$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: UxZBSJ5y6bUUT6YxSEQffNTE93/A3bdb4YZDW9bCzO8= Subject key identifier: B5:B1:24:C7:71:09:C6:0F:54:DE:1B:07:13:9A:18:4B:45:57:0E:A0 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 26463D47954AD340C8FEFA07ABF10104B0F3176C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 016E Signing time: Mon 28 Apr 2025 17:21:44 +0000 Manifest this update: Mon 28 Apr 2025 17:16:44 +0000 Manifest next update: Thu 01 May 2025 22:57:44 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=) 3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: uz/IjdvRvG2XSh0BR6MGYqBXt/6NeOKQflil0ELjBjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:46:3d:47:95:4a:d3:40:c8:fe:fa:07:ab:f1:01:04:b0:f3:17:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Apr 28 17:16:44 2025 GMT Not After : May 1 22:57:44 2025 GMT Subject: CN=B5B124C77109C60F54DE1B07139A184B45570EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:32:ae:73:e1:da:ff:25:06:ec:d1:6e:67: 02:43:81:33:20:c7:a8:40:7f:93:cc:a1:a2:d3:d7: 61:a1:18:b7:12:ca:ed:96:6f:8e:1c:15:30:49:d8: d6:6a:b8:85:b5:e6:e8:99:de:14:e7:38:3c:30:92: 14:25:9a:94:95:59:db:e5:a9:18:5a:af:16:cb:b2: 85:31:b6:2f:4d:15:20:ca:89:ac:86:39:14:8e:96: ea:ce:0c:3e:d4:7e:ef:35:ab:ab:99:19:74:c0:89: fe:04:a9:c3:b7:dc:b6:59:87:f7:80:1e:84:1e:21: 37:52:65:37:71:33:b7:5b:78:3f:7f:a1:32:3a:46: 7c:e8:f9:b3:33:5d:3d:ac:b2:00:19:b9:86:e0:f9: 20:3c:a8:c5:06:eb:c9:48:68:09:ab:1d:28:71:9f: 80:d9:27:ca:f4:f6:be:74:e1:5a:7b:0c:83:bf:1e: 58:5d:9a:65:71:42:f5:0d:4b:91:dd:d4:7b:2a:17: e4:47:7b:35:e8:9e:ad:1d:3a:a2:b0:cf:fd:34:ae: d8:2d:ab:b6:e2:93:e0:34:28:78:28:1c:fd:b4:e4: 09:1e:53:a5:fe:b4:c8:67:9a:21:e8:8e:3d:75:bd: ca:d1:39:f9:df:02:e6:a2:06:02:6e:f5:e0:1c:e8: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:24:C7:71:09:C6:0F:54:DE:1B:07:13:9A:18:4B:45:57:0E:A0 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:30:fb:14:be:53:8b:a7:ba:5c:20:f3:7d:b3:90:87:f7:88: b3:a8:bb:45:a0:29:40:10:60:22:ea:f9:98:fa:bd:91:eb:24: e7:78:b7:59:ef:e1:ee:71:69:3c:06:2a:99:e8:43:d3:8e:fe: 8e:5c:4b:4b:51:a5:8e:cf:43:ce:ba:97:73:6f:ff:06:87:71: 17:77:1f:e2:7f:81:23:68:d7:3c:b0:9f:8e:ae:a7:cf:b2:a0: 86:be:b8:5e:9b:ce:2b:47:3b:60:68:38:3d:f6:25:28:ed:3c: b7:52:97:7d:6e:31:84:4f:68:6a:83:76:f4:39:9d:f9:09:6e: e8:8e:17:d2:1c:81:8b:6e:3d:1d:16:b0:0c:a0:e2:de:21:e9: 5b:c9:6d:15:1e:40:ae:1a:5c:33:56:fc:dc:e4:b1:06:b6:5c: e9:6c:24:97:12:20:66:45:31:7d:13:c5:8d:06:69:42:be:57: ed:a9:53:bc:b1:43:35:18:bd:a0:e0:85:b9:0e:37:48:60:8e: 6a:85:e7:0d:78:ab:4f:45:ae:d0:48:52:06:5b:af:99:3c:d5: aa:14:5e:cb:7b:ae:55:b0:a4:69:e7:91:8c:0d:88:33:00:94: cf:a2:a8:79:26:09:db:08:78:a6:37:9d:5d:e9:09:59:5d:b9: db:01:2a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkY9R5VK00DI/voHq/EBBLDzF2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNTA0MjgxNzE2NDRaFw0yNTA1MDEyMjU3NDRaMDMxMTAvBgNV BAMTKEI1QjEyNEM3NzEwOUM2MEY1NERFMUIwNzEzOUExODRCNDU1NzBFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbjKuc+Ha/yUG7NFuZwJDgTMg x6hAf5PMoaLT12GhGLcSyu2Wb44cFTBJ2NZquIW15uiZ3hTnODwwkhQlmpSVWdvl qRharxbLsoUxti9NFSDKiayGORSOlurODD7Ufu81q6uZGXTAif4EqcO33LZZh/eA HoQeITdSZTdxM7dbeD9/oTI6Rnzo+bMzXT2ssgAZuYbg+SA8qMUG68lIaAmrHShx n4DZJ8r09r504Vp7DIO/HlhdmmVxQvUNS5Hd1HsqF+RHezXonq0dOqKwz/00rtgt q7bik+A0KHgoHP205AkeU6X+tMhnmiHojj11vcrROfnfAuaiBgJu9eAc6GV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbEkx3EJxg9U3hsHE5oYS0VXDqAwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJww+xS+U4unulwg832zkIf3iLOou0WgKUAQ YCLq+Zj6vZHrJOd4t1nv4e5xaTwGKpnoQ9OO/o5cS0tRpY7PQ866l3Nv/waHcRd3 H+J/gSNo1zywn46up8+yoIa+uF6bzitHO2BoOD32JSjtPLdSl31uMYRPaGqDdvQ5 nfkJbuiOF9IcgYtuPR0WsAyg4t4h6VvJbRUeQK4aXDNW/NzksQa2XOlsJJcSIGZF MX0TxY0GaUK+V+2pU7yxQzUYvaDghbkON0hgjmqF5w14q09FrtBIUgZbr5k81aoU Xst7rlWwpGnnkYwNiDMAlM+iqHkmCdsIeKY3nV3pCVldudsBKlU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:40 2025 by rpki-client