$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: E5QrfgdclZ9s51E6BRZk9zc44Hs3r2CAb1O86UDL9M4= Subject key identifier: 3A:A1:A6:FB:2D:0E:6B:EE:26:42:9B:1F:85:FA:AF:0E:61:AC:08:A3 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 56D4849486A32E7F7760E0AC1B90C4EEB1A6D29D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0136 Signing time: Tue 04 Nov 2025 04:11:55 +0000 Manifest this update: Tue 04 Nov 2025 04:06:55 +0000 Manifest next update: Fri 07 Nov 2025 04:37:55 +0000 Files and hashes: 1: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) 2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 4: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: AawBoiigrkGtPqup3BUA8syA/Wms8luO1hin4+6yz2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d4:84:94:86:a3:2e:7f:77:60:e0:ac:1b:90:c4:ee:b1:a6:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Nov 4 04:06:55 2025 GMT Not After : Nov 7 04:37:55 2025 GMT Subject: CN=3AA1A6FB2D0E6BEE26429B1F85FAAF0E61AC08A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:f2:71:d4:a8:a3:3c:aa:24:40:50:5b:7d: a2:b1:cf:5d:d2:e6:d0:d4:6d:e5:57:e0:c8:55:9d: e4:d0:c3:4b:50:3c:ef:86:3a:65:76:45:f2:51:a6: 9d:76:ce:41:3e:a0:b6:6f:ad:84:24:9c:26:7e:60: 5d:fc:78:02:75:27:09:d2:d5:5b:d8:16:69:3a:35: a4:95:04:96:9f:f4:f4:a2:64:12:01:f6:6e:84:8e: 06:ed:3b:48:8a:79:80:6e:50:57:23:50:35:b7:94: 11:b8:3a:88:7e:36:d4:e2:65:6b:c9:13:9d:1e:73: 1e:b8:03:16:ba:ac:f4:bc:c8:77:30:0e:35:99:c5: 7a:59:0d:91:5d:cd:67:50:d8:f4:b5:cf:50:b9:37: df:c3:a9:48:3f:03:c1:72:df:b8:54:fb:7a:ab:89: 24:d7:76:66:0d:ec:9a:b0:d8:74:5d:ed:18:fa:0a: cf:d5:49:8d:76:38:75:b8:3f:62:d1:f3:ce:d4:d1: 5d:5c:5a:29:57:22:71:a8:01:4a:b0:19:8e:e9:2c: c7:10:ec:0d:d5:28:be:1b:e8:d6:a2:18:ef:bf:3f: 59:a3:9a:ed:a9:5e:03:a1:0a:75:a2:9b:d7:4c:78: 15:ef:7f:17:e3:83:84:9a:b5:c3:93:4f:a4:39:e7: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A1:A6:FB:2D:0E:6B:EE:26:42:9B:1F:85:FA:AF:0E:61:AC:08:A3 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:14:49:ba:2f:59:73:98:41:38:22:16:b8:c1:89:ee:da:8d: db:84:ca:da:b5:6c:5c:ad:a4:5b:4c:34:a1:4a:2a:1b:1e:2e: 7e:9e:5d:4e:d3:73:ab:f8:40:60:c1:27:31:fe:30:32:08:3a: 8b:aa:7e:0f:9d:9f:78:b0:bc:b3:32:98:5f:57:50:ac:48:af: d1:a4:f3:4d:cf:10:b3:6e:8e:91:a9:35:8e:3f:df:a6:f7:0c: fb:9c:49:98:96:7f:fd:d4:32:db:a0:87:7d:3e:03:e6:a2:9d: 7b:4d:cc:fd:c3:eb:f4:ec:37:03:56:ca:40:30:7d:19:03:81: 36:c4:34:c2:a3:7f:87:9b:98:a6:c3:a4:9e:66:48:96:4c:63: d8:5a:7d:60:36:47:b6:f9:bb:32:00:b6:53:57:90:a8:f0:50: 19:5c:4b:44:dc:28:29:45:9e:e5:94:64:15:a6:06:33:eb:99: aa:18:c8:e6:99:fc:c8:b7:8a:d8:1e:f0:6a:d1:27:37:25:df: f2:33:86:8e:b8:e9:8c:42:e3:02:88:20:0c:9d:e9:bc:88:e4: bb:a1:4d:08:92:c8:4b:ca:f1:8b:a8:95:89:43:87:9d:7b:15: a4:79:2b:f1:63:c6:19:64:44:78:80:2e:ba:58:90:ae:9f:eb: eb:48:23:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtSElIajLn93YOCsG5DE7rGm0p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTExMDQwNDA2NTVaFw0yNTExMDcwNDM3NTVaMDMxMTAvBgNV BAMTKDNBQTFBNkZCMkQwRTZCRUUyNjQyOUIxRjg1RkFBRjBFNjFBQzA4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTPJx1KijPKokQFBbfaKxz13S 5tDUbeVX4MhVneTQw0tQPO+GOmV2RfJRpp12zkE+oLZvrYQknCZ+YF38eAJ1JwnS 1VvYFmk6NaSVBJaf9PSiZBIB9m6EjgbtO0iKeYBuUFcjUDW3lBG4Ooh+NtTiZWvJ E50ecx64Axa6rPS8yHcwDjWZxXpZDZFdzWdQ2PS1z1C5N9/DqUg/A8Fy37hU+3qr iSTXdmYN7Jqw2HRd7Rj6Cs/VSY12OHW4P2LR887U0V1cWilXInGoAUqwGY7pLMcQ 7A3VKL4b6NaiGO+/P1mjmu2pXgOhCnWim9dMeBXvfxfjg4SatcOTT6Q55x6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqGm+y0Oa+4mQpsfhfqvDmGsCKMwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUUSbovWXOYQTgiFrjBie7ajduEytq1bFyt pFtMNKFKKhseLn6eXU7Tc6v4QGDBJzH+MDIIOouqfg+dn3iwvLMymF9XUKxIr9Gk 803PELNujpGpNY4/36b3DPucSZiWf/3UMtugh30+A+ainXtNzP3D6/TsNwNWykAw fRkDgTbENMKjf4ebmKbDpJ5mSJZMY9hafWA2R7b5uzIAtlNXkKjwUBlcS0TcKClF nuWUZBWmBjPrmaoYyOaZ/Mi3itge8GrRJzcl3/Izho646YxC4wKIIAyd6byI5Luh TQiSyEvK8YuolYlDh517FaR5K/FjxhlkRHiALrpYkK6f6+tII8M= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:41 2025 by rpki-client