$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: NuFbgy0VGxnDFPG8hS2YGVFrsyWLvcHLVTj/viiNC1U= Subject key identifier: BC:17:0F:42:67:92:62:B4:CF:E5:97:EE:AE:D1:5D:96:D5:A4:98:2D Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 603CA98F6FD5513B4BB2DC10B34045974418B47D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 20:30:57 +0000 Manifest this update: Thu 21 Aug 2025 20:25:57 +0000 Manifest next update: Sun 24 Aug 2025 22:28:57 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: dJHRUwI15xTxvYuQsNExQY1yX73vqYlNURl1UFU8aRo=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3c:a9:8f:6f:d5:51:3b:4b:b2:dc:10:b3:40:45:97:44:18:b4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Aug 21 20:25:57 2025 GMT Not After : Aug 24 22:28:57 2025 GMT Subject: CN=BC170F42679262B4CFE597EEAED15D96D5A4982D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:85:1d:1c:0a:31:1b:be:e4:3c:e3:fc:93: 94:80:df:b1:27:38:41:98:3a:cc:3a:eb:fb:59:0f: 8f:aa:99:76:93:ee:df:46:b7:3a:49:9f:a2:2d:bb: f9:53:5e:6c:41:19:e6:d2:7d:60:6e:d6:ec:fb:41: 9c:7b:17:5a:86:7b:13:74:2f:8f:e4:53:a8:b9:8f: 23:ec:bf:f3:28:fa:d8:d0:3d:b3:9b:fa:48:1f:83: 4a:45:1f:1b:a1:86:30:52:e3:1a:bb:d7:d8:42:ab: 42:ef:fc:bd:5b:80:b3:21:5d:d0:66:db:ef:7e:2a: 3c:2f:24:c5:06:43:81:80:fc:9e:75:5a:8f:df:04: a1:c0:56:ce:04:cb:ab:d5:fe:69:ac:c3:ce:36:f1: da:0a:01:f0:60:0e:c2:21:6a:cb:0c:29:9c:82:0f: 0b:38:7d:3e:6c:c5:d5:4c:8b:56:08:e5:10:69:bb: 51:ac:9f:1f:50:32:88:66:10:19:cb:e3:4c:e4:db: de:24:e8:96:23:40:96:32:e4:15:bd:fa:ad:92:2a: d9:ef:92:52:d5:ec:77:2f:f2:61:7e:91:d9:8f:c1: c9:45:0d:a8:be:60:10:d1:b7:04:f5:20:73:5e:48: e3:4d:27:09:66:f0:75:99:03:e8:d3:fc:64:e0:8e: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:0F:42:67:92:62:B4:CF:E5:97:EE:AE:D1:5D:96:D5:A4:98:2D X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:54:2e:15:0c:53:94:cd:22:37:3d:d8:3d:5f:1a:f6:9b: bc:30:9a:4b:09:cf:94:e0:a1:51:89:f8:d9:c9:0e:9f:20:d5: 20:97:2b:a3:39:52:ea:75:e2:e8:37:cd:b3:99:25:81:6c:60: 37:d1:1b:e4:df:ed:ec:f0:c5:63:93:5b:ae:e2:16:d7:7b:4e: 3c:43:98:b2:ef:08:3e:07:6c:a7:6c:c1:57:a2:00:ea:a9:08: bd:09:cc:27:ff:d6:e8:5d:3d:4b:5f:dc:64:03:2e:6f:34:fd: 25:8b:13:9a:35:40:49:26:c4:2b:24:f1:02:6b:de:14:f2:c0: 24:b9:01:56:22:36:8e:54:9b:12:a1:16:8e:99:62:49:7a:05: 62:84:16:d4:be:98:78:b4:33:78:e2:e9:e7:c5:9c:9f:3d:82: 1a:da:3e:49:86:89:33:8f:3c:b7:21:4d:fb:2c:67:cc:a2:19: ba:51:e0:1a:79:88:9c:25:f9:87:c8:61:58:87:ee:07:11:57: ac:97:97:48:a0:44:e3:93:b1:7b:07:2a:6f:ea:a3:94:80:f7: c9:79:14:f3:d1:d8:a1:7d:6e:c9:d4:0d:7f:cc:30:b4:d2:bd: 5a:c1:53:1f:21:8c:3e:cd:2b:a5:41:e4:53:6d:0f:23:0e:0b: 58:13:86:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDypj2/VUTtLstwQs0BFl0QYtH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA4MjEyMDI1NTdaFw0yNTA4MjQyMjI4NTdaMDMxMTAvBgNV BAMTKEJDMTcwRjQyNjc5MjYyQjRDRkU1OTdFRUFFRDE1RDk2RDVBNDk4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWYUdHAoxG77kPOP8k5SA37En OEGYOsw66/tZD4+qmXaT7t9GtzpJn6Itu/lTXmxBGebSfWBu1uz7QZx7F1qGexN0 L4/kU6i5jyPsv/Mo+tjQPbOb+kgfg0pFHxuhhjBS4xq719hCq0Lv/L1bgLMhXdBm 2+9+KjwvJMUGQ4GA/J51Wo/fBKHAVs4Ey6vV/mmsw8428doKAfBgDsIhassMKZyC Dws4fT5sxdVMi1YI5RBpu1Gsnx9QMohmEBnL40zk294k6JYjQJYy5BW9+q2SKtnv klLV7Hcv8mF+kdmPwclFDai+YBDRtwT1IHNeSONNJwlm8HWZA+jT/GTgjndpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvBcPQmeSYrTP5ZfurtFdltWkmC0wHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuvVC4VDFOUzSI3Pdg9Xxr2m7wwmksJz5Tg oVGJ+NnJDp8g1SCXK6M5Uup14ug3zbOZJYFsYDfRG+Tf7ezwxWOTW67iFtd7TjxD mLLvCD4HbKdswVeiAOqpCL0JzCf/1uhdPUtf3GQDLm80/SWLE5o1QEkmxCsk8QJr 3hTywCS5AVYiNo5UmxKhFo6ZYkl6BWKEFtS+mHi0M3ji6efFnJ89ghraPkmGiTOP PLchTfssZ8yiGbpR4Bp5iJwl+YfIYViH7gcRV6yXl0igROOTsXsHKm/qo5SA98l5 FPPR2KF9bsnUDX/MMLTSvVrBUx8hjD7NK6VB5FNtDyMOC1gThgw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:21 2025 by rpki-client