$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: Fg7JO1ATyr0ypG/YfpBbWTzD6AEMc3HlmeCTs64U92I= Subject key identifier: 36:13:21:92:F7:C5:BB:72:9D:64:46:F0:C4:E2:02:09:27:0A:DC:EC Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 681B43ABC0B44ED5BF8FF575695EAB8FFC5FAF52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: CA Signing time: Sat 28 Jun 2025 17:22:13 +0000 Manifest this update: Sat 28 Jun 2025 17:17:13 +0000 Manifest next update: Wed 02 Jul 2025 02:07:13 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 3: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: 2ywFknBhV7OiKkVW4f2uX1iemgeO0aui4ChXstj77uQ=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:43:ab:c0:b4:4e:d5:bf:8f:f5:75:69:5e:ab:8f:fc:5f:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Jun 28 17:17:13 2025 GMT Not After : Jul 2 02:07:13 2025 GMT Subject: CN=36132192F7C5BB729D6446F0C4E20209270ADCEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:2b:1e:c9:f9:0c:20:21:91:bc:fd:cd:d0: cc:92:ca:17:98:3e:da:04:f4:49:9f:86:23:bd:4d: bc:a0:96:ec:2f:62:92:ff:02:5e:a6:e3:95:0e:3e: 71:05:0d:fa:8d:f9:94:9a:81:1a:2a:71:f3:f5:4a: 2c:4f:1c:af:84:a8:62:73:6e:b4:6e:b7:1d:cc:95: 72:d4:f6:d7:4f:31:66:7f:59:81:9f:64:c8:22:1c: 97:a3:1a:52:b5:f3:98:87:6b:d4:db:53:68:40:fb: cc:ed:56:dc:d0:2e:03:ef:0d:62:a5:26:27:ff:65: 61:1d:11:1b:e0:f2:68:32:43:f2:c8:07:09:43:81: c0:61:43:17:ee:07:2e:c5:55:e7:01:e7:a4:15:91: cc:7e:67:80:3e:bb:6a:57:4b:10:d0:a9:56:70:c5: b8:63:e9:6d:8c:db:31:f1:f1:0f:33:75:13:2c:21: ab:ef:cd:de:5d:a0:23:29:4a:b0:60:2c:65:8e:5a: ea:6c:aa:b9:9d:f9:5b:c3:7e:d7:e0:d4:ca:60:ea: f7:48:83:8d:b9:40:31:20:97:67:41:03:e6:e4:7e: 3a:b2:cf:ef:4b:8a:87:c8:c9:d3:0e:52:0a:5e:0f: 88:3a:11:1b:c2:f1:32:87:1a:ec:92:7c:30:1d:7a: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:21:92:F7:C5:BB:72:9D:64:46:F0:C4:E2:02:09:27:0A:DC:EC X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a0:86:79:0a:4c:87:e0:05:ea:3e:11:38:f3:4a:f1:ad:36: 2c:93:2e:7b:d8:76:fb:75:46:0c:23:ab:f8:a9:40:5d:10:df: 4a:4d:83:df:79:2b:c6:3f:29:7c:50:5d:45:ea:fc:7d:3a:9b: ff:4b:3e:1f:9f:b4:c0:59:35:41:7e:11:69:57:22:91:79:54: 78:41:50:f8:3d:41:62:44:74:a3:32:d0:74:9d:74:4d:3b:43: 97:91:d5:10:4f:ae:4b:01:1f:78:9f:e1:57:0b:65:c5:ca:db: 7c:76:fd:50:11:54:98:a5:bd:45:05:2f:60:1d:3c:91:dd:95: 2c:23:c3:9f:39:52:3f:ca:f2:14:dc:0f:f2:89:79:e2:70:5d: 0e:43:90:1d:a5:08:a2:59:6a:68:e7:92:dc:eb:a0:fb:cb:7e: 89:ff:cb:fd:b4:35:ae:40:a9:5b:cc:b0:be:95:92:a9:e8:32: 89:a2:08:3a:1a:21:4a:a6:f9:bb:00:82:31:e5:47:4e:4b:b9: 62:e8:e9:ac:da:e8:e1:09:6b:b7:98:b7:35:44:e9:e9:d8:ad: 58:3e:61:8d:c5:aa:47:62:59:bc:05:e0:c4:d1:4a:e2:00:91: e3:a7:0a:b9:a8:8f:48:9f:c6:64:58:ef:8e:e0:8b:03:52:30: d6:bf:ce:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBtDq8C0TtW/j/V1aV6rj/xfr1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA2MjgxNzE3MTNaFw0yNTA3MDIwMjA3MTNaMDMxMTAvBgNV BAMTKDM2MTMyMTkyRjdDNUJCNzI5RDY0NDZGMEM0RTIwMjA5MjcwQURDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwyseyfkMICGRvP3N0MySyheY PtoE9EmfhiO9TbygluwvYpL/Al6m45UOPnEFDfqN+ZSagRoqcfP1SixPHK+EqGJz brRutx3MlXLU9tdPMWZ/WYGfZMgiHJejGlK185iHa9TbU2hA+8ztVtzQLgPvDWKl Jif/ZWEdERvg8mgyQ/LIBwlDgcBhQxfuBy7FVecB56QVkcx+Z4A+u2pXSxDQqVZw xbhj6W2M2zHx8Q8zdRMsIavvzd5doCMpSrBgLGWOWupsqrmd+VvDftfg1Mpg6vdI g425QDEgl2dBA+bkfjqyz+9LiofIydMOUgpeD4g6ERvC8TKHGuySfDAdegyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhMhkvfFu3KdZEbwxOICCScK3OwwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABughnkKTIfgBeo+ETjzSvGtNiyTLnvYdvt1 Rgwjq/ipQF0Q30pNg995K8Y/KXxQXUXq/H06m/9LPh+ftMBZNUF+EWlXIpF5VHhB UPg9QWJEdKMy0HSddE07Q5eR1RBPrksBH3if4VcLZcXK23x2/VARVJilvUUFL2Ad PJHdlSwjw585Uj/K8hTcD/KJeeJwXQ5DkB2lCKJZamjnktzroPvLfon/y/20Na5A qVvMsL6VkqnoMomiCDoaIUqm+bsAgjHlR05LuWLo6aza6OEJa7eYtzVE6enYrVg+ YY3FqkdiWbwF4MTRSuIAkeOnCrmoj0ifxmRY747giwNSMNa/zh4= -----END CERTIFICATE-----Generated at Mon Jun 30 08:27:05 2025 by rpki-client