$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: OPK0xO4cxsWeFKw91Ad05Md3W9ifMwza+5U9+v/eQ3A= Subject key identifier: 3B:E3:3C:7F:45:B5:00:3D:CA:9D:7A:CE:38:7D:F9:5C:31:6E:6A:D5 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 1F3540037F5A8DD3200E42902EC170C20FF9D849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 0104 Signing time: Mon 03 Nov 2025 19:31:04 +0000 Manifest this update: Mon 03 Nov 2025 19:26:04 +0000 Manifest next update: Fri 07 Nov 2025 04:28:04 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 4: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: vy9K9Atj72quEUorK2Xo02k0N9wy5CO/QYYW4Z+li90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:35:40:03:7f:5a:8d:d3:20:0e:42:90:2e:c1:70:c2:0f:f9:d8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Nov 3 19:26:04 2025 GMT Not After : Nov 7 04:28:04 2025 GMT Subject: CN=3BE33C7F45B5003DCA9D7ACE387DF95C316E6AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:b6:2c:ea:55:db:9b:a7:7b:85:99:e8:17: a3:5d:3d:54:5e:a3:22:70:0a:40:49:92:32:8c:86: a8:64:19:74:28:1a:66:67:14:df:02:32:d1:11:49: a9:71:42:dd:63:64:d7:98:85:9e:87:a7:fc:40:13: 20:0d:56:b9:df:43:61:08:08:f6:b1:8a:db:6d:88: 90:4d:01:57:b5:bb:7d:d0:be:84:2f:14:06:5c:3e: 45:d1:f5:0e:1e:3a:a9:6c:61:e7:27:73:22:bc:cc: fd:20:ed:78:9f:71:d9:d7:eb:0b:d7:ec:53:68:23: 55:58:70:e8:0a:99:01:67:95:5f:8f:91:44:56:27: 6c:a3:dd:82:0e:7a:8d:c9:b7:79:f1:12:7d:b0:cd: 5b:a8:7c:6e:d9:49:91:6e:11:04:2b:81:fe:b1:c3: 15:c7:a1:8d:db:ca:0e:77:b6:02:73:b1:1e:cb:ce: d8:6c:71:23:ac:e7:d5:37:e9:8a:75:a0:7a:27:94: 4d:27:34:b2:e2:c6:0d:c4:35:0d:3b:b3:ae:2a:a6: 09:f5:94:1b:0c:d3:26:be:27:2d:b2:77:5d:5d:9d: ae:40:ed:5a:68:38:a2:49:4b:f9:c1:44:4a:12:71: 6a:9e:5d:4b:da:7f:ba:54:3e:04:26:f7:37:81:2a: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:3C:7F:45:B5:00:3D:CA:9D:7A:CE:38:7D:F9:5C:31:6E:6A:D5 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8d:60:a3:46:de:b6:65:60:fb:76:4b:8f:79:28:26:de:95: 38:04:c7:20:cd:5a:94:b0:1b:8f:36:9a:7b:bf:fb:69:cf:db: 01:fc:fa:b8:15:27:d9:67:06:04:49:91:21:b9:df:72:f4:04: a6:d3:eb:68:0b:62:4e:1c:36:9d:db:23:ec:ab:56:f0:70:92: ae:81:ff:07:48:01:92:2a:d3:02:21:6b:32:e2:85:a5:89:b5: 4a:be:76:c4:e7:f2:04:68:a4:8a:f5:92:6d:85:19:fa:42:ce: ee:22:e7:10:15:d8:55:9e:96:77:d1:54:d4:ec:6d:63:99:42: 36:eb:fa:e6:2c:e1:55:5b:db:aa:41:1e:b7:0a:86:b8:74:c5: 3c:fc:85:36:6c:3a:c5:c4:fc:10:6b:b4:d6:99:4c:97:eb:27: be:33:eb:28:3e:76:ea:e3:6e:c0:69:a3:cb:0f:57:88:81:98: aa:32:0e:e3:f7:17:15:a5:66:ea:f9:13:93:96:48:c2:73:d7: 1e:a6:ac:e6:45:d1:26:68:e5:31:64:44:50:d1:ea:40:4c:23: 29:b6:32:74:93:ae:86:b1:57:a7:17:fa:46:37:ac:de:09:a3: 2c:ef:68:a4:dc:14:28:f1:09:62:46:09:3d:e3:5b:55:ab:03: ce:56:ef:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzVAA39ajdMgDkKQLsFwwg/52EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTExMDMxOTI2MDRaFw0yNTExMDcwNDI4MDRaMDMxMTAvBgNV BAMTKDNCRTMzQzdGNDVCNTAwM0RDQTlEN0FDRTM4N0RGOTVDMzE2RTZBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76bYs6lXbm6d7hZnoF6NdPVRe oyJwCkBJkjKMhqhkGXQoGmZnFN8CMtERSalxQt1jZNeYhZ6Hp/xAEyANVrnfQ2EI CPaxitttiJBNAVe1u33QvoQvFAZcPkXR9Q4eOqlsYecncyK8zP0g7XifcdnX6wvX 7FNoI1VYcOgKmQFnlV+PkURWJ2yj3YIOeo3Jt3nxEn2wzVuofG7ZSZFuEQQrgf6x wxXHoY3byg53tgJzsR7LzthscSOs59U36Yp1oHonlE0nNLLixg3ENQ07s64qpgn1 lBsM0ya+Jy2yd11dna5A7VpoOKJJS/nBREoScWqeXUvaf7pUPgQm9zeBKo/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+M8f0W1AD3KnXrOOH35XDFuatUwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeNYKNG3rZlYPt2S495KCbelTgExyDNWpSw G482mnu/+2nP2wH8+rgVJ9lnBgRJkSG533L0BKbT62gLYk4cNp3bI+yrVvBwkq6B /wdIAZIq0wIhazLihaWJtUq+dsTn8gRopIr1km2FGfpCzu4i5xAV2FWelnfRVNTs bWOZQjbr+uYs4VVb26pBHrcKhrh0xTz8hTZsOsXE/BBrtNaZTJfrJ74z6yg+durj bsBpo8sPV4iBmKoyDuP3FxWlZur5E5OWSMJz1x6mrOZF0SZo5TFkRFDR6kBMIym2 MnSTroaxV6cX+kY3rN4JoyzvaKTcFCjxCWJGCT3jW1WrA85W7+0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:33 2025 by rpki-client