$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: M/LChkUXZlv8+mMWgD4dIcA7yjBNvD8/Rg7l2zbRgFQ= Subject key identifier: FA:3A:82:51:D5:5C:A8:59:B1:6F:AF:CF:B8:9D:1C:48:25:04:A5:EE Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 4AB84B9C132E8AD2FF16D6CBFD86C6C8B4B8C4C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: DF Signing time: Mon 20 Oct 2025 00:40:44 +0000 Manifest this update: Mon 20 Oct 2025 00:35:44 +0000 Manifest next update: Thu 23 Oct 2025 07:57:44 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: tyGeD7xo1bxuazCiTHKf25B1Ka0CwV1PkI+wN4vUyUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b8:4b:9c:13:2e:8a:d2:ff:16:d6:cb:fd:86:c6:c8:b4:b8:c4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Oct 20 00:35:44 2025 GMT Not After : Oct 23 07:57:44 2025 GMT Subject: CN=FA3A8251D55CA859B16FAFCFB89D1C482504A5EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:a1:0b:e5:0f:c5:6b:d8:e8:60:38:cb:52: be:8a:2b:0f:a3:3a:7d:72:7d:27:ab:06:1f:78:89: b9:d3:f3:be:fd:3d:8e:1d:44:42:8b:80:dd:69:9f: ef:55:5a:e0:a7:70:85:fe:ca:0c:0e:e2:84:23:01: 76:21:cf:cb:40:4d:73:19:2a:19:3a:18:28:ee:08: 52:f2:9a:26:d8:41:36:72:48:1e:f0:3f:d9:38:a2: e2:f5:d5:b1:c1:55:c7:4b:7f:6f:76:ae:1e:61:40: 1e:b8:c9:6a:96:81:d9:f1:4e:d6:2c:34:9c:ad:40: ed:c0:f3:ad:e9:3d:53:e8:bf:10:6a:e6:d9:68:68: 0f:8a:17:53:c4:6c:04:23:f3:81:ac:77:fe:35:e3: be:4c:5e:75:e8:21:d8:0d:cd:ac:d7:a8:bc:1c:f7: ca:c2:96:60:9c:45:b4:a4:ea:b3:9c:e9:f1:4b:d1: f1:e0:34:e9:6a:67:58:51:78:e8:6a:14:44:a7:87: 45:52:5b:0b:44:f7:35:b6:20:23:75:f0:32:fb:1c: 02:75:2a:f4:81:1a:10:c9:55:c1:14:9e:2f:38:28: ec:25:cc:3c:2f:e9:34:5f:ab:15:47:b4:f0:82:29: 41:b0:92:c1:45:57:1d:b5:b5:cb:c8:ac:1e:00:ff: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:82:51:D5:5C:A8:59:B1:6F:AF:CF:B8:9D:1C:48:25:04:A5:EE X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:00:24:a5:22:18:0a:f4:db:7e:8b:db:47:49:ee:86:d4:a7: 7a:f1:15:3f:ca:56:e7:0a:34:00:a5:ed:33:db:5c:96:b5:99: 64:07:dc:cd:4d:c1:d9:09:bc:da:76:f3:98:0d:3d:32:b0:7f: 0a:b7:2c:4e:71:4e:2a:9f:2d:1b:74:cb:b4:06:a6:8b:f1:97: de:3f:cd:52:a5:74:da:dc:57:61:21:4e:7c:e7:c3:df:56:4d: d1:45:bb:75:2d:da:c9:61:fc:4d:51:fc:56:15:a5:09:48:f7: 8c:e4:f4:dd:1b:c5:8a:6f:fa:83:69:9d:3f:32:7e:86:99:ed: aa:0d:82:6c:76:e6:65:80:82:92:aa:97:20:11:d8:f9:90:f3: b7:cf:27:f7:dd:ea:f4:f7:bd:ac:1a:f5:bf:d8:07:2d:c3:31: dc:91:8c:93:bd:80:fe:37:e1:28:23:13:fc:01:58:f2:bf:7c: a7:76:64:02:81:c9:41:fe:87:37:2f:eb:c7:d4:f9:38:4f:8a: 91:aa:3c:a9:14:03:d6:25:4a:55:77:c4:34:aa:30:a5:d1:61: 24:53:e8:23:2a:1b:e8:db:ff:73:f3:28:a6:25:d5:ac:31:32: 08:01:c0:79:a4:51:92:95:e9:77:11:ac:ed:6f:76:c4:dc:9d: d5:e1:b5:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrhLnBMuitL/FtbL/YbGyLS4xMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTEwMjAwMDM1NDRaFw0yNTEwMjMwNzU3NDRaMDMxMTAvBgNV BAMTKEZBM0E4MjUxRDU1Q0E4NTlCMTZGQUZDRkI4OUQxQzQ4MjUwNEE1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp6EL5Q/Fa9joYDjLUr6KKw+j On1yfSerBh94ibnT8779PY4dREKLgN1pn+9VWuCncIX+ygwO4oQjAXYhz8tATXMZ Khk6GCjuCFLymibYQTZySB7wP9k4ouL11bHBVcdLf292rh5hQB64yWqWgdnxTtYs NJytQO3A863pPVPovxBq5tloaA+KF1PEbAQj84Gsd/41475MXnXoIdgNzazXqLwc 98rClmCcRbSk6rOc6fFL0fHgNOlqZ1hReOhqFESnh0VSWwtE9zW2ICN18DL7HAJ1 KvSBGhDJVcEUni84KOwlzDwv6TRfqxVHtPCCKUGwksFFVx21tcvIrB4A/72bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jqCUdVcqFmxb6/PuJ0cSCUEpe4wHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcAJKUiGAr0236L20dJ7obUp3rxFT/KVucK NACl7TPbXJa1mWQH3M1NwdkJvNp285gNPTKwfwq3LE5xTiqfLRt0y7QGpovxl94/ zVKldNrcV2EhTnznw99WTdFFu3Ut2slh/E1R/FYVpQlI94zk9N0bxYpv+oNpnT8y foaZ7aoNgmx25mWAgpKqlyAR2PmQ87fPJ/fd6vT3vawa9b/YBy3DMdyRjJO9gP43 4SgjE/wBWPK/fKd2ZAKByUH+hzcv68fU+ThPipGqPKkUA9YlSlV3xDSqMKXRYSRT 6CMqG+jb/3PzKKYl1awxMggBwHmkUZKV6XcRrO1vdsTcndXhtUg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:16 2025 by rpki-client