$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: LNp6G29zsQhEp4E8bpAv05VzoxNuZiUV4EI70tj2Pn4= Subject key identifier: C9:B0:06:B9:7C:09:0A:80:25:C0:BE:8C:C2:3D:7B:B6:00:CF:B7:74 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 0E3304ABE34DC8E6549D3A8913BAD7B4B596400F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 0191 Signing time: Mon 30 Jun 2025 21:52:06 +0000 Manifest this update: Mon 30 Jun 2025 21:47:06 +0000 Manifest next update: Fri 04 Jul 2025 00:08:06 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 2: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: x/AQhGKAGoX8uZR8fdybwDzJqTwAZahrnjpgmtVWVa4=) 3: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 4: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:04:ab:e3:4d:c8:e6:54:9d:3a:89:13:ba:d7:b4:b5:96:40:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Jun 30 21:47:06 2025 GMT Not After : Jul 4 00:08:06 2025 GMT Subject: CN=C9B006B97C090A8025C0BE8CC23D7BB600CFB774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:67:49:4a:e1:8e:3e:b5:83:e0:c5:f5:81: ec:42:cb:3d:82:d3:15:62:51:47:57:d0:c9:b4:aa: 00:16:8d:ef:92:c8:35:34:f7:f8:91:66:b7:d5:f7: 74:af:d1:fc:4f:b1:e7:ed:97:f5:07:de:58:d7:ef: 50:de:63:b8:ee:63:3f:8d:66:7e:2e:8d:6a:1a:b7: 46:f4:8a:b0:f6:d4:8d:bf:ce:76:8f:43:3a:05:5c: 1a:50:b3:96:67:49:85:40:53:7f:39:e1:3b:e8:bf: 64:4c:ab:e1:a8:66:3d:bb:dd:4e:9d:01:20:d4:c1: 45:c4:d6:e7:40:9f:30:d1:7a:97:2e:67:43:8a:7c: 2d:aa:1d:3a:02:23:62:1c:b0:9e:df:62:e5:17:7d: d1:3f:5b:15:7d:a1:22:91:ec:16:89:30:bd:5c:2e: ea:32:07:59:ab:e7:6c:dc:11:41:ed:44:30:4c:06: c0:a5:73:7e:da:17:da:4c:bb:57:b2:d7:78:31:f9: fb:ca:8e:67:7c:df:f4:65:d3:f4:f2:89:04:47:3b: a3:0f:71:09:f0:f8:75:99:e0:7e:77:c9:de:37:d6: 86:86:8a:b6:15:5d:94:8b:49:37:53:86:99:df:6b: 1c:1b:db:34:e2:d9:0a:bd:63:a7:08:e1:2d:b0:cc: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:06:B9:7C:09:0A:80:25:C0:BE:8C:C2:3D:7B:B6:00:CF:B7:74 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0d:53:12:04:96:f5:2f:73:83:d1:7a:72:af:4b:01:b4:ec: db:db:d7:b4:30:ef:73:47:aa:1b:a4:b9:c1:0b:16:98:b0:c4: d3:54:e7:50:6a:f4:a5:c7:cc:88:16:0a:c4:23:df:c0:51:a8: b4:55:49:60:13:0b:3d:ce:b0:fc:2d:f3:bc:b3:af:13:e2:bc: ff:12:13:1f:86:be:d7:9d:19:45:7a:3f:20:1a:fc:6b:a3:ed: de:51:83:42:87:bb:3b:1c:c6:8f:56:67:6b:bc:67:23:c0:a6: 85:50:56:50:37:ed:11:d3:18:31:7e:f0:54:6d:85:5e:cb:aa: 68:8d:b1:3e:02:55:c3:c5:b5:4e:69:c0:aa:c5:e9:9d:5b:26: 26:de:5a:94:51:8b:60:9d:85:46:ee:58:7b:e6:89:65:7d:2e: 3a:6d:93:3b:90:15:52:75:0f:60:44:77:25:9c:2d:4f:85:4b: e5:36:a3:98:87:6a:ad:78:5a:24:8b:18:b6:6c:39:0e:ca:26: 7b:79:73:a1:d9:23:66:ec:4d:1f:2a:bf:ce:a2:4a:c0:03:ed: 17:86:9b:fc:42:90:b1:21:61:90:0d:6e:cf:9b:b6:09:5d:58: 06:b3:d3:b3:10:0a:7e:d4:03:98:d5:e4:67:22:fd:b9:b0:81: 4e:bd:ac:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjMEq+NNyOZUnTqJE7rXtLWWQA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA2MzAyMTQ3MDZaFw0yNTA3MDQwMDA4MDZaMDMxMTAvBgNV BAMTKEM5QjAwNkI5N0MwOTBBODAyNUMwQkU4Q0MyM0Q3QkI2MDBDRkI3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/2dJSuGOPrWD4MX1gexCyz2C 0xViUUdX0Mm0qgAWje+SyDU09/iRZrfV93Sv0fxPseftl/UH3ljX71DeY7juYz+N Zn4ujWoat0b0irD21I2/znaPQzoFXBpQs5ZnSYVAU3854Tvov2RMq+GoZj273U6d ASDUwUXE1udAnzDRepcuZ0OKfC2qHToCI2IcsJ7fYuUXfdE/WxV9oSKR7BaJML1c LuoyB1mr52zcEUHtRDBMBsClc37aF9pMu1ey13gx+fvKjmd83/Rl0/TyiQRHO6MP cQnw+HWZ4H53yd431oaGirYVXZSLSTdThpnfaxwb2zTi2Qq9Y6cI4S2wzLC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUybAGuXwJCoAlwL6Mwj17tgDPt3QwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGANUxIElvUvc4PRenKvSwG07Nvb17Qw73NH qhukucELFpiwxNNU51Bq9KXHzIgWCsQj38BRqLRVSWATCz3OsPwt87yzrxPivP8S Ex+GvtedGUV6PyAa/Guj7d5Rg0KHuzscxo9WZ2u8ZyPApoVQVlA37RHTGDF+8FRt hV7LqmiNsT4CVcPFtU5pwKrF6Z1bJibeWpRRi2CdhUbuWHvmiWV9LjptkzuQFVJ1 D2BEdyWcLU+FS+U2o5iHaq14WiSLGLZsOQ7KJnt5c6HZI2bsTR8qv86iSsAD7ReG m/xCkLEhYZANbs+btgldWAaz07MQCn7UA5jV5Gci/bmwgU69rMo= -----END CERTIFICATE-----Generated at Tue Jul 1 00:28:23 2025 by rpki-client