$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: Owcs5vdUjKJXlUBJdf8BbiIRZFEe38XPY4ri4zrj2bs= Subject key identifier: 95:8D:5B:D9:0F:DE:C7:76:68:C1:96:D3:77:8B:BE:4E:A1:D3:7A:65 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 12E75CBD9EEA38CAFE3D1BDCD5524B44FCCE344C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 0264 Signing time: Fri 27 Jun 2025 19:11:39 +0000 Manifest this update: Fri 27 Jun 2025 19:06:39 +0000 Manifest next update: Tue 01 Jul 2025 06:13:39 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: WMw/Mn66rbtj4ZYDmptDpGoboIK5046Pboch7fitBbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e7:5c:bd:9e:ea:38:ca:fe:3d:1b:dc:d5:52:4b:44:fc:ce:34:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Jun 27 19:06:39 2025 GMT Not After : Jul 1 06:13:39 2025 GMT Subject: CN=958D5BD90FDEC77668C196D3778BBE4EA1D37A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:e2:bf:aa:d9:a4:f1:e9:d8:a4:99:fd:10: 2b:1e:b6:7a:05:31:7c:78:b2:26:2d:bf:84:ea:19: a5:76:05:48:24:91:7c:74:22:fc:e6:72:b9:d4:42: 14:94:a2:de:19:95:ae:9e:b7:29:1e:cc:8a:be:28: f5:a8:ca:ac:3a:d7:2d:dd:5c:ff:45:4b:41:72:d0: eb:9d:56:e6:c3:82:7b:1f:3b:e4:22:7c:63:62:14: 3e:64:a1:81:fb:23:07:2b:e2:a9:62:fb:28:d4:8f: 6b:4f:98:7c:19:df:eb:7c:34:9e:00:aa:34:83:15: ba:7f:de:f3:f3:91:af:3f:06:d0:dc:e4:20:a2:19: 49:4e:6c:c4:fc:9f:b7:bd:45:b9:a9:80:dc:b4:a0: b9:42:16:46:78:6c:24:3c:c4:29:56:4c:1a:b5:cd: fd:05:57:96:65:f4:df:f9:86:1b:0b:43:dc:e7:87: e4:85:c4:7b:2a:8b:16:ad:22:93:36:4b:98:8f:db: 04:6a:af:9a:df:02:8e:2b:dd:8c:8e:3d:7f:2b:a5: f8:0f:a2:81:a1:dc:e2:17:85:99:3f:e2:4e:7c:74: d8:0b:65:d0:86:7a:8d:14:28:e2:64:8c:21:f7:d2: 32:6b:c9:48:8d:f3:aa:70:fc:21:ce:11:ad:58:1d: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:5B:D9:0F:DE:C7:76:68:C1:96:D3:77:8B:BE:4E:A1:D3:7A:65 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:e3:50:1c:71:79:90:42:cb:46:f7:33:7e:76:74:5d:a9: b5:b0:95:6b:5f:33:d4:a6:3f:59:b2:32:ac:70:86:8d:51:a3: 57:6e:0e:06:a5:f8:3a:4b:10:90:00:4d:36:18:b4:8b:6a:3a: fe:d1:2e:23:42:7f:7b:4e:71:54:0a:33:4b:cb:89:2a:3a:46: 68:b7:1c:ff:e1:59:e9:a0:73:74:d5:a2:56:de:e5:d0:7c:c8: 1a:38:4d:5e:c9:be:9b:81:d7:12:bc:f3:b7:26:e5:86:43:5f: b4:ae:8e:fc:d3:f2:0c:ec:11:70:1c:95:55:0a:75:47:9f:de: e1:9b:e9:40:68:7e:90:b6:9a:70:e2:1d:5c:72:ea:00:0b:da: 12:67:29:74:26:71:ee:b0:29:63:c8:21:ab:b7:b5:28:1b:15: fb:f3:fb:72:6e:3f:93:6b:c4:1a:ee:86:c9:19:7d:a5:1d:47: 37:30:9d:bf:c0:ce:79:67:8c:c6:dc:72:43:38:db:95:ec:8d: 66:1f:ca:90:c6:b0:41:df:1b:00:21:2c:63:6c:f0:2a:47:a2: 17:90:6d:58:76:bf:b7:f4:3b:a4:b5:1d:b3:25:d9:30:74:4d: 08:80:60:0e:89:4c:eb:28:cf:43:bb:b0:28:5b:b1:93:41:b8: 44:0c:52:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEudcvZ7qOMr+PRvc1VJLRPzONEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA2MjcxOTA2MzlaFw0yNTA3MDEwNjEzMzlaMDMxMTAvBgNV BAMTKDk1OEQ1QkQ5MEZERUM3NzY2OEMxOTZEMzc3OEJCRTRFQTFEMzdBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdeK/qtmk8enYpJn9ECsetnoF MXx4siYtv4TqGaV2BUgkkXx0IvzmcrnUQhSUot4Zla6etykezIq+KPWoyqw61y3d XP9FS0Fy0OudVubDgnsfO+QifGNiFD5koYH7Iwcr4qli+yjUj2tPmHwZ3+t8NJ4A qjSDFbp/3vPzka8/BtDc5CCiGUlObMT8n7e9RbmpgNy0oLlCFkZ4bCQ8xClWTBq1 zf0FV5Zl9N/5hhsLQ9znh+SFxHsqixatIpM2S5iP2wRqr5rfAo4r3YyOPX8rpfgP ooGh3OIXhZk/4k58dNgLZdCGeo0UKOJkjCH30jJryUiN86pw/CHOEa1YHTqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlY1b2Q/ex3ZowZbTd4u+TqHTemUwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEew41AccXmQQstG9zN+dnRdqbWwlWtfM9Sm P1myMqxwho1Ro1duDgal+DpLEJAATTYYtItqOv7RLiNCf3tOcVQKM0vLiSo6Rmi3 HP/hWemgc3TVolbe5dB8yBo4TV7JvpuB1xK887cm5YZDX7SujvzT8gzsEXAclVUK dUef3uGb6UBofpC2mnDiHVxy6gAL2hJnKXQmce6wKWPIIau3tSgbFfvz+3JuP5Nr xBruhskZfaUdRzcwnb/AznlnjMbcckM425XsjWYfypDGsEHfGwAhLGNs8CpHoheQ bVh2v7f0O6S1HbMl2TB0TQiAYA6JTOsoz0O7sChbsZNBuEQMUgI= -----END CERTIFICATE-----Generated at Mon Jun 30 06:51:39 2025 by rpki-client