$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: Bm52IIAoMNsQ4uKGWx/jkJTmt5+aJx9cBwxwIsY6/KY= Subject key identifier: D5:53:54:09:A0:E7:20:A4:E9:FF:60:01:C1:24:C3:B9:BA:87:1D:A2 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 7F0D28326CF476F2207DF0EE8EC67D152ECCC901 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: DD Signing time: Thu 07 Aug 2025 07:31:02 +0000 Manifest this update: Thu 07 Aug 2025 07:26:02 +0000 Manifest next update: Sun 10 Aug 2025 09:38:02 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 4: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: rWO0HcRWuqJqeRSn3lT7gnASvEDAguwRIX7V5yJOyIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0d:28:32:6c:f4:76:f2:20:7d:f0:ee:8e:c6:7d:15:2e:cc:c9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Aug 7 07:26:02 2025 GMT Not After : Aug 10 09:38:02 2025 GMT Subject: CN=D5535409A0E720A4E9FF6001C124C3B9BA871DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:36:63:1d:a5:b7:e2:65:07:96:c3:79:5f: 19:5e:17:0e:20:c8:2c:17:9c:4a:29:db:c3:60:3f: 63:84:81:a6:53:1f:f5:cd:76:f7:ba:9d:1e:5b:d7: c9:d1:81:86:39:e5:02:e5:58:aa:20:fa:b5:6c:06: 2e:15:7d:3c:14:57:65:db:04:fe:21:44:17:86:0d: d2:14:6e:ee:47:23:e3:4c:a1:ba:d2:90:a4:75:44: a1:a5:9a:c0:cf:6f:9b:f8:c3:66:98:9f:9a:99:d3: e7:02:23:65:92:02:c1:cd:46:1b:8d:a5:76:3b:69: f0:05:f9:39:83:4e:ca:58:18:2e:f8:25:c8:5c:b0: 85:cc:f6:32:cf:5f:63:84:6d:6a:7d:e5:10:e2:b7: 87:61:87:07:bf:08:da:5c:70:70:4e:a3:2d:b7:1e: d8:59:f3:b3:0c:73:ce:41:23:fc:dc:c4:3c:ff:aa: 12:00:12:45:d7:72:29:34:a9:0d:57:72:ae:9c:ef: 3c:97:6f:f6:d2:93:35:b6:84:fb:60:3b:3c:b9:36: ab:c5:bb:84:e9:db:63:73:43:43:ef:88:9c:84:cc: 4f:fe:49:b1:8a:5b:6b:46:e6:b4:44:38:07:64:33: 00:ed:69:3a:91:09:a6:b7:cc:4e:5f:e3:33:93:dc: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:54:09:A0:E7:20:A4:E9:FF:60:01:C1:24:C3:B9:BA:87:1D:A2 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:99:2a:77:b9:0b:ba:f7:49:61:c5:f9:5d:ec:59:69:71:38: 60:3b:12:d5:ef:2b:1f:13:3f:05:4b:89:e4:19:36:da:aa:33: 31:a0:51:50:e3:e3:cd:c5:58:96:81:32:fb:05:ee:35:74:00: 56:9f:87:4d:b9:ca:82:16:e1:e1:69:ba:77:e6:75:f4:89:61: 62:b4:5f:35:77:84:25:45:26:c5:0f:67:fb:e8:9d:b2:24:db: f1:83:f5:66:be:2d:7f:45:08:7b:68:9c:95:f1:93:53:dc:25: 86:8a:ba:48:0f:98:1d:10:7a:70:ff:4c:c2:c5:de:68:6f:ae: 52:a3:4f:82:0c:e5:f6:2d:67:21:e1:8c:24:63:18:df:01:34: 25:50:ab:5b:2a:e3:18:5e:48:bb:1c:c8:48:ef:67:48:d0:c1: 81:57:46:7b:6c:8e:32:89:36:33:48:f3:fd:03:dc:4a:cd:15: f3:05:ee:21:9c:c0:a2:42:0a:e6:b0:58:e6:bf:cb:ad:0b:b8: 1c:3d:22:46:0a:9b:d0:43:4c:2f:0d:57:d2:c0:e8:05:a4:37: ee:fa:ae:b1:fd:e8:89:53:38:7c:53:f7:22:ee:e3:0a:d5:c0: 4a:2d:d1:c4:56:60:83:a2:bb:2f:58:37:51:0d:89:0e:44:63: d9:a3:37:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfw0oMmz0dvIgffDujsZ9FS7MyQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA4MDcwNzI2MDJaFw0yNTA4MTAwOTM4MDJaMDMxMTAvBgNV BAMTKEQ1NTM1NDA5QTBFNzIwQTRFOUZGNjAwMUMxMjRDM0I5QkE4NzFEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDzZjHaW34mUHlsN5XxleFw4g yCwXnEop28NgP2OEgaZTH/XNdve6nR5b18nRgYY55QLlWKog+rVsBi4VfTwUV2Xb BP4hRBeGDdIUbu5HI+NMobrSkKR1RKGlmsDPb5v4w2aYn5qZ0+cCI2WSAsHNRhuN pXY7afAF+TmDTspYGC74JchcsIXM9jLPX2OEbWp95RDit4dhhwe/CNpccHBOoy23 HthZ87MMc85BI/zcxDz/qhIAEkXXcik0qQ1Xcq6c7zyXb/bSkzW2hPtgOzy5NqvF u4Tp22NzQ0PviJyEzE/+SbGKW2tG5rREOAdkMwDtaTqRCaa3zE5f4zOT3HR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VNUCaDnIKTp/2ABwSTDubqHHaIwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqZKne5C7r3SWHF+V3sWWlxOGA7EtXvKx8T PwVLieQZNtqqMzGgUVDj483FWJaBMvsF7jV0AFafh025yoIW4eFpunfmdfSJYWK0 XzV3hCVFJsUPZ/vonbIk2/GD9Wa+LX9FCHtonJXxk1PcJYaKukgPmB0QenD/TMLF 3mhvrlKjT4IM5fYtZyHhjCRjGN8BNCVQq1sq4xheSLscyEjvZ0jQwYFXRntsjjKJ NjNI8/0D3ErNFfMF7iGcwKJCCuawWOa/y60LuBw9IkYKm9BDTC8NV9LA6AWkN+76 rrH96IlTOHxT9yLu4wrVwEot0cRWYIOiuy9YN1ENiQ5EY9mjNzc= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:45 2025 by rpki-client