$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: oLaEUEaucqX2gdR+bLQc3TACryQhtVKYnUSJTM65k9A= Subject key identifier: 47:E4:BB:3B:67:B6:6C:1B:96:B4:BB:5B:37:22:CF:D7:23:3A:1B:F4 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 766DB5241D5A5E98A4891136A56BDE2E4519DF1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: C6 Signing time: Mon 16 Jun 2025 23:31:01 +0000 Manifest this update: Mon 16 Jun 2025 23:26:01 +0000 Manifest next update: Thu 19 Jun 2025 23:49:01 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 2: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 4: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: doR9nWaOj8E57yrOGHbtXjm+gmr/YQb9q4GKNMVbf1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:b5:24:1d:5a:5e:98:a4:89:11:36:a5:6b:de:2e:45:19:df:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Jun 16 23:26:01 2025 GMT Not After : Jun 19 23:49:01 2025 GMT Subject: CN=47E4BB3B67B66C1B96B4BB5B3722CFD7233A1BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ce:92:fd:13:dd:68:bc:0f:37:df:79:45:ad: a8:2c:d7:60:77:21:21:a2:d2:b1:1c:c2:fc:51:5d: 2e:ad:29:f1:83:a6:5d:79:32:a0:72:4a:d4:e7:90: d8:30:eb:34:fc:a5:f3:56:e0:c8:36:11:25:58:5c: 39:df:ce:73:d8:cf:02:0c:bb:9b:c4:7f:38:8b:e1: 8b:30:d3:f9:3b:8e:bc:40:27:fe:41:66:a8:65:9a: f6:b1:49:87:e0:39:f3:d1:48:da:dd:0b:21:d9:32: ab:e8:c7:56:82:f1:17:33:92:b8:d9:ec:6b:c3:13: 29:14:09:73:13:bb:ad:dc:7f:4e:1b:fe:01:c3:7a: 5a:d4:24:c2:fb:62:c7:18:e7:4c:8a:7a:f9:6e:d9: d9:1b:be:c0:73:9f:1d:5e:05:51:90:a7:2f:25:0a: f6:9d:44:cf:0e:4c:95:4e:ec:1d:89:56:7b:9b:76: 48:f2:46:7c:cc:b2:c6:a4:7a:1d:93:af:58:50:e0: 44:8f:a7:08:b9:c7:e6:3e:70:fd:4b:1c:5c:8d:e3: f4:b3:cb:49:17:7a:8c:0d:c2:ce:df:b2:31:86:4a: d4:37:f1:ed:36:4e:99:e2:f7:13:6f:f5:0b:d7:b3: 60:a5:04:b7:19:be:e2:3f:23:74:9f:d8:95:01:81: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E4:BB:3B:67:B6:6C:1B:96:B4:BB:5B:37:22:CF:D7:23:3A:1B:F4 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:8e:5c:4e:bb:5d:1f:e5:d8:62:f3:ce:50:dd:9c:f4:ee:54: e7:fe:aa:2b:24:33:c6:16:29:36:2f:37:70:7b:59:20:e6:68: bd:a0:71:76:46:24:95:2e:5d:d4:f8:ad:1c:46:03:d1:1b:48: b9:ee:e7:ce:e9:f1:b9:da:da:74:3f:55:46:be:bc:68:63:cf: f2:d9:c1:0f:14:ab:34:88:39:b3:ce:fb:09:d8:e9:13:9f:32: 7f:16:d6:db:31:8b:12:df:73:4f:d0:f3:c9:c8:b6:f6:86:fd: b8:54:c3:cc:fa:fd:fe:26:00:c3:c2:46:3d:ad:58:71:43:cf: 63:b5:35:6a:74:38:17:2f:18:98:74:03:1b:25:2f:76:45:5e: 70:9b:7a:08:f4:3b:d9:56:2f:19:09:ab:84:2a:c5:87:10:94: 44:fe:e3:b7:af:85:f0:ec:dc:9d:de:5a:1d:4c:2c:17:9b:af: 08:c1:7d:f9:16:69:9f:ef:5d:45:06:3b:f3:97:90:91:dc:fe: 66:d9:34:c4:18:9b:d2:0e:5b:87:5f:ac:85:a6:a1:42:20:f2: 28:0f:0a:57:ed:df:37:b8:62:50:00:2a:76:8d:2f:36:9d:12: d2:99:37:f9:b7:41:de:54:99:ac:fe:f3:90:87:21:f1:4d:74: e0:48:9d:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm21JB1aXpikiRE2pWveLkUZ3x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA2MTYyMzI2MDFaFw0yNTA2MTkyMzQ5MDFaMDMxMTAvBgNV BAMTKDQ3RTRCQjNCNjdCNjZDMUI5NkI0QkI1QjM3MjJDRkQ3MjMzQTFCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2zpL9E91ovA8333lFrags12B3 ISGi0rEcwvxRXS6tKfGDpl15MqByStTnkNgw6zT8pfNW4Mg2ESVYXDnfznPYzwIM u5vEfziL4Ysw0/k7jrxAJ/5BZqhlmvaxSYfgOfPRSNrdCyHZMqvox1aC8RczkrjZ 7GvDEykUCXMTu63cf04b/gHDelrUJML7YscY50yKevlu2dkbvsBznx1eBVGQpy8l CvadRM8OTJVO7B2JVnubdkjyRnzMssakeh2Tr1hQ4ESPpwi5x+Y+cP1LHFyN4/Sz y0kXeowNws7fsjGGStQ38e02Tpni9xNv9QvXs2ClBLcZvuI/I3Sf2JUBgeHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+S7O2e2bBuWtLtbNyLP1yM6G/QwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKOXE67XR/l2GLzzlDdnPTuVOf+qiskM8YW KTYvN3B7WSDmaL2gcXZGJJUuXdT4rRxGA9EbSLnu587p8bna2nQ/VUa+vGhjz/LZ wQ8UqzSIObPO+wnY6ROfMn8W1tsxixLfc0/Q88nItvaG/bhUw8z6/f4mAMPCRj2t WHFDz2O1NWp0OBcvGJh0AxslL3ZFXnCbegj0O9lWLxkJq4QqxYcQlET+47evhfDs 3J3eWh1MLBebrwjBffkWaZ/vXUUGO/OXkJHc/mbZNMQYm9IOW4dfrIWmoUIg8igP Clft3ze4YlAAKnaNLzadEtKZN/m3Qd5Umaz+85CHIfFNdOBInRo= -----END CERTIFICATE-----Generated at Wed Jun 18 16:02:16 2025 by rpki-client