$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: XFncpXh201ToNnh2ZdsUAGhq8DekIY9bF7jXX2fckQU= Subject key identifier: FF:0D:5B:14:55:D9:78:2F:DD:0E:4C:E7:96:D6:21:54:68:B2:3C:37 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 7D1232DAD7A18E53DE59F2862D7FBB22FD53713B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: E4 Signing time: Sat 23 Aug 2025 04:21:02 +0000 Manifest this update: Sat 23 Aug 2025 04:16:02 +0000 Manifest next update: Tue 26 Aug 2025 05:11:02 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 4: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: Ni99FfqNA8HSIZdfR+3SWb6IzjP5qR91uPcZooFXAMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:32:da:d7:a1:8e:53:de:59:f2:86:2d:7f:bb:22:fd:53:71:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Aug 23 04:16:02 2025 GMT Not After : Aug 26 05:11:02 2025 GMT Subject: CN=FF0D5B1455D9782FDD0E4CE796D6215468B23C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dd:12:43:ce:c0:b2:07:bc:19:c1:f3:ec:81: 80:5d:b0:6e:03:95:32:34:f7:e0:c8:a6:3a:ce:9e: c2:36:96:e8:ba:5d:b9:ed:95:b2:47:05:a6:0e:37: f0:8f:41:6b:f4:39:5c:cd:f4:7f:df:78:58:80:a7: 5f:2c:4a:a3:55:53:82:3f:47:af:8f:82:72:df:6f: af:4c:27:fe:86:bd:03:03:db:e7:6a:b1:34:68:7b: 76:b8:65:78:21:dc:e1:03:7f:dc:43:05:43:2d:b4: bd:e9:9a:44:92:9b:52:07:30:9c:35:43:6f:1f:04: 5a:19:92:4c:2d:0a:5d:88:cb:36:70:9c:35:7a:f3: 09:4c:c8:af:d1:e4:57:96:a0:08:ee:25:cd:25:45: b2:1c:82:4b:90:52:16:2c:48:2e:b4:90:97:db:01: 25:f7:72:9f:90:4f:b8:83:ea:24:0b:d7:9c:c6:a0: 5f:16:65:ef:ef:a4:51:da:d6:09:e6:74:82:77:11: 5d:6b:e2:69:f9:4d:0e:37:b5:b3:a4:32:1b:3a:6a: cb:ce:8c:d6:bc:eb:3f:15:44:36:a1:e6:da:dd:c6: 0f:ee:f6:72:21:90:9f:51:7d:de:20:b9:58:69:e0: c5:65:d9:84:78:0d:75:46:be:ca:aa:34:c1:33:3c: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0D:5B:14:55:D9:78:2F:DD:0E:4C:E7:96:D6:21:54:68:B2:3C:37 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:27:56:85:da:d1:a2:87:21:75:78:d3:8d:e3:c4:44:03:2d: 7a:72:6c:ff:01:a9:4d:48:26:3e:1d:e0:ac:40:9d:df:78:d2: 8f:ac:63:b7:e5:26:03:5c:fa:5d:47:b4:8e:94:87:3b:f8:8e: 13:0a:4b:e7:7a:7c:5f:6b:b7:06:47:87:19:fb:f4:ec:08:62: aa:b3:a9:c5:b5:75:6d:59:27:ff:c3:dc:10:51:d8:9f:44:11: 13:ff:f2:da:d7:06:09:e6:cb:79:57:18:a5:89:cb:76:ff:e2: b6:db:2c:a0:b2:c4:78:be:21:8f:85:0c:ad:61:5e:5f:cc:0a: 5f:a4:71:4f:b9:24:55:48:31:6b:39:91:95:7d:19:c2:57:55: 10:6a:09:b9:87:e5:17:c3:55:f5:0f:7f:0e:60:44:0d:3e:cf: db:0f:6c:b7:70:f6:39:f1:7e:57:e9:a5:3e:3b:8c:65:d5:53: 82:24:b4:57:5b:a6:ee:b3:59:40:7d:02:94:a2:36:0e:01:f6: 44:81:d7:15:1e:ff:a4:6e:70:43:3d:a9:c2:19:39:75:c8:e8: b8:f8:47:cb:4b:d1:d2:a4:22:97:47:b7:3d:66:51:73:ab:fa: 9b:df:60:f6:d7:b9:99:78:44:35:b7:83:6e:63:cd:b5:59:23: bc:0f:79:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRIy2tehjlPeWfKGLX+7Iv1TcTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA4MjMwNDE2MDJaFw0yNTA4MjYwNTExMDJaMDMxMTAvBgNV BAMTKEZGMEQ1QjE0NTVEOTc4MkZERDBFNENFNzk2RDYyMTU0NjhCMjNDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu3RJDzsCyB7wZwfPsgYBdsG4D lTI09+DIpjrOnsI2lui6XbntlbJHBaYON/CPQWv0OVzN9H/feFiAp18sSqNVU4I/ R6+PgnLfb69MJ/6GvQMD2+dqsTRoe3a4ZXgh3OEDf9xDBUMttL3pmkSSm1IHMJw1 Q28fBFoZkkwtCl2IyzZwnDV68wlMyK/R5FeWoAjuJc0lRbIcgkuQUhYsSC60kJfb ASX3cp+QT7iD6iQL15zGoF8WZe/vpFHa1gnmdIJ3EV1r4mn5TQ43tbOkMhs6asvO jNa86z8VRDah5trdxg/u9nIhkJ9Rfd4guVhp4MVl2YR4DXVGvsqqNMEzPPlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/w1bFFXZeC/dDkznltYhVGiyPDcwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgnVoXa0aKHIXV4043jxEQDLXpybP8BqU1I Jj4d4KxAnd940o+sY7flJgNc+l1HtI6Uhzv4jhMKS+d6fF9rtwZHhxn79OwIYqqz qcW1dW1ZJ//D3BBR2J9EERP/8trXBgnmy3lXGKWJy3b/4rbbLKCyxHi+IY+FDK1h Xl/MCl+kcU+5JFVIMWs5kZV9GcJXVRBqCbmH5RfDVfUPfw5gRA0+z9sPbLdw9jnx flfppT47jGXVU4IktFdbpu6zWUB9ApSiNg4B9kSB1xUe/6RucEM9qcIZOXXI6Lj4 R8tL0dKkIpdHtz1mUXOr+pvfYPbXuZl4RDW3g25jzbVZI7wPecA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:36:02 2025 by rpki-client