$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: ZfgUy/JZbnHbW0o3ZNOBuEKgzy5snYJcKu0qiypJQ9w= Subject key identifier: D7:65:AE:0F:8B:C3:49:C2:C0:7D:DD:94:C9:A6:63:8C:D8:C3:41:61 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 25F3A8D6F14DDB9D94635AC070722AE3A0FA0BCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01CB Signing time: Sat 10 May 2025 21:50:59 +0000 Manifest this update: Sat 10 May 2025 21:45:59 +0000 Manifest next update: Wed 14 May 2025 07:00:59 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) 2: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: qxIKeBpvOdNyV+okSWmZDcbZAF5qoSv//OIbeHdF+tM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f3:a8:d6:f1:4d:db:9d:94:63:5a:c0:70:72:2a:e3:a0:fa:0b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: May 10 21:45:59 2025 GMT Not After : May 14 07:00:59 2025 GMT Subject: CN=D765AE0F8BC349C2C07DDD94C9A6638CD8C34161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:26:7d:de:98:69:21:b1:5d:53:f0:42:76: 13:9b:ce:a4:1b:ed:9b:06:53:3e:b9:63:dc:1b:d6: ce:37:f6:d9:0c:90:44:2c:ca:0b:21:5a:30:fd:b8: 97:10:43:0a:0b:06:b3:bc:a5:b9:3c:8d:1f:c8:e7: cf:53:c8:4f:84:13:d2:dc:b5:50:a5:40:ca:a4:87: e6:65:34:db:ee:f2:ad:65:4c:c2:17:71:cc:1c:09: 4d:89:2f:4c:c9:61:70:b2:13:ec:c6:1b:96:17:12: 16:e2:6c:87:0c:4d:d8:1b:f3:b1:1e:7a:df:29:ab: 81:7a:cb:d9:4e:c0:a5:d8:bb:6d:2b:bb:2c:60:86: 02:2e:80:d1:eb:da:c5:e9:10:0b:cb:9d:5e:43:b9: 05:f0:cd:41:73:09:ef:8d:79:38:44:d9:f2:60:6f: 58:7f:5d:97:c4:03:75:dd:92:1b:e4:37:bc:9a:5a: 87:a5:22:3e:e2:d1:ac:a5:12:a2:84:d9:a8:30:95: e1:e8:db:60:e8:7d:c7:7d:2e:4b:84:92:06:5f:a8: c6:a7:3a:af:e9:c5:d0:89:b6:64:0a:55:94:ec:41: ef:fe:c7:ea:f1:52:65:af:fd:1c:84:48:cd:02:ca: bb:d7:f1:94:93:62:e6:04:4a:1b:2f:03:38:5b:af: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:AE:0F:8B:C3:49:C2:C0:7D:DD:94:C9:A6:63:8C:D8:C3:41:61 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:79:31:d5:89:9e:69:d9:4e:e6:1f:59:fe:4a:08:ca:95:1a: c4:c2:71:ee:d3:cb:c3:07:41:a1:42:d6:20:65:ea:a9:ed:6e: 04:62:3e:16:ea:3f:b1:91:bf:75:93:b1:28:44:9c:03:b0:b8: 8c:0e:4b:85:2e:5a:06:72:ea:71:54:68:b6:9c:cf:23:b1:59: 7e:f2:9e:6a:51:77:87:23:7a:c8:77:2d:fd:8f:2f:e5:d1:9b: f4:00:07:78:af:a8:8d:f4:f5:4b:a5:a8:33:88:0e:12:41:b2: 20:82:14:6a:21:1f:31:5e:25:eb:e3:16:17:18:6d:b4:f8:07: c0:70:5b:bc:ed:a3:4c:67:5f:f1:4e:21:88:09:cc:b6:24:f8: 1a:6a:e5:aa:a0:3d:02:1f:01:21:e0:e6:14:3a:a4:4b:f0:09: 02:87:f4:11:21:4c:95:ea:63:ab:02:61:89:97:18:3f:15:6c: b3:98:81:fc:8f:8e:d5:56:fd:73:b9:7f:cd:ea:4e:a0:04:4a: b3:44:b3:d2:7a:e0:5b:4a:1e:b3:36:3f:89:8f:5f:d6:37:d3: c4:68:c4:5e:42:77:49:b4:62:ca:19:34:1e:6b:1b:0d:8a:6c: f8:d5:b8:d0:27:ce:e7:b2:09:bf:4a:4a:62:21:8a:a9:c8:f8: 6b:80:d9:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfOo1vFN252UY1rAcHIq46D6C88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA1MTAyMTQ1NTlaFw0yNTA1MTQwNzAwNTlaMDMxMTAvBgNV BAMTKEQ3NjVBRTBGOEJDMzQ5QzJDMDdEREQ5NEM5QTY2MzhDRDhDMzQxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvyZ93phpIbFdU/BCdhObzqQb 7ZsGUz65Y9wb1s439tkMkEQsygshWjD9uJcQQwoLBrO8pbk8jR/I589TyE+EE9Lc tVClQMqkh+ZlNNvu8q1lTMIXccwcCU2JL0zJYXCyE+zGG5YXEhbibIcMTdgb87Ee et8pq4F6y9lOwKXYu20ruyxghgIugNHr2sXpEAvLnV5DuQXwzUFzCe+NeThE2fJg b1h/XZfEA3XdkhvkN7yaWoelIj7i0aylEqKE2agwleHo22Dofcd9LkuEkgZfqMan Oq/pxdCJtmQKVZTsQe/+x+rxUmWv/RyESM0CyrvX8ZSTYuYEShsvAzhbrwhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12WuD4vDScLAfd2UyaZjjNjDQWEwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGF5MdWJnmnZTuYfWf5KCMqVGsTCce7Ty8MH QaFC1iBl6qntbgRiPhbqP7GRv3WTsShEnAOwuIwOS4UuWgZy6nFUaLaczyOxWX7y nmpRd4cjesh3Lf2PL+XRm/QAB3ivqI309UulqDOIDhJBsiCCFGohHzFeJevjFhcY bbT4B8BwW7zto0xnX/FOIYgJzLYk+Bpq5aqgPQIfASHg5hQ6pEvwCQKH9BEhTJXq Y6sCYYmXGD8VbLOYgfyPjtVW/XO5f83qTqAESrNEs9J64FtKHrM2P4mPX9Y308Ro xF5Cd0m0YsoZNB5rGw2KbPjVuNAnzueyCb9KSmIhiqnI+GuA2fI= -----END CERTIFICATE-----Generated at Sun May 11 04:29:49 2025 by rpki-client