$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: UKFRkITcsXgHNR6pqhjLkvEK3n1DzxvyBjVTYUaLisc= Subject key identifier: DF:76:2A:B3:73:C3:CE:C4:C3:C2:23:E6:BB:50:90:BB:AA:00:C5:5A Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 7BEA8B999EB9C4D4FB5672A56F2B3F8CBDC759FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01C3 Signing time: Mon 20 Oct 2025 06:42:09 +0000 Manifest this update: Mon 20 Oct 2025 06:37:09 +0000 Manifest next update: Thu 23 Oct 2025 08:10:09 +0000 Files and hashes: 1: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: VqJGUwwfoNFYwzOnKJObzGF3UcIN5WClD1/PDS2pGAc=) 2: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 3: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) 4: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 5: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ea:8b:99:9e:b9:c4:d4:fb:56:72:a5:6f:2b:3f:8c:bd:c7:59:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Oct 20 06:37:09 2025 GMT Not After : Oct 23 08:10:09 2025 GMT Subject: CN=DF762AB373C3CEC4C3C223E6BB5090BBAA00C55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:4a:5d:2c:5f:24:c3:68:9d:87:c1:f7:80: 20:f8:a0:47:0b:36:24:fa:5d:e7:3d:2f:46:95:cb: 5b:fa:cf:50:2a:2f:4e:67:d1:f7:8c:f2:0a:5f:e8: aa:f8:a4:df:54:8c:c3:c8:09:ce:56:fa:4b:69:c5: 50:9c:1a:d7:4a:3e:29:5a:b1:33:c3:ba:cb:0b:33: 3c:e3:46:3d:f7:44:4d:86:43:5c:fe:cc:09:53:66: e7:1d:75:34:e5:ea:40:10:c3:3d:4b:1f:d9:22:c4: 85:3c:fe:d4:a1:71:07:af:38:8d:6d:32:8d:4f:46: 6b:c5:0c:a4:2c:e3:0c:9e:ac:bb:07:8a:8c:0f:a5: fa:71:6d:52:d9:f4:56:b8:ec:99:33:d8:58:9b:6b: b1:b6:e0:d7:f3:ac:af:d6:ae:9d:b7:cb:24:a3:d8: bd:00:01:ea:85:dc:68:66:ec:ab:17:94:cc:34:2f: 40:88:57:4e:c3:3e:b4:80:5f:4b:ad:7a:e5:2c:c5: d4:5e:7c:a5:a1:72:72:7b:55:5b:78:9e:c8:dc:17: c0:f9:16:be:5f:89:4a:40:b7:13:f4:c8:ac:99:9a: 31:a4:3f:f1:e6:9e:19:42:d2:24:85:ca:34:ff:8b: ef:f8:5a:74:86:5c:98:d2:3f:9f:30:38:63:1b:cb: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:2A:B3:73:C3:CE:C4:C3:C2:23:E6:BB:50:90:BB:AA:00:C5:5A X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:28:20:5b:8e:8e:1b:ff:7a:5f:8c:32:c9:32:38:c2:18: 0f:ee:9a:e9:d2:af:46:b2:88:aa:ab:bf:fe:0f:53:d6:47:3f: 71:aa:6e:72:68:fb:8f:bc:f5:ce:0f:83:d5:35:4d:af:81:c2: bb:0a:76:9b:28:c6:88:63:21:d1:88:61:24:e6:5a:61:23:b8: 61:07:2a:c3:b5:35:b5:67:00:72:8a:5d:79:8f:b0:15:0f:31: b8:15:2d:48:c8:f6:36:34:7d:f5:4d:76:a5:03:77:52:26:20: 22:9b:2e:1b:d3:12:9f:a5:58:25:9a:4b:15:1d:06:be:7b:2e: 7d:af:e6:42:0e:c4:42:75:77:0f:79:d6:17:72:6c:1c:7a:85: 03:b5:d5:8a:79:d2:cd:ba:c9:fd:3c:1a:d0:2f:b6:0a:0d:6d: a7:9d:d8:e0:e7:4d:59:19:58:13:bf:13:bf:d8:62:df:2a:3f: 27:43:c8:fd:38:2b:6d:cb:a7:15:8a:c6:f0:ce:e6:ee:3b:17: 2a:b4:97:ad:38:e3:b7:16:3b:94:be:85:6a:c3:a9:98:77:c6: a3:51:2d:9a:fe:b5:70:25:25:71:c8:86:66:2a:cf:be:25:26: 79:f2:05:b5:29:9c:6a:38:09:58:ba:bb:ea:8f:e2:52:34:83: 76:f4:d5:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+qLmZ65xNT7VnKlbys/jL3HWfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTEwMjAwNjM3MDlaFw0yNTEwMjMwODEwMDlaMDMxMTAvBgNV BAMTKERGNzYyQUIzNzNDM0NFQzRDM0MyMjNFNkJCNTA5MEJCQUEwMEM1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRkpdLF8kw2idh8H3gCD4oEcL NiT6Xec9L0aVy1v6z1AqL05n0feM8gpf6Kr4pN9UjMPICc5W+ktpxVCcGtdKPila sTPDussLMzzjRj33RE2GQ1z+zAlTZucddTTl6kAQwz1LH9kixIU8/tShcQevOI1t Mo1PRmvFDKQs4wyerLsHiowPpfpxbVLZ9Fa47Jkz2Fiba7G24NfzrK/Wrp23yySj 2L0AAeqF3Ghm7KsXlMw0L0CIV07DPrSAX0uteuUsxdRefKWhcnJ7VVt4nsjcF8D5 Fr5fiUpAtxP0yKyZmjGkP/HmnhlC0iSFyjT/i+/4WnSGXJjSP58wOGMbyyRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33Yqs3PDzsTDwiPmu1CQu6oAxVowHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTHKCBbjo4b/3pfjDLJMjjCGA/umunSr0ay iKqrv/4PU9ZHP3GqbnJo+4+89c4Pg9U1Ta+BwrsKdpsoxohjIdGIYSTmWmEjuGEH KsO1NbVnAHKKXXmPsBUPMbgVLUjI9jY0ffVNdqUDd1ImICKbLhvTEp+lWCWaSxUd Br57Ln2v5kIOxEJ1dw951hdybBx6hQO11Yp50s26yf08GtAvtgoNbaed2ODnTVkZ WBO/E7/YYt8qPydDyP04K23LpxWKxvDO5u47Fyq0l60447cWO5S+hWrDqZh3xqNR LZr+tXAlJXHIhmYqz74lJnnyBbUpnGo4CVi6u+qP4lI0g3b01aA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:41 2025 by rpki-client