$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: SilBcp//uJN9Jv3LYcFteoF8nqo1tKeHhnWFre6/oTs= Subject key identifier: 72:73:3F:84:D6:5A:9B:2D:97:DA:BE:A8:16:A5:33:3D:88:33:69:3B Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 370C1773D0FB7AEDDAE6023D081D43D9A28684C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 051C Signing time: Sun 02 Nov 2025 05:51:08 +0000 Manifest this update: Sun 02 Nov 2025 05:46:08 +0000 Manifest next update: Wed 05 Nov 2025 17:30:08 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: BO5RR/JFvFyTSuzcNsmu5y0K6DloMtU0AfQWK9N+y0o=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0c:17:73:d0:fb:7a:ed:da:e6:02:3d:08:1d:43:d9:a2:86:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Nov 2 05:46:08 2025 GMT Not After : Nov 5 17:30:08 2025 GMT Subject: CN=72733F84D65A9B2D97DABEA816A5333D8833693B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:d2:97:c6:ec:fc:7e:5a:11:f4:81:0f:cc: ff:75:d6:6d:bf:02:4a:8a:8d:2d:de:b5:58:8e:52: 25:fc:c9:22:76:1c:fc:17:31:13:c1:0d:9e:43:7e: 9f:6c:6f:a2:8c:b4:99:fb:0d:59:7b:f9:6e:50:d0: 53:7d:7a:a6:1d:59:52:a2:d9:fb:59:a0:4d:78:38: 32:de:7c:ff:6a:31:e3:9d:df:c0:8f:6a:f3:72:84: 01:65:af:a8:4c:42:c3:df:df:f3:b3:d4:1c:6c:9c: b1:5f:00:9e:40:85:a9:98:ab:fc:74:91:b2:2e:44: 6a:38:2f:ad:7d:9a:2a:01:28:67:73:f7:98:26:1b: f3:61:dd:7d:e4:15:cf:d6:63:f0:d4:e5:4c:d3:90: 5b:fd:80:f8:bb:ca:4a:d1:70:f1:12:c4:8f:60:1c: 73:dd:80:7a:d5:d3:3d:ba:22:2b:36:ec:d8:fa:1f: f1:65:f9:b4:4e:65:44:a5:ce:a1:85:b6:be:e1:9f: cc:37:51:63:28:17:22:2d:02:df:91:e1:f7:b9:fc: 32:6d:16:7c:92:fc:57:26:65:49:f0:42:fc:5f:86: 89:e7:9e:84:5d:7f:23:02:19:52:69:17:2b:ba:fa: d9:7b:5a:74:29:e4:91:11:27:fb:dc:b0:9b:d6:a8: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:3F:84:D6:5A:9B:2D:97:DA:BE:A8:16:A5:33:3D:88:33:69:3B X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ca:2c:2f:23:69:e4:eb:30:10:8b:28:55:05:ab:ee:00:08: 38:4b:52:05:b2:a4:06:df:d9:2d:53:89:9c:14:fc:c0:e9:be: 6a:91:ea:f4:5e:aa:24:a7:d2:ff:26:01:f2:bf:d6:c5:b1:69: ba:c6:6d:78:3b:e3:27:a6:16:1e:ef:c0:da:6a:dc:ba:d9:b0: b7:8c:9a:dd:98:2c:42:43:0c:05:ce:ff:dc:a5:d3:07:b8:f3: 93:e1:a7:1b:71:9f:fe:e8:5e:ab:3c:f5:d5:13:72:c1:d9:d0: af:0a:30:d5:07:f2:00:41:2b:67:66:2f:fb:bd:12:d6:0b:29: 9c:f2:5e:c2:3e:90:8a:41:94:10:c4:dd:38:47:b6:8a:f9:8b: 28:55:ff:f6:97:62:00:09:11:12:be:7f:89:53:9a:c8:e5:f5: 4d:b0:2d:b8:52:f2:50:60:7b:18:95:1f:78:ef:99:50:a4:f7: 8b:d9:2d:d7:6c:9e:cd:c9:f4:d9:4b:a4:b3:36:f9:87:06:93: 04:70:82:92:3b:7b:8b:ac:66:60:e4:12:5e:15:19:33:f3:69: 1d:2e:ab:77:f8:22:f3:10:e0:63:7b:60:96:e4:e0:73:40:58: d8:58:aa:94:8c:0c:b6:21:d3:ff:bd:50:80:17:40:03:ac:86: a1:33:2f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwwXc9D7eu3a5gI9CB1D2aKGhMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTExMDIwNTQ2MDhaFw0yNTExMDUxNzMwMDhaMDMxMTAvBgNV BAMTKDcyNzMzRjg0RDY1QTlCMkQ5N0RBQkVBODE2QTUzMzNEODgzMzY5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4tKXxuz8floR9IEPzP911m2/ AkqKjS3etViOUiX8ySJ2HPwXMRPBDZ5Dfp9sb6KMtJn7DVl7+W5Q0FN9eqYdWVKi 2ftZoE14ODLefP9qMeOd38CPavNyhAFlr6hMQsPf3/Oz1BxsnLFfAJ5AhamYq/x0 kbIuRGo4L619mioBKGdz95gmG/Nh3X3kFc/WY/DU5UzTkFv9gPi7ykrRcPESxI9g HHPdgHrV0z26Iis27Nj6H/Fl+bROZUSlzqGFtr7hn8w3UWMoFyItAt+R4fe5/DJt FnyS/FcmZUnwQvxfhonnnoRdfyMCGVJpFyu6+tl7WnQp5JERJ/vcsJvWqMs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnM/hNZamy2X2r6oFqUzPYgzaTswHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzKLC8jaeTrMBCLKFUFq+4ACDhLUgWypAbf 2S1TiZwU/MDpvmqR6vReqiSn0v8mAfK/1sWxabrGbXg74yemFh7vwNpq3LrZsLeM mt2YLEJDDAXO/9yl0we485Phpxtxn/7oXqs89dUTcsHZ0K8KMNUH8gBBK2dmL/u9 EtYLKZzyXsI+kIpBlBDE3ThHtor5iyhV//aXYgAJERK+f4lTmsjl9U2wLbhS8lBg exiVH3jvmVCk94vZLddsns3J9NlLpLM2+YcGkwRwgpI7e4usZmDkEl4VGTPzaR0u q3f4IvMQ4GN7YJbk4HNAWNhYqpSMDLYh0/+9UIAXQAOshqEzL+4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:30 2025 by rpki-client