$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: yM7Ao5GzjsPhDW+beJ9ifDcfYdSfrhjJq9soBAYt4P4= Subject key identifier: 95:C5:D2:AA:12:15:7B:3D:3B:05:FE:F7:0B:97:2D:2F:7A:88:FA:AB Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 75615F25FD2037EB09DFA1117D600ABC92A3F127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 0296 Signing time: Mon 20 Oct 2025 00:51:33 +0000 Manifest this update: Mon 20 Oct 2025 00:46:33 +0000 Manifest next update: Thu 23 Oct 2025 09:11:33 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: +wMFiYvfAhTJsqt/WEI7ZNV7HzydH1tLsut4HVjrbRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:61:5f:25:fd:20:37:eb:09:df:a1:11:7d:60:0a:bc:92:a3:f1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Oct 20 00:46:33 2025 GMT Not After : Oct 23 09:11:33 2025 GMT Subject: CN=95C5D2AA12157B3D3B05FEF70B972D2F7A88FAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:e4:fe:d0:c4:4d:b3:88:45:21:be:e9:ed: a3:94:5e:83:61:e1:42:d1:ca:57:5e:b7:b1:31:07: 47:32:93:3b:95:bb:be:e8:d2:54:92:fe:6a:a3:08: 40:aa:b7:89:77:dd:fe:f3:ea:ef:42:81:52:84:17: 8f:dc:41:48:7b:90:35:b5:43:24:e0:8d:63:40:c6: 0c:f4:d2:bf:a9:7b:13:e7:56:28:6f:ef:a0:a7:43: 6e:2f:14:99:49:87:b2:0a:a8:4b:fc:43:f3:81:1c: a9:23:a2:90:1c:19:4e:97:52:da:5d:cb:65:8e:f9: f6:ed:f2:a4:03:12:91:86:04:a2:01:6e:be:70:e6: 57:8f:ad:ac:6a:e5:e9:b8:bf:b4:a9:27:01:bf:a5: 24:7c:74:dc:da:a0:e6:38:44:c7:1c:9d:b4:64:fc: ed:87:4b:5a:e5:7c:ae:ab:f7:2e:2f:54:9d:1d:26: e9:e3:c4:51:f5:22:c5:2b:3d:e4:f3:27:88:c7:99: c7:57:23:b6:26:d9:80:94:23:1f:45:fa:a0:2c:14: b2:e2:b0:1c:e9:6c:06:98:60:f7:cb:b9:14:e7:3e: 12:47:0b:78:5a:7f:69:2e:b7:70:8d:25:3c:68:1b: f3:d9:6c:91:03:54:bb:df:e0:07:44:2c:4e:1e:0d: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:D2:AA:12:15:7B:3D:3B:05:FE:F7:0B:97:2D:2F:7A:88:FA:AB X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:18:22:2d:2f:ae:2c:67:6b:aa:a7:00:74:2f:5c:b1:fb:cb: b4:a8:9d:2c:55:da:52:f4:96:2e:3c:91:79:fa:4d:62:54:48: 33:18:01:4c:00:ad:45:2d:3a:2d:54:61:79:9b:28:79:5d:1c: 32:f4:8c:ed:50:6b:93:b3:f2:ce:a7:b1:c6:d0:14:50:1e:fd: fb:c0:e7:18:1f:a9:fb:61:87:17:fc:58:7f:fb:69:4b:b8:e4: 37:6f:7a:13:b7:c7:eb:96:fd:35:1f:e7:f6:ca:c2:67:b9:98: a0:0d:e7:8b:e5:71:0f:f2:aa:7d:52:b6:51:f5:5e:b2:c4:7a: ac:3c:9c:e0:1e:12:a8:c3:6b:4c:5a:aa:a0:5e:c9:b9:fa:5f: 6c:2a:c8:e3:84:cd:aa:b0:68:06:67:45:f6:f8:44:b1:ca:b3: a3:2b:0f:ef:dd:ae:52:dd:25:9f:2f:ee:44:7d:3a:68:68:b2: 9c:5e:3e:c5:d7:a9:85:2a:38:19:66:8a:60:79:f4:f1:e1:f9: 7e:c4:62:c3:20:cf:e8:2e:b7:82:94:1e:d1:da:1a:95:16:2b: f3:67:90:60:fe:cc:1c:30:48:4c:18:3b:9d:3a:c0:e5:b6:6b: 8f:5d:5e:fe:72:3f:c3:a9:f8:10:80:91:31:c2:32:54:c0:ae: 64:ca:f7:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWFfJf0gN+sJ36ERfWAKvJKj8ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTEwMjAwMDQ2MzNaFw0yNTEwMjMwOTExMzNaMDMxMTAvBgNV BAMTKDk1QzVEMkFBMTIxNTdCM0QzQjA1RkVGNzBCOTcyRDJGN0E4OEZBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFeT+0MRNs4hFIb7p7aOUXoNh 4ULRyldet7ExB0cykzuVu77o0lSS/mqjCECqt4l33f7z6u9CgVKEF4/cQUh7kDW1 QyTgjWNAxgz00r+pexPnVihv76CnQ24vFJlJh7IKqEv8Q/OBHKkjopAcGU6XUtpd y2WO+fbt8qQDEpGGBKIBbr5w5lePraxq5em4v7SpJwG/pSR8dNzaoOY4RMccnbRk /O2HS1rlfK6r9y4vVJ0dJunjxFH1IsUrPeTzJ4jHmcdXI7Ym2YCUIx9F+qAsFLLi sBzpbAaYYPfLuRTnPhJHC3haf2kut3CNJTxoG/PZbJEDVLvf4AdELE4eDaAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcXSqhIVez07Bf73C5ctL3qI+qswHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkYIi0vrixna6qnAHQvXLH7y7SonSxV2lL0 li48kXn6TWJUSDMYAUwArUUtOi1UYXmbKHldHDL0jO1Qa5Oz8s6nscbQFFAe/fvA 5xgfqfthhxf8WH/7aUu45DdvehO3x+uW/TUf5/bKwme5mKAN54vlcQ/yqn1StlH1 XrLEeqw8nOAeEqjDa0xaqqBeybn6X2wqyOOEzaqwaAZnRfb4RLHKs6MrD+/drlLd JZ8v7kR9OmhospxePsXXqYUqOBlmimB59PHh+X7EYsMgz+gut4KUHtHaGpUWK/Nn kGD+zBwwSEwYO506wOW2a49dXv5yP8Op+BCAkTHCMlTArmTK9wQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:12 2025 by rpki-client