$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: oOX0xyFOv7db01yiTh6CHXpN3GNBu+MtS5Eo1EfEw2Q= Subject key identifier: 77:D1:A6:ED:EB:BD:CF:9E:97:CD:14:CB:82:CC:26:F0:69:FC:7B:BA Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 5C4691214FC91CB24321FA276A3B17E54D8BA578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01D2 Signing time: Sat 09 Aug 2025 02:30:45 +0000 Manifest this update: Sat 09 Aug 2025 02:25:45 +0000 Manifest next update: Tue 12 Aug 2025 11:05:45 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: N9syAAPrGWIIGYutSW7PxGuqR+KdZSV22z3DwHTWQXI=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 11:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:46:91:21:4f:c9:1c:b2:43:21:fa:27:6a:3b:17:e5:4d:8b:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Aug 9 02:25:45 2025 GMT Not After : Aug 12 11:05:45 2025 GMT Subject: CN=77D1A6EDEBBDCF9E97CD14CB82CC26F069FC7BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:7d:12:6b:da:fb:46:8d:f9:ad:ca:bb:7d: 31:50:d3:a6:48:13:3c:9b:3e:f9:56:95:8f:f4:29: 36:9f:52:31:36:fb:cc:60:d4:45:fb:7a:f5:22:fd: f2:1e:62:b0:7a:d1:e3:a7:f3:4e:98:e4:39:3c:f1: c7:88:77:98:a9:fd:08:b7:30:94:f2:c4:aa:57:54: b1:bb:30:67:41:55:53:e3:5d:35:3d:65:48:25:a9: 37:ad:2b:6f:01:dd:b6:e5:30:dd:7b:79:fb:51:27: 74:5f:83:fe:eb:4f:66:0a:b6:8d:10:d9:e2:3b:d2: 9d:8e:8c:c2:ce:1b:04:fa:f6:c5:eb:4c:28:b5:ec: 03:66:2c:e3:e6:92:89:f2:1e:a0:df:77:0d:82:18: 81:65:94:e0:f9:fd:6a:08:12:74:fb:52:79:28:72: c0:5e:26:fe:c0:92:ec:8e:7e:be:be:13:5c:57:21: 3e:4d:fd:d2:37:ed:9f:44:58:9a:ad:a8:73:04:71: 7a:b4:ca:7f:80:fa:99:7a:40:ff:17:4a:db:cc:bc: eb:f4:68:e1:bc:2b:1d:23:d3:2a:9f:fe:70:80:0b: 11:34:85:d4:cf:8e:78:90:ee:73:88:ea:11:97:a8: 8a:53:bd:4d:98:99:18:ba:1e:36:45:36:c3:cc:16: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:A6:ED:EB:BD:CF:9E:97:CD:14:CB:82:CC:26:F0:69:FC:7B:BA X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4e:dd:e9:02:85:31:2b:64:81:05:46:bf:3e:6b:30:49:9c: f2:00:67:dd:4d:76:f2:b2:dc:65:9e:57:ea:a4:92:54:c0:71: 57:36:5f:91:dc:36:94:1a:cc:f0:c2:89:da:33:48:9c:90:66: bc:c9:64:f3:8e:50:49:14:14:36:37:7b:7b:2d:ea:de:f5:0f: bf:67:d9:b2:c5:4a:2e:8c:f0:76:a7:c4:69:b8:26:30:96:78: 24:22:fd:e0:1f:9d:9d:0d:e8:3b:35:b7:12:6c:00:4a:54:7e: 5b:8c:eb:ca:4c:18:77:6b:c8:c6:a0:73:d4:52:e5:87:91:fd: cc:5d:55:4d:03:12:62:d3:0a:7c:50:20:9d:63:7c:ae:e7:b1: d4:1d:15:67:59:2c:fe:32:af:95:b3:62:ed:03:e1:5f:8f:f6: c2:d9:aa:21:38:6f:3f:9a:c6:f9:cb:ba:e6:f4:4e:fc:b4:e6: d3:1d:24:84:7f:b1:4a:a4:a6:b1:d1:39:26:39:1e:13:a8:8b: 87:e8:ae:24:ec:3f:02:c1:5b:7f:50:16:e0:dc:0c:59:1a:c6: 3a:8e:d3:5c:11:54:fd:9b:50:c2:f8:c3:6c:98:f7:bd:68:c9: a3:b9:35:e1:12:a4:01:2d:1a:6b:e9:e0:15:20:ef:01:3b:5c: 2c:fb:65:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEaRIU/JHLJDIfonajsX5U2LpXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTA4MDkwMjI1NDVaFw0yNTA4MTIxMTA1NDVaMDMxMTAvBgNV BAMTKDc3RDFBNkVERUJCRENGOUU5N0NEMTRDQjgyQ0MyNkYwNjlGQzdCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkan0Sa9r7Ro35rcq7fTFQ06ZI EzybPvlWlY/0KTafUjE2+8xg1EX7evUi/fIeYrB60eOn806Y5Dk88ceId5ip/Qi3 MJTyxKpXVLG7MGdBVVPjXTU9ZUglqTetK28B3bblMN17eftRJ3Rfg/7rT2YKto0Q 2eI70p2OjMLOGwT69sXrTCi17ANmLOPmkonyHqDfdw2CGIFllOD5/WoIEnT7Unko csBeJv7AkuyOfr6+E1xXIT5N/dI37Z9EWJqtqHMEcXq0yn+A+pl6QP8XStvMvOv0 aOG8Kx0j0yqf/nCACxE0hdTPjniQ7nOI6hGXqIpTvU2YmRi6HjZFNsPMFlq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9Gm7eu9z56XzRTLgswm8Gn8e7owHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxO3ekChTErZIEFRr8+azBJnPIAZ91NdvKy 3GWeV+qkklTAcVc2X5HcNpQazPDCidozSJyQZrzJZPOOUEkUFDY3e3st6t71D79n 2bLFSi6M8HanxGm4JjCWeCQi/eAfnZ0N6Ds1txJsAEpUfluM68pMGHdryMagc9RS 5YeR/cxdVU0DEmLTCnxQIJ1jfK7nsdQdFWdZLP4yr5WzYu0D4V+P9sLZqiE4bz+a xvnLuub0Tvy05tMdJIR/sUqkprHROSY5HhOoi4foriTsPwLBW39QFuDcDFkaxjqO 01wRVP2bUML4w2yY971oyaO5NeESpAEtGmvp4BUg7wE7XCz7ZYY= -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:17 2025 by rpki-client