$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: AvAs4mTjZflTZ+o9oiSLPt+gq5xQZorNfy8quSdoZrY= Subject key identifier: D6:33:A3:74:7C:67:76:F5:11:13:45:60:2B:41:90:25:CF:D5:F3:77 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 1A05A815BCDA4C6997CA5AB603686B2E873BC76C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 028D Signing time: Sat 28 Jun 2025 20:42:14 +0000 Manifest this update: Sat 28 Jun 2025 20:37:14 +0000 Manifest next update: Wed 02 Jul 2025 06:22:14 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: lT2sLuA8qbiMz5fk+rfllQwTNAmB2MpM90Ejr7NR/WY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:05:a8:15:bc:da:4c:69:97:ca:5a:b6:03:68:6b:2e:87:3b:c7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Jun 28 20:37:14 2025 GMT Not After : Jul 2 06:22:14 2025 GMT Subject: CN=D633A3747C6776F5111345602B419025CFD5F377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:b8:bb:d8:ff:68:ac:96:d5:ad:e6:7b:27: 51:5c:16:0c:a4:26:0f:ac:b4:c9:f9:e3:15:c7:5a: 2a:75:85:6b:e8:c5:0f:cf:0a:2b:12:d3:89:9d:21: e1:cc:0b:5c:0e:93:0c:89:b7:f5:c6:c9:99:a0:26: 6e:83:ae:cc:f6:a4:b2:bc:43:25:91:e1:57:4b:80: b0:70:fe:f2:9b:f5:66:24:ba:96:79:a9:ec:47:6f: 77:81:0e:ad:6d:9f:93:4b:b8:cb:ee:ed:f3:52:ee: a7:4d:60:7e:08:21:2f:39:4a:7f:41:39:c5:48:1a: 92:ea:77:22:81:de:53:7b:48:66:75:a3:1d:d5:7c: 01:37:2c:cb:a1:a1:0d:22:99:ea:39:d0:94:c2:15: 46:12:b6:ea:2b:a9:7e:de:87:ef:95:2f:d1:de:3c: 4e:71:b0:c9:14:79:64:ee:87:26:c4:d8:f6:bb:5c: 70:7e:1b:b5:0a:34:b9:a5:32:f6:c5:ed:28:60:5e: ea:72:8c:5f:27:04:2d:06:bb:47:59:0d:cc:52:9b: 0e:51:35:77:cc:a5:f8:3f:1e:c2:1a:d2:f6:ca:ca: 61:05:03:68:e6:a3:df:6f:34:0c:b4:1f:79:0a:1c: ce:1f:84:aa:bc:08:ab:aa:bc:ed:5b:a4:2f:67:e4: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:A3:74:7C:67:76:F5:11:13:45:60:2B:41:90:25:CF:D5:F3:77 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:67:38:0c:d7:01:14:17:10:bf:e7:ce:8d:e9:0b:1d:e1:4c: 31:c2:59:3c:9f:ce:d1:b7:0b:28:f7:3e:5f:c9:57:87:a2:24: 18:e9:7e:f1:d1:17:3e:b6:74:71:7b:3a:bd:a4:d0:49:65:35: 80:ae:f8:e9:ab:92:cd:0e:f1:5e:55:fe:ec:d5:f6:08:e2:bf: db:ae:2b:7f:af:77:3b:ce:f4:d4:97:54:21:e1:b1:07:e4:2f: f1:c0:4c:25:7c:00:f8:bf:47:2f:c5:e5:d7:eb:7e:bf:d4:68: f5:00:44:36:80:f2:9a:bb:aa:97:0c:8c:f9:a7:46:3d:fd:59: bf:51:6d:dd:c5:49:67:70:02:8f:b5:12:71:06:6c:07:d2:a9: ee:84:64:7d:4a:dd:f4:24:c6:e1:a0:ca:c2:7e:9f:51:a0:27: 4d:7d:4e:37:3f:55:e2:b9:d8:c0:f6:b4:cd:88:f4:35:2c:4d: 26:a1:83:20:a7:3b:e8:e7:5d:9b:5c:75:9f:98:32:e0:dd:fe: 53:f9:d7:83:22:78:c5:09:c3:a5:13:7f:20:02:bf:d2:95:eb: eb:8f:79:c0:af:c3:1c:93:c9:95:25:f8:95:ac:74:97:75:a9: 18:31:80:04:2a:1c:f0:22:9c:71:c9:1e:db:af:9d:44:7b:79: 9c:8a:84:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgWoFbzaTGmXylq2A2hrLoc7x2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA2MjgyMDM3MTRaFw0yNTA3MDIwNjIyMTRaMDMxMTAvBgNV BAMTKEQ2MzNBMzc0N0M2Nzc2RjUxMTEzNDU2MDJCNDE5MDI1Q0ZENUYzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIri72P9orJbVreZ7J1FcFgyk Jg+stMn54xXHWip1hWvoxQ/PCisS04mdIeHMC1wOkwyJt/XGyZmgJm6Drsz2pLK8 QyWR4VdLgLBw/vKb9WYkupZ5qexHb3eBDq1tn5NLuMvu7fNS7qdNYH4IIS85Sn9B OcVIGpLqdyKB3lN7SGZ1ox3VfAE3LMuhoQ0imeo50JTCFUYStuorqX7eh++VL9He PE5xsMkUeWTuhybE2Pa7XHB+G7UKNLmlMvbF7ShgXupyjF8nBC0Gu0dZDcxSmw5R NXfMpfg/HsIa0vbKymEFA2jmo99vNAy0H3kKHM4fhKq8CKuqvO1bpC9n5LI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jOjdHxndvURE0VgK0GQJc/V83cwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1nOAzXARQXEL/nzo3pCx3hTDHCWTyfztG3 Cyj3Pl/JV4eiJBjpfvHRFz62dHF7Or2k0EllNYCu+Omrks0O8V5V/uzV9gjiv9uu K3+vdzvO9NSXVCHhsQfkL/HATCV8APi/Ry/F5dfrfr/UaPUARDaA8pq7qpcMjPmn Rj39Wb9Rbd3FSWdwAo+1EnEGbAfSqe6EZH1K3fQkxuGgysJ+n1GgJ019Tjc/VeK5 2MD2tM2I9DUsTSahgyCnO+jnXZtcdZ+YMuDd/lP514MieMUJw6UTfyACv9KV6+uP ecCvwxyTyZUl+JWsdJd1qRgxgAQqHPAinHHJHtuvnUR7eZyKhKo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:39 2025 by rpki-client