$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: 8apXyz1D2WExtOZ++XEYza4wiooQAjSzT5U3KcywMio= Subject key identifier: BD:F8:BE:33:D9:82:91:22:F1:08:7F:22:52:36:27:56:E7:EF:A4:86 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: EADB5F10D5BFC2D9577B5E7EDF13FC636AE965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: DB Signing time: Wed 06 Aug 2025 13:42:19 +0000 Manifest this update: Wed 06 Aug 2025 13:37:19 +0000 Manifest next update: Sat 09 Aug 2025 20:09:19 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: dITAatdnTa0q9CTDnm47tvL9tYYkzV3IrD92/V5XCEY=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 4: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ea:db:5f:10:d5:bf:c2:d9:57:7b:5e:7e:df:13:fc:63:6a:e9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Aug 6 13:37:19 2025 GMT Not After : Aug 9 20:09:19 2025 GMT Subject: CN=BDF8BE33D9829122F1087F2252362756E7EFA486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a8:81:8b:97:48:8d:b9:9a:74:72:fd:0f:aa: 2b:ab:d3:d8:83:73:a6:6d:ae:0f:02:5a:cf:08:7a: d9:eb:dc:58:d6:31:1b:7c:0b:d8:7b:20:c8:61:9e: 40:10:79:05:38:ab:2b:8a:b3:25:79:93:21:9e:75: 03:bc:32:53:fe:0d:3d:27:c9:e1:24:a8:87:f4:35: c7:ea:45:31:b2:17:17:24:49:d7:ce:4a:94:a2:ea: aa:fa:77:68:a7:84:b9:ba:a0:33:11:35:17:05:eb: ae:c6:9a:bc:87:ef:34:5d:27:37:f6:05:48:d2:06: 81:50:80:b8:b7:bb:1e:f8:24:7c:29:0b:88:fd:89: 9d:59:fb:92:8c:5d:b0:dd:75:f5:ef:93:7b:48:a0: fe:3c:a5:c3:e4:04:c6:3b:e5:6c:49:20:ae:ef:eb: dd:f1:33:66:24:e6:a8:c4:b3:3d:ef:0b:de:35:8b: 7a:0c:b9:11:d7:3b:2c:aa:28:87:c5:08:81:91:a7: a0:93:70:3c:ca:28:07:63:38:52:5f:ab:87:42:70: f0:fd:f0:9b:4c:da:6c:d1:bf:77:aa:93:7c:93:f9: 2b:4c:4b:a1:61:ee:81:13:d0:ff:7c:f6:44:69:d0: 35:92:6a:e5:88:fc:54:d7:0f:f5:76:a4:40:c9:ff: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:BE:33:D9:82:91:22:F1:08:7F:22:52:36:27:56:E7:EF:A4:86 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:eb:91:ef:72:03:03:65:97:c7:ef:17:3b:72:ed:d6:e6:0d: 4b:9b:f4:dd:91:d1:cc:ae:d7:50:2f:17:d4:e2:df:20:25:fc: 0a:c9:44:2d:dc:a6:b3:cb:cb:5e:c2:9d:a1:61:a9:29:d9:96: cb:45:3c:2f:86:42:79:75:60:01:a1:41:1c:4f:1a:de:45:a7: 3f:86:c7:bb:f7:4a:5f:23:c8:8c:5d:11:19:f7:7a:31:34:5c: b0:03:53:83:ac:6a:c4:f0:68:fe:61:38:f0:4b:57:93:3e:52: 8e:e3:38:6f:3b:76:ab:91:65:65:8b:2c:fc:c7:45:61:08:86: 51:f7:94:43:87:37:6d:fc:f2:51:9d:f4:45:1c:ea:0a:a5:1e: c0:4b:44:6a:e9:0e:1f:53:f5:b3:1a:95:e3:f0:10:96:4d:26: 62:48:e1:3f:15:44:1b:48:87:2b:96:ac:23:18:35:a5:64:19: 72:d4:bb:9d:28:60:d1:03:3c:56:30:46:75:fd:35:fb:0c:7b: f3:c6:ec:fa:30:16:0d:be:a8:31:52:b0:c4:05:e9:2d:f8:be: e9:21:d9:ac:12:29:89:e7:1a:77:7b:eb:1c:a9:f9:ef:c7:eb: b7:e7:71:7c:f7:21:d0:b0:2b:6b:f4:26:41:0c:bb:f7:60:6c: d3:11:73:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOrbXxDVv8LZV3teft8T/GNq6WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA4MDYxMzM3MTlaFw0yNTA4MDkyMDA5MTlaMDMxMTAvBgNV BAMTKEJERjhCRTMzRDk4MjkxMjJGMTA4N0YyMjUyMzYyNzU2RTdFRkE0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvqIGLl0iNuZp0cv0Pqiur09iD c6Ztrg8CWs8Ietnr3FjWMRt8C9h7IMhhnkAQeQU4qyuKsyV5kyGedQO8MlP+DT0n yeEkqIf0NcfqRTGyFxckSdfOSpSi6qr6d2inhLm6oDMRNRcF667GmryH7zRdJzf2 BUjSBoFQgLi3ux74JHwpC4j9iZ1Z+5KMXbDddfXvk3tIoP48pcPkBMY75WxJIK7v 693xM2Yk5qjEsz3vC941i3oMuRHXOyyqKIfFCIGRp6CTcDzKKAdjOFJfq4dCcPD9 8JtM2mzRv3eqk3yT+StMS6Fh7oET0P989kRp0DWSauWI/FTXD/V2pEDJ/61jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfi+M9mCkSLxCH8iUjYnVufvpIYwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXrke9yAwNll8fvFzty7dbmDUub9N2R0cyu 11AvF9Ti3yAl/ArJRC3cprPLy17CnaFhqSnZlstFPC+GQnl1YAGhQRxPGt5Fpz+G x7v3Sl8jyIxdERn3ejE0XLADU4OsasTwaP5hOPBLV5M+Uo7jOG87dquRZWWLLPzH RWEIhlH3lEOHN2388lGd9EUc6gqlHsBLRGrpDh9T9bMalePwEJZNJmJI4T8VRBtI hyuWrCMYNaVkGXLUu50oYNEDPFYwRnX9NfsMe/PG7PowFg2+qDFSsMQF6S34vukh 2awSKYnnGnd76xyp+e/H67fncXz3IdCwK2v0JkEMu/dgbNMRc1c= -----END CERTIFICATE-----Generated at Thu Aug 7 23:55:58 2025 by rpki-client