$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: tE0iTDwj7AELnKYQc2cmP1/na7nRCvN4T4+Xu0Siy40= Subject key identifier: 68:5F:B8:87:8C:4D:2D:37:41:69:74:05:51:8E:15:B1:E7:CA:0F:2D Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 2E43E3AA263DF0F0F012A2EA484AFCD42B73B7CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 0275 Signing time: Wed 06 Aug 2025 14:11:34 +0000 Manifest this update: Wed 06 Aug 2025 14:06:34 +0000 Manifest next update: Sat 09 Aug 2025 21:19:34 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 310pLuQbLyJbSVcQji5JRnIdivv4v8Gr3ho1H1gxa+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:43:e3:aa:26:3d:f0:f0:f0:12:a2:ea:48:4a:fc:d4:2b:73:b7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Aug 6 14:06:34 2025 GMT Not After : Aug 9 21:19:34 2025 GMT Subject: CN=685FB8878C4D2D3741697405518E15B1E7CA0F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:9e:6b:c7:b8:fd:82:72:e2:2c:b1:5a:e4: 00:2b:ad:3b:a9:59:ec:d1:d5:ba:4f:3b:59:c0:c9: a7:40:3f:a2:7e:9a:89:ce:92:78:ce:96:15:fd:cd: 72:e9:68:6a:67:2f:9e:a5:9f:79:c1:9c:e4:a0:b8: f9:5d:65:4b:61:b8:ea:84:9e:98:88:24:72:8c:b8: 4d:2d:47:70:42:20:2a:5e:9c:4d:77:2a:e7:0e:43: 5d:99:3a:7c:6d:a3:72:e6:9a:e0:04:b4:5c:ff:34: 3f:69:60:fa:e3:88:b0:73:dc:80:2d:53:92:4b:96: 5c:8e:a0:36:1d:ae:87:6d:a5:6c:5d:58:7d:6a:55: e9:56:36:ae:6c:a1:5a:95:d8:0f:2f:58:6c:be:00: c2:d4:90:87:0d:80:a7:8c:1f:d2:83:61:37:cf:cf: ce:26:66:9f:da:f5:3e:5d:89:a0:d3:dc:ea:fa:f7: bc:15:5c:0e:da:91:97:da:86:b9:02:4b:27:80:9c: 88:0c:eb:cc:42:7a:9b:02:11:c3:b5:fb:40:77:b9: f1:d3:a2:85:12:39:d9:a9:4f:a0:94:c3:51:f5:32: 4a:6c:71:7b:ee:68:37:91:cb:3e:bf:31:84:44:dc: ba:3e:c5:cb:67:1e:72:d0:a9:af:e7:ea:33:f8:ae: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:B8:87:8C:4D:2D:37:41:69:74:05:51:8E:15:B1:E7:CA:0F:2D X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4c:ac:f4:b6:d7:57:84:c1:b6:a0:66:21:9b:c6:dd:18:11: d7:cb:8e:e5:55:32:31:91:ca:e8:a0:03:0b:a9:a7:f5:10:10: f3:67:c7:83:b3:bc:a8:03:1a:ff:a8:64:8a:e6:95:52:90:70: 51:89:41:c3:07:d0:2e:94:19:ca:73:bd:6c:5d:6b:97:6b:8c: bb:bc:ea:98:d8:ad:9c:01:a5:c9:1e:9a:74:c1:55:06:8b:2b: 53:88:5d:d3:76:5d:33:10:0e:ca:bb:09:32:93:34:39:bf:00: 70:46:38:22:b3:17:7b:28:02:8c:40:c3:c7:8b:4e:80:34:44: e2:1b:67:e6:0a:1c:74:e2:41:c6:8f:2c:44:d9:fb:4c:12:d7: 19:b4:36:b6:f7:18:c4:8a:5b:94:8b:b1:f5:7d:a3:a8:d1:91: 5b:15:d0:e2:09:8c:0b:a5:4d:23:63:d2:30:1f:82:e6:ab:44: 3f:bf:b3:53:33:71:50:d1:fa:66:0f:7c:81:2f:26:cc:c1:a4: 52:4f:2f:02:aa:7b:05:34:b6:8d:64:b9:b8:fa:14:d7:1e:d1: a5:91:d9:30:c1:7c:5b:9b:5b:2d:b5:ea:62:d3:e5:7e:d2:87: d4:03:cb:53:4d:fe:ba:3d:f5:28:71:ed:40:b0:6f:4e:7a:38: b9:36:1f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkPjqiY98PDwEqLqSEr81Ctzt84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA4MDYxNDA2MzRaFw0yNTA4MDkyMTE5MzRaMDMxMTAvBgNV BAMTKDY4NUZCODg3OEM0RDJEMzc0MTY5NzQwNTUxOEUxNUIxRTdDQTBGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsZ5rx7j9gnLiLLFa5AArrTup WezR1bpPO1nAyadAP6J+monOknjOlhX9zXLpaGpnL56ln3nBnOSguPldZUthuOqE npiIJHKMuE0tR3BCICpenE13KucOQ12ZOnxto3LmmuAEtFz/ND9pYPrjiLBz3IAt U5JLllyOoDYdrodtpWxdWH1qVelWNq5soVqV2A8vWGy+AMLUkIcNgKeMH9KDYTfP z84mZp/a9T5diaDT3Or697wVXA7akZfahrkCSyeAnIgM68xCepsCEcO1+0B3ufHT ooUSOdmpT6CUw1H1MkpscXvuaDeRyz6/MYRE3Lo+xctnHnLQqa/n6jP4ruuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaF+4h4xNLTdBaXQFUY4VsefKDy0wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1MrPS211eEwbagZiGbxt0YEdfLjuVVMjGR yuigAwupp/UQEPNnx4OzvKgDGv+oZIrmlVKQcFGJQcMH0C6UGcpzvWxda5drjLu8 6pjYrZwBpckemnTBVQaLK1OIXdN2XTMQDsq7CTKTNDm/AHBGOCKzF3soAoxAw8eL ToA0ROIbZ+YKHHTiQcaPLETZ+0wS1xm0Nrb3GMSKW5SLsfV9o6jRkVsV0OIJjAul TSNj0jAfguarRD+/s1MzcVDR+mYPfIEvJszBpFJPLwKqewU0to1kubj6FNce0aWR 2TDBfFubWy216mLT5X7Sh9QDy1NN/ro99Shx7UCwb056OLk2Hx4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:01 2025 by rpki-client