$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: 9uYFzRealqkCw99zXaYlYgO/jkLP7OnGJ8kyVl8r9lA= Subject key identifier: 33:FA:E5:F5:0B:10:18:5F:83:B7:41:43:60:FB:1C:FB:B2:B0:19:F3 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 672EC73BEEC7E827127CE70246C0DD5F5DB77F01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: C5 Signing time: Fri 22 Aug 2025 22:00:44 +0000 Manifest this update: Fri 22 Aug 2025 21:55:44 +0000 Manifest next update: Tue 26 Aug 2025 02:27:44 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: P2i1L4PW27emNLbf6MbdsDPSrz0MS9Uno0CDeIgrGM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2e:c7:3b:ee:c7:e8:27:12:7c:e7:02:46:c0:dd:5f:5d:b7:7f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Aug 22 21:55:44 2025 GMT Not After : Aug 26 02:27:44 2025 GMT Subject: CN=33FAE5F50B10185F83B7414360FB1CFBB2B019F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:4e:c4:0e:38:7c:66:78:46:da:3c:d0:41: 5c:25:f2:a4:fe:d9:dd:4e:d8:ac:b4:bf:27:71:2d: 7f:3e:35:40:c4:b5:01:9e:71:08:1e:c6:eb:a1:a0: ee:c0:bf:27:1a:45:e6:59:fa:d1:6d:b2:cd:c2:5a: 99:e1:33:49:68:1a:0b:d4:d1:e8:fa:06:1f:fb:49: 71:ef:87:e7:3a:3d:21:00:b1:70:aa:91:0b:17:8c: b9:33:fd:97:9a:0a:33:dd:fd:22:e7:b3:e7:5c:1f: df:85:e2:3a:72:c1:ab:ac:57:12:a1:2f:dd:9e:7c: d4:a0:1a:8a:15:3d:cf:46:dd:00:c6:64:1a:80:02: 22:00:38:07:64:43:61:57:11:7a:00:c9:29:9e:2b: 62:25:0e:3d:02:10:58:11:9b:fb:5f:6b:a6:ab:e3: 20:db:99:16:61:1d:41:77:ad:ba:4b:f1:3c:2f:87: 2d:2a:8a:d4:1e:72:33:97:a3:43:17:c3:09:b2:52: ab:56:e9:b9:70:2c:86:01:4a:52:a5:ac:e3:3e:b0: 43:00:17:99:79:f8:a6:49:a5:b3:f7:cc:9a:07:66: 2b:f4:d5:5d:f5:d3:33:10:b4:4a:e4:6f:a1:75:fb: 62:da:bb:b0:50:f8:f9:3f:ff:8f:d9:25:84:e5:88: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:E5:F5:0B:10:18:5F:83:B7:41:43:60:FB:1C:FB:B2:B0:19:F3 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0a:b9:40:89:4c:7f:18:c6:27:81:4c:e3:af:a8:05:4b:64: c4:61:dc:09:2f:e7:67:bd:5c:fd:53:c7:aa:26:da:9a:4b:05: eb:7d:8d:77:88:26:1b:74:90:a0:a4:0e:38:28:25:6d:8b:d1: cd:f7:7c:6f:e6:05:c5:0e:4f:c9:a6:d7:44:78:16:a3:77:fe: 9e:98:33:06:e4:23:ba:46:e9:66:ee:f0:e0:90:af:4e:39:5e: 4e:42:89:e4:e9:46:bc:73:63:f4:83:dc:f5:13:4f:07:21:d5: 69:2e:4a:a1:75:07:59:e5:30:83:a6:16:5f:d4:aa:e9:8e:46: 2d:89:0c:aa:5c:a5:2a:78:87:fc:52:6b:7b:64:49:d4:4a:5a: 9e:6d:cb:77:e4:fe:88:98:1c:54:e0:8b:7c:b1:88:11:0c:99: 76:d1:7d:18:71:83:ee:ad:7a:b0:6d:64:12:0c:e1:23:f6:de: 23:96:e5:51:8a:87:95:3b:8d:53:f1:a3:0f:7f:37:fd:73:9e: 38:f1:f6:c1:c5:d0:94:fc:d5:52:ed:e6:87:c3:91:8b:82:59: 1f:2b:7e:9d:ca:de:ba:40:05:4a:88:fd:a8:16:92:de:fd:5a: a4:49:1d:41:a9:81:db:35:f4:af:45:95:cf:fa:76:2f:98:2c: 55:6d:17:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZy7HO+7H6CcSfOcCRsDdX123fwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTA4MjIyMTU1NDRaFw0yNTA4MjYwMjI3NDRaMDMxMTAvBgNV BAMTKDMzRkFFNUY1MEIxMDE4NUY4M0I3NDE0MzYwRkIxQ0ZCQjJCMDE5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq07EDjh8ZnhG2jzQQVwl8qT+ 2d1O2Ky0vydxLX8+NUDEtQGecQgexuuhoO7AvycaReZZ+tFtss3CWpnhM0loGgvU 0ej6Bh/7SXHvh+c6PSEAsXCqkQsXjLkz/ZeaCjPd/SLns+dcH9+F4jpywausVxKh L92efNSgGooVPc9G3QDGZBqAAiIAOAdkQ2FXEXoAySmeK2IlDj0CEFgRm/tfa6ar 4yDbmRZhHUF3rbpL8Twvhy0qitQecjOXo0MXwwmyUqtW6blwLIYBSlKlrOM+sEMA F5l5+KZJpbP3zJoHZiv01V310zMQtErkb6F1+2Lau7BQ+Pk//4/ZJYTliDCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/rl9QsQGF+Dt0FDYPsc+7KwGfMwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYKuUCJTH8YxieBTOOvqAVLZMRh3Akv52e9 XP1Tx6om2ppLBet9jXeIJht0kKCkDjgoJW2L0c33fG/mBcUOT8mm10R4FqN3/p6Y MwbkI7pG6Wbu8OCQr045Xk5CieTpRrxzY/SD3PUTTwch1WkuSqF1B1nlMIOmFl/U qumORi2JDKpcpSp4h/xSa3tkSdRKWp5ty3fk/oiYHFTgi3yxiBEMmXbRfRhxg+6t erBtZBIM4SP23iOW5VGKh5U7jVPxow9/N/1znjjx9sHF0JT81VLt5ofDkYuCWR8r fp3K3rpABUqI/agWkt79WqRJHUGpgds19K9Flc/6di+YLFVtF1Q= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:22 2025 by rpki-client