$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: 6P/ioD5jTVOkC9MEJY9Wrb0AylUSd1gZw55nlZpo/gs= Subject key identifier: D5:21:D2:D6:A3:A6:5E:58:3E:72:3A:D7:D3:96:3A:43:71:A7:96:3B Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 143449DEE7134B69247039FC2832A524F757FC7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01C0 Signing time: Tue 01 Jul 2025 11:20:46 +0000 Manifest this update: Tue 01 Jul 2025 11:15:46 +0000 Manifest next update: Fri 04 Jul 2025 12:43:46 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: BZo1iQGJtOH0KYD7EjAIqb+6wWHVZqj9bpdNw1+DGvc=) 2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: 3jkeeCs/PCJsnJs87rDTbEG/E8tbZntmsb7hrdlGldc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:34:49:de:e7:13:4b:69:24:70:39:fc:28:32:a5:24:f7:57:fc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Jul 1 11:15:46 2025 GMT Not After : Jul 4 12:43:46 2025 GMT Subject: CN=D521D2D6A3A65E583E723AD7D3963A4371A7963B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:3e:d1:a7:5c:ec:29:60:c9:e5:91:b6:33: 16:fc:f7:96:53:d5:1d:7a:b1:7b:f7:41:12:d6:df: f5:f7:c6:f9:54:a0:01:88:ac:74:e9:a5:f4:e7:14: 28:93:df:e8:a2:ce:60:56:b3:6c:28:b1:bf:cd:57: 35:d1:d9:3a:e1:6d:32:34:49:c4:cb:76:f5:46:70: 69:23:f8:52:fe:9a:75:43:75:8c:64:4a:89:a2:f8: 4c:c9:f2:64:b5:52:1e:8a:95:de:53:d0:2a:68:a5: df:36:00:9e:77:55:b6:48:b7:ad:8f:89:9b:32:ac: ae:ee:a3:a8:4e:f5:37:b8:15:a1:05:d8:34:95:d1: de:a1:c6:74:a6:c8:40:d4:b1:35:a2:db:0e:0e:4f: ef:f6:97:c9:9c:e6:a5:f8:df:25:8e:11:da:28:41: 86:c6:c3:57:59:00:a2:2c:17:8a:01:e4:ee:b2:41: 6a:da:60:f5:1d:43:9c:f8:b5:0d:90:65:28:3d:43: 05:f5:2b:7f:b3:30:3d:df:d2:d0:0a:8c:95:b4:32: 10:d9:5f:70:18:e5:a0:b4:20:9e:91:91:e7:d8:c7: 86:d1:28:2f:88:d5:61:46:5e:d0:2c:ba:cc:52:e2: 8e:c8:8c:3a:90:b1:b6:ac:66:a5:2d:20:1c:b3:2d: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:21:D2:D6:A3:A6:5E:58:3E:72:3A:D7:D3:96:3A:43:71:A7:96:3B X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:72:b8:0e:37:ca:9b:30:88:87:91:d6:77:e8:7a:c3:0e:47: 0e:7b:d0:49:55:0b:24:86:e8:9d:47:e9:30:3e:bd:2d:94:b5: 56:45:c4:6a:b3:8b:64:77:5c:63:a6:13:70:50:2b:cb:e7:0b: 79:41:4f:60:d9:c8:66:c4:5d:cc:4a:d4:47:b8:2b:07:c6:ff: 51:40:ec:fc:c0:78:bd:c4:24:bc:0d:55:25:da:27:33:d7:d1: 4d:da:0b:25:42:cc:93:18:78:73:ab:df:63:58:14:9e:c6:a0: ca:19:39:96:8c:41:2e:3e:29:3f:55:09:c1:97:ba:a6:69:8a: ea:a0:0e:d0:10:53:22:0c:23:f7:4b:c7:87:06:8c:d3:d7:06: 72:fa:09:a8:cb:7d:81:74:0f:69:49:ee:dd:27:92:ae:f7:10: dc:90:0a:8c:a7:b1:fb:fa:57:cc:54:c1:fb:94:2f:73:8b:98: 0c:2a:12:d9:64:a9:72:8c:ed:b8:a2:94:cf:6e:30:62:c4:9a: 04:96:f5:60:3f:41:a8:d4:d9:21:c1:b6:36:61:5f:0e:43:42: 6c:03:73:1b:63:63:e8:53:31:99:af:e7:65:38:62:da:f8:b8: 56:aa:37:f6:d2:22:b3:c4:33:e5:4f:e0:95:8c:24:3a:fe:32: 61:44:d0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDRJ3ucTS2kkcDn8KDKlJPdX/H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTA3MDExMTE1NDZaFw0yNTA3MDQxMjQzNDZaMDMxMTAvBgNV BAMTKEQ1MjFEMkQ2QTNBNjVFNTgzRTcyM0FEN0QzOTYzQTQzNzFBNzk2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04z7Rp1zsKWDJ5ZG2Mxb895ZT 1R16sXv3QRLW3/X3xvlUoAGIrHTppfTnFCiT3+iizmBWs2wosb/NVzXR2TrhbTI0 ScTLdvVGcGkj+FL+mnVDdYxkSomi+EzJ8mS1Uh6Kld5T0Cpopd82AJ53VbZIt62P iZsyrK7uo6hO9Te4FaEF2DSV0d6hxnSmyEDUsTWi2w4OT+/2l8mc5qX43yWOEdoo QYbGw1dZAKIsF4oB5O6yQWraYPUdQ5z4tQ2QZSg9QwX1K3+zMD3f0tAKjJW0MhDZ X3AY5aC0IJ6RkefYx4bRKC+I1WFGXtAsusxS4o7IjDqQsbasZqUtIByzLSe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1SHS1qOmXlg+cjrX05Y6Q3GnljswHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNyuA43ypswiIeR1nfoesMORw570ElVCySG 6J1H6TA+vS2UtVZFxGqzi2R3XGOmE3BQK8vnC3lBT2DZyGbEXcxK1Ee4KwfG/1FA 7PzAeL3EJLwNVSXaJzPX0U3aCyVCzJMYeHOr32NYFJ7GoMoZOZaMQS4+KT9VCcGX uqZpiuqgDtAQUyIMI/dLx4cGjNPXBnL6CajLfYF0D2lJ7t0nkq73ENyQCoynsfv6 V8xUwfuUL3OLmAwqEtlkqXKM7biilM9uMGLEmgSW9WA/QajU2SHBtjZhXw5DQmwD cxtjY+hTMZmv52U4Ytr4uFaqN/bSIrPEM+VP4JWMJDr+MmFE0Og= -----END CERTIFICATE-----Generated at Wed Jul 2 11:46:15 2025 by rpki-client