$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: KB7flOO+rmiS/OBm1ixDGW5Pl9j1ELFC5SbxUGilf4A= Subject key identifier: EE:C5:00:83:07:45:CE:DB:3C:1D:58:0E:9C:49:42:00:C4:D9:E7:77 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 10294E756A7344111AC21B3B7D08F2445212C1B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01F2 Signing time: Tue 05 Aug 2025 20:21:06 +0000 Manifest this update: Tue 05 Aug 2025 20:16:06 +0000 Manifest next update: Sat 09 Aug 2025 02:36:06 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: 1+AIU0KJy8LOyKvIteg7JVJ722am60Sh8sfPXR+RMMY=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:4e:75:6a:73:44:11:1a:c2:1b:3b:7d:08:f2:44:52:12:c1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Aug 5 20:16:06 2025 GMT Not After : Aug 9 02:36:06 2025 GMT Subject: CN=EEC500830745CEDB3C1D580E9C494200C4D9E777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:43:19:4b:6a:0e:cb:b6:e5:d8:f8:08:0b: 0c:10:88:13:6f:78:99:69:38:ca:7d:83:60:d9:4c: 64:8a:09:66:fb:24:21:9a:d8:29:04:05:24:38:d0: d9:c5:25:d2:15:89:0d:ad:e0:78:b0:9e:cf:60:5b: d8:9b:6c:4f:c9:6b:17:21:7c:40:a2:ae:72:fe:5d: 50:50:86:68:8d:a6:91:e1:f1:c5:ed:ed:45:35:76: fb:3f:9c:8c:44:06:50:60:f4:7a:85:04:62:93:20: 60:d2:8d:1f:6f:20:38:07:7d:5b:52:18:d1:a8:99: bf:0e:75:78:0f:f9:bf:4e:80:b7:9f:f2:a1:13:c8: 66:85:72:54:2f:29:f1:a4:0c:cb:1b:a4:98:60:f9: 8a:84:14:3f:66:47:f3:f9:1e:db:e0:70:80:53:79: c0:24:e6:67:30:7e:9e:41:78:34:b6:c8:fa:27:40: 21:68:78:78:cd:8b:6f:47:50:70:d1:20:9f:fb:41: 5f:1e:8f:54:e1:fd:fd:f7:c7:e6:f8:96:13:61:2a: 37:f0:57:1c:fe:69:59:45:41:ec:ff:16:7f:7f:9e: f1:b1:9d:61:66:fb:61:da:24:0a:68:ad:d2:d9:e5: bd:5a:d0:34:66:6d:69:68:d1:59:ed:a4:a1:30:cd: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:00:83:07:45:CE:DB:3C:1D:58:0E:9C:49:42:00:C4:D9:E7:77 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9c:c5:0d:91:8b:bd:d1:a6:ad:74:6a:2f:58:3c:3c:e0:3d: 5d:91:3d:31:11:c0:f1:fc:9d:2c:7d:b0:f2:d7:97:fd:18:1e: 30:28:6e:0a:ff:c9:01:88:a2:a0:77:dd:6d:5b:63:6f:9a:a1: d9:37:34:1f:ae:b8:e8:ed:ed:fe:d4:0d:a3:04:13:3b:b5:6f: 79:e6:cf:a1:e1:57:f4:f7:63:1c:b7:95:12:26:fc:56:cf:30: f4:cd:79:d4:2f:ae:12:5b:89:ee:75:dd:ef:84:53:5a:10:af: bc:16:f2:eb:cd:16:42:e4:00:ec:5d:7f:ca:e7:50:0f:29:6d: 58:5e:aa:59:6e:f6:ae:b6:14:f8:1e:be:12:59:67:10:49:5a: fd:4d:a5:97:1f:c2:02:52:f0:a4:2a:e5:e3:bc:c3:2e:be:46: 87:07:0b:4e:af:1d:18:02:4f:39:e5:f9:d5:ca:dc:e0:72:f4: 27:c2:95:13:d7:cf:bf:80:6f:25:6b:5e:bc:5b:b2:61:b7:c4: 55:17:af:6d:79:26:04:35:6e:e4:fa:c5:b0:04:55:ff:39:4c: 26:f4:29:8d:5d:78:17:b0:7d:86:12:0d:97:17:33:3e:42:72: af:bd:af:e8:90:07:f5:28:df:19:0e:c5:8a:cc:35:5e:58:aa: b2:68:7a:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEClOdWpzRBEawhs7fQjyRFISwbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA4MDUyMDE2MDZaFw0yNTA4MDkwMjM2MDZaMDMxMTAvBgNV BAMTKEVFQzUwMDgzMDc0NUNFREIzQzFENTgwRTlDNDk0MjAwQzREOUU3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0kMZS2oOy7bl2PgICwwQiBNv eJlpOMp9g2DZTGSKCWb7JCGa2CkEBSQ40NnFJdIViQ2t4Hiwns9gW9ibbE/Jaxch fECirnL+XVBQhmiNppHh8cXt7UU1dvs/nIxEBlBg9HqFBGKTIGDSjR9vIDgHfVtS GNGomb8OdXgP+b9OgLef8qETyGaFclQvKfGkDMsbpJhg+YqEFD9mR/P5HtvgcIBT ecAk5mcwfp5BeDS2yPonQCFoeHjNi29HUHDRIJ/7QV8ej1Th/f33x+b4lhNhKjfw Vxz+aVlFQez/Fn9/nvGxnWFm+2HaJApordLZ5b1a0DRmbWlo0VntpKEwzVhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sUAgwdFzts8HVgOnElCAMTZ53cwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqcxQ2Ri73Rpq10ai9YPDzgPV2RPTERwPH8 nSx9sPLXl/0YHjAobgr/yQGIoqB33W1bY2+aodk3NB+uuOjt7f7UDaMEEzu1b3nm z6HhV/T3Yxy3lRIm/FbPMPTNedQvrhJbie513e+EU1oQr7wW8uvNFkLkAOxdf8rn UA8pbVheqllu9q62FPgevhJZZxBJWv1NpZcfwgJS8KQq5eO8wy6+RocHC06vHRgC Tznl+dXK3OBy9CfClRPXz7+AbyVrXrxbsmG3xFUXr215JgQ1buT6xbAEVf85TCb0 KY1deBewfYYSDZcXMz5Ccq+9r+iQB/Uo3xkOxYrMNV5YqrJoeh4= -----END CERTIFICATE-----Generated at Fri Aug 8 00:33:54 2025 by rpki-client