$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: KU5a38+c75r/0vUJ3A+g7uc9L4PQ9wBee0N0LwesYnI= Subject key identifier: 68:DA:48:C9:E0:D0:77:2A:4E:A8:54:DE:48:4C:3F:01:1A:82:2B:F9 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 59269BFFB2F16914494753717CEF0C78D376DC52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 23:01:08 +0000 Manifest this update: Sun 19 Oct 2025 22:56:08 +0000 Manifest next update: Wed 22 Oct 2025 23:47:08 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: njDeZ6FQ0tM6Ub8aEfY/AKlQUyYO+/MjxdwkHBNwbXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:26:9b:ff:b2:f1:69:14:49:47:53:71:7c:ef:0c:78:d3:76:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Oct 19 22:56:08 2025 GMT Not After : Oct 22 23:47:08 2025 GMT Subject: CN=68DA48C9E0D0772A4EA854DE484C3F011A822BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:77:49:f7:11:d5:59:ae:17:e4:ba:ae:25: b4:d3:7f:df:21:d9:8c:d7:51:96:6e:e9:66:41:c4: d4:04:a0:4c:ec:02:73:1e:35:d3:8a:65:a1:74:7d: a7:d2:15:c0:d3:ba:e5:4f:5f:ad:9b:05:a5:03:2c: 4f:0a:e9:37:c2:81:4b:ee:a2:c8:2a:43:66:95:a3: ee:fa:1e:e1:ae:6e:e5:cc:24:f4:a2:c5:25:e4:d3: 1a:36:fa:2c:53:f0:b4:74:14:8d:c5:48:ff:9f:3f: 85:37:8b:ab:ef:7c:cf:f7:f4:d1:d8:b8:bd:0a:3d: 0d:8d:e0:e2:0b:cd:7c:b0:44:fa:6e:4b:1b:9a:86: 80:bd:64:15:e1:d6:47:3c:a3:fd:6c:4f:cf:4e:b2: 01:d8:47:ac:5d:fa:68:6e:0e:21:31:bc:bb:9d:8d: 7d:7d:4a:72:a6:a6:11:fe:59:82:8f:07:74:bb:ed: 0d:71:d7:35:70:65:b9:ef:56:18:18:8f:18:b5:0e: 17:74:47:e7:57:8a:56:95:79:26:1a:2f:72:33:5e: 93:e7:95:92:c4:06:1f:8e:43:e8:34:6e:31:35:1a: 11:df:e0:3e:33:78:db:ce:c2:ad:a9:29:86:f9:7b: 03:fa:0c:57:00:7f:5d:40:48:44:3d:ad:ed:a5:6e: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DA:48:C9:E0:D0:77:2A:4E:A8:54:DE:48:4C:3F:01:1A:82:2B:F9 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cb:c5:51:56:65:bb:eb:a1:c1:33:42:97:12:13:fb:0e:77: 0f:03:15:5a:35:9a:f4:f1:f9:28:50:30:ff:15:85:38:d9:2d: 03:ea:a9:6e:7d:8b:d6:29:98:ab:a7:a2:9c:63:7f:0d:ea:84: 05:3c:65:47:35:8c:e8:28:c7:35:65:90:73:48:1a:de:e0:ba: 92:b8:1a:01:01:4b:df:8d:88:2d:57:fe:5a:13:9a:15:06:5d: 00:d2:3c:3d:60:e2:34:78:0d:36:64:4f:10:85:10:57:c9:44: 8f:02:6d:cb:c4:bb:03:da:3a:a5:87:88:38:31:82:bf:df:33: c9:fd:1f:38:90:f0:6f:74:20:a0:e4:51:a6:74:e8:b9:de:d0: c7:6a:39:4d:5e:d6:e8:8c:5c:8d:d3:4a:d9:00:6e:79:68:9d: 89:c6:59:73:97:8c:a1:c2:d5:ae:e4:d6:6d:e8:80:d1:6d:5f: a6:32:ed:22:4d:ae:3a:9f:43:ca:8a:6f:7e:37:3a:79:c6:9e: f4:71:97:70:d1:d5:67:8e:0d:b2:8e:4a:57:82:a9:44:9b:7a: 38:52:e1:40:88:6b:17:cf:05:d9:af:ac:b6:87:63:3b:94:2d: 25:bf:6c:e2:75:40:a6:81:dd:a4:7f:a2:4c:e1:24:08:ab:13: 71:f1:09:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSab/7LxaRRJR1NxfO8MeNN23FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTEwMTkyMjU2MDhaFw0yNTEwMjIyMzQ3MDhaMDMxMTAvBgNV BAMTKDY4REE0OEM5RTBEMDc3MkE0RUE4NTRERTQ4NEMzRjAxMUE4MjJCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHndJ9xHVWa4X5LquJbTTf98h 2YzXUZZu6WZBxNQEoEzsAnMeNdOKZaF0fafSFcDTuuVPX62bBaUDLE8K6TfCgUvu osgqQ2aVo+76HuGubuXMJPSixSXk0xo2+ixT8LR0FI3FSP+fP4U3i6vvfM/39NHY uL0KPQ2N4OILzXywRPpuSxuahoC9ZBXh1kc8o/1sT89OsgHYR6xd+mhuDiExvLud jX19SnKmphH+WYKPB3S77Q1x1zVwZbnvVhgYjxi1Dhd0R+dXilaVeSYaL3IzXpPn lZLEBh+OQ+g0bjE1GhHf4D4zeNvOwq2pKYb5ewP6DFcAf11ASEQ9re2lblQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNpIyeDQdypOqFTeSEw/ARqCK/kwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLLxVFWZbvrocEzQpcSE/sOdw8DFVo1mvTx +ShQMP8VhTjZLQPqqW59i9YpmKunopxjfw3qhAU8ZUc1jOgoxzVlkHNIGt7gupK4 GgEBS9+NiC1X/loTmhUGXQDSPD1g4jR4DTZkTxCFEFfJRI8CbcvEuwPaOqWHiDgx gr/fM8n9HziQ8G90IKDkUaZ06Lne0MdqOU1e1uiMXI3TStkAbnlonYnGWXOXjKHC 1a7k1m3ogNFtX6Yy7SJNrjqfQ8qKb343OnnGnvRxl3DR1WeODbKOSleCqUSbejhS 4UCIaxfPBdmvrLaHYzuULSW/bOJ1QKaB3aR/okzhJAirE3HxCWU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:17 2025 by rpki-client