$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: +Bmq26bm7BISZ05X1s0WZxgNGZF5yROb9evgxhIhgtU= Subject key identifier: 0D:88:E8:B4:CD:21:91:EE:A9:C4:0F:57:D8:E6:8F:60:41:88:8E:FC Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 459249AC0EEE5A97B659C82F0032DC4D2BC08B4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: CD Signing time: Thu 21 Aug 2025 23:50:56 +0000 Manifest this update: Thu 21 Aug 2025 23:45:56 +0000 Manifest next update: Mon 25 Aug 2025 10:33:56 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: 9FAv/5Xr9RnCrDZRA3CXnHdHeXe5ZBrL9EXpRmrZmvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:92:49:ac:0e:ee:5a:97:b6:59:c8:2f:00:32:dc:4d:2b:c0:8b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Aug 21 23:45:56 2025 GMT Not After : Aug 25 10:33:56 2025 GMT Subject: CN=0D88E8B4CD2191EEA9C40F57D8E68F6041888EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:44:91:70:58:cf:a6:3d:03:c3:8a:94:d9: 76:8e:8c:f7:4c:55:53:62:3c:79:00:23:6c:e8:e6: 26:ba:93:f6:79:ec:cf:27:b1:fd:d6:5e:38:41:b3: 59:37:07:e7:2b:5c:22:b6:56:9b:2f:2c:22:ff:ae: 88:50:15:67:32:d3:ef:fd:50:7e:99:38:6b:88:ed: 0c:2d:8c:4d:02:90:96:9a:ac:ed:77:69:dd:f5:90: f2:42:ae:5a:de:4c:7f:03:02:f5:fb:b5:90:25:f2: 8c:fd:b1:61:d9:77:9a:f5:e7:ff:3a:42:7e:6c:2f: f2:6d:43:4f:3d:8b:a1:cd:87:b4:ef:37:ba:82:67: ba:76:c0:37:64:8c:c2:53:fa:31:03:17:8a:86:63: cc:63:6d:7f:f6:bc:ff:cb:66:26:85:42:31:8b:38: 41:c0:89:23:3a:d3:54:25:c2:53:c0:dd:35:45:ad: 2b:ce:95:cc:3f:5e:b6:9d:d1:be:32:ff:62:38:67: d9:ff:9a:df:51:b8:53:f3:2a:b7:a1:d2:1f:03:7b: e6:68:07:10:58:26:11:68:de:f8:8a:34:14:6f:ab: 22:37:eb:a5:c3:3a:d0:f8:70:f4:ab:2f:8f:75:ec: 66:90:9d:bb:81:f9:03:2b:6b:77:02:eb:56:eb:ce: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:88:E8:B4:CD:21:91:EE:A9:C4:0F:57:D8:E6:8F:60:41:88:8E:FC X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:5d:4e:94:2c:a4:e2:87:b1:e2:ae:0d:96:7b:14:ee:dd:e2: 01:be:fc:0f:33:81:15:b8:90:89:24:a3:89:ef:fa:ea:8e:40: 80:9e:7b:d7:c3:a7:f6:21:79:d3:4a:9d:8d:6d:62:36:f9:e7: f7:5c:b1:12:32:a8:65:27:4a:48:25:15:80:b4:73:43:53:09: 1d:c9:60:62:91:5e:d2:d1:9a:bb:51:ac:2a:98:22:86:95:8d: 7e:2c:78:5e:f2:bc:a8:e4:ab:7e:17:1d:17:9d:e5:75:ad:96: 86:45:89:48:fd:01:48:f2:f1:96:d8:aa:7e:fd:8f:df:f6:24: 38:17:e2:4d:b8:b2:2c:fa:1b:82:a5:20:f5:39:7c:56:8d:b4: a3:a3:d0:1f:f2:de:19:6f:6b:8f:a6:3f:2d:ca:cd:30:3e:76: c1:b4:8e:03:d7:a8:ce:3d:e3:71:56:e4:c8:b0:02:88:cd:9c: 8d:b1:30:c4:5a:44:59:f5:ff:0e:7f:fc:dc:6b:18:bb:d7:e3: c7:95:37:f1:9e:fe:2e:07:e5:dc:88:c9:e2:24:3c:ef:1f:48: 6e:88:fc:b9:17:43:34:0a:f4:ad:6d:32:5c:f1:5d:29:ee:52: c0:fe:53:a3:bf:60:da:bd:f3:d5:bf:9f:31:45:3c:6f:46:91: 5a:2c:ef:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZJJrA7uWpe2WcgvADLcTSvAi04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTA4MjEyMzQ1NTZaFw0yNTA4MjUxMDMzNTZaMDMxMTAvBgNV BAMTKDBEODhFOEI0Q0QyMTkxRUVBOUM0MEY1N0Q4RTY4RjYwNDE4ODhFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxA0SRcFjPpj0Dw4qU2XaOjPdM VVNiPHkAI2zo5ia6k/Z57M8nsf3WXjhBs1k3B+crXCK2VpsvLCL/rohQFWcy0+/9 UH6ZOGuI7QwtjE0CkJaarO13ad31kPJCrlreTH8DAvX7tZAl8oz9sWHZd5r15/86 Qn5sL/JtQ089i6HNh7TvN7qCZ7p2wDdkjMJT+jEDF4qGY8xjbX/2vP/LZiaFQjGL OEHAiSM601QlwlPA3TVFrSvOlcw/Xrad0b4y/2I4Z9n/mt9RuFPzKreh0h8De+Zo BxBYJhFo3viKNBRvqyI366XDOtD4cPSrL4917GaQnbuB+QMra3cC61brznyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYjotM0hke6pxA9X2OaPYEGIjvwwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxdTpQspOKHseKuDZZ7FO7d4gG+/A8zgRW4 kIkko4nv+uqOQICee9fDp/YhedNKnY1tYjb55/dcsRIyqGUnSkglFYC0c0NTCR3J YGKRXtLRmrtRrCqYIoaVjX4seF7yvKjkq34XHRed5XWtloZFiUj9AUjy8ZbYqn79 j9/2JDgX4k24siz6G4KlIPU5fFaNtKOj0B/y3hlva4+mPy3KzTA+dsG0jgPXqM49 43FW5MiwAojNnI2xMMRaRFn1/w5//NxrGLvX48eVN/Ge/i4H5dyIyeIkPO8fSG6I /LkXQzQK9K1tMlzxXSnuUsD+U6O/YNq989W/nzFFPG9GkVos7yo= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:38 2025 by rpki-client