$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: xIauSJlOFwQN8WhsU1MIPbaX5wez5sjYY1BYasNWJbI= Subject key identifier: 1B:8F:41:DD:C0:5E:8F:BE:6E:AB:3D:7D:F8:9A:5D:AB:F5:43:EC:12 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 6543C3BF0AC6B578177D2E7CB3BC08D72F59E2E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: BE Signing time: Wed 06 Aug 2025 06:50:44 +0000 Manifest this update: Wed 06 Aug 2025 06:45:44 +0000 Manifest next update: Sat 09 Aug 2025 11:31:44 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: HRMjCNyx5iwi6H74I0HHFw/58ylXF+7gn9si2wUqJ7c=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:43:c3:bf:0a:c6:b5:78:17:7d:2e:7c:b3:bc:08:d7:2f:59:e2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Aug 6 06:45:44 2025 GMT Not After : Aug 9 11:31:44 2025 GMT Subject: CN=1B8F41DDC05E8FBE6EAB3D7DF89A5DABF543EC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:6a:cd:b8:a0:35:45:d5:88:f6:27:72:9d: 4e:02:2a:a9:94:3c:ad:5d:51:de:33:60:9f:d7:c6: 80:d6:55:4f:21:80:08:2e:7a:8a:66:87:1e:5a:70: 17:3e:c2:9c:0a:30:df:93:01:8e:2f:fa:4c:82:b2: f8:24:25:d0:30:09:5b:e8:39:44:ee:58:24:16:fc: a6:1b:07:d6:52:30:c3:16:19:86:fb:5c:c1:b4:95: d9:2e:6e:1c:b2:ef:80:a6:06:25:07:e3:45:cd:87: 09:a1:26:30:66:00:e1:22:ce:d4:93:9d:7c:9f:7f: 18:9b:05:45:4d:1a:93:14:31:6f:01:c8:3e:14:a8: 1a:5e:28:1f:ae:79:89:65:69:ef:c5:e9:f7:45:10: 24:56:7d:49:3d:a8:44:ce:9f:5d:ee:01:ed:37:d1: e3:af:27:b5:a1:3a:25:71:6e:0c:53:e4:97:ce:a9: 2e:47:9b:4f:13:26:93:84:ec:f7:6f:ff:e6:ee:75: 08:b9:e0:89:32:3a:79:29:6f:66:fc:20:79:14:c8: 29:51:b0:fd:c1:fc:26:af:83:8c:64:51:00:1b:27: a3:12:77:65:74:67:8d:7b:3c:06:49:6d:ae:77:65: 69:9b:ad:06:ab:74:5d:98:53:29:f6:a8:15:b8:d4: cd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8F:41:DD:C0:5E:8F:BE:6E:AB:3D:7D:F8:9A:5D:AB:F5:43:EC:12 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:f7:16:9b:b9:77:2e:44:e5:17:ba:6a:22:1a:4a:aa:81:02: 29:74:78:a0:de:1a:5f:39:0e:63:ac:9b:d0:0c:29:d1:ac:e7: 10:e9:f9:3f:1a:46:73:77:1b:b9:1e:e2:09:09:71:86:34:c9: 6d:a9:d1:15:15:25:7f:e3:75:4f:64:fb:23:f2:76:57:21:2d: 98:72:03:fa:e8:29:a8:46:74:7c:d2:72:f2:37:d9:2b:ad:eb: 63:eb:e6:fc:73:e6:28:54:eb:c4:c2:7b:6e:8c:ed:41:11:91: f7:19:2f:bd:1f:a5:5b:9b:45:22:9c:72:88:12:ce:39:7c:c0: 12:3b:9b:3d:2d:b6:bf:80:89:b9:cf:27:05:38:a7:81:f7:df: 5f:22:0b:07:7d:b6:06:9e:97:8e:f2:3c:a1:55:0f:a2:f1:81: ec:12:3b:21:04:2f:07:6b:03:9a:d0:8b:b1:2a:d9:a9:2d:b1: b3:9d:70:68:47:90:e4:fe:9b:3f:44:02:4d:98:b1:b4:dc:c8: ed:38:8d:b9:3a:d6:dd:a7:99:ea:9c:21:f1:33:84:fe:20:16: a5:63:44:fb:d2:c6:a4:cf:29:d1:3a:99:aa:e0:64:70:ce:38: 43:86:fa:fc:2a:7f:cf:f1:7c:75:8b:b1:e6:36:ea:a3:d5:c7: bb:c8:f0:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUPDvwrGtXgXfS58s7wI1y9Z4uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTA4MDYwNjQ1NDRaFw0yNTA4MDkxMTMxNDRaMDMxMTAvBgNV BAMTKDFCOEY0MUREQzA1RThGQkU2RUFCM0Q3REY4OUE1REFCRjU0M0VDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4mrNuKA1RdWI9idynU4CKqmU PK1dUd4zYJ/XxoDWVU8hgAgueopmhx5acBc+wpwKMN+TAY4v+kyCsvgkJdAwCVvo OUTuWCQW/KYbB9ZSMMMWGYb7XMG0ldkubhyy74CmBiUH40XNhwmhJjBmAOEiztST nXyffxibBUVNGpMUMW8ByD4UqBpeKB+ueYllae/F6fdFECRWfUk9qETOn13uAe03 0eOvJ7WhOiVxbgxT5JfOqS5Hm08TJpOE7Pdv/+budQi54IkyOnkpb2b8IHkUyClR sP3B/Cavg4xkUQAbJ6MSd2V0Z417PAZJba53ZWmbrQardF2YUyn2qBW41M3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG49B3cBej75uqz19+Jpdq/VD7BIwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAND3Fpu5dy5E5Re6aiIaSqqBAil0eKDeGl85 DmOsm9AMKdGs5xDp+T8aRnN3G7ke4gkJcYY0yW2p0RUVJX/jdU9k+yPydlchLZhy A/roKahGdHzScvI32Sut62Pr5vxz5ihU68TCe26M7UERkfcZL70fpVubRSKccogS zjl8wBI7mz0ttr+AibnPJwU4p4H3318iCwd9tgael47yPKFVD6LxgewSOyEELwdr A5rQi7Eq2aktsbOdcGhHkOT+mz9EAk2YsbTcyO04jbk61t2nmeqcIfEzhP4gFqVj RPvSxqTPKdE6margZHDOOEOG+vwqf8/xfHWLseY26qPVx7vI8LQ= -----END CERTIFICATE-----Generated at Thu Aug 7 07:21:11 2025 by rpki-client