$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: AztxGYC0Jj69eWaPsxghOFE2+grb6nvWl3n4Tdl6VjM= Subject key identifier: 63:0D:33:A8:6C:16:4A:BC:06:B4:7C:56:8E:E6:4C:9D:1A:06:08:E7 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 07C9E4F89FFD8C1EE1DD56B975F2A1CB9D5E6900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 029E Signing time: Wed 06 Aug 2025 00:22:06 +0000 Manifest this update: Wed 06 Aug 2025 00:17:06 +0000 Manifest next update: Sat 09 Aug 2025 06:24:06 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: XUTRUEVNfMY3j11e6zXSMg0otghE48nzMVhPaq5eMJs=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c9:e4:f8:9f:fd:8c:1e:e1:dd:56:b9:75:f2:a1:cb:9d:5e:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Aug 6 00:17:06 2025 GMT Not After : Aug 9 06:24:06 2025 GMT Subject: CN=630D33A86C164ABC06B47C568EE64C9D1A0608E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:1a:ef:40:98:c6:61:66:dc:d6:5d:9b:2a: 01:a3:3e:c1:32:8a:3b:7d:5d:20:9d:45:a6:62:82: f7:4f:d4:7c:82:2e:f2:63:10:04:ca:da:63:e0:83: ae:3c:a0:08:7c:40:f6:a4:ec:f8:c1:c4:37:b2:7f: 96:92:f8:c4:42:40:a1:b4:85:65:01:97:aa:e1:3e: 50:c1:98:a3:1d:e0:76:66:35:b0:25:e7:24:2d:5b: 8b:9b:14:fb:53:45:f7:68:4f:01:d9:46:f9:11:f0: b5:d1:7f:59:b7:e7:4a:70:e4:95:f3:a1:61:dd:7a: b4:f0:85:d9:43:1b:fd:e5:f4:72:16:d3:35:bf:25: cd:05:21:38:71:bd:f6:e0:86:59:6c:de:eb:58:e8: b0:76:31:56:8e:98:38:ec:9b:80:d2:ba:19:e6:9b: 3b:96:0a:6b:84:48:b3:dc:44:0e:4a:21:a8:73:53: 44:da:25:08:6d:f6:35:ca:c3:c5:cf:b2:d0:24:03: c7:10:f1:d8:37:ab:c5:4c:ad:a7:12:a7:22:66:a8: 16:e7:ed:d1:3d:3a:27:55:c7:1e:15:76:8f:c7:34: 44:5e:4d:8b:9d:2d:74:82:e0:fe:01:be:58:84:ef: 32:83:26:db:f3:24:0d:d0:cb:99:a8:3e:e4:6f:ee: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0D:33:A8:6C:16:4A:BC:06:B4:7C:56:8E:E6:4C:9D:1A:06:08:E7 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:54:3b:56:01:41:0b:ae:98:88:82:56:d3:8a:cc:7f:38:0d: 9c:16:5a:86:d5:fe:58:e5:16:4b:4d:ac:85:13:d7:07:b6:c7: 21:bf:a0:93:04:16:3f:24:e5:1c:dc:22:51:d3:79:ee:b6:ba: 65:17:d1:c1:ca:b6:85:f5:d4:3d:d0:1f:c3:e9:32:31:e9:b3: 34:5e:5c:c8:6e:09:65:b2:27:77:1a:aa:cd:20:46:d9:2e:13: 28:0c:b3:92:ef:f3:a9:a3:cd:e1:02:c5:ea:7c:26:6d:97:24: 2a:ab:b1:30:c7:11:f1:54:d4:73:f2:00:93:83:06:83:d3:c8: 43:ff:c8:15:7d:57:33:21:bf:0b:1c:b4:9d:ae:fb:fa:8d:d7: 67:2c:a2:1d:98:21:d4:fe:1b:5e:77:c2:63:5a:7c:38:63:ba: 00:86:3b:80:85:1f:6d:b1:8e:da:9b:a0:97:5e:f0:9b:eb:15: bd:10:f1:ef:c6:42:5a:1e:2e:7b:ed:ff:76:74:83:69:f2:c6: 80:d6:c9:c7:91:4c:37:9e:5f:df:c4:0a:c3:6a:9d:ae:53:0b: b0:93:8d:e9:d8:29:46:3a:6a:0b:ce:9e:14:17:7a:72:85:2b: 3a:7e:ef:cd:8f:3a:cd:72:44:e9:62:3c:5c:dc:5d:67:de:3b: f2:b6:00:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8nk+J/9jB7h3Va5dfKhy51eaQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA4MDYwMDE3MDZaFw0yNTA4MDkwNjI0MDZaMDMxMTAvBgNV BAMTKDYzMEQzM0E4NkMxNjRBQkMwNkI0N0M1NjhFRTY0QzlEMUEwNjA4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxxrvQJjGYWbc1l2bKgGjPsEy ijt9XSCdRaZigvdP1HyCLvJjEATK2mPgg648oAh8QPak7PjBxDeyf5aS+MRCQKG0 hWUBl6rhPlDBmKMd4HZmNbAl5yQtW4ubFPtTRfdoTwHZRvkR8LXRf1m350pw5JXz oWHderTwhdlDG/3l9HIW0zW/Jc0FIThxvfbghlls3utY6LB2MVaOmDjsm4DSuhnm mzuWCmuESLPcRA5KIahzU0TaJQht9jXKw8XPstAkA8cQ8dg3q8VMracSpyJmqBbn 7dE9OidVxx4Vdo/HNEReTYudLXSC4P4BvliE7zKDJtvzJA3Qy5moPuRv7sP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYw0zqGwWSrwGtHxWjuZMnRoGCOcwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtUO1YBQQuumIiCVtOKzH84DZwWWobV/ljl FktNrIUT1we2xyG/oJMEFj8k5RzcIlHTee62umUX0cHKtoX11D3QH8PpMjHpszRe XMhuCWWyJ3caqs0gRtkuEygMs5Lv86mjzeECxep8Jm2XJCqrsTDHEfFU1HPyAJOD BoPTyEP/yBV9VzMhvwsctJ2u+/qN12csoh2YIdT+G153wmNafDhjugCGO4CFH22x jtqboJde8JvrFb0Q8e/GQloeLnvt/3Z0g2nyxoDWyceRTDeeX9/ECsNqna5TC7CT jenYKUY6agvOnhQXenKFKzp+782POs1yROliPFzcXWfeO/K2AKs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:48 2025 by rpki-client