$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: d4mFqhbQRzu1+TsojhJqLfZqGgTuUIB1LVtxpiigQJY= Subject key identifier: F3:19:87:E4:33:B9:25:FC:EC:08:EC:DB:98:ED:A9:1B:F7:B3:0B:0A Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 08EC9AB3A733FA39CC6BA7FC11B891D12E44394B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 027C Signing time: Fri 22 Aug 2025 06:21:35 +0000 Manifest this update: Fri 22 Aug 2025 06:16:35 +0000 Manifest next update: Mon 25 Aug 2025 14:02:35 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: LH20sSp8UGVdPV4ti7+s9FIrEmSSLRc4VpuM2lWf3ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ec:9a:b3:a7:33:fa:39:cc:6b:a7:fc:11:b8:91:d1:2e:44:39:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Aug 22 06:16:35 2025 GMT Not After : Aug 25 14:02:35 2025 GMT Subject: CN=F31987E433B925FCEC08ECDB98EDA91BF7B30B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:f8:1c:48:27:51:d5:28:79:ef:6d:86:6a: d4:8c:69:8e:73:e9:0b:ad:6a:69:8c:83:47:a7:90: af:a5:01:e7:95:15:58:8e:79:e2:f9:ff:98:f9:e5: 61:35:9c:9b:3c:0a:8c:2f:a1:1c:a9:fe:73:2e:23: c5:a7:5d:1d:91:34:95:e9:f4:56:81:80:54:72:81: 37:ab:13:2d:91:43:fb:bf:25:ec:31:43:32:37:cd: f7:ee:a0:11:c1:63:00:96:dc:92:df:34:8c:fa:57: f4:7d:c7:5e:6f:ff:db:85:ff:f0:43:8e:10:60:7d: 3b:ba:9e:2c:e7:cf:00:5f:89:bf:33:39:04:eb:f2: 0e:dc:cf:96:af:c1:bf:4c:d6:86:ab:83:38:1f:cc: 62:34:b8:db:04:9f:18:cf:02:97:0d:62:97:3c:5a: 72:d2:74:72:50:4a:6a:9b:73:25:0e:3e:ea:16:13: ac:4e:a2:de:ff:30:25:cb:96:dd:05:65:d2:c3:b0: e1:e5:7d:03:59:d5:b2:fc:4f:5d:d2:8b:cb:4d:7b: 58:89:29:e1:1e:37:f9:f3:db:83:2d:3b:5a:57:93: cb:78:4c:a4:6c:65:78:6b:6f:0e:3a:ae:a3:0f:f8: 43:db:bd:a3:26:a8:c4:bd:bc:fa:d4:bb:f1:65:3c: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:87:E4:33:B9:25:FC:EC:08:EC:DB:98:ED:A9:1B:F7:B3:0B:0A X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:a6:0e:9f:4b:d0:41:80:3a:cf:3c:ae:91:7c:84:3f:51: d2:49:d7:36:88:cf:13:78:a4:2a:c8:7a:36:51:c4:1d:9d:ea: 04:53:0e:66:ad:13:51:99:94:b3:be:82:c5:0b:53:00:b2:4a: 43:3f:9f:2d:0f:c2:e1:c3:e3:16:51:1f:f2:d7:3d:e1:8f:f1: 5c:4b:b7:d0:f7:11:59:4f:f3:51:3a:0f:6c:94:2c:76:02:2d: 26:11:40:c7:63:17:3f:da:f7:d1:ad:6e:25:52:42:6d:71:07: 96:1b:6a:49:e0:45:95:aa:33:3c:cb:ab:f8:ac:16:79:a1:cd: 3a:14:c6:08:68:a5:57:f6:ab:48:74:a2:ef:42:74:9d:97:45: a1:38:94:a5:d7:2c:23:39:54:2d:de:10:43:77:dc:65:2b:33: 92:9a:3e:67:fa:98:95:f1:bd:17:e8:f2:96:b2:9a:79:15:f3: 98:7f:5a:36:c1:7f:46:50:ff:b7:11:bf:86:02:96:9c:38:c8: d8:d1:9a:f5:7b:4d:4f:20:40:46:41:7d:e9:e1:a0:ab:12:e3: ca:9f:62:0a:2b:37:b4:0c:ff:3f:c9:1f:39:a6:c6:b2:d4:28: e4:05:c7:41:9d:f9:cf:76:8a:58:d8:0a:bb:f4:3a:29:61:3a: 0b:e7:97:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOyas6cz+jnMa6f8EbiR0S5EOUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA4MjIwNjE2MzVaFw0yNTA4MjUxNDAyMzVaMDMxMTAvBgNV BAMTKEYzMTk4N0U0MzNCOTI1RkNFQzA4RUNEQjk4RURBOTFCRjdCMzBCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5vgcSCdR1Sh5722GatSMaY5z 6QutammMg0enkK+lAeeVFViOeeL5/5j55WE1nJs8CowvoRyp/nMuI8WnXR2RNJXp 9FaBgFRygTerEy2RQ/u/JewxQzI3zffuoBHBYwCW3JLfNIz6V/R9x15v/9uF//BD jhBgfTu6niznzwBfib8zOQTr8g7cz5avwb9M1oargzgfzGI0uNsEnxjPApcNYpc8 WnLSdHJQSmqbcyUOPuoWE6xOot7/MCXLlt0FZdLDsOHlfQNZ1bL8T13Si8tNe1iJ KeEeN/nz24MtO1pXk8t4TKRsZXhrbw46rqMP+EPbvaMmqMS9vPrUu/FlPOAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8xmH5DO5JfzsCOzbmO2pG/ezCwowHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSSpg6fS9BBgDrPPK6RfIQ/UdJJ1zaIzxN4 pCrIejZRxB2d6gRTDmatE1GZlLO+gsULUwCySkM/ny0PwuHD4xZRH/LXPeGP8VxL t9D3EVlP81E6D2yULHYCLSYRQMdjFz/a99GtbiVSQm1xB5YbakngRZWqMzzLq/is FnmhzToUxghopVf2q0h0ou9CdJ2XRaE4lKXXLCM5VC3eEEN33GUrM5KaPmf6mJXx vRfo8paymnkV85h/WjbBf0ZQ/7cRv4YClpw4yNjRmvV7TU8gQEZBfenhoKsS48qf YgorN7QM/z/JHzmmxrLUKOQFx0Gd+c92iljYCrv0OilhOgvnlxs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:01 2025 by rpki-client