$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: W86RqUhXFgKLKXcL4GT03WHrLplG9PwDQ2wMK28QBFk= Subject key identifier: F8:3E:B4:D0:4B:FB:6E:C5:17:53:E4:B4:C1:5C:3C:70:A2:E2:B2:CE Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 40CCF5BD889DC120EBB0926CFA1B63FBE244AEF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 017A Signing time: Sat 10 May 2025 16:42:07 +0000 Manifest this update: Sat 10 May 2025 16:37:07 +0000 Manifest next update: Tue 13 May 2025 23:54:07 +0000 Files and hashes: 1: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: FUWpVuAJDszQJlsi1XwZY/ogHpJfdnQ0CdOqJaHvOjw=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 4: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cc:f5:bd:88:9d:c1:20:eb:b0:92:6c:fa:1b:63:fb:e2:44:ae:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: May 10 16:37:07 2025 GMT Not After : May 13 23:54:07 2025 GMT Subject: CN=F83EB4D04BFB6EC51753E4B4C15C3C70A2E2B2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:f0:e9:a1:84:82:ba:3d:3a:52:c9:1d:eb: 9f:25:b6:10:bf:21:90:ec:a2:a0:ee:65:b6:aa:9b: 19:98:d3:50:47:7e:68:08:fb:43:f3:1d:cd:eb:9c: eb:24:12:25:15:a5:e1:fd:5c:d5:9c:b7:f1:5f:d4: 1d:ea:29:dd:7a:9c:51:24:46:c2:75:1c:c5:62:98: 5f:53:35:7f:62:50:cd:65:9a:93:0b:cc:9e:bc:79: cc:60:f5:29:97:18:00:03:36:f7:3f:a0:42:df:87: 43:28:68:ef:f1:32:1b:f4:11:8b:75:dc:be:d1:fe: 0d:89:53:64:07:79:0f:d5:83:96:47:61:bc:bf:a4: bb:c2:2a:9b:c7:cd:81:2a:2c:76:54:17:a1:53:44: 13:f7:73:cd:90:82:98:bb:ee:be:d0:df:35:15:14: 02:7d:10:3c:d0:30:f0:66:0f:fe:d5:12:cd:e0:ac: 7c:28:d9:40:d9:a0:54:0b:f5:8d:e5:e0:9f:08:d4: 47:bb:92:11:b2:6f:e6:1c:09:0f:0d:55:4d:8c:99: ed:18:2c:94:f3:16:f0:5f:b7:9e:c8:c4:ad:39:7f: a2:ea:3e:55:1e:88:27:2f:c4:e9:8a:fe:bd:3f:f5: 39:6c:70:19:73:fd:b3:10:c9:4b:22:c9:60:e9:3d: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:B4:D0:4B:FB:6E:C5:17:53:E4:B4:C1:5C:3C:70:A2:E2:B2:CE X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:d2:26:d5:fd:5e:58:da:bf:75:c1:57:8f:e7:8c:e7:61: a3:68:88:b5:66:1b:0d:83:b3:fe:24:df:2c:38:22:86:f1:f1: 82:11:36:81:61:0c:88:b4:33:c2:04:39:01:1c:68:29:f3:28: 84:02:45:0f:21:b5:fd:ce:02:80:2b:39:a5:21:48:e9:34:ad: c6:8d:2a:82:f7:ba:cb:4d:ac:e5:d7:01:ad:aa:ed:4e:b3:e1: e3:2d:02:14:bd:c1:4c:ba:cc:67:dc:3b:9a:6e:30:d9:53:34: 15:df:9d:36:50:21:c2:18:c0:df:56:79:fe:a8:b7:e2:51:e7: 1e:d0:b0:20:56:79:8e:16:8e:8d:04:7f:55:54:97:34:d9:d6: 2b:4c:19:94:30:66:3b:b4:57:7f:d0:25:3b:1f:93:2a:32:41: 03:1c:14:fd:9f:46:85:85:c6:ae:ea:78:4d:a7:2b:0b:23:6e: 95:44:05:6e:f9:4e:f9:76:e3:a4:87:5b:37:78:b7:6b:89:f7: e3:c7:8b:f2:95:e2:73:2f:a4:12:e1:ae:b8:3e:2a:ee:04:82: 34:db:ef:2c:ac:bc:6b:a0:93:c1:19:a1:e3:1e:5d:21:c2:8a: 87:aa:68:d1:c6:e4:74:84:c9:66:95:36:28:69:bb:ef:d3:e4: a3:6d:71:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMz1vYidwSDrsJJs+htj++JErvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA1MTAxNjM3MDdaFw0yNTA1MTMyMzU0MDdaMDMxMTAvBgNV BAMTKEY4M0VCNEQwNEJGQjZFQzUxNzUzRTRCNEMxNUMzQzcwQTJFMkIyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtffDpoYSCuj06Uskd658lthC/ IZDsoqDuZbaqmxmY01BHfmgI+0PzHc3rnOskEiUVpeH9XNWct/Ff1B3qKd16nFEk RsJ1HMVimF9TNX9iUM1lmpMLzJ68ecxg9SmXGAADNvc/oELfh0MoaO/xMhv0EYt1 3L7R/g2JU2QHeQ/Vg5ZHYby/pLvCKpvHzYEqLHZUF6FTRBP3c82Qgpi77r7Q3zUV FAJ9EDzQMPBmD/7VEs3grHwo2UDZoFQL9Y3l4J8I1Ee7khGyb+YcCQ8NVU2Mme0Y LJTzFvBft57IxK05f6LqPlUeiCcvxOmK/r0/9TlscBlz/bMQyUsiyWDpPekPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+D600Ev7bsUXU+S0wVw8cKLiss4wHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFC0ibV/V5Y2r91wVeP54znYaNoiLVmGw2D s/4k3yw4Iobx8YIRNoFhDIi0M8IEOQEcaCnzKIQCRQ8htf3OAoArOaUhSOk0rcaN KoL3ustNrOXXAa2q7U6z4eMtAhS9wUy6zGfcO5puMNlTNBXfnTZQIcIYwN9Wef6o t+JR5x7QsCBWeY4Wjo0Ef1VUlzTZ1itMGZQwZju0V3/QJTsfkyoyQQMcFP2fRoWF xq7qeE2nKwsjbpVEBW75Tvl246SHWzd4t2uJ9+PHi/KV4nMvpBLhrrg+Ku4EgjTb 7yysvGugk8EZoeMeXSHCioeqaNHG5HSEyWaVNihpu+/T5KNtcbc= -----END CERTIFICATE-----Generated at Sun May 11 03:56:46 2025 by rpki-client