$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: czSc/zskyXZhx+zvvY67e+ovXANFcXi1vgSih7jAl+E= Subject key identifier: 1A:2F:C1:AB:D3:42:C7:BE:EE:10:70:14:48:D3:28:82:C1:5D:92:02 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 106E9D929BB750CCE1B62E1A07AC2270D334A8C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 024E Signing time: Thu 08 May 2025 21:41:31 +0000 Manifest this update: Thu 08 May 2025 21:36:31 +0000 Manifest next update: Mon 12 May 2025 07:50:31 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 9MKahtNuBq9f99+Ezpp2A/eBMf5JOXV60eHnx3HJ6Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6e:9d:92:9b:b7:50:cc:e1:b6:2e:1a:07:ac:22:70:d3:34:a8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: May 8 21:36:31 2025 GMT Not After : May 12 07:50:31 2025 GMT Subject: CN=1A2FC1ABD342C7BEEE10701448D32882C15D9202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:28:d7:50:31:df:34:b3:c2:52:6b:7a:31: dc:9f:29:63:b3:10:8c:f7:05:98:1e:de:ed:ab:17: cb:5f:71:6a:98:10:90:1b:b3:2a:3a:f8:d6:b8:d2: eb:5c:e3:27:6a:c3:fb:75:0d:6b:48:94:56:04:41: f8:0e:a2:4d:4e:9a:9b:45:a5:e3:b8:6e:c2:5d:74: 61:74:bb:7f:9d:ea:50:4f:ac:fd:4e:6b:8f:53:e7: 35:a8:5a:98:bc:ec:6d:d3:ad:27:4f:c7:31:d8:e7: f5:0a:80:8c:bf:5e:6a:a5:48:63:d8:a4:13:b7:53: a2:bc:be:c1:41:da:28:64:43:6f:3b:55:91:35:cb: eb:c4:cb:9c:0f:39:a1:aa:48:76:cc:cc:0f:16:84: b4:b7:75:68:48:44:b3:86:71:13:97:8c:cf:69:b6: c8:42:93:b8:a6:8f:7d:7b:42:be:bc:65:26:01:44: 40:d7:cf:bb:a9:cb:bb:17:ef:bd:7f:07:af:59:a1: 4c:de:6d:4b:f7:22:1d:47:ea:30:5b:c1:4e:0f:97: 80:d3:63:17:d2:f5:cd:18:43:36:34:3c:05:74:17: 58:de:79:96:43:b7:66:1d:11:bf:6a:45:52:83:68: dd:7e:06:ba:3e:7e:1b:3d:64:cd:b8:5d:86:57:39: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:C1:AB:D3:42:C7:BE:EE:10:70:14:48:D3:28:82:C1:5D:92:02 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1e:34:48:38:13:cb:92:0e:0a:21:4b:7d:fc:49:2f:63:a8: 7a:05:cc:64:75:78:33:be:24:26:2f:75:90:ec:0b:4a:0b:8a: eb:71:da:f4:e0:9e:0b:95:db:9d:6c:67:4b:89:e0:be:c1:d3: 10:2b:8b:8b:6d:ab:c1:41:1e:38:1d:77:bf:e6:66:05:a7:91: 28:02:cd:f7:2a:f1:69:ea:10:1d:c2:5f:ab:05:44:41:8e:44: c3:30:c0:a9:aa:e5:f7:5d:3e:5a:95:05:43:97:d3:16:3e:ab: 56:24:38:59:37:9b:ed:ef:f1:3c:43:c7:9d:ba:04:bf:6b:30: 7f:15:1b:86:e8:71:99:35:d1:7f:61:7b:44:5c:14:fa:3a:ab: 97:35:c9:d0:d9:ca:88:69:fa:cd:47:a0:3f:9e:f2:8d:48:a8: 73:15:e4:ca:bd:91:65:27:8b:fe:2a:7b:bc:c6:40:3f:91:d3: 53:c5:71:a5:3c:65:02:de:3f:92:58:3f:65:ff:a9:6b:31:5c: be:18:a7:10:66:a2:a9:b1:15:3a:3b:f8:e5:e9:f8:ff:d2:63: 38:45:ea:00:dd:8a:0f:95:d1:57:9b:08:97:f4:f6:0a:3b:d4: 69:ea:12:de:6c:74:87:54:9d:8e:1a:b1:2d:73:bc:7f:90:6e: bd:b2:02:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEG6dkpu3UMzhti4aB6wicNM0qMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA1MDgyMTM2MzFaFw0yNTA1MTIwNzUwMzFaMDMxMTAvBgNV BAMTKDFBMkZDMUFCRDM0MkM3QkVFRTEwNzAxNDQ4RDMyODgyQzE1RDkyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4SjXUDHfNLPCUmt6MdyfKWOz EIz3BZge3u2rF8tfcWqYEJAbsyo6+Na40utc4ydqw/t1DWtIlFYEQfgOok1OmptF peO4bsJddGF0u3+d6lBPrP1Oa49T5zWoWpi87G3TrSdPxzHY5/UKgIy/XmqlSGPY pBO3U6K8vsFB2ihkQ287VZE1y+vEy5wPOaGqSHbMzA8WhLS3dWhIRLOGcROXjM9p tshCk7imj317Qr68ZSYBREDXz7upy7sX771/B69ZoUzebUv3Ih1H6jBbwU4Pl4DT YxfS9c0YQzY0PAV0F1jeeZZDt2YdEb9qRVKDaN1+Bro+fhs9ZM24XYZXOfyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGi/Bq9NCx77uEHAUSNMogsFdkgIwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAeNEg4E8uSDgohS338SS9jqHoFzGR1eDO+ JCYvdZDsC0oLiutx2vTgnguV251sZ0uJ4L7B0xAri4ttq8FBHjgdd7/mZgWnkSgC zfcq8WnqEB3CX6sFREGORMMwwKmq5fddPlqVBUOX0xY+q1YkOFk3m+3v8TxDx526 BL9rMH8VG4bocZk10X9he0RcFPo6q5c1ydDZyohp+s1HoD+e8o1IqHMV5Mq9kWUn i/4qe7zGQD+R01PFcaU8ZQLeP5JYP2X/qWsxXL4YpxBmoqmxFTo7+OXp+P/SYzhF 6gDdig+V0VebCJf09go71GnqEt5sdIdUnY4asS1zvH+Qbr2yAuE= -----END CERTIFICATE-----Generated at Fri May 9 18:44:00 2025 by rpki-client