$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: 3wteT6yz7vguABaXhYzpEdTblJgkXzM5vuRULdZ3Hiw= Subject key identifier: 1D:8B:D1:5E:12:C7:F4:4D:FD:17:CD:51:56:0D:E4:43:2B:DD:0B:01 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 5954E89309E8A739B576C8B6FAA433CFCB7FD42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02C6 Signing time: Mon 03 Nov 2025 22:02:04 +0000 Manifest this update: Mon 03 Nov 2025 21:57:04 +0000 Manifest next update: Fri 07 Nov 2025 00:27:04 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: TNsooQ8pkGinQ+8oQdijiTU36CcxOO8PrcpJObyazXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:54:e8:93:09:e8:a7:39:b5:76:c8:b6:fa:a4:33:cf:cb:7f:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Nov 3 21:57:04 2025 GMT Not After : Nov 7 00:27:04 2025 GMT Subject: CN=1D8BD15E12C7F44DFD17CD51560DE4432BDD0B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:5a:21:b9:00:ff:37:f8:f5:62:87:79:87: 59:06:de:68:9d:bd:d4:12:68:d3:f3:1e:ee:26:41: 7e:ad:37:14:f7:97:ba:d0:3f:e5:ca:89:1d:db:06: 17:85:23:d8:e2:23:c5:d8:0b:07:a5:f2:fb:5d:f4: 17:98:24:61:cf:46:2e:a3:8b:36:ca:1b:7b:48:2b: 9d:09:8a:83:ea:2a:cb:9e:4c:7f:e4:a1:bc:43:2e: d4:53:16:50:d2:96:e8:c9:25:8d:03:fc:46:50:97: d1:96:96:79:cd:c5:fc:88:1e:73:a3:14:4c:ca:9f: 35:a8:f5:70:ab:7a:8a:45:8b:10:e7:c7:80:5f:af: c2:73:8a:76:54:57:45:fd:d5:96:2b:90:1c:32:b1: d9:7c:c8:a6:13:3b:c6:8f:3e:39:9a:d8:8a:00:03: 30:be:83:50:64:09:d9:85:96:51:bd:81:51:fc:b6: 82:58:10:3d:15:e9:ba:4d:e2:9c:9e:f5:71:40:41: e7:1f:f3:1a:9b:33:e0:2f:aa:4f:4f:8f:da:50:de: f4:07:0f:ac:e9:fe:4a:d4:eb:27:bc:18:a2:f5:d3: b5:80:c3:ec:4c:85:49:38:a1:e3:37:55:cf:b6:62: bc:b1:1b:a8:d7:8b:35:10:fe:95:0d:f3:cb:27:af: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:D1:5E:12:C7:F4:4D:FD:17:CD:51:56:0D:E4:43:2B:DD:0B:01 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5c:cf:b7:69:63:7d:76:02:e8:01:2a:28:83:80:e5:f0:fb: 87:3a:5d:82:67:d7:f8:ed:a4:67:0f:14:7b:c4:e9:8c:2e:6a: 49:29:df:37:bf:19:df:a5:6e:ad:2e:4a:50:cd:68:bb:9a:30: d4:45:92:2e:22:b4:5e:28:ef:69:c8:73:1e:87:1d:09:b8:0a: 28:b1:3f:9f:7e:da:47:17:12:cb:80:b6:b7:a2:17:46:b9:84: db:75:64:c9:c5:ec:69:e1:e1:e2:09:4e:af:49:4f:85:3f:c4: 8c:b2:4d:ea:41:90:6a:3d:d6:2e:b9:cf:9d:c5:c3:dc:94:b2: f3:bb:61:ae:0e:d5:3c:08:fd:27:83:0d:54:e6:6d:4f:13:73: 09:3a:93:dc:0d:2c:82:25:10:41:ce:90:2f:02:87:1c:f5:b8: 20:84:e3:d6:1a:86:b3:08:0c:71:10:3a:00:b3:7f:3e:ed:61: 16:25:02:a0:38:e2:0d:b2:60:fd:49:10:49:7c:1c:27:21:5c: a0:fe:11:61:bb:4b:9b:d4:ee:6c:c2:5a:9d:8d:fd:6f:cf:d9: c6:48:c3:b0:f7:97:c2:a5:8e:73:c2:c9:7a:0f:3e:00:47:c3: bb:c2:2a:c9:c2:6a:89:dc:06:44:54:86:4a:25:e5:59:9f:05: f1:4b:08:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVTokwnopzm1dsi2+qQzz8t/1C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTExMDMyMTU3MDRaFw0yNTExMDcwMDI3MDRaMDMxMTAvBgNV BAMTKDFEOEJEMTVFMTJDN0Y0NERGRDE3Q0Q1MTU2MERFNDQzMkJERDBCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmT1ohuQD/N/j1Yod5h1kG3mid vdQSaNPzHu4mQX6tNxT3l7rQP+XKiR3bBheFI9jiI8XYCwel8vtd9BeYJGHPRi6j izbKG3tIK50JioPqKsueTH/kobxDLtRTFlDSlujJJY0D/EZQl9GWlnnNxfyIHnOj FEzKnzWo9XCreopFixDnx4Bfr8JzinZUV0X91ZYrkBwysdl8yKYTO8aPPjma2IoA AzC+g1BkCdmFllG9gVH8toJYED0V6bpN4pye9XFAQecf8xqbM+Avqk9Pj9pQ3vQH D6zp/krU6ye8GKL107WAw+xMhUk4oeM3Vc+2YryxG6jXizUQ/pUN88snr6KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYvRXhLH9E39F81RVg3kQyvdCwEwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVcz7dpY312AugBKiiDgOXw+4c6XYJn1/jt pGcPFHvE6Ywuakkp3ze/Gd+lbq0uSlDNaLuaMNRFki4itF4o72nIcx6HHQm4Ciix P59+2kcXEsuAtreiF0a5hNt1ZMnF7Gnh4eIJTq9JT4U/xIyyTepBkGo91i65z53F w9yUsvO7Ya4O1TwI/SeDDVTmbU8Tcwk6k9wNLIIlEEHOkC8Chxz1uCCE49YahrMI DHEQOgCzfz7tYRYlAqA44g2yYP1JEEl8HCchXKD+EWG7S5vU7mzCWp2N/W/P2cZI w7D3l8KljnPCyXoPPgBHw7vCKsnCaoncBkRUhkol5VmfBfFLCLU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:15 2025 by rpki-client