$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: mfxCbMzkOEPmcFcwGwuwIjl+25NpqL9UYFzON7xfLrQ= Subject key identifier: C7:05:6E:E0:94:43:BD:99:40:E8:60:94:2D:F2:9E:17:2A:5E:6E:BA Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 47FBD78CC1815E890795C6069998C06B9FC5ECFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 22:01:08 +0000 Manifest this update: Thu 21 Aug 2025 21:56:08 +0000 Manifest next update: Mon 25 Aug 2025 00:21:08 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: MaerV9po4EYMyVGjYIbQiliLv1/hil7OB5Ac1fJ6zcw=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fb:d7:8c:c1:81:5e:89:07:95:c6:06:99:98:c0:6b:9f:c5:ec:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Aug 21 21:56:08 2025 GMT Not After : Aug 25 00:21:08 2025 GMT Subject: CN=C7056EE09443BD9940E860942DF29E172A5E6EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:6a:d5:88:e9:f3:a4:9c:c7:29:f0:88:0e: 61:f8:2c:0f:a5:47:da:76:dc:b7:48:13:b7:60:9b: 71:6b:44:a8:00:9f:75:69:30:0d:3b:e8:54:4b:0c: 46:cb:ef:1d:7d:a3:78:3e:a7:5c:99:f6:fb:81:71: 32:0c:cb:5b:ba:8b:90:81:e2:8c:c4:b2:9b:ef:96: 76:5a:94:fc:09:2f:07:e3:ed:7a:b7:81:7b:63:99: 32:07:51:3d:78:fe:dc:f3:57:80:72:9e:01:04:0a: 5d:e1:df:94:1d:eb:bc:b9:45:b0:9e:49:c5:53:06: 75:ee:60:43:3d:0e:7d:46:2b:31:7d:99:c2:ff:e1: 7d:d6:3e:6e:f1:b9:fd:6d:10:a8:04:7f:ea:0b:03: 0d:24:ef:cf:16:ea:6d:85:47:2f:3f:dd:db:df:7b: d5:15:85:f4:2e:24:20:41:f5:6a:04:0a:95:73:5d: 9e:ce:65:40:02:c1:9e:65:00:89:68:34:04:a4:31: 40:67:93:12:ff:dd:8b:3f:88:cd:57:72:b2:18:47: 7d:7e:22:0a:4b:70:1b:22:76:3c:a8:55:e8:dc:46: ff:57:76:d5:fc:81:1f:49:e4:39:c9:5c:aa:f7:24: c6:0b:ff:13:af:27:b1:01:db:b0:9b:ac:16:6d:87: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:6E:E0:94:43:BD:99:40:E8:60:94:2D:F2:9E:17:2A:5E:6E:BA X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:02:56:22:4d:81:c1:fe:eb:89:1c:60:65:1a:51:7e:04:54: ed:bc:b9:0a:cf:04:be:5a:d0:dd:6c:df:bc:6a:38:96:35:a4: f7:9c:a0:ab:8f:80:3d:c1:9d:e4:fd:29:fe:af:fd:8f:5a:9b: ad:01:ae:33:51:62:ab:06:90:69:5a:f9:25:d8:52:fd:9f:b9: 87:dd:2c:2c:e8:82:0a:14:64:b2:d0:22:4b:d9:f7:34:3b:ce: 0f:35:9b:b7:e0:6b:7f:1d:f0:7f:10:5c:5d:39:c7:c9:f8:2e: e8:2d:41:5c:da:4d:0b:99:33:9b:2d:6b:e8:6e:f9:59:76:c6: 3e:e3:a7:b4:6d:47:60:32:ff:6e:c8:68:c0:cc:92:d7:ed:87: 12:74:fe:d9:48:08:1a:3a:dd:bc:53:52:09:00:7b:9b:ae:41: a9:78:11:a9:e0:b2:77:49:3a:9b:12:a4:bf:ce:1f:bf:88:61: df:7a:72:98:f5:57:d9:26:34:cb:4a:00:af:94:cb:33:dd:d0: 6d:ff:31:13:ae:d5:6e:99:8a:a1:72:5e:ec:d9:4a:83:08:d9: 11:d3:36:81:2f:80:e2:55:97:7b:e7:36:f2:a1:54:9b:0a:78: 0b:37:6a:59:35:e3:5f:1f:a6:e3:2b:e6:9d:56:bc:de:a7:92: 19:68:8d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/vXjMGBXokHlcYGmZjAa5/F7PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA4MjEyMTU2MDhaFw0yNTA4MjUwMDIxMDhaMDMxMTAvBgNV BAMTKEM3MDU2RUUwOTQ0M0JEOTk0MEU4NjA5NDJERjI5RTE3MkE1RTZFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRaWrViOnzpJzHKfCIDmH4LA+l R9p23LdIE7dgm3FrRKgAn3VpMA076FRLDEbL7x19o3g+p1yZ9vuBcTIMy1u6i5CB 4ozEspvvlnZalPwJLwfj7Xq3gXtjmTIHUT14/tzzV4ByngEECl3h35Qd67y5RbCe ScVTBnXuYEM9Dn1GKzF9mcL/4X3WPm7xuf1tEKgEf+oLAw0k788W6m2FRy8/3dvf e9UVhfQuJCBB9WoECpVzXZ7OZUACwZ5lAIloNASkMUBnkxL/3Ys/iM1XcrIYR31+ IgpLcBsidjyoVejcRv9XdtX8gR9J5DnJXKr3JMYL/xOvJ7EB27CbrBZth+nRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxwVu4JRDvZlA6GCULfKeFypebrowHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADICViJNgcH+64kcYGUaUX4EVO28uQrPBL5a 0N1s37xqOJY1pPecoKuPgD3BneT9Kf6v/Y9am60BrjNRYqsGkGla+SXYUv2fuYfd LCzoggoUZLLQIkvZ9zQ7zg81m7fga38d8H8QXF05x8n4LugtQVzaTQuZM5sta+hu +Vl2xj7jp7RtR2Ay/27IaMDMktfthxJ0/tlICBo63bxTUgkAe5uuQal4EangsndJ OpsSpL/OH7+IYd96cpj1V9kmNMtKAK+UyzPd0G3/MROu1W6ZiqFyXuzZSoMI2RHT NoEvgOJVl3vnNvKhVJsKeAs3alk1418fpuMr5p1WvN6nkhlojRM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:06 2025 by rpki-client