$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: atGXP2+EfCaqsd+GPQGIn5hg7yHuDj11AkYj6TV3dzI= Subject key identifier: 60:0A:5A:E1:77:5B:CB:4D:92:3E:18:6A:55:0D:8A:88:6B:BC:1A:21 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 556543A614817A54983B014484A656E1DAA5DB64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0213 Signing time: Mon 20 Oct 2025 12:21:00 +0000 Manifest this update: Mon 20 Oct 2025 12:16:00 +0000 Manifest next update: Thu 23 Oct 2025 14:24:00 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: ymuMaHnY3Z5yDwQcr2W8+EAkBuHUd1TiajZrlzYxh30=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:65:43:a6:14:81:7a:54:98:3b:01:44:84:a6:56:e1:da:a5:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Oct 20 12:16:00 2025 GMT Not After : Oct 23 14:24:00 2025 GMT Subject: CN=600A5AE1775BCB4D923E186A550D8A886BBC1A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:82:60:62:f1:d2:42:c0:b9:b7:3f:93:6e: 05:70:94:57:fa:5a:f3:91:b6:4d:8f:27:16:3f:b8: 4b:d0:6c:a9:f6:75:c2:20:1c:83:f0:15:80:9c:0d: ec:46:46:e7:1a:24:46:0e:3a:c7:4e:17:c0:c7:65: d7:fe:8d:b8:92:e8:51:de:07:2d:56:6e:ef:d5:68: 61:d6:60:4a:f2:5a:f5:86:86:ca:9b:bd:87:a6:d7: 96:57:15:19:39:f7:db:6f:b2:11:b5:a3:4f:37:25: 15:23:8a:9e:fc:bb:23:ae:dc:b8:5c:be:a5:2d:d5: 94:83:01:fd:3a:05:a7:e5:85:67:11:7f:2d:26:b2: 1a:c1:9e:20:2a:a0:13:23:8a:03:c9:07:12:0a:af: 82:da:6a:ef:7f:e0:51:53:f4:6e:9d:56:15:d9:d2: 34:c9:57:b7:c9:ca:e4:33:a1:77:9b:9b:be:e1:79: 24:27:e3:98:ba:39:77:f8:fc:1f:a4:ea:08:7b:7d: a3:0f:d7:f8:ed:68:7f:ef:71:6b:bb:c3:d3:f8:f4: be:dc:c4:51:1b:64:67:f9:22:00:49:0e:b3:2a:f3: c5:05:19:b8:65:89:88:f8:06:f1:da:ae:00:4b:7d: c9:a7:26:41:75:49:1c:8f:7b:f8:58:0b:a8:2c:2a: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0A:5A:E1:77:5B:CB:4D:92:3E:18:6A:55:0D:8A:88:6B:BC:1A:21 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:68:41:34:d5:9b:6a:ba:3e:22:9e:99:6d:23:94:10:43:79: 18:4f:54:99:58:15:60:30:8c:6c:6d:80:86:45:b8:24:a3:05: b8:37:4c:a1:c5:2a:22:31:dc:2a:7c:2f:da:8b:98:2b:70:13: 59:cd:b4:41:f3:8f:ee:10:fb:30:6f:e7:df:a4:4b:85:fe:cb: f8:b5:11:1d:43:f8:84:89:67:43:35:50:4e:1e:3c:68:8b:34: fd:36:15:7d:7e:68:e7:6e:80:cd:54:29:83:d0:9e:11:24:a3: 46:f0:6d:72:e6:68:29:5c:ab:60:80:ee:f5:a1:8f:f5:09:12: d9:90:a9:8d:48:a6:1f:46:db:ae:df:42:45:37:cb:9d:cf:bc: b5:fb:d9:9f:18:9b:f1:c2:61:fc:dd:16:93:82:fa:e0:ba:72: 2a:b1:ab:c2:88:43:6d:ee:5c:23:9b:bb:02:09:91:4d:ce:79: b9:a8:94:4c:33:0f:16:da:04:41:75:33:86:a2:55:4b:89:20: 71:7f:00:54:b3:d6:59:7a:3d:b4:d4:56:a2:6a:07:0c:f2:34: 39:fe:67:8a:6e:54:6c:1c:ba:e4:1f:5c:48:3d:96:10:f5:d9: 79:21:67:56:1d:ed:56:62:84:36:90:37:66:c0:9c:ef:6e:4a: 20:c8:6c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWVDphSBelSYOwFEhKZW4dql22QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTEwMjAxMjE2MDBaFw0yNTEwMjMxNDI0MDBaMDMxMTAvBgNV BAMTKDYwMEE1QUUxNzc1QkNCNEQ5MjNFMTg2QTU1MEQ4QTg4NkJCQzFBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBYJgYvHSQsC5tz+TbgVwlFf6 WvORtk2PJxY/uEvQbKn2dcIgHIPwFYCcDexGRucaJEYOOsdOF8DHZdf+jbiS6FHe By1Wbu/VaGHWYEryWvWGhsqbvYem15ZXFRk599tvshG1o083JRUjip78uyOu3Lhc vqUt1ZSDAf06BaflhWcRfy0mshrBniAqoBMjigPJBxIKr4Laau9/4FFT9G6dVhXZ 0jTJV7fJyuQzoXebm77heSQn45i6OXf4/B+k6gh7faMP1/jtaH/vcWu7w9P49L7c xFEbZGf5IgBJDrMq88UFGbhliYj4BvHargBLfcmnJkF1SRyPe/hYC6gsKvnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYApa4Xdby02SPhhqVQ2KiGu8GiEwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxoQTTVm2q6PiKemW0jlBBDeRhPVJlYFWAw jGxtgIZFuCSjBbg3TKHFKiIx3Cp8L9qLmCtwE1nNtEHzj+4Q+zBv59+kS4X+y/i1 ER1D+ISJZ0M1UE4ePGiLNP02FX1+aOdugM1UKYPQnhEko0bwbXLmaClcq2CA7vWh j/UJEtmQqY1Iph9G267fQkU3y53PvLX72Z8Ym/HCYfzdFpOC+uC6ciqxq8KIQ23u XCObuwIJkU3OebmolEwzDxbaBEF1M4aiVUuJIHF/AFSz1ll6PbTUVqJqBwzyNDn+ Z4puVGwcuuQfXEg9lhD12XkhZ1Yd7VZihDaQN2bAnO9uSiDIbC4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:49 2025 by rpki-client