$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: BHkBEOmtpIIhAIGgOdXakNMaFaYNRgL9sSIsWxKgeog= Subject key identifier: D1:1F:0D:8C:7D:CC:E6:54:C7:82:7A:A7:29:3A:88:5E:29:95:D4:87 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 01EAE2E760E86D580528CF5417A6B54440DBC07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02A6 Signing time: Fri 22 Aug 2025 20:32:12 +0000 Manifest this update: Fri 22 Aug 2025 20:27:12 +0000 Manifest next update: Mon 25 Aug 2025 23:59:12 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: rblr1J8+iBUfiIbMuq9Ijp64I7SnVnV5FpQhovNkhmU=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ea:e2:e7:60:e8:6d:58:05:28:cf:54:17:a6:b5:44:40:db:c0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Aug 22 20:27:12 2025 GMT Not After : Aug 25 23:59:12 2025 GMT Subject: CN=D11F0D8C7DCCE654C7827AA7293A885E2995D487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:3a:4e:6a:59:76:e4:56:5a:5e:07:60:b8: 85:2e:cb:9f:49:94:f0:d2:b0:e4:8f:70:06:ad:0b: c1:6e:a6:e4:2f:f9:59:c7:dc:d1:0d:af:a3:f5:e0: e3:c3:40:d2:0c:94:76:16:f2:36:6a:55:55:58:8a: e3:51:13:d2:ee:4c:17:af:80:d9:70:83:f3:96:36: ee:ab:d5:b9:10:84:f7:04:7f:04:23:39:08:c1:05: f5:f8:cb:3f:1b:7a:ca:82:e8:b9:ea:6c:1d:a6:3b: 70:1b:83:4b:11:83:8a:ae:a5:48:d9:6d:a4:3d:fa: 5e:5d:fe:94:a5:6a:01:83:a7:17:28:84:0e:fa:e2: ed:d2:e8:78:0a:84:fe:b0:49:ab:68:80:25:f8:89: 0c:47:2d:f1:87:fa:9b:60:81:aa:2d:67:48:c1:ba: 79:e8:4d:13:4c:39:52:9e:92:72:22:17:14:ce:d4: 83:be:c0:ab:11:f3:aa:56:98:83:b4:c8:2d:57:37: 31:02:c3:4a:d2:cf:39:a7:8c:46:e7:a9:ad:f8:bf: aa:82:3d:93:70:d5:ce:f7:d0:11:aa:0d:7e:02:cc: 18:48:48:a0:71:5c:5e:b9:f4:78:ad:8a:03:71:73: 14:5c:42:8f:23:74:c8:ed:d6:cd:47:6f:01:66:25: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:0D:8C:7D:CC:E6:54:C7:82:7A:A7:29:3A:88:5E:29:95:D4:87 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2a:68:a2:7b:f2:aa:17:af:41:cd:78:2d:78:d8:e6:e0:3d: 2d:e5:02:35:0f:dd:9d:d3:25:eb:a6:c7:4a:c7:4e:66:62:15: 76:20:3b:47:1d:bc:c5:4f:3f:a6:b0:90:cf:c3:7d:76:a0:92: 9d:f8:18:cd:71:df:b0:af:7e:06:25:4d:81:2b:bd:88:73:87: 84:63:a8:ed:d8:21:4d:ff:71:37:77:c8:d4:18:ad:60:79:67: b8:f4:54:89:b1:15:b4:8b:91:8d:5a:59:1d:81:66:19:71:cc: 68:28:60:1e:a9:3c:64:eb:e9:e4:94:17:a1:8c:5d:20:3b:c0: cd:0b:7b:8e:e0:77:dc:3d:8a:05:cd:17:07:e9:11:31:17:3f: fe:39:45:b6:14:c7:25:e7:27:03:9a:eb:7c:50:c4:be:0b:6a: f8:6f:e2:f3:76:55:ac:89:ef:e9:eb:e5:fe:4e:01:78:8b:0a: e9:0b:bf:68:b1:b3:17:cb:d0:e1:c0:ca:f1:98:6f:d8:e6:70: 3c:e5:f6:65:58:52:8f:47:3b:dc:ed:ce:be:8b:2e:10:d4:b9: 83:72:d1:43:f8:63:ef:3e:19:70:98:c3:62:a1:ca:45:c9:bc: 40:05:57:03:6c:ea:c1:e1:83:fc:9a:56:72:21:4d:86:c5:68: 2d:09:8c:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeri52DobVgFKM9UF6a1REDbwHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA4MjIyMDI3MTJaFw0yNTA4MjUyMzU5MTJaMDMxMTAvBgNV BAMTKEQxMUYwRDhDN0RDQ0U2NTRDNzgyN0FBNzI5M0E4ODVFMjk5NUQ0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JTpOall25FZaXgdguIUuy59J lPDSsOSPcAatC8FupuQv+VnH3NENr6P14OPDQNIMlHYW8jZqVVVYiuNRE9LuTBev gNlwg/OWNu6r1bkQhPcEfwQjOQjBBfX4yz8besqC6LnqbB2mO3Abg0sRg4qupUjZ baQ9+l5d/pSlagGDpxcohA764u3S6HgKhP6wSatogCX4iQxHLfGH+ptggaotZ0jB unnoTRNMOVKeknIiFxTO1IO+wKsR86pWmIO0yC1XNzECw0rSzzmnjEbnqa34v6qC PZNw1c730BGqDX4CzBhISKBxXF659HitigNxcxRcQo8jdMjt1s1HbwFmJXaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0R8NjH3M5lTHgnqnKTqIXimV1IcwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgqaKJ78qoXr0HNeC142ObgPS3lAjUP3Z3T Jeumx0rHTmZiFXYgO0cdvMVPP6awkM/DfXagkp34GM1x37CvfgYlTYErvYhzh4Rj qO3YIU3/cTd3yNQYrWB5Z7j0VImxFbSLkY1aWR2BZhlxzGgoYB6pPGTr6eSUF6GM XSA7wM0Le47gd9w9igXNFwfpETEXP/45RbYUxyXnJwOa63xQxL4Lavhv4vN2VayJ 7+nr5f5OAXiLCukLv2ixsxfL0OHAyvGYb9jmcDzl9mVYUo9HO9ztzr6LLhDUuYNy 0UP4Y+8+GXCYw2KhykXJvEAFVwNs6sHhg/yaVnIhTYbFaC0JjHw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:25:11 2025 by rpki-client