$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: Ik+9IH8H/Nt0ifalzclKMO7WD1DSEfSHcXxJA+qyITA= Subject key identifier: CB:C3:6C:0F:BE:6F:5B:AF:7C:A8:48:1A:4D:B2:CC:10:DE:01:03:7E Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 1BC824EE67A967FD96D1F3AEE24F6E6AC22B4A2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 010D Signing time: Tue 05 Aug 2025 06:31:55 +0000 Manifest this update: Tue 05 Aug 2025 06:26:55 +0000 Manifest next update: Fri 08 Aug 2025 13:45:55 +0000 Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) 3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) 4: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: /vK3mSmypZ3NF76Pu4do/litxjab1GoWMpDspuWjNRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c8:24:ee:67:a9:67:fd:96:d1:f3:ae:e2:4f:6e:6a:c2:2b:4a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Aug 5 06:26:55 2025 GMT Not After : Aug 8 13:45:55 2025 GMT Subject: CN=CBC36C0FBE6F5BAF7CA8481A4DB2CC10DE01037E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:46:f0:62:8b:9d:7d:5f:f4:0a:b9:28:b0: b2:b8:20:37:4e:9a:cd:fb:5d:77:c4:4c:3e:d9:30: 3b:c9:fb:a0:e5:7e:e6:14:72:d5:90:44:f7:fa:85: 18:7e:de:86:e2:72:37:d3:86:ce:ee:33:be:d3:b4: ca:ed:4a:4b:ce:30:90:1b:4f:f4:c3:a2:bd:f3:71: df:ab:21:f8:39:eb:28:e8:44:62:42:67:03:4a:d3: a9:97:a1:66:1a:d6:32:8f:6b:0b:21:29:5d:6a:01: 49:18:e0:d7:21:d7:47:3e:68:2e:1c:9b:5c:b5:28: 12:c8:66:84:db:99:08:59:80:de:87:e7:2b:29:3f: d1:5f:9f:a4:26:20:bd:ab:0f:12:21:04:20:6f:7c: 5d:41:e4:18:a8:ea:ec:2e:e0:6c:f5:5f:75:d5:05: 83:35:6a:7f:31:8b:a0:13:13:4d:47:6c:a1:fa:c5: 2e:71:f5:1c:0b:43:d1:da:9b:d3:35:e1:05:c9:0e: 68:2a:ec:14:1f:a6:ba:55:fc:04:28:17:b5:62:b9: 89:d6:74:3f:ec:96:a4:7c:18:fe:bf:15:87:46:51: 32:af:de:d4:d8:ba:95:6b:88:f5:aa:8a:95:1d:eb: 08:ff:2c:ea:95:f4:1d:7d:0c:29:73:4f:b7:b6:6e: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C3:6C:0F:BE:6F:5B:AF:7C:A8:48:1A:4D:B2:CC:10:DE:01:03:7E X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c3:70:06:4b:b8:aa:b9:34:74:00:dd:44:2b:9b:79:c7:32: c2:04:8e:16:49:dc:c8:ed:8d:ac:dc:fa:5f:84:15:1b:74:55: 4e:06:4b:b3:98:bb:72:f3:e5:b3:0b:b0:19:1b:72:c3:b6:f2: 75:91:b1:82:1e:82:e1:6c:d9:dc:af:6b:86:ef:95:98:06:24: e9:eb:35:bf:62:96:64:1a:27:ed:b2:8d:d4:4d:0a:c7:d4:36: 09:02:55:b4:49:f7:c6:6e:10:2a:62:64:aa:9b:28:0b:1f:c2: 7a:ca:b3:ee:b1:4d:2a:5b:05:37:b6:1e:78:29:bb:70:f9:dc: 98:7d:77:7d:6b:bd:ee:c9:39:7c:ae:e9:9c:a7:e6:72:99:e0: c9:5c:64:00:40:41:04:5a:7f:fa:b7:97:5c:c1:48:56:a1:a8: df:fa:03:39:26:08:0f:14:91:26:f3:d1:5f:0c:a8:98:c6:aa: 02:c8:03:56:a6:29:5a:94:ed:e0:ee:56:4e:a8:2e:fd:83:27: c2:ce:28:3a:c7:58:25:76:ef:33:76:47:0d:12:e2:46:69:e2: b2:bd:a7:4e:96:d3:74:df:96:24:ed:9c:ae:b7:70:c3:47:ad: 84:c6:93:14:0b:d1:f5:f3:96:6f:7a:45:d3:52:44:d8:2e:38: 57:97:2f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8gk7mepZ/2W0fOu4k9uasIrSi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA4MDUwNjI2NTVaFw0yNTA4MDgxMzQ1NTVaMDMxMTAvBgNV BAMTKENCQzM2QzBGQkU2RjVCQUY3Q0E4NDgxQTREQjJDQzEwREUwMTAzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwm0bwYoudfV/0CrkosLK4IDdO ms37XXfETD7ZMDvJ+6DlfuYUctWQRPf6hRh+3obicjfThs7uM77TtMrtSkvOMJAb T/TDor3zcd+rIfg56yjoRGJCZwNK06mXoWYa1jKPawshKV1qAUkY4Nch10c+aC4c m1y1KBLIZoTbmQhZgN6H5yspP9Ffn6QmIL2rDxIhBCBvfF1B5Bio6uwu4Gz1X3XV BYM1an8xi6ATE01HbKH6xS5x9RwLQ9Ham9M14QXJDmgq7BQfprpV/AQoF7ViuYnW dD/slqR8GP6/FYdGUTKv3tTYupVriPWqipUd6wj/LOqV9B19DClzT7e2blhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy8NsD75vW698qEgaTbLMEN4BA34wHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvDcAZLuKq5NHQA3UQrm3nHMsIEjhZJ3Mjt jazc+l+EFRt0VU4GS7OYu3Lz5bMLsBkbcsO28nWRsYIeguFs2dyva4bvlZgGJOnr Nb9ilmQaJ+2yjdRNCsfUNgkCVbRJ98ZuECpiZKqbKAsfwnrKs+6xTSpbBTe2Hngp u3D53Jh9d31rve7JOXyu6Zyn5nKZ4MlcZABAQQRaf/q3l1zBSFahqN/6AzkmCA8U kSbz0V8MqJjGqgLIA1amKVqU7eDuVk6oLv2DJ8LOKDrHWCV27zN2Rw0S4kZp4rK9 p06W03TfliTtnK63cMNHrYTGkxQL0fXzlm96RdNSRNguOFeXL1o= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:10 2025 by rpki-client