$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: lF6VNfLqeBmvwor8zBq4MJFybADFMPI8K8NHGOhP+aA= Subject key identifier: C7:C3:59:30:F8:57:B0:9D:0E:51:11:09:F2:94:27:58:65:A9:99:D5 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 41C91A9A698A7B9EAB8330A651A140E904915697 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 15:41:56 +0000 Manifest this update: Sat 23 Aug 2025 15:36:56 +0000 Manifest next update: Tue 26 Aug 2025 16:32:56 +0000 Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) 3: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: Xh6KJ4QGZ4aF4eHoNQb0rkwhr1zeOKACa5f9PeIgyH4=) 4: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c9:1a:9a:69:8a:7b:9e:ab:83:30:a6:51:a1:40:e9:04:91:56:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Aug 23 15:36:56 2025 GMT Not After : Aug 26 16:32:56 2025 GMT Subject: CN=C7C35930F857B09D0E511109F294275865A999D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:5c:e4:d7:5a:7e:e2:ff:6c:bc:45:bd:02: 72:00:82:d3:67:91:6f:68:b9:57:78:dc:d2:bc:7f: 1d:18:9e:a9:45:39:10:2a:14:5d:34:01:16:7d:21: 1c:c0:dd:fb:83:4f:d8:24:52:ef:ec:ac:dc:1a:b8: 91:22:d1:9d:86:c7:79:87:02:12:f1:e1:57:ba:51: 03:cc:38:68:e8:8e:4c:fc:ff:db:5c:24:e3:24:41: 0e:66:5f:90:16:26:78:b8:9c:30:d7:2d:6f:99:06: b0:c8:7a:a6:64:bf:37:74:66:b0:6b:f6:dd:59:23: e0:1f:dd:e6:84:49:db:3a:be:db:61:df:52:fc:17: 4e:46:b3:6e:84:72:c5:e2:dc:7b:a9:5e:79:bf:c9: 4c:b5:21:59:7e:7e:4f:40:b5:04:15:fd:d6:83:d5: d7:5e:f8:18:15:5e:5e:8c:ec:1f:be:85:46:3e:85: bb:57:e2:10:1b:d9:fb:a1:f7:c2:85:66:ad:12:d8: cc:08:ee:09:bc:f8:57:70:1b:56:73:2b:77:4c:7a: 28:ad:b0:ed:55:20:0e:26:0b:c8:7e:98:fa:f7:43: 8e:ca:85:a7:ce:e8:ae:f7:7e:6d:d9:3d:7b:0e:64: 8d:6e:c0:77:ab:1a:b9:e2:53:f7:e2:96:82:fe:47: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C3:59:30:F8:57:B0:9D:0E:51:11:09:F2:94:27:58:65:A9:99:D5 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c4:83:fa:b5:45:37:3d:89:98:8b:a0:04:b2:38:64:35:c8: 44:ba:1e:58:e7:f7:d4:27:1b:48:27:63:30:40:05:03:6f:be: 23:90:ac:08:a0:d8:9f:fa:e5:81:06:9e:bb:ac:ac:47:ac:e9: c5:13:17:76:32:1f:6e:6e:41:af:97:5e:0d:3f:49:63:4f:b0: f7:57:34:51:e4:8a:d4:16:58:e5:98:95:63:28:a2:ef:f1:14: 62:32:7b:cf:61:9c:0e:a7:7f:0f:30:5e:8d:c4:47:f9:d8:1b: 11:d2:fa:13:b3:48:fb:0f:ae:df:cb:ad:f1:0f:06:96:e3:c0: 3c:6b:af:69:85:be:bc:d5:26:68:3e:09:b4:00:1c:bd:39:13: 27:87:fe:43:93:63:20:c7:e7:14:e8:4c:0a:4b:87:20:03:10: 7d:1c:36:90:cb:bd:99:60:d4:9a:51:f8:8b:3c:b4:7d:c0:84: 0d:5a:bf:97:69:e4:8d:e6:b5:df:07:b9:51:cc:f3:9d:4c:78: 06:fc:2c:dc:33:47:0c:bd:2d:25:21:7e:d5:a4:29:0e:f9:59: b9:ed:a4:86:eb:bc:a6:d8:93:5a:50:a1:c5:4e:65:63:66:f7: d9:14:28:f0:31:36:8d:f8:8d:61:f0:09:8b:fb:97:71:e5:dc: f4:b6:71:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQckammmKe56rgzCmUaFA6QSRVpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA4MjMxNTM2NTZaFw0yNTA4MjYxNjMyNTZaMDMxMTAvBgNV BAMTKEM3QzM1OTMwRjg1N0IwOUQwRTUxMTEwOUYyOTQyNzU4NjVBOTk5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Y1zk11p+4v9svEW9AnIAgtNn kW9ouVd43NK8fx0YnqlFORAqFF00ARZ9IRzA3fuDT9gkUu/srNwauJEi0Z2Gx3mH AhLx4Ve6UQPMOGjojkz8/9tcJOMkQQ5mX5AWJni4nDDXLW+ZBrDIeqZkvzd0ZrBr 9t1ZI+Af3eaESds6vtth31L8F05Gs26EcsXi3HupXnm/yUy1IVl+fk9AtQQV/daD 1dde+BgVXl6M7B++hUY+hbtX4hAb2fuh98KFZq0S2MwI7gm8+FdwG1ZzK3dMeiit sO1VIA4mC8h+mPr3Q47KhafO6K73fm3ZPXsOZI1uwHerGrniU/filoL+R5qZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8NZMPhXsJ0OUREJ8pQnWGWpmdUwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDEg/q1RTc9iZiLoASyOGQ1yES6Hljn99Qn G0gnYzBABQNvviOQrAig2J/65YEGnrusrEes6cUTF3YyH25uQa+XXg0/SWNPsPdX NFHkitQWWOWYlWMoou/xFGIye89hnA6nfw8wXo3ER/nYGxHS+hOzSPsPrt/LrfEP BpbjwDxrr2mFvrzVJmg+CbQAHL05EyeH/kOTYyDH5xToTApLhyADEH0cNpDLvZlg 1JpR+Is8tH3AhA1av5dp5I3mtd8HuVHM851MeAb8LNwzRwy9LSUhftWkKQ75Wbnt pIbrvKbYk1pQocVOZWNm99kUKPAxNo34jWHwCYv7l3Hl3PS2cWE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:40 2025 by rpki-client