$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: pRvS3eANwfhqiNMBorWcZ5SuYhsiwNK7pxK8LHPnvtU= Subject key identifier: 2D:13:2B:21:AD:B8:ED:8E:A7:2D:30:B6:00:6C:60:0E:4C:DA:D0:48 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 7C3D406E04E4E50E5D835BBA393E2C4B4CE8B8F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: FD Signing time: Sat 18 Oct 2025 20:31:05 +0000 Manifest this update: Sat 18 Oct 2025 20:26:05 +0000 Manifest next update: Wed 22 Oct 2025 04:21:05 +0000 Files and hashes: 1: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: eb29NVdoG0/QjST5ZDboHMa7zGPIicimu01IWDwX5a8=) 2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 4: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3d:40:6e:04:e4:e5:0e:5d:83:5b:ba:39:3e:2c:4b:4c:e8:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Oct 18 20:26:05 2025 GMT Not After : Oct 22 04:21:05 2025 GMT Subject: CN=2D132B21ADB8ED8EA72D30B6006C600E4CDAD048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:c4:06:78:c5:23:7a:71:5f:10:4d:3d:34: 14:2b:eb:1b:1e:80:4e:ee:2b:09:73:77:76:3d:6a: ce:03:15:a5:be:0d:72:b1:aa:c1:a8:a2:d6:55:97: af:b4:23:df:f3:7f:89:86:dd:1d:38:09:36:6e:78: e1:f9:61:6b:85:fa:63:8c:12:21:8c:90:00:2e:50: f2:86:0f:90:b1:17:88:d1:16:4f:f5:fc:ab:63:49: f1:a8:d1:91:80:f1:22:f9:7b:93:ad:23:da:5e:46: 8c:6b:dc:0f:8d:16:62:86:1c:5d:af:92:f4:7c:46: e0:41:d2:26:77:b9:22:d4:ac:0c:9d:6a:dc:7f:38: 24:89:9c:39:24:f8:a0:4d:7d:5f:65:bd:29:47:5c: 7f:c5:21:d3:96:0a:35:7e:62:ea:bf:d2:18:df:00: f5:59:d4:2f:6d:d0:29:0f:9c:8c:a7:7d:c8:ff:f9: 6a:c4:04:ce:f4:25:dc:6e:47:77:40:d6:5e:32:1d: ef:65:94:2b:3c:6b:7f:55:4a:82:fb:bb:e5:fe:8e: d8:d9:78:23:81:9d:eb:90:2c:46:76:b3:81:a0:c0: bc:14:42:3d:98:c1:9a:38:61:df:d9:8e:2d:9b:36: 73:0f:82:7e:49:3f:4d:8a:1d:1c:71:6e:55:d0:ca: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:13:2B:21:AD:B8:ED:8E:A7:2D:30:B6:00:6C:60:0E:4C:DA:D0:48 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:cb:ad:68:7e:12:fa:66:a7:33:35:53:20:a3:be:f7:80:03: 53:97:09:d3:1c:9f:b1:79:b6:2e:ef:29:fa:91:e1:de:9e:f6: 3d:94:85:5b:55:24:bd:71:a9:43:8a:08:4c:eb:67:9a:ca:23: 36:d8:08:be:54:df:b9:ce:0c:8c:d4:fd:cc:c1:4e:20:44:00: 52:d6:11:ed:e2:2c:bf:44:39:ea:85:6e:ec:cd:3b:2b:96:ed: 9d:05:78:4a:c5:e5:0e:00:78:77:7c:b0:75:d3:2a:4c:cd:93: ad:d2:f7:cc:60:aa:6c:07:06:e2:8b:9a:8d:ab:9e:5c:c0:cf: ec:18:d8:2b:c9:cc:5e:03:bc:c4:ce:0b:2f:a5:24:d5:8a:f9: 03:24:07:00:14:73:de:2b:66:4a:ae:f8:97:d6:cb:c1:58:5c: 93:07:d8:73:ea:be:c0:29:67:8a:d1:1d:26:af:98:ce:fa:91: 1b:de:28:77:77:74:f2:e0:a0:a0:96:a4:35:9a:2b:d5:0d:3c: c9:90:bb:84:e2:61:7e:cf:b5:95:3a:5d:f2:39:4d:dc:1e:7a: 5b:6d:36:01:34:ef:b5:73:ae:d6:80:11:05:55:6e:5b:bf:6c: b5:9e:c0:33:2a:3d:88:e3:be:08:a9:b4:87:73:6b:34:a2:b9: 0f:79:de:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD1AbgTk5Q5dg1u6OT4sS0zouPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTEwMTgyMDI2MDVaFw0yNTEwMjIwNDIxMDVaMDMxMTAvBgNV BAMTKDJEMTMyQjIxQURCOEVEOEVBNzJEMzBCNjAwNkM2MDBFNENEQUQwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHsQGeMUjenFfEE09NBQr6xse gE7uKwlzd3Y9as4DFaW+DXKxqsGootZVl6+0I9/zf4mG3R04CTZueOH5YWuF+mOM EiGMkAAuUPKGD5CxF4jRFk/1/KtjSfGo0ZGA8SL5e5OtI9peRoxr3A+NFmKGHF2v kvR8RuBB0iZ3uSLUrAydatx/OCSJnDkk+KBNfV9lvSlHXH/FIdOWCjV+Yuq/0hjf APVZ1C9t0CkPnIynfcj/+WrEBM70JdxuR3dA1l4yHe9llCs8a39VSoL7u+X+jtjZ eCOBneuQLEZ2s4GgwLwUQj2YwZo4Yd/Zji2bNnMPgn5JP02KHRxxblXQyjt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRMrIa247Y6nLTC2AGxgDkza0EgwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANfLrWh+EvpmpzM1UyCjvveAA1OXCdMcn7F5 ti7vKfqR4d6e9j2UhVtVJL1xqUOKCEzrZ5rKIzbYCL5U37nODIzU/czBTiBEAFLW Ee3iLL9EOeqFbuzNOyuW7Z0FeErF5Q4AeHd8sHXTKkzNk63S98xgqmwHBuKLmo2r nlzAz+wY2CvJzF4DvMTOCy+lJNWK+QMkBwAUc94rZkqu+JfWy8FYXJMH2HPqvsAp Z4rRHSavmM76kRveKHd3dPLgoKCWpDWaK9UNPMmQu4TiYX7PtZU6XfI5Tdweeltt NgE077VzrtaAEQVVblu/bLWewDMqPYjjvgiptIdzazSiuQ953s0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:34 2025 by rpki-client