$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: Hw5IrvTTigHayDIVC4bmZ1AjitONqwxN2lkkZ1vW9MM= Subject key identifier: 01:F8:04:AA:4A:67:07:31:8B:39:67:40:15:E5:F9:ED:94:38:68:B8 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 4E963EF08E494A82A3D2F8CF6C7E4FF2E9A60278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 27 Signing time: Sun 02 Nov 2025 23:41:44 +0000 Manifest this update: Sun 02 Nov 2025 23:36:44 +0000 Manifest next update: Thu 06 Nov 2025 08:05:44 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: Es9jXX2NSktiLMQSf0+ZNtpTrTdhlxxq1kFIDaKaSo4=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:96:3e:f0:8e:49:4a:82:a3:d2:f8:cf:6c:7e:4f:f2:e9:a6:02:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Nov 2 23:36:44 2025 GMT Not After : Nov 6 08:05:44 2025 GMT Subject: CN=01F804AA4A6707318B39674015E5F9ED943868B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:b1:e0:69:77:34:57:d4:42:e2:f7:0b:4f: 60:6d:ac:60:7b:e0:3f:69:dc:55:c3:81:c7:90:d1: 67:a9:77:64:bc:ba:81:44:91:c6:5b:43:37:10:54: 62:6f:4a:62:9d:04:5a:70:4c:38:a7:f8:e9:88:86: 0c:3f:4e:d4:02:ab:21:f3:ad:ef:2b:a2:1e:fe:d5: bf:3a:3d:1f:62:f2:34:98:20:f9:63:29:e7:9a:36: 0d:e9:b9:f9:1d:d0:ce:cd:5a:6c:91:03:61:f2:0a: 54:70:11:72:b5:bf:69:07:03:55:c5:3f:32:ab:3c: 66:c0:46:f7:e3:9c:b6:0d:97:69:a1:82:a4:ef:35: eb:b9:8d:50:6a:8a:ca:94:2e:00:ab:09:3a:a6:e7: 07:aa:fc:bb:49:d9:bf:75:a4:5f:f8:ac:cb:4d:be: 47:55:d5:5d:19:1b:03:07:15:27:fe:33:56:75:75: 45:4e:86:00:1d:05:64:24:bc:81:28:de:d0:a6:c0: 18:a6:0b:e9:98:7c:ec:3e:e3:4b:ab:42:52:fb:17: eb:7c:d7:73:f9:d6:0e:3b:82:4a:a2:0c:91:64:fb: 68:40:9c:b7:a5:02:38:75:7f:8c:d0:07:79:37:90: 7e:a0:c0:c2:27:0d:6b:f5:1d:5a:d8:6c:6b:69:28: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F8:04:AA:4A:67:07:31:8B:39:67:40:15:E5:F9:ED:94:38:68:B8 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6c:db:fb:f0:f6:d4:fc:53:b1:4c:00:2b:0e:13:64:bd:6a: 03:1b:79:00:6b:1d:9b:19:a4:20:3b:55:d4:fb:98:a3:18:f5: ae:5e:77:c9:e2:7d:d9:1d:de:04:69:e3:af:f9:c5:3b:bf:38: 27:62:78:1d:e6:ce:7b:1d:cf:ed:3e:d6:d9:b7:47:3e:8d:eb: d0:67:62:b5:a9:97:ed:f3:2c:d2:69:32:9c:5f:13:c5:bd:d7: 72:ed:75:24:80:64:59:f7:af:3c:13:29:e5:a4:c1:fb:58:68: f8:cc:db:be:ac:db:a7:27:22:16:3a:a0:b6:0f:72:c5:a9:e9: da:45:a5:88:73:f9:17:c2:7b:75:e3:b4:6c:0b:db:cf:8a:9d: 56:a3:ea:d8:14:a1:98:02:75:33:4b:dc:e6:38:b2:54:9c:d0: 00:6d:67:76:68:a1:8f:26:11:6b:8d:20:15:b3:9c:98:5b:30: 66:f2:b1:2e:ff:be:b3:02:a7:1a:7e:f2:46:3e:5b:64:97:cb: b9:41:0f:5b:8f:9e:fe:d4:fd:6c:af:8c:d7:ef:c8:c8:72:b6: ee:8d:e9:bc:c6:20:98:31:c1:ea:c1:cb:b0:2e:6a:6a:0a:94: 4d:a9:a1:fe:10:46:73:f1:d3:61:b3:18:72:2b:fb:e8:aa:92: 79:a1:3f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpY+8I5JSoKj0vjPbH5P8ummAngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNTExMDIyMzM2NDRaFw0yNTExMDYwODA1NDRaMDMxMTAvBgNV BAMTKDAxRjgwNEFBNEE2NzA3MzE4QjM5Njc0MDE1RTVGOUVEOTQzODY4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6erHgaXc0V9RC4vcLT2BtrGB7 4D9p3FXDgceQ0Wepd2S8uoFEkcZbQzcQVGJvSmKdBFpwTDin+OmIhgw/TtQCqyHz re8roh7+1b86PR9i8jSYIPljKeeaNg3pufkd0M7NWmyRA2HyClRwEXK1v2kHA1XF PzKrPGbARvfjnLYNl2mhgqTvNeu5jVBqisqULgCrCTqm5weq/LtJ2b91pF/4rMtN vkdV1V0ZGwMHFSf+M1Z1dUVOhgAdBWQkvIEo3tCmwBimC+mYfOw+40urQlL7F+t8 13P51g47gkqiDJFk+2hAnLelAjh1f4zQB3k3kH6gwMInDWv1HVrYbGtpKCNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfgEqkpnBzGLOWdAFeX57ZQ4aLgwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVs2/vw9tT8U7FMACsOE2S9agMbeQBrHZsZ pCA7VdT7mKMY9a5ed8nifdkd3gRp46/5xTu/OCdieB3mznsdz+0+1tm3Rz6N69Bn YrWpl+3zLNJpMpxfE8W913LtdSSAZFn3rzwTKeWkwftYaPjM276s26cnIhY6oLYP csWp6dpFpYhz+RfCe3XjtGwL28+KnVaj6tgUoZgCdTNL3OY4slSc0ABtZ3ZooY8m EWuNIBWznJhbMGbysS7/vrMCpxp+8kY+W2SXy7lBD1uPnv7U/WyvjNfvyMhytu6N 6bzGIJgxwerBy7AuamoKlE2pof4QRnPx02GzGHIr++iqknmhP/E= -----END CERTIFICATE-----Generated at Tue Nov 4 02:06:00 2025 by rpki-client