9MxAqcGGV6CkYpyGcRnec/w0SLjvfyFg6f+0H0gFG2G2CwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+uaw2GZ/WyPkzr1FQZSXA/3NtMwHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJCBy/bkcPYboso0bDqF+rxvNndaq6EV2Xg Ni8GlCA+4H9PWGIf2tpG3rzmC/OPZNqcFpNqtE/TQuo2rVWoDeXMBc3Yp4UNUXe4 sdQuV+ADHqrw2Gsu13JAnoxGJT7KW2dA5dZj/ItsKmFLLDZwFvXLnzz5ajlHyuS+ W6GeMGvToYH4LxjgOnp9ouEFUZH0Qc4oSk62DfxKVoRZ7STarDhtg59mZ0pXnjzQ LI2PJtz6Z865fl7vZgJfAkcZiW5Bf38m7dlEMW9OWKXUj6yILjnKRVVUoLSK5kvO lX3ewGzFcuwK1j0Q8L09JrbvV8spm55HQkAyY1yAeNM6eNtpU2E= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:17 2025 by rpki-client