$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: opX6BMeZN8F9XyNHPTNPA/+NwSjMiA0BDRZacaHWwOc= Subject key identifier: 32:CB:96:6C:F6:46:08:B9:49:50:1C:BE:C7:D3:3D:0A:F7:94:47:5B Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 08E1A023868C03B2699A35070C2F15986094FDE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 051E Signing time: Tue 04 Nov 2025 13:20:53 +0000 Manifest this update: Tue 04 Nov 2025 13:15:53 +0000 Manifest next update: Fri 07 Nov 2025 23:44:53 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: Saj46f+5K0vtMCtuo6QknrxPHby0O2rVwiu6NfmkoVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e1:a0:23:86:8c:03:b2:69:9a:35:07:0c:2f:15:98:60:94:fd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Nov 4 13:15:53 2025 GMT Not After : Nov 7 23:44:53 2025 GMT Subject: CN=32CB966CF64608B949501CBEC7D33D0AF794475B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:4c:92:eb:40:9a:f1:6b:e2:eb:c5:7f:c8: 6e:89:e9:72:a0:14:11:c8:4a:99:9e:a9:dc:f3:d7: b3:cd:b0:93:5e:8f:a4:2b:c2:55:d2:f8:e5:96:0b: cf:e1:95:dd:3f:b6:86:d1:f7:fe:ef:56:04:fe:bd: 49:42:7b:95:13:96:7a:b3:28:6f:2d:3f:74:a5:b8: 41:1a:2c:bc:d6:2a:76:2e:c7:42:1d:16:ea:16:09: f8:26:c0:46:99:00:64:c0:bc:d2:6d:91:02:90:e9: bb:59:c1:aa:8b:c5:cb:7d:c0:4e:34:70:73:b4:55: 55:54:61:e2:8b:f7:15:2e:3e:99:69:7e:1f:33:ef: 44:22:c6:f7:2d:e9:ee:11:dd:25:66:f2:90:03:0a: b5:5f:f8:ec:8d:e1:7c:ab:dc:c0:f4:75:80:ce:ba: ac:ab:9f:5d:2d:a8:1e:15:52:e6:c1:fc:52:cc:93: 9b:e5:00:59:9f:2f:b8:4b:94:03:bb:02:4f:47:cf: 63:8e:4e:57:76:72:80:bd:30:2a:9d:1b:ac:e6:7f: 2d:f8:63:10:63:80:6c:2d:54:d1:40:63:92:fd:73: 93:5f:58:e0:eb:fc:3b:25:eb:fa:33:6a:4d:04:49: 82:a8:e1:c4:37:cb:69:29:6f:4b:08:b2:af:e5:c3: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:96:6C:F6:46:08:B9:49:50:1C:BE:C7:D3:3D:0A:F7:94:47:5B X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:45:96:d8:f2:2e:40:20:4b:ae:39:f3:a5:a4:f6:bc:3b:cf: cd:51:e4:89:24:3f:b3:91:91:e1:57:9b:cf:dd:2b:03:46:47: 6f:97:f1:69:7b:29:0f:e2:4e:2a:20:af:22:7e:db:07:63:c0: 65:26:b7:ad:65:73:89:9b:f1:4c:44:33:64:be:72:98:d4:93: 7f:61:6b:44:81:bb:af:85:ab:a8:b5:14:97:ca:be:38:f9:d6: ba:52:4d:9a:b9:6d:9c:7d:78:c9:f6:51:da:e1:db:8b:cd:97: a4:e1:8f:b1:3f:c9:e8:2f:25:3d:06:a4:3b:4d:bd:c4:41:e2: 1f:21:4b:6c:84:73:6d:82:3a:6e:2e:a7:3d:d8:bd:dd:8d:bb: fb:aa:59:f6:cd:61:15:f0:85:30:21:3c:c4:66:ad:22:4c:5d: 39:74:fa:ea:5c:43:2d:00:75:83:7c:88:46:32:cb:0f:2c:b5: b1:4f:89:bf:77:9a:aa:6d:35:ab:8e:f4:75:ff:6a:28:52:e1: 14:7c:44:fa:12:62:b3:17:99:ce:6f:68:70:ff:13:1a:64:7b: 42:89:f2:f9:33:a9:53:18:9b:2f:8d:53:f5:b5:84:eb:95:42: ba:62:6d:fe:23:95:89:a1:05:9d:15:1d:92:d1:fc:b1:b2:18: 13:fa:83:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOGgI4aMA7JpmjUHDC8VmGCU/eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTExMDQxMzE1NTNaFw0yNTExMDcyMzQ0NTNaMDMxMTAvBgNV BAMTKDMyQ0I5NjZDRjY0NjA4Qjk0OTUwMUNCRUM3RDMzRDBBRjc5NDQ3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefkyS60Ca8Wvi68V/yG6J6XKg FBHISpmeqdzz17PNsJNej6QrwlXS+OWWC8/hld0/tobR9/7vVgT+vUlCe5UTlnqz KG8tP3SluEEaLLzWKnYux0IdFuoWCfgmwEaZAGTAvNJtkQKQ6btZwaqLxct9wE40 cHO0VVVUYeKL9xUuPplpfh8z70Qixvct6e4R3SVm8pADCrVf+OyN4Xyr3MD0dYDO uqyrn10tqB4VUubB/FLMk5vlAFmfL7hLlAO7Ak9Hz2OOTld2coC9MCqdG6zmfy34 YxBjgGwtVNFAY5L9c5NfWODr/Dsl6/ozak0ESYKo4cQ3y2kpb0sIsq/lw8MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsuWbPZGCLlJUBy+x9M9CveUR1swHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZFltjyLkAgS64586Wk9rw7z81R5IkkP7OR keFXm8/dKwNGR2+X8Wl7KQ/iTiogryJ+2wdjwGUmt61lc4mb8UxEM2S+cpjUk39h a0SBu6+Fq6i1FJfKvjj51rpSTZq5bZx9eMn2Udrh24vNl6Thj7E/yegvJT0GpDtN vcRB4h8hS2yEc22COm4upz3Yvd2Nu/uqWfbNYRXwhTAhPMRmrSJMXTl0+upcQy0A dYN8iEYyyw8stbFPib93mqptNauO9HX/aihS4RR8RPoSYrMXmc5vaHD/Expke0KJ 8vkzqVMYmy+NU/W1hOuVQrpibf4jlYmhBZ0VHZLR/LGyGBP6gyk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:13 2025 by rpki-client