$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: EY/iPtiualE30ByNA9ZjFtgjjmqGH2SnoO+ldipKbas= Subject key identifier: F9:CA:C3:E5:2C:5F:A3:28:E5:54:1C:E8:28:CE:8A:98:C6:19:66:BC Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 20C5E319FD543E5889DC794B5F64AA7F2769897A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 19:10:53 +0000 Manifest this update: Sun 19 Oct 2025 19:05:53 +0000 Manifest next update: Wed 22 Oct 2025 23:08:53 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 2: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: ua8sIMKvDK8cQjQwnSeaSc3fa18aCmM9gZsP8h0gcow=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c5:e3:19:fd:54:3e:58:89:dc:79:4b:5f:64:aa:7f:27:69:89:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Oct 19 19:05:53 2025 GMT Not After : Oct 22 23:08:53 2025 GMT Subject: CN=F9CAC3E52C5FA328E5541CE828CE8A98C61966BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:3f:79:11:48:44:9c:53:d4:26:cc:fc:7b: 2a:f2:aa:6b:04:b9:9c:d8:02:a7:28:93:c2:b1:ba: d4:98:14:04:ec:94:a4:6b:f1:4b:2d:c5:9e:8b:98: 02:03:1a:04:46:b4:de:6b:fc:51:07:e0:d1:b0:af: 2e:8b:08:84:87:e9:1d:a3:c1:44:b5:ae:86:da:23: cd:25:fd:f3:6b:4a:05:dc:0e:6d:d4:46:44:f8:70: cc:5a:f7:22:f8:43:76:00:29:e5:79:e5:b2:4c:5c: 68:9a:54:72:ac:7b:9f:96:35:0f:8f:6d:a3:5e:cc: 3f:0f:8c:16:e5:68:ad:53:5f:2b:33:73:ac:95:60: 42:c7:07:b6:5d:d6:43:16:bd:20:42:e4:19:68:ee: 9e:3e:6e:29:5b:58:9f:1c:75:58:4f:9f:aa:02:f4: a0:ff:2a:b0:66:e6:70:15:b2:2f:1a:ca:cf:79:74: 50:c3:0b:bd:cb:d5:c1:6f:07:d1:f2:4c:8e:8a:9c: 81:ee:fe:12:f1:4c:84:f8:51:ea:4a:0c:08:2f:17: aa:2e:ed:54:3d:2e:0f:a5:3c:2f:bd:8a:92:20:04: c7:02:4f:6a:58:05:08:be:7d:b2:f7:f4:06:7b:3f: 25:51:9f:22:65:89:28:02:0e:35:3f:d4:ee:4c:8a: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:C3:E5:2C:5F:A3:28:E5:54:1C:E8:28:CE:8A:98:C6:19:66:BC X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bb:40:45:43:3e:e6:ec:f3:0a:9c:e7:c3:97:b1:56:a1:9a: 6e:06:c1:90:5b:9c:16:6d:8c:90:91:fe:f7:73:f5:c7:b1:63: db:d3:f5:63:74:e5:bb:d1:ec:92:52:0c:f7:37:91:4b:31:b5: 40:9a:0f:bf:7c:c7:e4:f7:99:48:87:ab:d5:19:e8:66:86:31: 61:e7:8f:9a:06:fe:f7:40:89:c9:ba:6a:10:d8:7c:e9:7c:bf: 42:56:85:79:49:38:09:91:e7:f5:b0:02:27:c7:02:f1:b5:41: c2:2a:35:6c:c2:2f:ae:b6:2b:67:d0:8f:f4:ba:a9:98:02:ad: 76:ef:ad:6c:29:ba:ac:f4:a8:4c:88:65:4c:61:5f:b1:cb:4b: 31:84:04:9d:e7:c0:a2:e0:f9:5f:70:e9:87:9d:ad:4c:c9:27: 4e:84:76:5c:d6:24:82:61:b6:12:64:f9:e3:10:ad:1b:fd:74: 18:25:4e:a1:07:06:6b:25:06:a6:c0:70:74:60:cb:df:9d:9c: 41:cd:4a:54:63:56:dd:27:37:53:a7:ed:6c:c3:42:97:9b:01: d3:44:a1:6f:3c:75:0f:ec:89:7a:71:58:ea:80:cd:6b:e2:e5: eb:ec:5e:1b:b6:60:19:ec:6f:7b:9e:3c:b1:7a:3c:03:cc:4e: 64:62:f8:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMXjGf1UPliJ3HlLX2SqfydpiXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTEwMTkxOTA1NTNaFw0yNTEwMjIyMzA4NTNaMDMxMTAvBgNV BAMTKEY5Q0FDM0U1MkM1RkEzMjhFNTU0MUNFODI4Q0U4QTk4QzYxOTY2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXj95EUhEnFPUJsz8eyryqmsE uZzYAqcok8KxutSYFATslKRr8UstxZ6LmAIDGgRGtN5r/FEH4NGwry6LCISH6R2j wUS1robaI80l/fNrSgXcDm3URkT4cMxa9yL4Q3YAKeV55bJMXGiaVHKse5+WNQ+P baNezD8PjBblaK1TXyszc6yVYELHB7Zd1kMWvSBC5Blo7p4+bilbWJ8cdVhPn6oC 9KD/KrBm5nAVsi8ays95dFDDC73L1cFvB9HyTI6KnIHu/hLxTIT4UepKDAgvF6ou 7VQ9Lg+lPC+9ipIgBMcCT2pYBQi+fbL39AZ7PyVRnyJliSgCDjU/1O5Mir9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+crD5SxfoyjlVBzoKM6KmMYZZrwwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC7QEVDPubs8wqc58OXsVahmm4GwZBbnBZt jJCR/vdz9cexY9vT9WN05bvR7JJSDPc3kUsxtUCaD798x+T3mUiHq9UZ6GaGMWHn j5oG/vdAicm6ahDYfOl8v0JWhXlJOAmR5/WwAifHAvG1QcIqNWzCL662K2fQj/S6 qZgCrXbvrWwpuqz0qEyIZUxhX7HLSzGEBJ3nwKLg+V9w6YedrUzJJ06EdlzWJIJh thJk+eMQrRv9dBglTqEHBmslBqbAcHRgy9+dnEHNSlRjVt0nN1On7WzDQpebAdNE oW88dQ/siXpxWOqAzWvi5evsXhu2YBnsb3uePLF6PAPMTmRi+D4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:27 2025 by rpki-client