$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: ImdZPOtcyzOskUPqylJdro8/Dfy5hVHgSlQuy9sgw5M= Subject key identifier: DD:51:68:42:96:58:58:AF:30:C9:24:A3:92:61:37:47:12:A8:75:86 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 5C7591DB67025621957EAB7D969A77DB13B1B24F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01E1 Signing time: Sun 29 Jun 2025 10:31:03 +0000 Manifest this update: Sun 29 Jun 2025 10:26:03 +0000 Manifest next update: Wed 02 Jul 2025 14:32:03 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: urJI699W8qiFwQt3ne+NGBlrFcKS5EsOSQRUIuqjRGE=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:75:91:db:67:02:56:21:95:7e:ab:7d:96:9a:77:db:13:b1:b2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Jun 29 10:26:03 2025 GMT Not After : Jul 2 14:32:03 2025 GMT Subject: CN=DD516842965858AF30C924A39261374712A87586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:04:fc:cb:62:7d:d4:2b:1d:8c:be:3d:bb: b4:12:01:4d:12:16:c2:c3:fb:8b:29:dc:68:1b:52: fc:3c:24:2f:26:95:88:f7:ee:87:f2:d2:45:0f:49: bf:61:a5:a4:95:7e:68:0a:cc:25:ae:de:8e:3f:3f: e0:18:cd:07:e5:e3:0f:dc:c2:b4:92:04:ca:bb:80: 09:66:95:79:32:28:de:2e:df:5e:14:39:27:0c:57: 49:08:c9:68:ae:88:1f:93:dc:56:ac:a1:cf:20:b1: c0:a0:93:97:a0:89:32:16:9d:c5:ce:bc:bf:d0:f8: 09:50:c4:95:ce:32:7c:ac:3a:84:c1:87:40:a8:44: 30:bd:a7:59:f8:34:fd:d3:83:9a:ba:18:01:f5:4c: 85:83:d0:23:4c:4c:71:30:0e:5e:1b:e0:5f:4a:4b: c7:77:b5:1b:04:3d:d2:ce:20:e6:58:c3:34:70:38: 47:9f:27:b1:49:6c:85:69:f4:ac:31:d1:3c:f1:65: 5c:ac:52:ce:6e:06:0e:d6:42:fa:bd:fb:3f:b6:07: 72:db:22:44:d9:7b:3e:2b:d6:0e:ec:10:88:e6:59: 5d:af:89:79:de:cf:cd:be:e9:a9:39:2f:e6:ce:b7: 1b:21:61:6a:c2:a5:f6:65:75:1b:8b:b5:e3:00:37: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:51:68:42:96:58:58:AF:30:C9:24:A3:92:61:37:47:12:A8:75:86 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0f:55:d3:d1:8c:5d:ec:ab:2f:0a:3f:23:0f:31:ea:aa:dd: 42:6c:51:7d:af:dc:f8:c5:22:11:17:1d:94:56:42:73:97:d9: 02:81:3f:b1:d3:41:9b:7a:c8:8e:48:04:b6:c7:64:a1:75:04: 93:a4:cc:38:61:18:df:e8:da:9c:e0:8b:90:85:41:28:92:f6: 5f:9d:04:76:b0:e0:6f:9b:43:83:cd:ea:ba:26:0d:ad:80:f2: 67:c5:9e:67:d0:99:46:e3:01:5f:9b:c9:df:0a:0d:8c:45:f0: dc:bb:b9:28:e7:fc:45:41:bb:8c:8b:72:bf:54:f5:bb:14:eb: 7d:2c:7a:34:8d:e1:9e:ad:af:2e:2f:54:c3:eb:41:af:95:be: 85:cc:c6:92:6f:03:d7:87:0a:dd:e4:37:b3:54:30:58:49:b9: 01:a5:65:8d:4e:8e:91:75:48:bb:e4:d6:1a:12:50:9b:e9:03: 64:6e:39:89:f9:45:5c:fe:fc:fa:86:2d:12:c5:34:0a:52:b8: c7:4b:3b:5d:ac:3a:84:b5:88:cf:13:fe:4d:87:d1:22:5f:f5: 2d:41:d4:22:c9:f5:fe:f5:6b:4b:52:4c:d5:b3:15:e3:ae:34: 17:a2:9a:c4:60:af:a1:13:08:58:0c:f9:35:c8:f4:55:35:52: 45:dd:7f:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHWR22cCViGVfqt9lpp32xOxsk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA2MjkxMDI2MDNaFw0yNTA3MDIxNDMyMDNaMDMxMTAvBgNV BAMTKERENTE2ODQyOTY1ODU4QUYzMEM5MjRBMzkyNjEzNzQ3MTJBODc1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqAT8y2J91CsdjL49u7QSAU0S FsLD+4sp3GgbUvw8JC8mlYj37ofy0kUPSb9hpaSVfmgKzCWu3o4/P+AYzQfl4w/c wrSSBMq7gAlmlXkyKN4u314UOScMV0kIyWiuiB+T3Fasoc8gscCgk5egiTIWncXO vL/Q+AlQxJXOMnysOoTBh0CoRDC9p1n4NP3Tg5q6GAH1TIWD0CNMTHEwDl4b4F9K S8d3tRsEPdLOIOZYwzRwOEefJ7FJbIVp9Kwx0TzxZVysUs5uBg7WQvq9+z+2B3Lb IkTZez4r1g7sEIjmWV2viXnez82+6ak5L+bOtxshYWrCpfZldRuLteMAN31zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VFoQpZYWK8wySSjkmE3RxKodYYwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwPVdPRjF3sqy8KPyMPMeqq3UJsUX2v3PjF IhEXHZRWQnOX2QKBP7HTQZt6yI5IBLbHZKF1BJOkzDhhGN/o2pzgi5CFQSiS9l+d BHaw4G+bQ4PN6romDa2A8mfFnmfQmUbjAV+byd8KDYxF8Ny7uSjn/EVBu4yLcr9U 9bsU630sejSN4Z6try4vVMPrQa+VvoXMxpJvA9eHCt3kN7NUMFhJuQGlZY1OjpF1 SLvk1hoSUJvpA2RuOYn5RVz+/PqGLRLFNApSuMdLO12sOoS1iM8T/k2H0SJf9S1B 1CLJ9f71a0tSTNWzFeOuNBeimsRgr6ETCFgM+TXI9FU1UkXdf0M= -----END CERTIFICATE-----Generated at Tue Jul 1 13:24:34 2025 by rpki-client