$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: bOB5ZaHe+ierfiNyz6sS+nWwih4jIgV4pJK+gYPv8TA= Subject key identifier: CD:C6:2A:BF:28:99:49:00:4A:C1:BF:57:89:66:21:EF:86:91:74:CC Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 544FD19E101239AE33BBB57EABF2A82E161DF99A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: B6 Signing time: Mon 12 May 2025 03:41:00 +0000 Manifest this update: Mon 12 May 2025 03:36:00 +0000 Manifest next update: Thu 15 May 2025 13:28:00 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 2: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 3: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: em8yi8OxOIoYrHwLwQlP7uAB9RNZcFm7TudyS0dfbus=) 4: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 05:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4f:d1:9e:10:12:39:ae:33:bb:b5:7e:ab:f2:a8:2e:16:1d:f9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: May 12 03:36:00 2025 GMT Not After : May 15 13:28:00 2025 GMT Subject: CN=CDC62ABF289949004AC1BF57896621EF869174CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:35:cd:a1:7b:5d:75:d5:0a:de:1f:9b:38: f5:27:2f:59:b8:2e:f2:62:96:fa:83:e1:d7:3e:a2: a5:87:79:3a:d0:ec:50:91:ca:5f:cd:dc:64:bf:b2: 33:5f:a4:76:d8:34:23:70:30:83:bd:b4:43:fa:67: c7:46:20:2c:86:76:6b:3a:b0:8f:7a:5b:06:45:81: f9:80:e4:e3:1c:91:a9:ad:e2:84:a2:9c:06:63:3f: d7:6e:cd:ef:9b:78:4b:ff:c8:28:f5:3a:9e:37:f8: f0:ae:42:7b:fe:80:c1:53:47:28:23:17:41:aa:fc: 1f:77:cb:1f:ae:d7:0f:75:d1:38:19:eb:d9:9d:84: a0:f6:54:90:03:e2:48:ce:b2:61:02:b2:be:92:5b: c7:ba:4d:5b:f2:76:81:52:25:82:c3:65:4a:b7:90: 0f:11:37:19:f4:88:e7:ca:08:4a:bf:50:1b:21:c3: e4:d3:5e:91:6d:b0:76:eb:c5:76:7e:c9:ee:5c:00: 1a:d3:d0:75:3e:bc:a0:30:74:6f:d3:63:cf:10:b6: 12:7a:9a:8a:b5:9d:2f:b4:64:f4:71:12:92:dd:96: e4:af:0b:e8:9f:f9:d7:98:7f:dd:ed:ff:de:95:82: 8b:e1:6d:aa:4b:2e:57:d9:cf:88:1b:0d:0b:21:58: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C6:2A:BF:28:99:49:00:4A:C1:BF:57:89:66:21:EF:86:91:74:CC X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cc:4b:01:35:31:86:93:e4:0e:5b:19:8e:85:36:13:c8:af: 2b:39:33:2b:4c:1f:dc:82:e7:67:96:ce:59:e6:20:d1:eb:9b: 82:32:0b:ab:be:91:10:df:0e:fb:e4:02:49:8b:0d:b8:bb:2a: 6c:7a:9d:c8:af:16:8d:e2:7b:2d:79:bd:59:ed:d5:26:7f:e7: 5c:22:90:a0:a5:d8:21:f4:29:a8:ae:17:52:08:c5:77:f8:25: 47:70:0d:39:fb:a8:8a:11:60:f5:82:05:75:87:5b:aa:32:7f: fa:df:98:15:a5:13:34:c8:8b:dc:eb:c3:68:1b:1e:79:d4:31: ee:8b:c8:c0:9d:d2:60:65:7f:85:96:f1:80:e5:a4:4a:eb:53: 97:e9:87:4e:c1:12:3f:11:9e:74:ea:b8:50:e2:e6:89:ad:56: 78:b8:51:c9:67:ca:2e:e7:54:fd:7a:bf:76:74:da:6c:8e:f6: 85:9f:91:8d:58:c3:90:4c:92:ed:58:b5:97:0c:32:a3:07:36: 5b:06:e7:42:0d:27:5b:41:18:38:43:60:19:77:3c:58:b0:a4: 76:b2:2b:26:68:eb:7f:28:82:48:4a:a6:73:94:a2:d3:c4:e4: ed:79:ca:7c:23:3f:b0:42:a0:45:44:78:25:c9:be:c7:1e:d3: 15:8d:8f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVE/RnhASOa4zu7V+q/KoLhYd+ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA1MTIwMzM2MDBaFw0yNTA1MTUxMzI4MDBaMDMxMTAvBgNV BAMTKENEQzYyQUJGMjg5OTQ5MDA0QUMxQkY1Nzg5NjYyMUVGODY5MTc0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfADXNoXtdddUK3h+bOPUnL1m4 LvJilvqD4dc+oqWHeTrQ7FCRyl/N3GS/sjNfpHbYNCNwMIO9tEP6Z8dGICyGdms6 sI96WwZFgfmA5OMckamt4oSinAZjP9duze+beEv/yCj1Op43+PCuQnv+gMFTRygj F0Gq/B93yx+u1w910TgZ69mdhKD2VJAD4kjOsmECsr6SW8e6TVvydoFSJYLDZUq3 kA8RNxn0iOfKCEq/UBshw+TTXpFtsHbrxXZ+ye5cABrT0HU+vKAwdG/TY88QthJ6 moq1nS+0ZPRxEpLdluSvC+if+deYf93t/96VgovhbapLLlfZz4gbDQshWPh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcYqvyiZSQBKwb9XiWYh74aRdMwwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHMSwE1MYaT5A5bGY6FNhPIrys5MytMH9yC 52eWzlnmINHrm4IyC6u+kRDfDvvkAkmLDbi7Kmx6ncivFo3iey15vVnt1SZ/51wi kKCl2CH0KaiuF1IIxXf4JUdwDTn7qIoRYPWCBXWHW6oyf/rfmBWlEzTIi9zrw2gb HnnUMe6LyMCd0mBlf4WW8YDlpErrU5fph07BEj8RnnTquFDi5omtVni4Uclnyi7n VP16v3Z02myO9oWfkY1Yw5BMku1YtZcMMqMHNlsG50INJ1tBGDhDYBl3PFiwpHay KyZo638ogkhKpnOUotPE5O15ynwjP7BCoEVEeCXJvsce0xWNjyY= -----END CERTIFICATE-----Generated at Mon May 12 07:05:30 2025 by rpki-client