$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: I5pLq6GsXj1NvhfFY6aCRZBdElVFwepMPt1/ybDtIoM= Subject key identifier: 1F:E4:F1:5C:12:0F:4A:45:D9:F2:AE:87:C6:4A:29:73:4E:59:AF:CF Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 249B99B9BDF389BFFB4E840F7D1551ADB8A4BB38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01F8 Signing time: Mon 03 Nov 2025 12:00:46 +0000 Manifest this update: Mon 03 Nov 2025 11:55:46 +0000 Manifest next update: Thu 06 Nov 2025 21:18:46 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: MSt3LuX3/1Bi8pMKa57LuXEOgrkQ6WNB/YktM8vhdQc=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9b:99:b9:bd:f3:89:bf:fb:4e:84:0f:7d:15:51:ad:b8:a4:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Nov 3 11:55:46 2025 GMT Not After : Nov 6 21:18:46 2025 GMT Subject: CN=1FE4F15C120F4A45D9F2AE87C64A29734E59AFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:7f:02:81:62:fd:72:e7:d6:16:7a:e5:96: 60:08:7e:ac:5d:11:51:ae:76:7f:56:05:b8:98:14: ad:1f:65:7a:ce:65:b6:9a:4c:20:2c:ee:f0:b8:cd: cf:24:b9:94:bb:94:88:75:1f:c0:d1:36:93:4d:1e: a1:50:52:a5:29:16:43:b9:a3:25:71:94:58:09:ce: 4d:c6:04:96:b4:2e:7f:8c:8a:c8:06:f6:1a:c4:b7: 79:1b:18:14:7f:f6:be:d9:34:81:78:30:48:c0:b0: 2b:7e:71:a7:50:bb:54:01:95:0f:b9:69:ec:40:43: 42:94:49:79:9f:85:30:4a:19:71:c5:1e:3b:cb:f0: fc:40:46:60:5d:51:73:5d:db:71:f3:12:ea:e2:9a: 4a:91:40:43:63:ab:5c:7c:4d:75:18:ad:4b:ab:14: cd:df:fc:75:65:a7:1e:4f:35:25:f9:ad:aa:5e:31: d8:37:04:46:06:4c:2d:35:31:74:d4:dc:5e:64:69: ef:0f:d6:3a:4b:55:22:2f:13:cc:0c:66:9d:8f:59: d0:01:30:44:ef:93:3f:3a:ad:f0:e4:6f:48:9d:e0: c2:3d:d3:bc:40:bf:2e:e3:33:33:18:45:0e:e1:16: 9c:6e:28:33:7a:10:10:e4:c6:67:ca:46:e4:b4:98: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E4:F1:5C:12:0F:4A:45:D9:F2:AE:87:C6:4A:29:73:4E:59:AF:CF X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:49:f8:67:8b:e2:4b:9b:57:1c:0a:f6:85:29:08:90:c9:45: 23:48:07:61:ea:b4:05:37:76:a2:a7:c9:f6:19:7d:df:68:f4: 90:02:7b:be:ed:0f:f9:f8:fa:1a:34:1d:ca:2f:26:7c:16:3c: 5f:41:a2:9c:11:89:32:81:e1:40:2f:69:4c:de:7a:c3:a1:16: c0:51:a1:f0:1e:b6:01:1e:ac:8e:d2:71:7e:2c:ad:b2:44:3a: 2d:61:8d:4b:67:d2:1c:2a:6d:b8:de:e4:aa:16:06:66:94:7b: 3b:6e:a6:4f:00:1b:8c:2f:be:b8:dd:4e:56:9f:04:3f:bf:3e: 1d:4d:99:7f:fe:4c:d1:b5:8a:2d:03:a0:0d:a9:fd:e7:c1:03: 0b:58:88:f7:d9:b0:6d:69:52:cf:1f:c0:0d:6b:6f:87:30:8c: bd:ae:e2:af:38:2b:8e:a3:b5:4c:2a:60:0e:9b:8d:36:b4:7f: 47:8a:a9:85:9c:f8:5c:69:25:db:7f:bc:5d:2e:de:66:55:0e: 2f:e1:f6:ba:c5:de:d5:f9:71:b5:af:7c:e8:59:67:63:18:41: 70:fe:5f:86:4d:c1:e2:b4:ae:50:34:15:54:7a:49:ea:e5:da: 39:fd:b6:49:a5:fe:02:fc:f7:08:ee:8b:9f:d0:44:44:b0:50: d1:21:d1:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJuZub3zib/7ToQPfRVRrbikuzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTExMDMxMTU1NDZaFw0yNTExMDYyMTE4NDZaMDMxMTAvBgNV BAMTKDFGRTRGMTVDMTIwRjRBNDVEOUYyQUU4N0M2NEEyOTczNEU1OUFGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjn8CgWL9cufWFnrllmAIfqxd EVGudn9WBbiYFK0fZXrOZbaaTCAs7vC4zc8kuZS7lIh1H8DRNpNNHqFQUqUpFkO5 oyVxlFgJzk3GBJa0Ln+MisgG9hrEt3kbGBR/9r7ZNIF4MEjAsCt+cadQu1QBlQ+5 aexAQ0KUSXmfhTBKGXHFHjvL8PxARmBdUXNd23HzEurimkqRQENjq1x8TXUYrUur FM3f/HVlpx5PNSX5rapeMdg3BEYGTC01MXTU3F5kae8P1jpLVSIvE8wMZp2PWdAB METvkz86rfDkb0id4MI907xAvy7jMzMYRQ7hFpxuKDN6EBDkxmfKRuS0mBfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+TxXBIPSkXZ8q6Hxkopc05Zr88wHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBJ+GeL4kubVxwK9oUpCJDJRSNIB2HqtAU3 dqKnyfYZfd9o9JACe77tD/n4+ho0HcovJnwWPF9BopwRiTKB4UAvaUzeesOhFsBR ofAetgEerI7ScX4srbJEOi1hjUtn0hwqbbje5KoWBmaUeztupk8AG4wvvrjdTlaf BD+/Ph1NmX/+TNG1ii0DoA2p/efBAwtYiPfZsG1pUs8fwA1rb4cwjL2u4q84K46j tUwqYA6bjTa0f0eKqYWc+FxpJdt/vF0u3mZVDi/h9rrF3tX5cbWvfOhZZ2MYQXD+ X4ZNweK0rlA0FVR6Serl2jn9tkml/gL89wjui5/QRESwUNEh0SI= -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:39 2025 by rpki-client