$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: OReEzMiJM4XTSh0SXmXNnSDgVK86+xyLgDrDwHFnnEk= Subject key identifier: 27:96:22:38:45:B9:0E:57:48:69:64:CC:21:3C:8C:82:38:F5:97:53 Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 40A67976C70AD0D8192AC19DF6ED0474A5EF9CBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0518 Signing time: Sat 18 Oct 2025 05:31:26 +0000 Manifest this update: Sat 18 Oct 2025 05:26:26 +0000 Manifest next update: Tue 21 Oct 2025 09:55:26 +0000 Files and hashes: 1: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: IGdne6hHgxNNtbdU0yczhnggsHkVL9PeYzlSq6IjLVs=) 2: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 3: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 5: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 09:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a6:79:76:c7:0a:d0:d8:19:2a:c1:9d:f6:ed:04:74:a5:ef:9c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Oct 18 05:26:26 2025 GMT Not After : Oct 21 09:55:26 2025 GMT Subject: CN=2796223845B90E57486964CC213C8C8238F59753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:8b:24:48:c9:27:bb:a3:df:c8:ae:42:32: 6f:b1:bf:32:ae:90:f0:9d:2e:3d:5a:7e:ac:76:51: 57:c4:91:3e:6b:29:cb:cd:5f:e7:2a:a6:29:fd:40: 0d:05:cc:e6:fe:58:c5:ab:fe:5e:2b:f7:14:3e:2a: a1:cc:ec:48:1a:83:3a:5d:84:99:2e:8f:22:01:fd: 83:aa:85:bc:c9:4a:03:c8:ce:3b:41:12:e4:e2:7d: 21:c5:a0:45:1e:0f:61:21:98:9e:b4:c0:6c:51:80: b6:f6:04:9d:1f:cc:6b:7e:31:09:0b:a8:bc:58:b0: 2f:7c:f0:5c:18:81:71:d0:af:6e:c5:6a:22:54:23: 63:ed:0f:4d:b5:76:13:9b:c1:0d:38:76:d5:29:6d: 8c:03:fe:d4:0d:03:be:fc:95:09:5c:11:55:e2:b3: 6e:fa:da:22:47:3f:27:fa:38:76:67:b0:48:09:9b: f8:ed:df:c1:5a:77:66:d3:ad:4a:ed:21:71:5a:58: 88:eb:ad:c8:c7:04:d0:92:e1:e4:55:f0:41:36:6b: 98:36:a5:74:bb:a6:48:0b:40:d7:dd:ee:ba:83:8f: ef:1d:d8:93:76:d4:33:bf:18:aa:f8:1a:0d:6a:86: e4:77:aa:07:d1:f5:b7:66:fc:fd:d1:d7:fb:d7:22: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:22:38:45:B9:0E:57:48:69:64:CC:21:3C:8C:82:38:F5:97:53 X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bd:b6:1a:ce:f9:a3:88:e6:47:56:e1:44:48:cc:c7:dd:55: 77:61:65:39:9c:34:2f:67:ca:fa:da:79:4b:71:3c:5d:a4:b6: a3:a5:05:c7:03:a5:15:10:6b:38:e8:d2:0b:64:4f:d1:ee:5d: 73:9b:23:e3:57:5d:2c:f8:6a:66:a4:00:02:f3:c8:ed:aa:9d: 99:be:bf:05:f5:2a:56:d9:8b:4b:28:07:11:46:ab:b8:28:24: 6b:6a:de:1c:5a:77:47:87:04:e9:a1:55:6f:6b:68:38:4c:7a: d3:ee:b5:c5:9a:cf:7f:38:c7:aa:46:b2:1e:c3:74:b8:f7:e6: e7:32:5c:15:fe:46:21:c2:01:8b:82:ae:92:45:d9:08:8b:f2: d7:72:8c:f6:ab:1b:e3:2f:53:3e:e9:72:53:33:f3:c2:ef:58: 72:97:f0:f7:3d:2a:e2:9b:f5:38:9a:78:9c:db:1d:46:50:6f: 06:a9:c5:26:0a:11:c6:cd:4c:77:2c:57:ba:73:55:9b:39:36: 13:49:a6:bb:3d:6a:f8:71:e5:8f:4b:d3:19:1e:1c:3f:a8:95: bf:a5:82:81:48:58:14:e5:ea:03:6e:b0:8e:da:c0:3d:ef:0f: 86:14:0a:9c:f4:7a:5d:3d:c2:70:fe:76:f9:1d:f1:8d:6a:64: 12:ef:0b:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKZ5dscK0NgZKsGd9u0EdKXvnL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTEwMTgwNTI2MjZaFw0yNTEwMjEwOTU1MjZaMDMxMTAvBgNV BAMTKDI3OTYyMjM4NDVCOTBFNTc0ODY5NjRDQzIxM0M4QzgyMzhGNTk3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd34skSMknu6PfyK5CMm+xvzKu kPCdLj1afqx2UVfEkT5rKcvNX+cqpin9QA0FzOb+WMWr/l4r9xQ+KqHM7Egagzpd hJkujyIB/YOqhbzJSgPIzjtBEuTifSHFoEUeD2EhmJ60wGxRgLb2BJ0fzGt+MQkL qLxYsC988FwYgXHQr27FaiJUI2PtD021dhObwQ04dtUpbYwD/tQNA778lQlcEVXi s2762iJHPyf6OHZnsEgJm/jt38Fad2bTrUrtIXFaWIjrrcjHBNCS4eRV8EE2a5g2 pXS7pkgLQNfd7rqDj+8d2JN21DO/GKr4Gg1qhuR3qgfR9bdm/P3R1/vXIi7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5YiOEW5DldIaWTMITyMgjj1l1MwHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa9thrO+aOI5kdW4URIzMfdVXdhZTmcNC9n yvraeUtxPF2ktqOlBccDpRUQazjo0gtkT9HuXXObI+NXXSz4amakAALzyO2qnZm+ vwX1KlbZi0soBxFGq7goJGtq3hxad0eHBOmhVW9raDhMetPutcWaz384x6pGsh7D dLj35ucyXBX+RiHCAYuCrpJF2QiL8tdyjParG+MvUz7pclMz88LvWHKX8Pc9KuKb 9TiaeJzbHUZQbwapxSYKEcbNTHcsV7pzVZs5NhNJprs9avhx5Y9L0xkeHD+olb+l goFIWBTl6gNusI7awD3vD4YUCpz0el09wnD+dvkd8Y1qZBLvC3g= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:45 2025 by rpki-client