$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: /4cLlmhl3AmZQZnJii61kig7ywk4ijG6GLkxidy0nOE= Subject key identifier: 44:EA:5A:8D:85:48:69:B4:4F:2B:A4:36:5D:B5:A3:C2:31:25:7C:BF Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 7ACCAD7B9BFFC97B90E239DA165945A911A4E9B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01F9 Signing time: Thu 21 Aug 2025 22:41:00 +0000 Manifest this update: Thu 21 Aug 2025 22:36:00 +0000 Manifest next update: Mon 25 Aug 2025 08:07:00 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: jkYLKe6mAfOmP/ytjfBxe/XJRFRYKnL1dbJxAVQsyKI=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cc:ad:7b:9b:ff:c9:7b:90:e2:39:da:16:59:45:a9:11:a4:e9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Aug 21 22:36:00 2025 GMT Not After : Aug 25 08:07:00 2025 GMT Subject: CN=44EA5A8D854869B44F2BA4365DB5A3C231257CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:16:ca:8a:c0:ea:e7:1d:de:97:6c:d4:f5: 2e:2f:2d:1a:dd:32:7d:c8:86:f9:f4:39:2a:77:31: 3c:ac:02:b3:03:b0:f9:3c:d2:26:a9:d6:b2:ab:1f: c7:b8:f5:0d:81:7f:cc:4e:70:4c:df:2a:e7:c3:cf: 21:33:89:7d:7b:71:9c:d7:2c:93:4a:4f:3b:cb:1d: f1:a3:eb:79:58:97:05:9e:32:b7:b4:ec:d0:b9:31: 86:46:a8:be:37:82:6d:11:5f:61:1a:38:22:5f:60: 24:77:ff:84:32:7f:e3:8c:d8:5d:7e:77:a8:29:cc: 76:c2:20:94:2f:d4:7c:a6:04:2d:18:91:bb:67:6b: e4:a3:5a:46:c0:69:55:e7:e8:38:f4:c7:d4:a0:5c: 28:78:ff:52:a1:5f:e7:4b:e8:5f:4e:28:9b:b1:a9: 41:43:4a:95:f8:44:64:3b:5b:75:d5:0c:da:ca:06: bc:da:41:93:15:49:13:9a:d2:b0:92:7c:6a:c8:1a: 23:e6:9d:d0:1c:7f:99:ab:f8:70:d2:7c:ed:9d:55: cb:74:27:9d:6a:28:6a:79:35:dc:98:55:5a:87:a1: e3:2b:2c:e8:0d:ef:37:33:ab:21:b3:bf:1a:57:13: e1:1d:f2:a0:38:26:51:61:ad:5e:d4:c2:13:01:57: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:5A:8D:85:48:69:B4:4F:2B:A4:36:5D:B5:A3:C2:31:25:7C:BF X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5a:0b:39:98:a1:cf:b1:cf:20:34:79:81:c8:bb:b4:d3:54: c7:36:c7:66:eb:6f:81:f5:77:44:24:54:2b:9a:6a:6d:41:52: 16:fb:1c:f4:b9:a4:73:cc:7c:5a:74:62:f6:3b:d9:65:dc:6c: 8e:aa:4e:50:87:7d:4d:a0:5f:dd:3f:0f:61:e8:d6:f4:1d:d8: 40:7d:47:ce:7f:25:b2:68:46:8d:ec:c2:f3:d9:9c:25:97:da: 99:b8:b8:82:e4:5f:63:7f:5b:f4:df:00:2f:dd:e6:7d:87:53: 3c:2e:f7:27:9c:2c:ee:76:17:bc:de:23:d6:ef:7b:e9:c7:5c: 8d:c5:6d:fc:a0:c3:7a:3c:d6:0f:88:15:72:50:b8:7a:35:bb: 70:5e:b3:09:38:08:b0:53:9c:8c:f5:0e:67:bb:1c:1b:60:d5: 88:c6:29:20:86:d9:7f:ad:37:11:31:80:51:c6:d4:7f:b5:7b: ea:3e:a7:3f:dc:26:e2:fc:9f:8e:56:f1:ec:3d:a8:c3:a2:5f: cf:9f:3b:bb:6b:fc:ac:b3:95:62:5c:a5:58:c4:8a:38:0e:0c: 5e:25:95:38:7d:21:3e:7d:5c:77:53:3a:cd:d3:1e:7f:4d:34: 18:04:f2:2a:2e:a9:82:5b:d4:db:57:4a:9d:bd:6e:a4:70:e7: 07:76:be:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesyte5v/yXuQ4jnaFllFqRGk6bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA4MjEyMjM2MDBaFw0yNTA4MjUwODA3MDBaMDMxMTAvBgNV BAMTKDQ0RUE1QThEODU0ODY5QjQ0RjJCQTQzNjVEQjVBM0MyMzEyNTdDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBBbKisDq5x3el2zU9S4vLRrd Mn3Ihvn0OSp3MTysArMDsPk80iap1rKrH8e49Q2Bf8xOcEzfKufDzyEziX17cZzX LJNKTzvLHfGj63lYlwWeMre07NC5MYZGqL43gm0RX2EaOCJfYCR3/4Qyf+OM2F1+ d6gpzHbCIJQv1HymBC0Ykbtna+SjWkbAaVXn6Dj0x9SgXCh4/1KhX+dL6F9OKJux qUFDSpX4RGQ7W3XVDNrKBrzaQZMVSROa0rCSfGrIGiPmndAcf5mr+HDSfO2dVct0 J51qKGp5NdyYVVqHoeMrLOgN7zczqyGzvxpXE+Ed8qA4JlFhrV7UwhMBV3dhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROpajYVIabRPK6Q2XbWjwjElfL8wHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVaCzmYoc+xzyA0eYHIu7TTVMc2x2brb4H1 d0QkVCuaam1BUhb7HPS5pHPMfFp0YvY72WXcbI6qTlCHfU2gX90/D2Ho1vQd2EB9 R85/JbJoRo3swvPZnCWX2pm4uILkX2N/W/TfAC/d5n2HUzwu9yecLO52F7zeI9bv e+nHXI3Fbfygw3o81g+IFXJQuHo1u3Beswk4CLBTnIz1Dme7HBtg1YjGKSCG2X+t NxExgFHG1H+1e+o+pz/cJuL8n45W8ew9qMOiX8+fO7tr/KyzlWJcpVjEijgODF4l lTh9IT59XHdTOs3THn9NNBgE8iouqYJb1NtXSp29bqRw5wd2vp0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:16 2025 by rpki-client