$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: hFQV5qk/98vyI7Hq3JIjkQKZBIbfqKnt7pFXgs488Ns= Subject key identifier: 06:D1:4B:85:FF:FD:CF:E2:8F:0A:6D:B5:A9:E8:B7:BC:F3:F6:7A:E2 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 323417755FFCBF4A75A3139DB6989196F42D7193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0219 Signing time: Mon 03 Nov 2025 03:51:00 +0000 Manifest this update: Mon 03 Nov 2025 03:46:00 +0000 Manifest next update: Thu 06 Nov 2025 06:58:00 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: gMp26T+Gopttt1d1MrOZfpvnDeyceIqKENO1ESPjHJs=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:34:17:75:5f:fc:bf:4a:75:a3:13:9d:b6:98:91:96:f4:2d:71:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Nov 3 03:46:00 2025 GMT Not After : Nov 6 06:58:00 2025 GMT Subject: CN=06D14B85FFFDCFE28F0A6DB5A9E8B7BCF3F67AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:4c:c6:83:74:2a:fd:4a:2d:f9:27:1f:eb: d7:5e:1f:3c:4d:46:05:79:f9:33:0b:7b:b5:1d:b9: 01:44:c6:d7:2a:af:d4:5e:0d:ae:3b:58:c0:3b:01: 2f:8a:f7:17:5c:9a:54:a7:fc:8d:ec:ae:4f:98:a4: 11:13:2c:be:10:67:98:41:4a:90:2c:66:e4:7c:0a: 9a:2b:97:41:30:6e:d3:3a:fb:aa:d2:28:a0:f8:cb: 09:be:65:93:c9:16:19:92:67:f7:26:03:31:78:4a: c6:a0:3d:da:f7:0d:8f:0c:49:77:69:70:98:00:27: c2:1c:05:da:1e:bf:df:65:32:75:e6:98:41:96:7a: 05:c7:74:8e:49:8f:00:cc:7e:55:94:ed:4c:65:39: f6:b5:19:54:8d:cc:c5:32:be:29:0b:ff:94:5d:2d: 79:a1:d2:17:9b:d8:f5:87:5d:08:3f:1c:9c:3b:ee: 53:d5:d4:45:26:57:10:eb:71:b5:df:96:32:c3:04: f4:2c:48:8c:9d:82:10:2e:9d:83:8b:28:58:1e:43: 45:05:81:7d:59:72:e3:35:77:c0:ae:77:51:e5:ef: f6:62:2f:87:8c:5b:df:d2:30:a6:af:a7:10:95:6f: db:f5:62:8f:7e:bb:83:4a:8d:d3:c8:b3:33:45:05: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:4B:85:FF:FD:CF:E2:8F:0A:6D:B5:A9:E8:B7:BC:F3:F6:7A:E2 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c8:c7:5a:5c:bd:14:3e:96:a6:1f:a1:1f:4d:52:c5:ae:bc: 32:a4:b1:84:bf:11:b5:40:2f:cb:20:97:79:81:50:0b:10:65: e3:5f:28:49:cb:d3:76:8a:7f:f0:84:3a:b1:3a:13:80:0a:ff: 26:16:b9:01:c8:f7:43:a3:be:a2:db:64:ff:84:e6:b7:b0:d0: af:a0:b0:2a:3d:7a:78:b6:7e:26:5d:ab:c6:b1:53:a9:c5:de: 87:80:88:12:f0:ab:c4:81:1a:56:9d:80:44:a2:dc:0a:54:ee: f1:8c:9d:86:3b:af:b2:cf:09:fa:d4:3f:12:a7:16:2e:0c:bc: a2:01:41:d6:f4:0f:a2:73:a9:3c:66:03:66:52:41:17:b6:ec: 3d:1d:1d:99:77:aa:29:d6:0b:10:32:35:4d:38:d1:d4:f4:48: 93:04:e9:92:12:5c:31:7f:84:67:aa:27:7d:2c:70:f5:be:1a: 93:f5:78:14:bf:d5:4e:83:18:35:1c:48:50:61:af:ad:87:86: 94:8a:10:a4:c4:35:dc:6b:1b:c3:d8:8e:80:e5:87:bf:02:12: 12:06:48:ee:34:0e:89:72:36:59:22:fd:eb:fb:68:97:69:0d: 51:98:98:13:60:52:f9:19:5f:df:c0:22:cf:fd:77:07:bd:fb: 2f:a6:e1:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjQXdV/8v0p1oxOdtpiRlvQtcZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTExMDMwMzQ2MDBaFw0yNTExMDYwNjU4MDBaMDMxMTAvBgNV BAMTKDA2RDE0Qjg1RkZGRENGRTI4RjBBNkRCNUE5RThCN0JDRjNGNjdBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W0zGg3Qq/Uot+Scf69deHzxN RgV5+TMLe7UduQFExtcqr9ReDa47WMA7AS+K9xdcmlSn/I3srk+YpBETLL4QZ5hB SpAsZuR8Cporl0EwbtM6+6rSKKD4ywm+ZZPJFhmSZ/cmAzF4SsagPdr3DY8MSXdp cJgAJ8IcBdoev99lMnXmmEGWegXHdI5JjwDMflWU7UxlOfa1GVSNzMUyvikL/5Rd LXmh0heb2PWHXQg/HJw77lPV1EUmVxDrcbXfljLDBPQsSIydghAunYOLKFgeQ0UF gX1ZcuM1d8Cud1Hl7/ZiL4eMW9/SMKavpxCVb9v1Yo9+u4NKjdPIszNFBfjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBtFLhf/9z+KPCm21qei3vPP2euIwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbIx1pcvRQ+lqYfoR9NUsWuvDKksYS/EbVA L8sgl3mBUAsQZeNfKEnL03aKf/CEOrE6E4AK/yYWuQHI90OjvqLbZP+E5rew0K+g sCo9eni2fiZdq8axU6nF3oeAiBLwq8SBGladgESi3ApU7vGMnYY7r7LPCfrUPxKn Fi4MvKIBQdb0D6JzqTxmA2ZSQRe27D0dHZl3qinWCxAyNU040dT0SJME6ZISXDF/ hGeqJ30scPW+GpP1eBS/1U6DGDUcSFBhr62HhpSKEKTENdxrG8PYjoDlh78CEhIG SO40DolyNlki/ev7aJdpDVGYmBNgUvkZX9/AIs/9dwe9+y+m4aw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:27 2025 by rpki-client