$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: BGimnS7Lrj32xuVA8HY6JuwT7NvJiH8MODF7BG142ok= Subject key identifier: D4:6B:C0:D4:5B:B4:11:A2:7F:19:11:67:6C:7F:0E:D8:D8:3A:86:3A Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 75A46405D44E2CE87A54F502B4F8BA805BF616BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01A1 Signing time: Tue 05 Aug 2025 06:52:10 +0000 Manifest this update: Tue 05 Aug 2025 06:47:10 +0000 Manifest next update: Fri 08 Aug 2025 18:14:10 +0000 Files and hashes: 1: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 4: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: H0baoyjaVqa8o8AEp7rnoxYYxmE9cjw643zVTCjwP8w=) 5: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a4:64:05:d4:4e:2c:e8:7a:54:f5:02:b4:f8:ba:80:5b:f6:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Aug 5 06:47:10 2025 GMT Not After : Aug 8 18:14:10 2025 GMT Subject: CN=D46BC0D45BB411A27F1911676C7F0ED8D83A863A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:51:08:63:1e:17:2c:a4:be:cd:f8:b9:3c: ca:1e:a4:b2:df:19:09:14:4f:96:ac:c5:f8:8c:2f: 8b:d2:d9:ac:1d:6c:29:0d:75:12:a7:cc:7f:ae:5e: 10:6b:91:dc:37:38:22:33:8b:0c:d5:94:35:6a:80: d7:04:af:9b:7f:9b:eb:92:f6:e8:0c:41:fe:c3:50: c1:8e:d6:6b:84:70:9b:3a:fa:6e:eb:3f:8b:8b:fa: df:89:4c:19:ee:5e:7d:08:21:45:31:0f:7a:ac:e7: 5a:f5:53:7e:2a:6d:90:d3:c0:ff:c1:87:02:07:bf: 2e:a6:89:e7:52:9d:7d:26:b9:61:d6:a8:0b:61:13: 33:5d:cf:09:65:47:6c:96:0c:5d:1a:29:5b:5e:5b: 20:c0:7a:f8:ee:77:10:a2:12:32:18:1a:43:83:3c: d4:72:e7:c0:cc:73:50:c1:c2:03:1c:b3:da:f5:96: c7:30:fd:3c:14:1e:b9:a3:6f:44:4a:19:9c:cc:bc: 61:a4:f1:d4:ff:b9:75:03:ab:f9:83:b2:9a:04:fc: 04:7f:a3:86:0e:82:c9:1c:e1:2f:59:12:24:9c:36: e4:93:45:57:15:62:8e:e0:61:9a:e3:98:0c:a2:87: 23:b3:c4:04:55:79:b2:24:a4:b4:1c:0b:ec:4b:79: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:C0:D4:5B:B4:11:A2:7F:19:11:67:6C:7F:0E:D8:D8:3A:86:3A X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c8:99:bb:60:55:9a:65:3e:3f:cd:20:14:b5:7e:e8:b1:25: 6d:79:a0:1c:10:d3:28:6b:d8:2f:f4:80:58:30:dc:53:74:46: b3:f8:20:6a:a1:ec:35:bc:6b:b7:04:fb:b0:71:b2:ee:83:d2: 6c:33:00:a9:12:ff:3d:3f:1c:84:eb:d5:b2:61:50:b1:37:43: 7e:64:ea:12:eb:4c:e2:50:e4:a4:32:b0:af:10:56:1e:d9:57: 20:b0:d4:5f:97:66:a8:10:2e:e6:4a:f2:5d:e7:6f:4e:bf:bf: 52:8b:f2:03:18:62:75:45:88:cd:c9:56:0f:04:e4:f2:13:3d: 0e:00:4e:3e:c6:35:7b:00:6a:a8:de:b2:86:01:5a:d5:41:11: 3d:98:c0:bb:da:d7:c1:80:a4:55:c0:5b:0a:18:33:09:5d:ee: d7:c3:c5:16:7c:1b:5c:7e:90:ed:72:fd:79:83:92:5f:5b:14: 8a:a3:0f:ea:50:e3:a3:fd:67:b4:32:06:98:ed:d6:c7:89:5e: 92:cf:88:c1:a5:3f:05:31:cb:e3:49:ba:03:01:5f:53:7d:bc: aa:ad:22:65:3f:7f:da:62:72:29:3a:d6:62:d9:ec:da:29:87: 91:11:d9:c3:22:2c:33:6f:0a:6f:56:cf:cc:52:20:a7:f2:0f: 1f:66:bf:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdaRkBdROLOh6VPUCtPi6gFv2FrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA4MDUwNjQ3MTBaFw0yNTA4MDgxODE0MTBaMDMxMTAvBgNV BAMTKEQ0NkJDMEQ0NUJCNDExQTI3RjE5MTE2NzZDN0YwRUQ4RDgzQTg2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLlEIYx4XLKS+zfi5PMoepLLf GQkUT5asxfiML4vS2awdbCkNdRKnzH+uXhBrkdw3OCIziwzVlDVqgNcEr5t/m+uS 9ugMQf7DUMGO1muEcJs6+m7rP4uL+t+JTBnuXn0IIUUxD3qs51r1U34qbZDTwP/B hwIHvy6miedSnX0muWHWqAthEzNdzwllR2yWDF0aKVteWyDAevjudxCiEjIYGkOD PNRy58DMc1DBwgMcs9r1lscw/TwUHrmjb0RKGZzMvGGk8dT/uXUDq/mDspoE/AR/ o4YOgskc4S9ZEiScNuSTRVcVYo7gYZrjmAyihyOzxARVebIkpLQcC+xLecBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GvA1Fu0EaJ/GRFnbH8O2Ng6hjowHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbImbtgVZplPj/NIBS1fuixJW15oBwQ0yhr 2C/0gFgw3FN0RrP4IGqh7DW8a7cE+7Bxsu6D0mwzAKkS/z0/HITr1bJhULE3Q35k 6hLrTOJQ5KQysK8QVh7ZVyCw1F+XZqgQLuZK8l3nb06/v1KL8gMYYnVFiM3JVg8E 5PITPQ4ATj7GNXsAaqjesoYBWtVBET2YwLva18GApFXAWwoYMwld7tfDxRZ8G1x+ kO1y/XmDkl9bFIqjD+pQ46P9Z7QyBpjt1seJXpLPiMGlPwUxy+NJugMBX1N9vKqt ImU/f9picik61mLZ7Noph5ER2cMiLDNvCm9Wz8xSIKfyDx9mv1s= -----END CERTIFICATE-----Generated at Thu Aug 7 03:27:41 2025 by rpki-client