$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: ILtimeohIhaggO1/PGZrQEu/sHxXf7DhYL9aDLoSdBA= Subject key identifier: 53:BC:2E:4F:2D:E4:B0:39:56:74:20:72:72:D1:91:B3:2D:64:8F:75 Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 3AC592548362E42E8028E5E5A407E24A1E259CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01D8 Signing time: Fri 22 Aug 2025 11:10:46 +0000 Manifest this update: Fri 22 Aug 2025 11:05:46 +0000 Manifest next update: Mon 25 Aug 2025 16:33:46 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) 2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: qresgjn57ibhnC990itZ7ZIDWcy9lusASrDlpv6ezkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c5:92:54:83:62:e4:2e:80:28:e5:e5:a4:07:e2:4a:1e:25:9c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Aug 22 11:05:46 2025 GMT Not After : Aug 25 16:33:46 2025 GMT Subject: CN=53BC2E4F2DE4B0395674207272D191B32D648F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:09:27:47:a1:e5:de:15:00:82:39:a0:00: 02:15:d7:1a:1e:c9:37:84:b1:51:f4:75:bf:47:9a: c6:66:50:22:62:4c:f6:13:e2:7d:69:68:73:23:a1: d1:6a:e5:a0:56:ab:36:bc:b7:db:52:bf:cc:aa:76: c2:e1:84:c4:7b:a9:a6:fe:28:a5:0f:65:c7:ef:6e: ac:ef:26:cb:12:96:ef:33:56:d6:f8:0b:3f:8f:e0: 5f:f6:34:37:68:1e:76:1f:5b:d5:7c:7f:80:cc:ce: f1:c1:bc:0e:8b:f3:bc:e3:e6:ff:55:79:07:7f:d1: c4:91:f8:61:21:ec:d2:54:fd:52:c8:f6:84:ae:bb: 9a:61:49:ad:df:a6:af:2f:f1:c3:50:0e:ed:82:5c: f9:d7:b4:22:1a:5a:e1:ba:e6:20:ac:07:00:84:e2: 03:ff:e9:41:4f:c2:a3:ff:67:ac:44:27:81:3f:ba: 70:fe:6f:67:86:ca:48:4a:c6:01:37:8a:a8:91:4c: 7d:d7:3f:70:38:86:e9:df:66:7d:8b:aa:36:a9:8c: 49:b2:58:8d:52:b3:ae:5f:83:c2:f1:db:26:f4:4d: dd:b1:6c:96:cd:a5:87:33:09:77:54:68:74:72:31: ae:7a:09:2f:2b:5d:26:02:0c:ea:ce:fa:b3:e4:fb: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:2E:4F:2D:E4:B0:39:56:74:20:72:72:D1:91:B3:2D:64:8F:75 X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:7f:44:5c:2e:d9:7e:24:52:c0:87:1b:a0:00:c0:30:e8: 16:84:6f:3e:db:b3:81:5b:a0:81:d0:d1:62:fa:2c:e3:f9:21: 1c:44:de:37:47:43:a9:2e:62:50:30:28:50:ab:ef:3c:10:d8: 42:33:31:57:35:3a:88:f3:cd:72:f4:b9:d3:a4:33:ba:15:67: 80:cc:4b:38:5f:d8:10:ce:fd:d3:69:90:85:79:ec:5f:4c:bd: 40:b4:ba:2e:26:a8:b0:a7:98:ab:80:a1:d8:ec:dd:77:79:24: 31:df:b4:34:fc:77:05:37:a9:0f:9f:f0:56:4a:94:5c:3d:01: ae:2f:05:a5:05:bb:7f:f0:25:d5:e4:f9:0c:96:90:76:e1:2c: 09:1a:7e:c5:5e:64:42:05:11:55:f4:5b:61:0d:db:2f:42:7b: 53:31:b3:fe:7a:46:46:d5:3e:75:8f:db:31:02:80:89:67:90: e8:61:1a:cf:7a:b3:55:ef:a3:c9:3d:cf:e3:95:05:6c:83:b1: 81:47:59:ec:63:8a:cb:f9:dd:50:66:ec:75:dc:cb:d0:c0:c0: 36:48:77:ea:1c:b1:a7:56:9c:fb:db:d9:a2:b8:18:8c:57:eb: 43:ba:f5:02:bb:6b:17:f6:23:5c:1e:e6:24:65:55:e9:06:62: 71:e2:b0:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsWSVINi5C6AKOXlpAfiSh4lnN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTA4MjIxMTA1NDZaFw0yNTA4MjUxNjMzNDZaMDMxMTAvBgNV BAMTKDUzQkMyRTRGMkRFNEIwMzk1Njc0MjA3MjcyRDE5MUIzMkQ2NDhGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgQknR6Hl3hUAgjmgAAIV1xoe yTeEsVH0db9HmsZmUCJiTPYT4n1paHMjodFq5aBWqza8t9tSv8yqdsLhhMR7qab+ KKUPZcfvbqzvJssSlu8zVtb4Cz+P4F/2NDdoHnYfW9V8f4DMzvHBvA6L87zj5v9V eQd/0cSR+GEh7NJU/VLI9oSuu5phSa3fpq8v8cNQDu2CXPnXtCIaWuG65iCsBwCE 4gP/6UFPwqP/Z6xEJ4E/unD+b2eGykhKxgE3iqiRTH3XP3A4hunfZn2LqjapjEmy WI1Ss65fg8Lx2yb0Td2xbJbNpYczCXdUaHRyMa56CS8rXSYCDOrO+rPk+yDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7wuTy3ksDlWdCByctGRsy1kj3UwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAuf0RcLtl+JFLAhxugAMAw6BaEbz7bs4Fb oIHQ0WL6LOP5IRxE3jdHQ6kuYlAwKFCr7zwQ2EIzMVc1OojzzXL0udOkM7oVZ4DM Szhf2BDO/dNpkIV57F9MvUC0ui4mqLCnmKuAodjs3Xd5JDHftDT8dwU3qQ+f8FZK lFw9Aa4vBaUFu3/wJdXk+QyWkHbhLAkafsVeZEIFEVX0W2EN2y9Ce1Mxs/56RkbV PnWP2zECgIlnkOhhGs96s1Xvo8k9z+OVBWyDsYFHWexjisv53VBm7HXcy9DAwDZI d+ocsadWnPvb2aK4GIxX60O69QK7axf2I1we5iRlVekGYnHisO0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:07 2025 by rpki-client