$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: FeN4W4Jvz2PtyGIIj0HKlzvoD6Y3Noae4JTsn6udYNY= Subject key identifier: 6C:4F:C0:F7:45:30:F0:19:13:24:CD:68:BA:90:09:B7:8A:D6:A0:D1 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 76325EF55D787167BFE468095314DB3FED8D2E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02BF Signing time: Sun 19 Oct 2025 03:12:05 +0000 Manifest this update: Sun 19 Oct 2025 03:07:05 +0000 Manifest next update: Wed 22 Oct 2025 11:29:05 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: Po4QQichC7NSuzCSzmK/tkbs5G3K30beeuj8FBw2wUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:32:5e:f5:5d:78:71:67:bf:e4:68:09:53:14:db:3f:ed:8d:2e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Oct 19 03:07:05 2025 GMT Not After : Oct 22 11:29:05 2025 GMT Subject: CN=6C4FC0F74530F0191324CD68BA9009B78AD6A0D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:f8:99:71:99:08:ec:65:ee:84:51:4f:26: 11:1f:42:ba:41:4a:f2:b2:e5:36:23:2e:5b:07:1d: a5:06:39:19:c1:ff:87:c1:00:87:c6:27:ba:3f:29: b1:f4:f7:cc:d3:7c:90:4d:4b:65:bf:cb:e6:b0:57: bf:18:12:3b:80:88:ff:64:27:d9:38:12:ae:af:8f: d7:79:ac:09:b2:5d:f0:ad:6a:e0:07:2d:24:f0:c4: 29:fa:0c:fa:52:f3:95:38:3b:a7:3e:e4:f7:49:1a: d5:5e:f5:b3:70:0c:ae:2d:c7:33:e1:dd:9a:9c:bf: e6:b6:cf:dd:70:12:04:48:72:a3:2b:30:ef:28:ad: 61:f4:50:59:b7:cd:27:67:b5:c1:01:a1:c9:e9:b7: b6:a6:60:66:86:2d:57:e6:81:68:e7:f9:df:ec:23: 99:a7:59:0f:93:e0:b9:71:0b:65:12:5a:23:67:87: 68:ca:a9:af:88:97:59:ec:59:ca:78:01:7d:be:62: 11:98:db:37:d9:a6:51:8f:b5:00:80:24:cf:cf:a3: 8b:c3:47:6a:8f:c8:39:c7:db:2a:85:68:30:fd:d3: d8:44:91:c1:5d:92:8c:10:60:a7:40:34:81:42:29: df:03:a4:47:1d:37:31:51:0b:77:7c:88:f5:89:37: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:C0:F7:45:30:F0:19:13:24:CD:68:BA:90:09:B7:8A:D6:A0:D1 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:24:e9:60:1e:ac:ed:5b:db:f2:21:f7:fb:ba:18:88:a8:53: ea:d9:5f:15:9d:73:39:e9:f6:74:79:90:ce:69:fa:36:7e:47: 04:c1:cd:e5:04:a0:52:74:c2:ae:de:d0:51:c7:f0:77:26:48: 87:f7:77:dc:8d:e3:4b:9a:33:2c:48:a9:d8:83:71:e8:87:ac: 98:de:41:87:73:be:1c:d9:ac:6f:be:67:cf:bd:3d:d5:59:5f: a7:d3:f4:c6:5f:ca:32:7e:0c:bd:24:33:b1:f2:80:9e:e4:1e: 1e:e2:05:de:34:27:19:32:a1:98:2a:55:27:ed:68:cc:7e:e8: 20:eb:6c:33:93:4b:c2:40:ab:96:79:a7:0c:6f:93:c0:46:d8: 98:93:ac:c1:20:e4:94:32:33:cb:e1:60:4d:1d:4e:22:06:f6: 62:6e:a8:04:b0:f7:89:32:25:4e:35:32:89:0e:50:15:30:f1: d8:03:51:cc:bb:da:92:7c:65:a2:34:cc:f6:1b:22:05:58:bc: e5:15:c9:bd:34:1d:f4:49:ee:0b:50:27:c0:fc:e6:84:ec:61: 63:76:03:4e:30:3d:d8:18:d9:2c:ac:70:59:c6:33:ae:e4:64: 04:47:08:5f:9f:72:5d:b3:1f:22:14:b1:cf:26:c1:83:e5:6f: bd:2f:86:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjJe9V14cWe/5GgJUxTbP+2NLl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTEwMTkwMzA3MDVaFw0yNTEwMjIxMTI5MDVaMDMxMTAvBgNV BAMTKDZDNEZDMEY3NDUzMEYwMTkxMzI0Q0Q2OEJBOTAwOUI3OEFENkEwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfefiZcZkI7GXuhFFPJhEfQrpB SvKy5TYjLlsHHaUGORnB/4fBAIfGJ7o/KbH098zTfJBNS2W/y+awV78YEjuAiP9k J9k4Eq6vj9d5rAmyXfCtauAHLSTwxCn6DPpS85U4O6c+5PdJGtVe9bNwDK4txzPh 3Zqcv+a2z91wEgRIcqMrMO8orWH0UFm3zSdntcEBocnpt7amYGaGLVfmgWjn+d/s I5mnWQ+T4LlxC2USWiNnh2jKqa+Il1nsWcp4AX2+YhGY2zfZplGPtQCAJM/Po4vD R2qPyDnH2yqFaDD909hEkcFdkowQYKdANIFCKd8DpEcdNzFRC3d8iPWJNyHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbE/A90Uw8BkTJM1oupAJt4rWoNEwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQk6WAerO1b2/Ih9/u6GIioU+rZXxWdcznp 9nR5kM5p+jZ+RwTBzeUEoFJ0wq7e0FHH8HcmSIf3d9yN40uaMyxIqdiDceiHrJje QYdzvhzZrG++Z8+9PdVZX6fT9MZfyjJ+DL0kM7HygJ7kHh7iBd40JxkyoZgqVSft aMx+6CDrbDOTS8JAq5Z5pwxvk8BG2JiTrMEg5JQyM8vhYE0dTiIG9mJuqASw94ky JU41MokOUBUw8dgDUcy72pJ8ZaI0zPYbIgVYvOUVyb00HfRJ7gtQJ8D85oTsYWN2 A04wPdgY2SyscFnGM67kZARHCF+fcl2zHyIUsc8mwYPlb70vhro= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:54 2025 by rpki-client