$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: hRvge+5rN8PFru4IiKIItQ5VxOdhynppeJkkXafAslM= Subject key identifier: F3:D7:6C:1B:B7:80:E0:7F:A9:D8:5A:99:33:2A:2C:06:03:CA:22:03 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 213A7D59DFFD7F50A795DC30D1ED88B1BCC08D4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: EE Signing time: Mon 03 Nov 2025 09:10:55 +0000 Manifest this update: Mon 03 Nov 2025 09:05:55 +0000 Manifest next update: Thu 06 Nov 2025 15:26:55 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: krjxWpcjOzUyUaQy4OUb8WtxefHo+3nML2HvBdnEu70=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3a:7d:59:df:fd:7f:50:a7:95:dc:30:d1:ed:88:b1:bc:c0:8d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Nov 3 09:05:55 2025 GMT Not After : Nov 6 15:26:55 2025 GMT Subject: CN=F3D76C1BB780E07FA9D85A99332A2C0603CA2203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:60:5c:59:2a:b1:68:f0:d5:9c:4e:58:05: b5:34:88:4d:8b:e9:11:bf:c7:99:94:7a:dc:cf:42: 12:0a:58:b9:ab:1d:dc:59:79:d6:54:83:85:5e:5e: ed:21:2e:aa:5d:36:be:1a:da:f5:81:cd:4b:97:bb: 8c:a1:2d:72:86:5f:a6:08:05:e6:1b:87:c6:7c:ea: 63:15:1d:44:6e:00:dc:71:71:a7:c8:ad:b4:7e:bc: eb:59:23:73:b9:b9:d2:67:44:32:11:eb:90:b8:af: 8e:b7:12:83:ba:b7:77:2e:8c:35:f4:f9:f0:2c:6d: b9:ac:8a:0c:94:2a:a7:93:68:48:09:a7:16:a2:a7: 54:2e:22:1a:6f:d7:f2:1b:7f:2c:27:07:97:3a:09: e7:8f:da:9d:52:00:8b:55:25:06:08:41:9a:81:c2: 3c:af:82:1f:e5:31:17:b5:c2:ea:6c:dd:2b:66:56: 5b:2e:7d:23:04:cd:60:cf:5f:10:55:59:20:2b:9c: 0e:8b:6c:97:47:c9:46:12:3d:1a:dd:1a:56:79:42: 87:cf:78:17:ef:cd:da:7a:6c:4a:22:ea:96:15:40: 40:f5:af:5c:fc:08:be:9d:c6:eb:3c:99:b6:d9:e3: 34:e4:47:ca:21:e5:b2:8e:5f:31:79:56:7c:78:02: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D7:6C:1B:B7:80:E0:7F:A9:D8:5A:99:33:2A:2C:06:03:CA:22:03 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7b:1f:d4:8e:75:c0:7b:52:08:f4:49:75:ce:c0:66:63:55: c1:a1:1a:3b:8b:8e:76:ac:4e:71:8c:aa:fe:e1:6a:01:d8:a5: 63:ea:1a:df:4a:1e:f4:10:3b:72:7c:4a:f2:31:75:1d:b2:72: ed:02:e0:9f:03:e1:f7:18:df:a7:94:31:6b:92:75:74:ce:91: a2:a7:89:c5:07:11:32:94:81:1a:ee:94:d2:45:25:50:b3:d2: 16:b5:1b:7c:92:7d:32:5e:3f:9c:5c:28:d9:70:e1:79:29:54: 82:55:99:91:e8:5e:8c:cb:24:a1:81:2b:b0:a0:39:34:2f:ee: a7:92:dc:e3:14:ee:d0:4f:c4:b5:04:9f:9f:89:80:61:de:38: 6e:c3:ba:d6:b9:a2:64:ca:3e:d5:e3:71:40:38:a6:b2:87:0b: 40:b7:ac:f5:e2:16:b8:28:7f:71:e8:51:c5:24:89:3f:c2:de: 7b:4a:d7:e6:8a:ea:c6:df:a5:40:67:f3:4e:5f:69:0b:96:49: 68:9d:62:d4:4e:ce:6c:9e:26:7a:8e:88:43:93:4f:35:69:9e: 63:70:25:5c:40:76:5a:17:18:f6:85:19:ff:3d:71:bb:06:e0: 0e:bf:84:b5:f2:61:9a:dc:6c:da:31:90:15:c2:87:1a:b2:f7: 9b:f2:32:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITp9Wd/9f1Cnldww0e2IsbzAjU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTExMDMwOTA1NTVaFw0yNTExMDYxNTI2NTVaMDMxMTAvBgNV BAMTKEYzRDc2QzFCQjc4MEUwN0ZBOUQ4NUE5OTMzMkEyQzA2MDNDQTIyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCWBcWSqxaPDVnE5YBbU0iE2L 6RG/x5mUetzPQhIKWLmrHdxZedZUg4VeXu0hLqpdNr4a2vWBzUuXu4yhLXKGX6YI BeYbh8Z86mMVHURuANxxcafIrbR+vOtZI3O5udJnRDIR65C4r463EoO6t3cujDX0 +fAsbbmsigyUKqeTaEgJpxaip1QuIhpv1/IbfywnB5c6CeeP2p1SAItVJQYIQZqB wjyvgh/lMRe1wups3StmVlsufSMEzWDPXxBVWSArnA6LbJdHyUYSPRrdGlZ5QofP eBfvzdp6bEoi6pYVQED1r1z8CL6dxus8mbbZ4zTkR8oh5bKOXzF5Vnx4Ai9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU89dsG7eA4H+p2FqZMyosBgPKIgMwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACt7H9SOdcB7Ugj0SXXOwGZjVcGhGjuLjnas TnGMqv7hagHYpWPqGt9KHvQQO3J8SvIxdR2ycu0C4J8D4fcY36eUMWuSdXTOkaKn icUHETKUgRrulNJFJVCz0ha1G3ySfTJeP5xcKNlw4XkpVIJVmZHoXozLJKGBK7Cg OTQv7qeS3OMU7tBPxLUEn5+JgGHeOG7Duta5omTKPtXjcUA4prKHC0C3rPXiFrgo f3HoUcUkiT/C3ntK1+aK6sbfpUBn805faQuWSWidYtROzmyeJnqOiEOTTzVpnmNw JVxAdloXGPaFGf89cbsG4A6/hLXyYZrcbNoxkBXChxqy95vyMjs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:25 2025 by rpki-client