$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: h3wHb40gVmk5MMYDe53hyRzKFK9q0xSzofMN8RSy66Y= Subject key identifier: AA:30:84:36:BF:C2:B2:4E:8F:3C:8D:49:3B:5B:71:6E:67:1D:25:C6 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 7CDDA98793F2B7406947850836E6F04D6C079498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01C9 Signing time: Sun 02 Nov 2025 22:42:10 +0000 Manifest this update: Sun 02 Nov 2025 22:37:10 +0000 Manifest next update: Thu 06 Nov 2025 04:22:10 +0000 Files and hashes: 1: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: bBA6ndIJBHg4YbULbvzCR/eXmySCw/VZTt3s/Or7/Ds=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 4: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:dd:a9:87:93:f2:b7:40:69:47:85:08:36:e6:f0:4d:6c:07:94:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Nov 2 22:37:10 2025 GMT Not After : Nov 6 04:22:10 2025 GMT Subject: CN=AA308436BFC2B24E8F3C8D493B5B716E671D25C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:85:e9:19:ab:d5:75:c7:71:3a:ec:8d:7b: a7:f8:d5:fe:9a:da:73:34:26:a4:45:ad:34:11:fb: af:0e:e3:f2:cf:da:b3:2f:ee:9d:63:5e:81:b5:93: 6e:00:86:56:6b:f8:0f:2c:70:12:32:e0:1e:3c:ab: 0e:89:62:b9:92:2e:00:2f:89:bb:2c:5f:11:01:cf: 8b:af:4d:5e:e1:0c:75:0a:32:eb:b0:b2:82:cb:e2: 66:e9:28:ed:3f:20:0a:4a:76:ca:b1:a7:74:7d:69: 60:6d:f6:b9:21:86:8f:93:68:d3:e1:64:e2:2f:cb: 81:1c:67:d8:d5:e6:d6:cb:0b:a3:73:d1:07:ca:61: 39:a4:19:41:1c:06:32:f4:20:f0:c9:23:52:38:07: 09:51:16:3b:50:1c:2d:09:f2:40:ea:18:79:ca:59: cf:22:0a:99:ad:ad:7b:5a:42:70:13:46:bf:fe:48: af:29:26:26:95:fb:fb:7f:bd:e4:12:3a:a9:d2:be: bc:73:4a:38:32:78:68:c1:f9:45:0b:a5:a6:f6:ee: 66:95:15:ad:d8:ab:af:1e:d9:84:42:44:84:30:ea: 9a:38:ac:87:90:23:7c:71:c2:5f:48:3c:b2:0a:12: b6:87:aa:e0:2c:07:95:a2:64:00:21:8d:f2:9f:8b: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:30:84:36:BF:C2:B2:4E:8F:3C:8D:49:3B:5B:71:6E:67:1D:25:C6 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:78:98:b2:c6:40:86:f9:4e:83:68:d0:7f:9b:9e:76:7c:a2: ce:e6:03:35:24:6e:1c:50:c2:4e:8a:3b:9b:97:24:10:a0:fd: 12:e0:ac:e4:39:83:ba:c8:af:aa:37:0c:7c:08:b9:89:58:6e: 06:37:89:f8:ca:db:13:4d:db:b2:08:31:b4:23:11:bc:4b:71: 5b:3c:27:71:17:e0:01:59:fd:7e:b7:f2:8d:36:33:49:ed:d4: d5:96:9d:2c:83:15:c0:b2:f5:f3:91:b8:df:1d:a9:4e:68:15: aa:38:f3:36:57:3b:09:1a:dd:06:d8:da:2c:84:67:05:93:b8: 6a:84:d7:32:78:89:e7:c1:d6:e4:8f:a4:ab:87:02:e3:92:dd: 81:6f:54:ba:1b:ce:8a:e1:1e:bb:12:de:77:a9:47:50:bb:23: 67:3a:19:4a:85:a4:9a:d8:77:d7:28:0c:d3:ad:5f:04:38:c7: 27:98:64:71:71:2a:11:fb:cb:ce:9d:f1:f5:c0:6f:88:5a:f5: 72:3a:e2:64:bc:2e:fd:e9:7d:57:94:c9:4b:99:57:77:a8:13: 4b:62:37:8e:29:18:d1:14:25:6a:25:10:96:45:ac:88:34:9d: 4f:05:e8:df:21:c4:d1:29:44:46:e4:4f:19:dd:fb:08:43:c9: d6:b7:83:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfN2ph5Pyt0BpR4UINubwTWwHlJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTExMDIyMjM3MTBaFw0yNTExMDYwNDIyMTBaMDMxMTAvBgNV BAMTKEFBMzA4NDM2QkZDMkIyNEU4RjNDOEQ0OTNCNUI3MTZFNjcxRDI1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/YXpGavVdcdxOuyNe6f41f6a 2nM0JqRFrTQR+68O4/LP2rMv7p1jXoG1k24AhlZr+A8scBIy4B48qw6JYrmSLgAv ibssXxEBz4uvTV7hDHUKMuuwsoLL4mbpKO0/IApKdsqxp3R9aWBt9rkhho+TaNPh ZOIvy4EcZ9jV5tbLC6Nz0QfKYTmkGUEcBjL0IPDJI1I4BwlRFjtQHC0J8kDqGHnK Wc8iCpmtrXtaQnATRr/+SK8pJiaV+/t/veQSOqnSvrxzSjgyeGjB+UULpab27maV Fa3Yq68e2YRCRIQw6po4rIeQI3xxwl9IPLIKEraHquAsB5WiZAAhjfKfixM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjCENr/Csk6PPI1JO1txbmcdJcYwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIh4mLLGQIb5ToNo0H+bnnZ8os7mAzUkbhxQ wk6KO5uXJBCg/RLgrOQ5g7rIr6o3DHwIuYlYbgY3ifjK2xNN27IIMbQjEbxLcVs8 J3EX4AFZ/X638o02M0nt1NWWnSyDFcCy9fORuN8dqU5oFao48zZXOwka3QbY2iyE ZwWTuGqE1zJ4iefB1uSPpKuHAuOS3YFvVLobzorhHrsS3nepR1C7I2c6GUqFpJrY d9coDNOtXwQ4xyeYZHFxKhH7y86d8fXAb4ha9XI64mS8Lv3pfVeUyUuZV3eoE0ti N44pGNEUJWolEJZFrIg0nU8F6N8hxNEpREbkTxnd+whDyda3gxM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:10 2025 by rpki-client