$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: X/7E4qH8jOOebCIhDnZwD6UDTTvGk6soP/qOfrfHkMQ= Subject key identifier: 10:A9:9E:E5:31:86:0E:EE:43:A6:3D:5C:F2:56:00:53:B3:BB:07:B3 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 0E5493887AD9B196ADCB8D05D1723060E4D07F2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04F6 Signing time: Fri 08 Aug 2025 01:31:09 +0000 Manifest this update: Fri 08 Aug 2025 01:26:08 +0000 Manifest next update: Mon 11 Aug 2025 12:40:08 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: ukLlmT48h3YQ1h/7RPnkNHpbroyzbNBApYV6n3V5GuQ=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:54:93:88:7a:d9:b1:96:ad:cb:8d:05:d1:72:30:60:e4:d0:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Aug 8 01:26:08 2025 GMT Not After : Aug 11 12:40:08 2025 GMT Subject: CN=10A99EE531860EEE43A63D5CF2560053B3BB07B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:3e:8f:c5:b3:fc:99:1c:ea:06:b2:79:ab: e1:88:d9:37:d7:d5:3e:70:0c:74:0d:9b:8c:cf:9f: 7d:82:ee:77:af:28:79:e0:7c:28:e5:5f:08:db:38: 28:c2:0d:78:f3:3b:51:33:3f:f0:95:01:df:4f:e5: 01:59:53:1a:e7:63:b9:1b:bb:01:9a:99:61:d7:57: a9:b6:0d:d1:6b:56:3a:cd:3c:a6:ce:dd:ef:0a:1b: 6a:4b:af:70:af:1c:4b:ee:df:3e:a7:fd:5b:77:06: 07:1f:28:81:02:79:2a:d1:28:83:b4:aa:17:43:ed: bf:cc:9f:a5:57:df:1a:53:24:01:1a:28:b2:ba:1e: 08:4d:40:2e:93:68:43:9b:53:11:2b:59:60:50:e5: 1b:aa:7b:da:07:aa:a1:c2:c0:71:f7:be:0e:fb:a9: 8f:4a:4d:f8:59:ee:0b:9b:bb:f6:6e:1f:c7:32:e9: 79:32:fa:11:4f:7e:cb:e6:05:08:78:2a:3c:1b:e6: c2:16:3b:7e:82:7a:d9:11:29:d0:cf:a5:21:8d:67: 19:bd:19:ee:82:f3:64:5e:24:d1:6e:61:2b:c7:df: bb:c1:84:5d:ba:78:1f:9e:f2:1d:77:4e:74:8f:7f: b1:fc:68:46:16:7f:37:f2:07:7b:83:86:0b:c5:c7: 3f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:9E:E5:31:86:0E:EE:43:A6:3D:5C:F2:56:00:53:B3:BB:07:B3 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:72:e8:ff:49:24:17:d2:ac:36:31:53:7c:03:07:c3:71: 81:2a:33:ed:79:12:cb:f9:ef:fa:a8:d2:47:a8:02:5f:c7:0a: b6:13:f5:13:17:0c:b9:3c:14:db:3e:d9:25:5b:51:63:d8:9b: 29:b8:9a:06:92:5f:8e:11:94:e7:f3:c3:36:7d:73:f3:97:b2: 48:3f:5c:7b:48:e0:b0:43:3d:7b:26:46:70:03:d3:2d:dc:ef: 72:17:7a:59:12:a5:d1:c6:fb:b6:77:4d:04:1c:66:fa:15:e9: d2:bf:d2:be:f8:99:c4:82:4d:b3:99:71:f7:f1:db:50:49:33: fd:e7:c8:0d:dd:79:48:f3:3d:6d:bf:01:f8:22:3b:0e:dc:3d: a0:59:f9:9b:30:e1:51:c6:c4:d0:1d:3d:ba:4b:c5:30:76:bf: 3b:e2:b0:dc:08:7e:1f:77:f0:d6:78:9c:4b:d9:ff:6b:df:5d: d0:82:06:50:0a:c1:28:7f:19:01:62:d5:3f:90:bb:f7:b1:83: 20:8d:a7:09:e4:ae:bf:f9:0b:72:02:51:cd:ec:89:e0:c7:fa: 50:6f:5c:21:e9:09:bd:70:c1:6e:7a:ec:08:c9:a0:45:ea:ca: e6:2a:77:08:bf:5d:e9:48:74:d7:3d:7f:3d:f6:3d:5f:62:dd: df:d2:5e:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlSTiHrZsZaty40F0XIwYOTQfy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA4MDgwMTI2MDhaFw0yNTA4MTExMjQwMDhaMDMxMTAvBgNV BAMTKDEwQTk5RUU1MzE4NjBFRUU0M0E2M0Q1Q0YyNTYwMDUzQjNCQjA3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquj6PxbP8mRzqBrJ5q+GI2TfX 1T5wDHQNm4zPn32C7nevKHngfCjlXwjbOCjCDXjzO1EzP/CVAd9P5QFZUxrnY7kb uwGamWHXV6m2DdFrVjrNPKbO3e8KG2pLr3CvHEvu3z6n/Vt3BgcfKIECeSrRKIO0 qhdD7b/Mn6VX3xpTJAEaKLK6HghNQC6TaEObUxErWWBQ5Ruqe9oHqqHCwHH3vg77 qY9KTfhZ7gubu/ZuH8cy6Xky+hFPfsvmBQh4Kjwb5sIWO36CetkRKdDPpSGNZxm9 Ge6C82ReJNFuYSvH37vBhF26eB+e8h13TnSPf7H8aEYWfzfyB3uDhgvFxz/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKme5TGGDu5Dpj1c8lYAU7O7B7MwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGHcuj/SSQX0qw2MVN8AwfDcYEqM+15Esv5 7/qo0keoAl/HCrYT9RMXDLk8FNs+2SVbUWPYmym4mgaSX44RlOfzwzZ9c/OXskg/ XHtI4LBDPXsmRnAD0y3c73IXelkSpdHG+7Z3TQQcZvoV6dK/0r74mcSCTbOZcffx 21BJM/3nyA3deUjzPW2/AfgiOw7cPaBZ+Zsw4VHGxNAdPbpLxTB2vzvisNwIfh93 8NZ4nEvZ/2vfXdCCBlAKwSh/GQFi1T+Qu/exgyCNpwnkrr/5C3ICUc3sieDH+lBv XCHpCb1wwW567AjJoEXqyuYqdwi/XelIdNc9fz32PV9i3d/SXmE= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:49 2025 by rpki-client