$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: u4KiwE+eZrPrEn1nNN3H5uuU8U5Efebx3lml0Tey10M= Subject key identifier: 73:EE:5B:CF:CA:AC:5E:71:7F:F8:07:E2:D6:6A:DB:B3:D7:97:52:5E Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 45FAD29D9D8D140DD6F99E57B070E3D8D65DCB8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 04:40:53 +0000 Manifest this update: Wed 06 Aug 2025 04:35:53 +0000 Manifest next update: Sat 09 Aug 2025 06:18:53 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: +KyLF95OaP0rShWclRNLITxGaGvln7kFm7iGzz4fvPM=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:d2:9d:9d:8d:14:0d:d6:f9:9e:57:b0:70:e3:d8:d6:5d:cb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Aug 6 04:35:53 2025 GMT Not After : Aug 9 06:18:53 2025 GMT Subject: CN=73EE5BCFCAAC5E717FF807E2D66ADBB3D797525E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:bd:94:e8:d1:01:66:3b:7f:dd:4d:14:d1: aa:4c:f5:02:df:4d:33:e8:77:5a:56:bb:5e:2e:4c: 48:3a:53:40:44:65:e7:62:50:94:d9:c1:88:53:4f: e7:84:73:69:c0:2c:43:73:f6:e9:62:a5:c9:20:e2: 48:0d:18:ad:e7:a7:42:c1:6f:30:3a:e0:de:8b:fa: 7f:1e:44:7c:01:d2:2a:17:83:d9:45:4d:4a:fa:ad: 48:ab:53:70:4c:59:12:18:ff:d5:bd:4b:19:34:b4: 90:7b:99:88:77:db:b3:a4:58:cc:09:38:20:fa:73: 7b:b1:b2:61:e6:c6:21:61:9d:8b:42:cc:3f:56:13: fa:3b:35:45:0c:14:f2:61:75:42:87:29:66:ec:71: 05:a9:e2:ea:56:bc:5f:02:0a:16:7c:8c:c6:3d:0b: b9:f7:2d:3f:ee:b3:db:36:26:83:16:6f:b4:50:b6: 5e:4b:fc:ac:91:6d:e4:14:f9:bc:b6:b9:71:82:c8: 48:97:3a:88:81:e7:f4:70:4c:86:06:97:d0:22:ad: fa:4e:05:a8:cb:0a:b0:e2:25:19:f1:8a:c2:a6:bc: 16:7f:29:f1:92:41:45:59:f9:08:55:3a:1e:75:04: fb:0e:21:46:34:dd:26:13:cb:60:c6:a8:5a:2e:0b: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:5B:CF:CA:AC:5E:71:7F:F8:07:E2:D6:6A:DB:B3:D7:97:52:5E X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:51:35:a0:94:ff:e4:e0:6f:f0:de:41:77:d6:91:4a:5d:70: 22:fa:e6:51:34:42:fd:ee:60:7b:c2:f8:ec:4d:a2:98:5c:a7: b6:37:9f:f8:17:86:48:34:94:e6:68:a3:c7:ff:c5:04:b1:63: f6:5c:28:3a:22:27:86:0c:29:41:c8:b4:12:45:65:bd:d3:5c: d1:40:46:d2:e1:20:1c:65:6c:5e:d4:06:80:5b:91:5d:f0:cc: 37:10:fa:8c:11:f0:8e:3e:88:cb:07:b0:1d:5f:b6:cf:65:2a: 7d:0f:66:3e:c2:00:eb:ce:05:29:7b:e1:61:18:d3:b9:4f:47: a7:a9:88:c6:2f:e9:99:18:56:6d:7a:0a:8b:aa:0d:3b:71:aa: d4:c9:9b:e2:79:68:23:5c:aa:57:9c:4a:24:ff:35:2b:8d:7a: fc:d2:6a:9e:3f:70:42:80:6f:dc:a0:59:b6:45:e5:2f:b3:8f: e0:da:9f:b8:c7:d0:87:91:37:5a:a3:77:ce:cf:5c:fb:47:ce: 6f:7f:a4:ff:03:e4:b3:9b:16:2d:3b:80:80:12:5c:55:e4:30: eb:97:a2:5d:e3:dc:44:46:ad:e5:a2:3d:85:29:8d:a6:b7:bf: f8:d5:00:0f:7f:9f:3e:7e:9b:b2:4a:f1:5d:3c:a2:ae:53:e4: c2:c6:39:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfrSnZ2NFA3W+Z5XsHDj2NZdy4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA4MDYwNDM1NTNaFw0yNTA4MDkwNjE4NTNaMDMxMTAvBgNV BAMTKDczRUU1QkNGQ0FBQzVFNzE3RkY4MDdFMkQ2NkFEQkIzRDc5NzUyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Qb2U6NEBZjt/3U0U0apM9QLf TTPod1pWu14uTEg6U0BEZediUJTZwYhTT+eEc2nALENz9ulipckg4kgNGK3np0LB bzA64N6L+n8eRHwB0ioXg9lFTUr6rUirU3BMWRIY/9W9Sxk0tJB7mYh327OkWMwJ OCD6c3uxsmHmxiFhnYtCzD9WE/o7NUUMFPJhdUKHKWbscQWp4upWvF8CChZ8jMY9 C7n3LT/us9s2JoMWb7RQtl5L/KyRbeQU+by2uXGCyEiXOoiB5/RwTIYGl9AirfpO BajLCrDiJRnxisKmvBZ/KfGSQUVZ+QhVOh51BPsOIUY03SYTy2DGqFouCxldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+5bz8qsXnF/+Afi1mrbs9eXUl4wHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdRNaCU/+Tgb/DeQXfWkUpdcCL65lE0Qv3u YHvC+OxNophcp7Y3n/gXhkg0lOZoo8f/xQSxY/ZcKDoiJ4YMKUHItBJFZb3TXNFA RtLhIBxlbF7UBoBbkV3wzDcQ+owR8I4+iMsHsB1fts9lKn0PZj7CAOvOBSl74WEY 07lPR6epiMYv6ZkYVm16CouqDTtxqtTJm+J5aCNcqlecSiT/NSuNevzSap4/cEKA b9ygWbZF5S+zj+Dan7jH0IeRN1qjd87PXPtHzm9/pP8D5LObFi07gIASXFXkMOuX ol3j3ERGreWiPYUpjaa3v/jVAA9/nz5+m7JK8V08oq5T5MLGOfQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:02:29 2025 by rpki-client