$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: hiddVyhNAH6cU3+TG2EaA7d9TMmUcc31WI8YTFyuOa4= Subject key identifier: 9C:69:51:A4:98:44:1D:29:4A:98:C5:F3:6F:EB:05:56:AF:42:91:3D Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 4A5BBDF1C8F725FAAA0165BF9E386F12F5AC8F21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: FC Signing time: Sun 19 Oct 2025 09:52:16 +0000 Manifest this update: Sun 19 Oct 2025 09:47:16 +0000 Manifest next update: Wed 22 Oct 2025 16:41:16 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: k/T8zRQDpM6I2AOlrhoCq2CGSbbJ5tpKlXZsJO5k2wM=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 4: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5b:bd:f1:c8:f7:25:fa:aa:01:65:bf:9e:38:6f:12:f5:ac:8f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Oct 19 09:47:16 2025 GMT Not After : Oct 22 16:41:16 2025 GMT Subject: CN=9C6951A498441D294A98C5F36FEB0556AF42913D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cd:8e:6b:f6:db:ef:c2:17:0e:d1:84:e5:1e: 7c:26:aa:a2:a3:e3:fe:2e:ed:b4:08:f4:de:1e:ab: 12:93:48:13:04:42:40:9a:1d:23:c6:65:fe:37:d1: 62:e7:cf:37:be:cc:54:36:d1:39:a4:55:f2:8d:de: 9e:51:b4:d9:4c:d1:1c:60:ef:7a:d0:4d:29:15:bc: 22:63:2a:f1:09:da:ec:a0:ee:f2:d7:5c:b3:db:c3: 2f:78:8b:ef:dd:35:b7:59:d0:07:96:5e:a1:69:18: bf:76:b3:4e:a8:fd:3f:ee:24:01:51:ff:2c:b6:e5: 5f:66:a6:59:21:d9:07:ec:32:6c:7d:c2:f7:8d:ad: bc:12:49:50:f6:ec:de:1b:fb:ab:85:86:74:f4:cf: c4:ae:6a:de:1b:45:c2:1e:14:75:cc:c8:a9:51:d7: 26:9f:e4:1d:4d:2a:32:72:66:c0:ba:59:9f:a9:4b: d2:62:2b:6d:33:a4:57:63:d9:ba:ea:19:8c:27:c7: 16:07:71:5a:85:85:ea:03:10:60:5b:8a:09:67:7f: a5:5a:be:86:f2:e4:d7:48:64:7f:cd:05:fc:06:03: 7e:99:aa:24:24:f6:f6:91:09:be:9a:c6:fb:23:ec: 86:c1:e1:67:af:4b:e9:de:ed:04:76:73:7f:52:d0: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:51:A4:98:44:1D:29:4A:98:C5:F3:6F:EB:05:56:AF:42:91:3D X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:83:d1:96:46:e0:76:1c:02:2b:50:35:24:6b:73:78:25:38: 8c:b5:56:b3:ec:5c:7e:cf:8f:e9:e7:9f:98:96:3b:43:5b:83: 81:02:c3:c9:18:16:26:90:11:32:6c:87:b8:6b:f6:cc:ec:5b: 96:29:1b:4c:83:90:f7:7f:d0:25:a1:45:d7:1d:cb:7a:d8:f2: c5:15:fa:9e:7c:53:6f:98:ee:3d:60:bf:1d:c3:14:0e:cb:f0: f2:73:f8:c7:46:7d:a2:e5:49:24:df:44:04:d5:b5:48:d7:50: 92:93:c7:1c:b3:c6:49:09:fe:c3:f2:d1:7a:62:a1:3d:df:89: ce:80:c6:7e:39:15:36:ab:f3:53:da:e7:20:7c:4c:98:7a:0c: 5c:98:ed:92:b0:b7:fd:2f:0c:21:57:1d:80:96:b0:17:17:ac: 9a:16:df:3b:0e:e0:ba:b1:a8:63:33:50:52:31:23:3a:e0:ce: 99:08:2f:af:97:7d:58:93:97:df:63:d9:6f:eb:f2:4d:77:a3: 4e:04:63:aa:b6:c1:83:ad:a9:10:ee:3d:8a:60:fc:b6:3c:58: 9f:31:5c:33:8e:a1:b3:9b:42:6b:90:9f:3e:0e:4b:4c:74:f7: 7b:7a:fe:3e:20:f4:0c:09:0d:a7:3e:5e:28:c0:39:1b:cf:96: 22:c3:bc:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlu98cj3JfqqAWW/njhvEvWsjyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTEwMTkwOTQ3MTZaFw0yNTEwMjIxNjQxMTZaMDMxMTAvBgNV BAMTKDlDNjk1MUE0OTg0NDFEMjk0QTk4QzVGMzZGRUIwNTU2QUY0MjkxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzY5r9tvvwhcO0YTlHnwmqqKj 4/4u7bQI9N4eqxKTSBMEQkCaHSPGZf430WLnzze+zFQ20TmkVfKN3p5RtNlM0Rxg 73rQTSkVvCJjKvEJ2uyg7vLXXLPbwy94i+/dNbdZ0AeWXqFpGL92s06o/T/uJAFR /yy25V9mplkh2QfsMmx9wveNrbwSSVD27N4b+6uFhnT0z8Suat4bRcIeFHXMyKlR 1yaf5B1NKjJyZsC6WZ+pS9JiK20zpFdj2brqGYwnxxYHcVqFheoDEGBbiglnf6Va voby5NdIZH/NBfwGA36ZqiQk9vaRCb6axvsj7IbB4WevS+ne7QR2c39S0ARrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGlRpJhEHSlKmMXzb+sFVq9CkT0wHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOD0ZZG4HYcAitQNSRrc3glOIy1VrPsXH7P j+nnn5iWO0Nbg4ECw8kYFiaQETJsh7hr9szsW5YpG0yDkPd/0CWhRdcdy3rY8sUV +p58U2+Y7j1gvx3DFA7L8PJz+MdGfaLlSSTfRATVtUjXUJKTxxyzxkkJ/sPy0Xpi oT3fic6Axn45FTar81Pa5yB8TJh6DFyY7ZKwt/0vDCFXHYCWsBcXrJoW3zsO4Lqx qGMzUFIxIzrgzpkIL6+XfViTl99j2W/r8k13o04EY6q2wYOtqRDuPYpg/LY8WJ8x XDOOobObQmuQnz4OS0x093t6/j4g9AwJDac+XijAORvPliLDvDA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:48 2025 by rpki-client