$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: 3BgYtFpBSegX2VqsPysTdZOsioNHRupW26nCtpQDUKM= Subject key identifier: EE:B1:76:7A:08:C6:87:80:D8:C9:A7:78:FD:C3:99:12:D9:B6:D0:52 Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 4DA567E9652D9F6851D2B1293B97BAECA37EB553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01F1 Signing time: Sat 18 Oct 2025 21:10:46 +0000 Manifest this update: Sat 18 Oct 2025 21:05:46 +0000 Manifest next update: Wed 22 Oct 2025 01:09:46 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: uWl54Hy+Xc3X7/X3dN3OMbbGGaPKCGwMEV+8UE9SSeA=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a5:67:e9:65:2d:9f:68:51:d2:b1:29:3b:97:ba:ec:a3:7e:b5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Oct 18 21:05:46 2025 GMT Not After : Oct 22 01:09:46 2025 GMT Subject: CN=EEB1767A08C68780D8C9A778FDC39912D9B6D052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:e3:d1:2d:f5:4b:17:e9:02:cb:68:39:6d: 57:0d:41:5e:e6:2b:90:04:9d:cb:22:1e:46:b4:e5: ca:0e:de:df:6b:ec:a0:45:6b:73:db:73:6a:e7:59: 97:0e:d5:70:76:f4:d2:a6:64:bf:50:e6:3d:10:d9: 5f:86:c2:37:71:6a:db:a9:68:84:18:f8:2b:e5:2d: 4e:77:fb:b4:87:32:87:c1:ba:20:ad:2b:3f:96:d9: 5c:c6:13:50:56:3f:6b:27:e9:32:30:59:e4:f6:f8: 80:c8:49:e9:eb:4a:eb:57:75:df:22:9f:86:59:1c: 07:a2:c0:e8:d1:02:8d:ae:97:30:32:ce:8f:4e:34: 04:45:77:a3:c2:c3:24:1c:69:9f:7e:6b:cb:f1:29: 1e:f6:6d:cb:36:d1:b8:81:f5:6a:90:49:d5:fc:9c: f2:61:52:4f:3b:b5:00:e1:24:34:8f:ac:64:39:66: 52:4f:26:aa:a1:42:b0:6b:5c:9b:bd:1c:2c:8b:11: da:4e:65:fc:9c:9b:6c:c0:15:43:d8:27:08:01:31: fc:22:e9:5b:da:48:9b:26:43:df:76:32:ea:91:12: 15:98:6e:1b:51:14:43:f6:43:38:14:26:ab:e0:74: 56:b5:53:84:31:6d:0c:40:25:d7:b4:cf:09:f6:c1: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B1:76:7A:08:C6:87:80:D8:C9:A7:78:FD:C3:99:12:D9:B6:D0:52 X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:94:64:86:a3:a5:14:49:6e:b4:bf:d4:70:57:7a:af:4d:af: 52:05:b1:de:e7:4a:7f:82:d4:d6:8b:45:ab:86:66:49:96:5c: 8d:6e:d3:de:d1:d4:8b:61:1c:bb:a1:99:c4:5e:d8:86:cc:82: 03:6e:55:73:87:3c:2d:2c:86:0d:27:1a:4d:2b:6b:f9:ec:d7: 44:13:9d:2e:fe:25:30:02:52:3d:18:fa:41:a1:8f:a6:7e:83: 76:80:b3:73:51:55:fa:aa:09:41:f4:0a:be:18:ee:2a:82:3d: d0:48:47:63:d9:5a:a6:31:e4:64:17:f1:5a:53:89:1e:d1:8a: 17:b8:23:1b:b8:3e:d8:bd:c1:9b:b4:3a:97:a3:97:26:9d:b5: b6:44:0b:90:34:f1:ae:ca:13:80:73:71:cb:40:78:48:d3:83: d5:99:e7:6e:0a:20:16:57:a1:36:23:c6:55:35:e6:bd:41:13: aa:92:34:2b:da:93:5f:6a:86:64:d9:ab:8d:a8:12:4d:02:f5: 50:e7:0d:0e:a4:0d:c9:cd:d8:61:6d:78:99:0b:47:49:d8:55: e7:7a:96:44:94:40:91:00:c3:25:9f:1c:85:0b:7d:be:53:33: 5e:45:6f:41:08:41:e0:72:36:0a:9a:07:57:4a:31:9c:e2:ae: f0:ce:fd:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaVn6WUtn2hR0rEpO5e67KN+tVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTEwMTgyMTA1NDZaFw0yNTEwMjIwMTA5NDZaMDMxMTAvBgNV BAMTKEVFQjE3NjdBMDhDNjg3ODBEOEM5QTc3OEZEQzM5OTEyRDlCNkQwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vePRLfVLF+kCy2g5bVcNQV7m K5AEncsiHka05coO3t9r7KBFa3Pbc2rnWZcO1XB29NKmZL9Q5j0Q2V+Gwjdxatup aIQY+CvlLU53+7SHMofBuiCtKz+W2VzGE1BWP2sn6TIwWeT2+IDISenrSutXdd8i n4ZZHAeiwOjRAo2ulzAyzo9ONARFd6PCwyQcaZ9+a8vxKR72bcs20biB9WqQSdX8 nPJhUk87tQDhJDSPrGQ5ZlJPJqqhQrBrXJu9HCyLEdpOZfycm2zAFUPYJwgBMfwi 6VvaSJsmQ992MuqREhWYbhtRFEP2QzgUJqvgdFa1U4QxbQxAJde0zwn2wUVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rF2egjGh4DYyad4/cOZEtm20FIwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmUZIajpRRJbrS/1HBXeq9Nr1IFsd7nSn+C 1NaLRauGZkmWXI1u097R1IthHLuhmcRe2IbMggNuVXOHPC0shg0nGk0ra/ns10QT nS7+JTACUj0Y+kGhj6Z+g3aAs3NRVfqqCUH0Cr4Y7iqCPdBIR2PZWqYx5GQX8VpT iR7Rihe4Ixu4Pti9wZu0OpejlyadtbZEC5A08a7KE4BzcctAeEjTg9WZ524KIBZX oTYjxlU15r1BE6qSNCvak19qhmTZq42oEk0C9VDnDQ6kDcnN2GFteJkLR0nYVed6 lkSUQJEAwyWfHIULfb5TM15Fb0EIQeByNgqaB1dKMZzirvDO/Ws= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:05 2025 by rpki-client