$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: nxGS9xz4Ql1WTRSLXcdlOcyVRT2nG8MxTq1A56ZDMnQ= Subject key identifier: 45:5E:A3:A1:F5:35:87:72:A1:68:EC:C3:1E:7E:97:9B:E8:41:4A:DA Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 53E6A72792EBF29CB6AD0F4F9414B6F6938FD402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0103 Signing time: Mon 03 Nov 2025 22:12:15 +0000 Manifest this update: Mon 03 Nov 2025 22:07:15 +0000 Manifest next update: Fri 07 Nov 2025 04:15:15 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: cxHAjJEq4ZAmeLC105vZq8KqiEvXrT8P2PAnSrgapw4=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e6:a7:27:92:eb:f2:9c:b6:ad:0f:4f:94:14:b6:f6:93:8f:d4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Nov 3 22:07:15 2025 GMT Not After : Nov 7 04:15:15 2025 GMT Subject: CN=455EA3A1F5358772A168ECC31E7E979BE8414ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:8e:6e:31:6b:ba:89:a8:7a:1b:b8:2c:8f: 56:cc:43:2c:64:20:8b:1d:a5:26:4c:f7:51:8e:9d: f6:00:ba:e7:94:db:31:09:76:aa:88:9e:7b:9f:28: 38:b7:50:fd:7d:20:0a:c2:e4:70:26:0e:61:c2:fa: 4e:93:98:d1:9a:ad:35:32:ec:93:fc:73:c3:b2:ca: 00:a4:bc:06:60:18:cc:fa:74:9b:16:95:a7:07:ad: 48:20:6b:fe:17:a0:09:9c:60:f8:8b:98:66:0c:19: a6:62:b1:7d:ff:7a:23:61:d0:48:0c:8c:8e:47:95: a5:b4:1d:d5:53:9c:4d:f5:53:f4:ee:3c:47:e8:9e: a5:db:00:00:cb:7c:7d:8c:a9:ad:2d:62:51:b6:0b: e9:e8:b2:3c:d0:63:b1:0c:c2:70:97:ea:dd:0b:68: 51:db:d0:73:ff:e6:0c:e6:03:1d:22:51:a7:4c:f2: 05:5a:f5:59:3e:5d:fa:0f:26:21:06:cb:06:b1:a1: 4d:d0:f4:ea:47:48:56:20:29:06:84:f9:13:f0:30: 4e:35:0c:3e:b8:73:3d:d3:8e:f4:e1:6f:e2:05:19: 64:e1:1b:e2:19:a5:34:62:37:87:b0:b3:de:d3:c2: 3b:fd:3e:40:c4:2a:f2:4a:77:f1:a3:52:bd:37:a0: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:A3:A1:F5:35:87:72:A1:68:EC:C3:1E:7E:97:9B:E8:41:4A:DA X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bd:f7:ce:ac:f3:1e:99:50:7a:1e:60:bb:4a:7f:24:4d:9e: 44:0a:e2:eb:f0:bf:d2:ef:ac:41:a9:68:67:35:cd:cd:b1:28: f1:27:a1:5a:fb:2f:de:4a:e6:b3:11:26:ef:9c:ec:ef:ba:8b: 5b:9b:f0:cc:82:45:67:52:ac:31:87:4b:fe:bd:46:0e:bf:3c: 84:70:28:6c:63:d7:4a:a3:66:c5:53:82:8e:94:0a:ab:21:15: 27:dc:80:0f:da:ef:4b:e3:a8:13:a1:21:a8:59:8c:9a:2f:6f: 32:ca:43:d8:0a:79:e0:01:bc:68:85:35:08:39:d6:44:46:6f: 27:6b:2c:06:e8:86:1a:f4:c1:d0:54:8b:12:4f:df:c3:98:d5: 3b:05:30:07:16:58:5e:0b:8a:d9:28:3c:09:54:3c:64:da:42: ec:43:15:dd:f0:af:04:b6:62:bc:a4:81:91:33:72:31:90:47: 20:0a:ce:68:e7:4a:cb:d7:50:d9:44:00:f3:cb:53:01:35:87: 9b:62:1c:c7:ea:98:4f:03:e3:b8:3c:7d:0b:dc:e1:83:43:44: db:ec:17:12:c0:01:3d:f6:43:76:09:79:3e:dd:f2:7d:2a:e1: cc:42:ce:1b:68:a4:85:72:40:94:86:53:ee:cd:3a:db:f2:e1: 09:59:1c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+anJ5Lr8py2rQ9PlBS29pOP1AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTExMDMyMjA3MTVaFw0yNTExMDcwNDE1MTVaMDMxMTAvBgNV BAMTKDQ1NUVBM0ExRjUzNTg3NzJBMTY4RUNDMzFFN0U5NzlCRTg0MTRBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPu45uMWu6iah6G7gsj1bMQyxk IIsdpSZM91GOnfYAuueU2zEJdqqInnufKDi3UP19IArC5HAmDmHC+k6TmNGarTUy 7JP8c8OyygCkvAZgGMz6dJsWlacHrUgga/4XoAmcYPiLmGYMGaZisX3/eiNh0EgM jI5HlaW0HdVTnE31U/TuPEfonqXbAADLfH2Mqa0tYlG2C+nosjzQY7EMwnCX6t0L aFHb0HP/5gzmAx0iUadM8gVa9Vk+XfoPJiEGywaxoU3Q9OpHSFYgKQaE+RPwME41 DD64cz3TjvThb+IFGWThG+IZpTRiN4ews97Twjv9PkDEKvJKd/GjUr03oN+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURV6jofU1h3KhaOzDHn6Xm+hBStowHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe9986s8x6ZUHoeYLtKfyRNnkQK4uvwv9Lv rEGpaGc1zc2xKPEnoVr7L95K5rMRJu+c7O+6i1ub8MyCRWdSrDGHS/69Rg6/PIRw KGxj10qjZsVTgo6UCqshFSfcgA/a70vjqBOhIahZjJovbzLKQ9gKeeABvGiFNQg5 1kRGbydrLAbohhr0wdBUixJP38OY1TsFMAcWWF4LitkoPAlUPGTaQuxDFd3wrwS2 YrykgZEzcjGQRyAKzmjnSsvXUNlEAPPLUwE1h5tiHMfqmE8D47g8fQvc4YNDRNvs FxLAAT32Q3YJeT7d8n0q4cxCzhtopIVyQJSGU+7NOtvy4QlZHPQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:40:21 2025 by rpki-client