$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: qrOeBebjWKei17OfCuDYDxtvC79BmH/rUIfItLcbuhk= Subject key identifier: 38:B2:EC:2D:0B:84:98:08:01:96:BE:F8:DC:83:7D:C1:0B:F6:2A:DA Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 529A28276ECA950E3E3661F5B342CBF80FFD5CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: FC Signing time: Fri 27 Jun 2025 18:01:54 +0000 Manifest this update: Fri 27 Jun 2025 17:56:54 +0000 Manifest next update: Tue 01 Jul 2025 05:47:54 +0000 Files and hashes: 1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) 2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=) 3: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: njWyhy9jok/wEE6FTDMXu9XwJROJC/SKi3NBftCIYrk=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9a:28:27:6e:ca:95:0e:3e:36:61:f5:b3:42:cb:f8:0f:fd:5c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Jun 27 17:56:54 2025 GMT Not After : Jul 1 05:47:54 2025 GMT Subject: CN=38B2EC2D0B8498080196BEF8DC837DC10BF62ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:d6:d5:9c:69:13:27:b1:60:24:1d:40:6f: 7a:e6:08:f9:98:f2:cc:f9:37:57:51:8a:9f:12:09: 32:c0:dc:29:78:fd:6a:ef:9e:aa:d7:e6:59:d5:ce: c0:d8:62:b4:c1:e9:68:7d:81:57:95:0e:54:95:51: d7:37:d1:de:f2:18:b8:41:62:af:1d:90:c8:af:1d: b7:8c:94:ee:3b:83:b3:c8:38:82:3b:26:28:76:8d: 3f:b8:c9:51:b6:5a:a7:4b:13:4d:cb:81:78:03:6c: 62:98:cf:56:45:6f:fe:c5:fe:a1:1b:69:6d:0f:f9: df:7e:44:9f:7b:2b:9f:89:af:d7:bd:ca:8b:0b:96: 43:bf:35:c8:71:c1:31:66:16:cc:d1:61:b0:19:61: aa:51:1f:09:f0:7e:3f:a7:08:7e:02:d5:d1:ce:55: c5:db:ac:a7:6a:4d:21:8a:84:a2:03:09:1a:1d:35: c1:01:af:a7:45:d7:65:38:e3:09:6c:f5:d2:84:08: c4:2f:16:93:81:46:fe:54:2d:dd:da:82:3e:36:86: cc:50:49:5a:8a:3f:42:fa:5b:62:b8:db:82:d0:65: c5:b8:1b:8c:c3:00:75:ef:4a:4f:8c:9f:51:e6:06: d1:92:78:93:42:70:b3:6d:fe:10:4f:12:23:89:71: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:EC:2D:0B:84:98:08:01:96:BE:F8:DC:83:7D:C1:0B:F6:2A:DA X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:62:65:e4:de:6d:71:ad:49:b5:00:34:1a:fd:8e:0e:cf:0c: 13:06:16:24:97:22:e8:6e:1e:05:ef:e1:ab:28:e0:ea:45:8a: 37:20:cb:68:61:ad:ca:3d:32:1e:3b:e4:b0:c1:4c:78:f1:01: 89:9d:4b:22:5c:7d:74:2b:a2:5f:bd:12:b6:90:b6:8d:d5:d6: cb:fc:ce:1c:ed:cf:c1:5e:50:3d:35:96:4e:30:7e:81:c7:71: d3:9a:2d:f2:76:94:71:f5:c1:fa:61:89:96:a2:8d:ee:0a:8a: e6:0d:01:81:2e:2f:4e:a5:bf:6c:56:b4:7a:c0:90:09:9f:61: 8c:e8:50:ce:93:99:1b:bb:48:e5:aa:dc:88:06:b9:8f:6f:18: 54:c4:6c:cc:16:5b:9f:1f:a8:c3:20:30:39:dc:ce:5e:84:bb: 6f:e6:f9:14:17:76:2b:1e:02:a4:b1:ef:37:4a:35:d4:94:e9: a4:43:0c:12:57:be:a5:be:ae:20:bc:c2:d2:ba:f9:03:e0:8e: ec:c0:94:88:10:cf:49:93:42:35:a8:cd:04:0e:49:f3:9c:51: 1f:2c:f2:0b:fe:b5:84:fc:af:0a:0a:67:4c:00:22:51:eb:0b: 57:02:9f:ed:26:15:7a:67:bc:39:fa:68:1d:7d:d5:04:eb:12: 2e:21:88:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpooJ27KlQ4+NmH1s0LL+A/9XK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA2MjcxNzU2NTRaFw0yNTA3MDEwNTQ3NTRaMDMxMTAvBgNV BAMTKDM4QjJFQzJEMEI4NDk4MDgwMTk2QkVGOERDODM3REMxMEJGNjJBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNc9bVnGkTJ7FgJB1Ab3rmCPmY 8sz5N1dRip8SCTLA3Cl4/WrvnqrX5lnVzsDYYrTB6Wh9gVeVDlSVUdc30d7yGLhB Yq8dkMivHbeMlO47g7PIOII7Jih2jT+4yVG2WqdLE03LgXgDbGKYz1ZFb/7F/qEb aW0P+d9+RJ97K5+Jr9e9yosLlkO/NchxwTFmFszRYbAZYapRHwnwfj+nCH4C1dHO VcXbrKdqTSGKhKIDCRodNcEBr6dF12U44wls9dKECMQvFpOBRv5ULd3agj42hsxQ SVqKP0L6W2K424LQZcW4G4zDAHXvSk+Mn1HmBtGSeJNCcLNt/hBPEiOJcVR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLLsLQuEmAgBlr743IN9wQv2KtowHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZiZeTebXGtSbUANBr9jg7PDBMGFiSXIuhu HgXv4aso4OpFijcgy2hhrco9Mh475LDBTHjxAYmdSyJcfXQrol+9EraQto3V1sv8 zhztz8FeUD01lk4wfoHHcdOaLfJ2lHH1wfphiZaije4KiuYNAYEuL06lv2xWtHrA kAmfYYzoUM6TmRu7SOWq3IgGuY9vGFTEbMwWW58fqMMgMDnczl6Eu2/m+RQXdise AqSx7zdKNdSU6aRDDBJXvqW+riC8wtK6+QPgjuzAlIgQz0mTQjWozQQOSfOcUR8s 8gv+tYT8rwoKZ0wAIlHrC1cCn+0mFXpnvDn6aB191QTrEi4hiBY= -----END CERTIFICATE-----Generated at Mon Jun 30 07:25:32 2025 by rpki-client