$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: PY8ERhbsaxgGjGa6C0ZX/v9NzyBhnuSmCSL2UuCsurM= Subject key identifier: BB:CC:82:4E:52:40:14:54:4F:B4:4D:8D:E7:88:3F:E8:FE:B3:5D:98 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 0296A5399211D52D33B0B1798FB91086BB2A6DE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 012F Signing time: Sun 19 Oct 2025 00:41:56 +0000 Manifest this update: Sun 19 Oct 2025 00:36:56 +0000 Manifest next update: Wed 22 Oct 2025 07:47:56 +0000 Files and hashes: 1: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: iiR58IGHk/2pwfsZ4HI3xgOpufwy8awZ8LiieYY7jY4=) 2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:96:a5:39:92:11:d5:2d:33:b0:b1:79:8f:b9:10:86:bb:2a:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Oct 19 00:36:56 2025 GMT Not After : Oct 22 07:47:56 2025 GMT Subject: CN=BBCC824E524014544FB44D8DE7883FE8FEB35D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:f5:34:f6:df:4b:20:87:ac:93:64:4b:de: 1d:fc:ba:ab:d9:db:90:02:d1:90:85:19:a3:ee:0d: 06:ab:a2:30:cc:51:7d:0a:57:1d:b0:6b:41:d9:67: 46:85:36:c9:fe:06:82:5e:bb:a1:97:ec:c9:2c:5c: 1e:74:b6:99:6e:88:88:41:94:74:aa:7f:8f:a4:db: 6d:a4:09:df:d1:5d:31:89:fd:78:0f:0d:6b:7e:b1: 98:60:14:e6:1e:a6:20:8f:7f:22:f5:0e:ec:1e:79: 5e:30:4d:04:cc:41:cd:f9:d4:28:1a:62:90:50:ae: 8d:50:38:ed:f0:38:f5:f5:b7:e7:8e:dc:10:e9:c0: 22:c6:af:07:9a:4d:42:01:47:0a:52:ec:a2:d5:a3: 55:36:80:ac:4a:52:86:d2:7e:cc:3c:6a:59:60:05: 3e:c8:64:18:d0:71:41:54:28:4d:ba:3b:36:cc:46: c5:4c:7c:1c:0f:58:b6:92:71:f1:0f:d8:f0:59:31: 82:fd:c7:95:83:bc:f2:06:bb:ae:bf:b2:7a:91:e2: 4c:c7:a4:98:20:a0:9c:a3:c2:cb:b5:34:a2:13:47: 9c:74:7e:eb:22:9c:d9:04:ce:e1:6d:d3:36:da:b0: 17:bb:d8:58:18:af:b7:72:d2:e3:74:26:e4:79:27: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:82:4E:52:40:14:54:4F:B4:4D:8D:E7:88:3F:E8:FE:B3:5D:98 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0e:e7:91:98:24:37:db:2c:9c:bc:4f:a4:32:d4:d1:96:17: da:14:05:fb:03:20:99:6e:bb:e0:5f:1c:7f:27:21:5a:64:b6: 5c:93:26:2c:06:81:1a:11:0c:0b:8f:4d:96:e2:2f:82:2b:18: e2:77:4d:97:a1:bd:26:7d:6b:31:eb:c5:e9:75:b0:5b:b4:10: 07:5a:41:85:a6:58:a8:1f:72:f1:f0:e6:8a:3e:9d:75:4b:84: 6d:ea:a0:ea:b8:4b:9a:eb:22:5f:36:42:1a:d8:0e:9d:9d:a6: ff:0f:d8:49:26:fb:68:6c:e9:1b:6c:99:74:60:4e:27:25:28: ca:eb:b2:ce:0c:44:dc:0f:0b:f6:96:3b:53:e3:04:3b:59:20: 71:e1:f1:85:d9:34:1b:30:84:e7:66:92:ae:c3:0d:4e:65:0a: f1:83:16:32:7c:9e:ca:a2:72:d9:29:c2:ae:a7:cb:77:74:a2: 1c:26:16:a8:2a:a4:6f:6b:ac:fc:e1:35:e9:e5:a3:ff:f0:81: e1:6c:70:2a:8a:a1:08:df:1f:0f:1f:25:7a:b4:72:35:6b:6f: f8:fc:62:72:e3:57:d1:57:75:c4:03:7a:e4:29:27:f1:bd:bc: 2d:8e:1f:60:40:e7:bb:16:ee:da:ea:1f:24:a5:fa:49:4a:c9: 2c:41:08:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApalOZIR1S0zsLF5j7kQhrsqbeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTEwMTkwMDM2NTZaFw0yNTEwMjIwNzQ3NTZaMDMxMTAvBgNV BAMTKEJCQ0M4MjRFNTI0MDE0NTQ0RkI0NEQ4REU3ODgzRkU4RkVCMzVEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRo/U09t9LIIesk2RL3h38uqvZ 25AC0ZCFGaPuDQarojDMUX0KVx2wa0HZZ0aFNsn+BoJeu6GX7MksXB50tpluiIhB lHSqf4+k222kCd/RXTGJ/XgPDWt+sZhgFOYepiCPfyL1DuweeV4wTQTMQc351Cga YpBQro1QOO3wOPX1t+eO3BDpwCLGrweaTUIBRwpS7KLVo1U2gKxKUobSfsw8allg BT7IZBjQcUFUKE26OzbMRsVMfBwPWLaScfEP2PBZMYL9x5WDvPIGu66/snqR4kzH pJggoJyjwsu1NKITR5x0fusinNkEzuFt0zbasBe72FgYr7dy0uN0JuR5JxQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8yCTlJAFFRPtE2N54g/6P6zXZgwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYO55GYJDfbLJy8T6Qy1NGWF9oUBfsDIJlu u+BfHH8nIVpktlyTJiwGgRoRDAuPTZbiL4IrGOJ3TZehvSZ9azHrxel1sFu0EAda QYWmWKgfcvHw5oo+nXVLhG3qoOq4S5rrIl82QhrYDp2dpv8P2Ekm+2hs6RtsmXRg TiclKMrrss4MRNwPC/aWO1PjBDtZIHHh8YXZNBswhOdmkq7DDU5lCvGDFjJ8nsqi ctkpwq6ny3d0ohwmFqgqpG9rrPzhNenlo//wgeFscCqKoQjfHw8fJXq0cjVrb/j8 YnLjV9FXdcQDeuQpJ/G9vC2OH2BA57sW7trqHySl+klKySxBCBg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:48 2025 by rpki-client