$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: t9gKuN0UArDaNVPnthjzl6c2sjUNgAAohvia7mn3ojg= Subject key identifier: 78:05:45:25:66:D2:60:C2:27:2C:CF:B8:48:9A:1C:A1:21:48:C6:D2 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 1AA89CB9A360AEDA0C96E50F9419ACDE6356E1A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04E5 Signing time: Mon 30 Jun 2025 23:11:06 +0000 Manifest this update: Mon 30 Jun 2025 23:06:06 +0000 Manifest next update: Fri 04 Jul 2025 02:18:06 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: ByUk5KrlJcezwe2sRc0MloKfS+SzE5ZgqTNMORfd2mI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a8:9c:b9:a3:60:ae:da:0c:96:e5:0f:94:19:ac:de:63:56:e1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Jun 30 23:06:06 2025 GMT Not After : Jul 4 02:18:06 2025 GMT Subject: CN=7805452566D260C2272CCFB8489A1CA12148C6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:63:9c:f1:20:c4:d5:c7:4f:7d:27:75:d6: 89:3a:00:36:bf:db:06:b7:0f:24:d4:1f:b2:e0:29: 3b:01:51:c8:26:da:88:d7:69:9c:2f:4d:1a:b1:dc: 4a:e9:63:3a:4d:90:c4:f2:8e:bb:ba:ac:44:ac:6a: 41:14:57:fc:e2:94:29:ac:a0:94:93:ea:71:4f:64: 85:6c:7e:51:ac:fa:df:9e:fe:7c:27:c6:6e:e9:0d: ca:82:ed:2f:88:fb:50:ca:0a:e1:89:97:3b:c0:e1: b7:42:0c:00:39:05:b2:8e:b0:25:1f:0c:bb:55:31: 96:f8:6f:60:ca:3a:7d:f0:c1:92:87:e9:df:29:ae: 55:ce:ea:cc:89:a0:ec:46:c2:47:fa:3b:32:98:0b: 5e:c6:7a:95:36:9e:5c:79:eb:5a:ba:c3:67:62:d3: e1:8a:d0:da:02:f0:f1:3a:1b:b2:ae:d1:cb:83:e0: 53:0a:35:cc:f8:73:fb:3a:1a:fb:9e:96:6d:d5:84: 29:da:cd:5e:2a:40:09:b2:99:1c:f0:c4:8d:11:12: 40:c4:64:54:47:45:e6:eb:93:f6:52:f1:8f:95:74: fa:ea:6a:0b:8f:f2:16:85:49:f0:c9:8d:f4:2c:aa: 39:f0:37:f4:1d:25:7b:72:72:1e:13:51:2c:9f:85: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:05:45:25:66:D2:60:C2:27:2C:CF:B8:48:9A:1C:A1:21:48:C6:D2 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:21:47:b7:4c:3c:53:b2:3d:7d:df:7a:85:30:95:0b:aa: e0:2c:0a:8b:d5:95:9f:5f:c1:40:07:14:b6:49:f9:40:fa:d9: 36:07:7c:dd:a0:cf:2f:ee:6a:57:de:23:af:db:d1:69:eb:f5: 46:5b:e6:50:a8:14:c0:a1:f3:89:ee:0f:d7:0e:eb:14:0c:8c: ad:2b:51:0d:be:7e:19:fb:0d:5a:88:dc:fc:6f:e3:fc:e4:68: 5c:0d:4a:9f:96:76:4a:b4:ab:64:72:bc:e1:04:3a:c1:09:97: 9d:54:e4:47:ef:54:a9:ec:4c:72:3a:bd:4c:8d:e4:0b:a7:f9: a8:cb:4f:09:f5:d9:82:49:88:53:8a:9d:81:ca:25:05:99:70: ce:b2:c3:1b:a8:e4:f0:1c:df:be:98:8e:6f:3e:38:3c:c7:e4: 08:f2:25:76:41:e4:d6:c0:19:e5:fd:8a:f6:97:b9:b8:96:0a: f1:f3:de:8c:0d:95:16:fc:72:b8:7f:f5:82:b3:76:23:19:9c: e0:97:2d:c3:99:10:38:52:11:8a:a2:1e:13:c6:4b:4b:35:be: 6e:0c:47:cc:cb:69:98:5e:b2:c2:ef:b1:41:6d:f0:c1:db:9e: a5:32:e6:cb:60:7a:d5:9e:e5:3c:9b:0a:6d:7d:e8:b2:5b:76: 50:1a:f8:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqicuaNgrtoMluUPlBms3mNW4aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA2MzAyMzA2MDZaFw0yNTA3MDQwMjE4MDZaMDMxMTAvBgNV BAMTKDc4MDU0NTI1NjZEMjYwQzIyNzJDQ0ZCODQ4OUExQ0ExMjE0OEM2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7WOc8SDE1cdPfSd11ok6ADa/ 2wa3DyTUH7LgKTsBUcgm2ojXaZwvTRqx3ErpYzpNkMTyjru6rESsakEUV/zilCms oJST6nFPZIVsflGs+t+e/nwnxm7pDcqC7S+I+1DKCuGJlzvA4bdCDAA5BbKOsCUf DLtVMZb4b2DKOn3wwZKH6d8prlXO6syJoOxGwkf6OzKYC17GepU2nlx561q6w2di 0+GK0NoC8PE6G7Ku0cuD4FMKNcz4c/s6Gvuelm3VhCnazV4qQAmymRzwxI0REkDE ZFRHRebrk/ZS8Y+VdPrqaguP8haFSfDJjfQsqjnwN/QdJXtych4TUSyfhd0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAVFJWbSYMInLM+4SJocoSFIxtIwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaFIUe3TDxTsj1933qFMJULquAsCovVlZ9f wUAHFLZJ+UD62TYHfN2gzy/ualfeI6/b0Wnr9UZb5lCoFMCh84nuD9cO6xQMjK0r UQ2+fhn7DVqI3Pxv4/zkaFwNSp+Wdkq0q2RyvOEEOsEJl51U5EfvVKnsTHI6vUyN 5Aun+ajLTwn12YJJiFOKnYHKJQWZcM6ywxuo5PAc376Yjm8+ODzH5AjyJXZB5NbA GeX9ivaXubiWCvHz3owNlRb8crh/9YKzdiMZnOCXLcOZEDhSEYqiHhPGS0s1vm4M R8zLaZhessLvsUFt8MHbnqUy5stgetWe5TybCm196LJbdlAa+IY= -----END CERTIFICATE-----Generated at Wed Jul 2 10:56:38 2025 by rpki-client