$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: 9XZc0trYI6OdQv16YcEbZLL1ip0TUWon/aNiupMimp8= Subject key identifier: 71:0C:74:6B:6E:33:FC:E1:6C:46:CF:2B:68:90:60:64:A1:89:2A:CD Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 74559D45883CF5A8D0B8ACDF81988B412256085E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01C2 Signing time: Sun 02 Nov 2025 16:01:48 +0000 Manifest this update: Sun 02 Nov 2025 15:56:48 +0000 Manifest next update: Wed 05 Nov 2025 18:33:48 +0000 Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: 6T3ao+zwbW5Ceyosygo+mIGo36NKhcF0UPh8Ws9Tp/8=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:55:9d:45:88:3c:f5:a8:d0:b8:ac:df:81:98:8b:41:22:56:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Nov 2 15:56:48 2025 GMT Not After : Nov 5 18:33:48 2025 GMT Subject: CN=710C746B6E33FCE16C46CF2B68906064A1892ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:75:c3:d8:e3:e8:eb:af:bc:5a:c9:d2:9e: 03:a9:05:8f:c2:d8:d4:f8:a7:86:b3:9f:b1:97:a6: ee:f9:c9:51:49:3d:87:29:15:3a:29:b3:ff:dd:02: be:54:72:cb:00:75:ff:60:d7:ed:ff:d2:c5:bd:80: 5e:07:7c:93:54:86:b8:11:44:11:2e:cd:19:64:84: c9:a2:f8:9f:55:05:c7:bd:8e:3f:f3:a8:f7:89:76: 82:17:59:7d:1b:72:00:45:84:e7:e2:1f:f8:a8:ea: e7:29:20:ad:2c:cd:98:8a:d3:4a:18:71:1b:72:8b: c9:ce:b2:93:b9:d6:23:73:98:ed:82:f4:1d:b1:62: 10:7c:1c:8b:49:07:c0:ef:84:e3:06:ab:fc:43:23: ed:27:f1:6d:03:8e:f9:9b:94:c2:a7:a3:6f:e4:23: dd:32:52:01:d1:ec:6e:f9:a2:a6:53:c3:b5:80:05: c5:16:d4:ea:cf:62:45:d7:1b:88:e0:ff:3c:05:50: 0a:22:93:11:79:f0:f7:47:77:a0:16:09:08:73:9a: 4d:83:b3:60:3c:df:5a:c7:1b:7a:b0:2e:4c:80:73: 7d:2e:2b:38:49:59:5f:5f:71:72:13:53:3b:29:b7: 0b:b9:9c:6f:d2:f9:60:3a:0c:f7:e4:dd:30:d5:d0: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:74:6B:6E:33:FC:E1:6C:46:CF:2B:68:90:60:64:A1:89:2A:CD X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:c7:8b:7d:5d:f7:db:3b:db:f3:61:7f:97:80:f2:e6:ce: 7b:7a:85:eb:ad:ee:c1:99:17:0d:bc:59:b5:da:f9:16:fe:0f: 18:9c:d1:28:9a:83:e4:bd:0e:b5:e1:cb:a9:08:60:dc:f0:ec: 3e:33:a7:f8:f4:31:83:1c:4f:b3:67:51:92:84:e7:12:4f:a5: 4a:61:2c:6a:dd:59:39:13:68:8c:9b:02:32:ef:2c:de:f1:9e: 56:15:4d:79:45:ce:6a:13:77:52:a4:e5:ae:73:bf:4d:ee:63: f0:ee:7b:b8:42:f8:f1:d5:74:d0:ea:51:e8:b0:30:12:da:2a: 2a:e0:10:03:c2:67:b9:c7:75:2a:71:af:b4:53:fe:5e:bf:a4: e8:4f:cf:c5:43:e5:ba:16:fb:3b:14:c2:6e:60:3e:54:33:1a: 3d:96:ff:06:e7:6c:6b:32:e9:11:ab:d9:a6:b1:01:4a:77:f9: 63:f0:1e:fe:e9:e6:24:59:11:b4:74:75:4b:7b:3e:a2:fa:ff: 23:d4:7d:36:56:0b:9c:74:a1:4c:9a:dc:63:a9:25:b8:b2:ed: 91:27:98:23:ff:36:5c:65:e0:cd:73:dc:e7:74:1f:70:dc:bf: 2b:90:f5:f8:76:ee:d4:b7:48:18:c1:5d:1d:7a:bd:4b:36:da: 99:4f:ef:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFWdRYg89ajQuKzfgZiLQSJWCF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTExMDIxNTU2NDhaFw0yNTExMDUxODMzNDhaMDMxMTAvBgNV BAMTKDcxMEM3NDZCNkUzM0ZDRTE2QzQ2Q0YyQjY4OTA2MDY0QTE4OTJBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqnXD2OPo66+8WsnSngOpBY/C 2NT4p4azn7GXpu75yVFJPYcpFTops//dAr5UcssAdf9g1+3/0sW9gF4HfJNUhrgR RBEuzRlkhMmi+J9VBce9jj/zqPeJdoIXWX0bcgBFhOfiH/io6ucpIK0szZiK00oY cRtyi8nOspO51iNzmO2C9B2xYhB8HItJB8DvhOMGq/xDI+0n8W0DjvmblMKno2/k I90yUgHR7G75oqZTw7WABcUW1OrPYkXXG4jg/zwFUAoikxF58PdHd6AWCQhzmk2D s2A831rHG3qwLkyAc30uKzhJWV9fcXITUzsptwu5nG/S+WA6DPfk3TDV0Oz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQx0a24z/OFsRs8raJBgZKGJKs0wHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwyx4t9XffbO9vzYX+XgPLmznt6heut7sGZ Fw28WbXa+Rb+Dxic0Siag+S9DrXhy6kIYNzw7D4zp/j0MYMcT7NnUZKE5xJPpUph LGrdWTkTaIybAjLvLN7xnlYVTXlFzmoTd1Kk5a5zv03uY/Due7hC+PHVdNDqUeiw MBLaKirgEAPCZ7nHdSpxr7RT/l6/pOhPz8VD5boW+zsUwm5gPlQzGj2W/wbnbGsy 6RGr2aaxAUp3+WPwHv7p5iRZEbR0dUt7PqL6/yPUfTZWC5x0oUya3GOpJbiy7ZEn mCP/Nlxl4M1z3Od0H3DcvyuQ9fh27tS3SBjBXR16vUs22plP74w= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:14 2025 by rpki-client