$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: Nutu1Q93mHtZPiY0yPKxUwM/puASjQxdM5DMNMPNc9M= Subject key identifier: 19:8E:E3:76:DF:8F:AE:C7:9A:1B:7B:CF:E7:0B:B8:14:C8:9F:C1:20 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 5AC5CA07C9A67F52FF1FDDF7902606275501FB3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 08:30:51 +0000 Manifest this update: Sun 29 Jun 2025 08:25:51 +0000 Manifest next update: Wed 02 Jul 2025 09:10:51 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: P3BXvb/cH7DEvdmfOnU15IcNifloAWh2HaGKAEzIhTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c5:ca:07:c9:a6:7f:52:ff:1f:dd:f7:90:26:06:27:55:01:fb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Jun 29 08:25:51 2025 GMT Not After : Jul 2 09:10:51 2025 GMT Subject: CN=198EE376DF8FAEC79A1B7BCFE70BB814C89FC120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:59:e5:8c:d7:33:87:cc:90:4e:73:5c:96: 4d:c1:75:ab:85:6a:82:73:b2:aa:6f:c5:de:d1:0a: 0b:68:65:b6:14:b5:ea:8d:a3:20:8d:21:61:69:0a: 82:98:6e:c8:2e:08:51:c5:a1:b4:b8:8f:9b:25:8e: 66:28:64:79:7b:d9:24:75:64:dc:97:37:62:39:b2: 5e:6b:33:62:e2:3d:5f:e4:fd:32:b8:24:30:c2:e3: 18:30:c2:73:5e:f5:53:1f:7d:48:17:fd:44:d5:ef: 96:b7:85:db:d1:6e:d2:f1:23:7a:4a:90:93:e2:c2: f6:b0:64:31:cf:58:35:96:df:cc:51:65:63:72:04: b9:54:20:90:05:fd:75:13:ed:fc:e0:cb:6e:dd:41: 5a:02:5d:74:bd:ce:a1:67:e1:07:51:9e:e6:a8:20: 69:aa:53:02:5f:1d:a8:4f:76:de:7e:77:4f:23:73: ab:c7:14:fc:10:f6:cc:91:a2:81:22:0c:70:7a:26: 99:92:62:9d:9f:59:6b:cc:ec:b6:14:60:27:ec:6a: 50:73:31:ce:40:46:85:b2:db:80:21:86:c0:a3:79: dd:c1:61:03:85:af:73:38:f1:5c:0a:bb:7e:2a:b1: 9f:86:21:a5:a9:75:1f:cb:b0:9d:12:83:f1:2f:01: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:E3:76:DF:8F:AE:C7:9A:1B:7B:CF:E7:0B:B8:14:C8:9F:C1:20 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d5:97:93:2c:4c:10:25:3f:1f:2a:1d:e3:e5:88:f0:4f:0e: 71:cb:5b:f8:3e:6e:3b:ea:c8:2d:10:2e:e7:bf:ab:36:67:73: ef:39:bb:a7:22:b8:dc:e9:b8:ef:cb:30:ed:f8:fd:8d:10:ee: 25:5a:5d:70:0c:6c:f5:e4:a3:71:1d:30:ed:af:08:15:eb:7a: ff:41:b9:ed:a5:50:9d:f4:44:2a:e3:1e:86:90:81:72:4d:0a: 48:4c:8e:ed:82:8c:5f:48:1c:9c:52:54:42:fd:8e:59:58:57: cd:1d:2f:9f:1a:df:59:01:2a:ef:a7:bf:32:ca:27:ab:fa:e0: 77:0f:be:a2:08:dc:15:0f:9b:c3:91:91:2c:37:06:cc:ec:40: 53:bb:c6:35:8a:88:bb:e2:18:85:34:80:81:86:d4:bc:ee:98: 2b:25:19:f4:e2:a9:c1:72:15:b8:c1:62:03:6e:24:bb:3f:8e: 59:4c:e1:2a:b7:8c:cb:bb:25:ad:0a:e6:29:98:22:c7:de:3f: ac:e7:04:cf:c8:61:95:43:46:83:a3:18:a9:1c:a9:f0:51:68: da:44:f3:1f:cb:87:01:25:0b:8c:40:79:7f:d2:9c:d9:f3:f9: 2a:c1:ed:81:60:c3:8b:e4:bc:de:5a:a2:6c:ac:a2:cc:f3:fd: db:af:69:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsXKB8mmf1L/H933kCYGJ1UB+z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA2MjkwODI1NTFaFw0yNTA3MDIwOTEwNTFaMDMxMTAvBgNV BAMTKDE5OEVFMzc2REY4RkFFQzc5QTFCN0JDRkU3MEJCODE0Qzg5RkMxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuVnljNczh8yQTnNclk3BdauF aoJzsqpvxd7RCgtoZbYUteqNoyCNIWFpCoKYbsguCFHFobS4j5sljmYoZHl72SR1 ZNyXN2I5sl5rM2LiPV/k/TK4JDDC4xgwwnNe9VMffUgX/UTV75a3hdvRbtLxI3pK kJPiwvawZDHPWDWW38xRZWNyBLlUIJAF/XUT7fzgy27dQVoCXXS9zqFn4QdRnuao IGmqUwJfHahPdt5+d08jc6vHFPwQ9syRooEiDHB6JpmSYp2fWWvM7LYUYCfsalBz Mc5ARoWy24AhhsCjed3BYQOFr3M48VwKu34qsZ+GIaWpdR/LsJ0Sg/EvAc93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGY7jdt+PrseaG3vP5wu4FMifwSAwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/Vl5MsTBAlPx8qHePliPBPDnHLW/g+bjvq yC0QLue/qzZnc+85u6ciuNzpuO/LMO34/Y0Q7iVaXXAMbPXko3EdMO2vCBXrev9B ue2lUJ30RCrjHoaQgXJNCkhMju2CjF9IHJxSVEL9jllYV80dL58a31kBKu+nvzLK J6v64HcPvqII3BUPm8ORkSw3BszsQFO7xjWKiLviGIU0gIGG1LzumCslGfTiqcFy FbjBYgNuJLs/jllM4Sq3jMu7Ja0K5imYIsfeP6znBM/IYZVDRoOjGKkcqfBRaNpE 8x/LhwElC4xAeX/SnNnz+SrB7YFgw4vkvN5aomysoszz/duvae0= -----END CERTIFICATE-----Generated at Sun Jun 29 21:39:01 2025 by rpki-client