$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: zHp+z8E2AfKJ6XLMfP2mYX/mgvfQ7F2ecAgn4VQft50= Subject key identifier: FA:F6:1E:CE:73:CE:3D:F4:57:E8:24:F7:2C:29:AF:75:61:76:5D:BC Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 6AB6165417E88FA9674ADED3DB57732DEECD9DE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 0288 Signing time: Tue 17 Jun 2025 05:22:00 +0000 Manifest this update: Tue 17 Jun 2025 05:17:00 +0000 Manifest next update: Fri 20 Jun 2025 12:11:00 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: 3DYpjkqlDXadSI+HOLLtUx1i9XUl5RkqgtrI8iIkm5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b6:16:54:17:e8:8f:a9:67:4a:de:d3:db:57:73:2d:ee:cd:9d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Jun 17 05:17:00 2025 GMT Not After : Jun 20 12:11:00 2025 GMT Subject: CN=FAF61ECE73CE3DF457E824F72C29AF7561765DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:ba:06:12:55:34:f8:23:0d:e5:d9:e8:36: 91:10:b8:7b:97:d1:2c:dc:16:3e:25:8a:f0:77:f1: 25:91:f5:79:1a:e2:e4:34:9a:b4:e3:7c:f1:c4:a9: 0b:68:1b:a9:8d:7d:27:a2:c6:93:0d:50:ce:58:3a: 96:6f:0a:8b:e7:4b:f4:bf:06:b2:a0:10:34:40:af: 0e:9f:d7:99:40:af:48:54:b3:be:ba:b7:36:95:59: 67:6d:46:97:75:7f:2a:aa:08:c9:02:f6:0f:4b:54: cc:37:65:cf:42:5d:ed:17:9c:d2:cf:e6:60:9b:98: 64:15:16:07:a9:ce:ba:a2:77:9b:5e:57:88:4c:0b: f9:d0:5d:de:2d:7c:84:46:b6:1a:78:55:61:b2:4e: ad:26:d8:9f:60:ad:01:2c:be:0e:bf:99:56:8c:56: e0:19:96:fa:ad:e5:b7:8c:e9:65:bd:3a:d3:44:4d: 73:1c:d1:ea:ae:82:1a:69:01:d9:3d:01:d8:74:d1: e1:00:97:79:34:36:b0:b4:9d:05:38:12:55:7a:7a: 82:16:59:5d:af:96:e9:42:45:d1:b2:97:e4:d2:c2: 8c:0d:7f:cb:60:20:8c:43:fc:6a:3b:d4:cf:81:3f: 17:b5:c1:03:47:6b:50:54:93:7f:07:6a:71:49:48: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:1E:CE:73:CE:3D:F4:57:E8:24:F7:2C:29:AF:75:61:76:5D:BC X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6b:a4:2f:9f:d6:42:45:77:04:41:7a:76:3e:be:bf:d0:40: 3b:ac:51:f4:cd:0b:e0:47:d3:89:9c:f6:f7:5b:1e:36:cf:5a: 13:d1:79:b5:a7:09:0e:ae:38:68:b3:ed:e9:09:1e:c2:89:03: a5:26:c5:51:d2:83:b3:54:3d:cf:15:7b:56:67:2a:ab:92:7a: 83:c1:02:b2:99:0e:ce:48:4e:e8:91:a9:bb:a8:02:f3:f5:c5: c0:5a:fc:69:7b:cc:c5:8b:a9:1b:ca:a0:20:c0:46:e2:49:d6: 38:b6:58:0f:a3:6a:eb:e8:46:a6:e5:75:3d:df:39:04:41:7d: e3:48:3e:3b:a9:a4:a4:cd:1d:89:37:ae:af:fc:65:47:42:18: 6c:02:20:56:26:89:cd:9b:be:ec:3c:4d:08:18:c8:4e:a1:a9: fd:40:b1:45:14:23:54:a0:1e:d4:fe:39:01:5c:1b:03:df:57: 59:1a:e7:ad:85:03:1f:90:23:0f:4e:27:cf:05:60:f8:04:e1: 4e:93:87:31:9d:03:8d:32:6a:b1:2c:ff:a0:55:81:91:ce:e0: 56:7a:62:6a:f1:2b:88:04:bb:9f:3b:02:bb:92:c0:02:b0:47: 76:86:62:87:8f:8c:aa:30:b1:b7:91:fe:45:1b:e0:8e:1c:ce: b0:61:d0:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarYWVBfoj6lnSt7T21dzLe7NnecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA2MTcwNTE3MDBaFw0yNTA2MjAxMjExMDBaMDMxMTAvBgNV BAMTKEZBRjYxRUNFNzNDRTNERjQ1N0U4MjRGNzJDMjlBRjc1NjE3NjVEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQroGElU0+CMN5dnoNpEQuHuX 0SzcFj4livB38SWR9Xka4uQ0mrTjfPHEqQtoG6mNfSeixpMNUM5YOpZvCovnS/S/ BrKgEDRArw6f15lAr0hUs766tzaVWWdtRpd1fyqqCMkC9g9LVMw3Zc9CXe0XnNLP 5mCbmGQVFgepzrqid5teV4hMC/nQXd4tfIRGthp4VWGyTq0m2J9grQEsvg6/mVaM VuAZlvqt5beM6WW9OtNETXMc0equghppAdk9Adh00eEAl3k0NrC0nQU4ElV6eoIW WV2vlulCRdGyl+TSwowNf8tgIIxD/Go71M+BPxe1wQNHa1BUk38HanFJSMExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vYeznPOPfRX6CT3LCmvdWF2XbwwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADprpC+f1kJFdwRBenY+vr/QQDusUfTNC+BH 04mc9vdbHjbPWhPRebWnCQ6uOGiz7ekJHsKJA6UmxVHSg7NUPc8Ve1ZnKquSeoPB ArKZDs5ITuiRqbuoAvP1xcBa/Gl7zMWLqRvKoCDARuJJ1ji2WA+jauvoRqbldT3f OQRBfeNIPjuppKTNHYk3rq/8ZUdCGGwCIFYmic2bvuw8TQgYyE6hqf1AsUUUI1Sg HtT+OQFcGwPfV1ka562FAx+QIw9OJ88FYPgE4U6ThzGdA40yarEs/6BVgZHO4FZ6 YmrxK4gEu587AruSwAKwR3aGYoePjKowsbeR/kUb4I4czrBh0GI= -----END CERTIFICATE-----Generated at Tue Jun 17 10:58:32 2025 by rpki-client