$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 9yp1Qc8PfUdkmTiW9op/TFD358PxBaHeVDiy5Id5y8Y= Subject key identifier: BF:75:49:86:A0:2E:C5:00:04:D7:99:1F:08:DD:F8:79:F8:25:BE:4B Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 4D2A5B3AAB68D4A852F56A163B76F2D91D0825AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04DF Signing time: Tue 17 Jun 2025 12:01:08 +0000 Manifest this update: Tue 17 Jun 2025 11:56:08 +0000 Manifest next update: Fri 20 Jun 2025 20:00:08 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: C+CFAF56/tmnccXz+eoeMF//fPwBlA5NUDhfzqhLGzc=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2a:5b:3a:ab:68:d4:a8:52:f5:6a:16:3b:76:f2:d9:1d:08:25:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Jun 17 11:56:08 2025 GMT Not After : Jun 20 20:00:08 2025 GMT Subject: CN=BF754986A02EC50004D7991F08DDF879F825BE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:ab:39:f3:ba:62:f2:e1:5c:17:bc:91:9a: 73:76:0b:19:96:77:59:0b:9f:d6:85:ef:f4:02:dc: 8e:11:42:40:02:40:55:33:e8:bd:3c:20:49:61:69: e7:68:86:dc:18:7e:48:c8:0e:8a:3c:dc:1c:fa:65: 90:e9:dc:bf:3d:0a:55:b4:bd:13:11:cf:d9:92:d2: 5b:ef:2a:97:83:ad:5e:f5:97:a5:f4:57:74:71:0a: 20:cb:07:93:6f:53:a6:63:d2:29:91:bb:b3:01:32: 51:12:13:21:0a:c6:42:ba:02:ee:57:5f:e8:29:3a: 09:1a:cf:5b:4d:03:4f:07:79:53:f5:23:8e:d8:11: b4:21:e1:a5:f3:b7:1c:61:f6:73:d1:0c:93:6d:72: 22:6e:27:e7:11:a3:75:25:2b:77:15:b2:2f:7a:ac: 5c:39:08:86:e7:1f:b8:98:7e:c1:67:de:db:6f:2e: 2a:06:91:81:6f:24:11:f3:56:3f:0d:73:4b:96:75: 22:b7:4c:29:25:04:68:e1:2b:1f:17:d8:06:41:aa: ac:b7:f7:c4:b5:53:16:05:e5:20:01:22:ff:8e:af: 5b:fe:b9:32:bc:fc:5a:63:d4:c5:9f:ca:b8:2e:d9: 39:95:be:3e:b7:83:ef:4d:c9:de:9f:83:65:15:6f: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:49:86:A0:2E:C5:00:04:D7:99:1F:08:DD:F8:79:F8:25:BE:4B X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e2:66:84:68:b1:1c:1a:60:a1:13:9c:11:3c:f2:ac:8a:22: a0:99:87:14:2b:15:86:0c:1a:01:13:a4:cf:88:5e:6c:6a:e2: db:d6:0c:8f:49:6d:22:a6:cf:2d:23:ea:ef:80:3c:10:97:e6: 3f:ae:4f:66:f1:54:ab:96:50:19:ab:33:46:ab:c4:29:85:8e: e9:1d:af:a8:65:04:43:0b:7a:7f:3a:af:18:32:dd:fb:11:17: a0:42:bc:86:7e:51:f3:57:4e:b1:8b:98:87:53:e2:38:fd:e2: 75:f9:d4:1c:30:83:bf:47:5c:71:5b:81:ae:fa:c5:9c:90:2e: 4a:3c:c0:25:d3:6a:bd:5b:86:2b:85:cd:77:7a:74:bd:69:75: cb:71:9c:39:94:6f:61:0f:b8:2e:61:fb:79:aa:98:f7:6a:35: 93:5c:26:f9:71:f8:5a:d8:b7:16:5a:7f:07:ee:46:54:a3:86: 2a:d5:13:14:7d:5c:3a:ed:5a:dc:32:b2:7f:af:f5:47:bd:e9: 9c:ad:a9:b2:22:88:41:79:06:c7:de:66:45:0a:29:c6:68:84: c1:e8:0f:07:88:c9:3f:6e:89:a2:75:10:3f:5a:b0:2d:f4:64: ca:c4:72:8e:fa:5c:8f:d1:bf:33:c2:03:b2:85:d6:31:50:1a: 9f:f8:1b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSpbOqto1KhS9WoWO3by2R0IJa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA2MTcxMTU2MDhaFw0yNTA2MjAyMDAwMDhaMDMxMTAvBgNV BAMTKEJGNzU0OTg2QTAyRUM1MDAwNEQ3OTkxRjA4RERGODc5RjgyNUJFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPKs587pi8uFcF7yRmnN2CxmW d1kLn9aF7/QC3I4RQkACQFUz6L08IElhaedohtwYfkjIDoo83Bz6ZZDp3L89ClW0 vRMRz9mS0lvvKpeDrV71l6X0V3RxCiDLB5NvU6Zj0imRu7MBMlESEyEKxkK6Au5X X+gpOgkaz1tNA08HeVP1I47YEbQh4aXztxxh9nPRDJNtciJuJ+cRo3UlK3cVsi96 rFw5CIbnH7iYfsFn3ttvLioGkYFvJBHzVj8Nc0uWdSK3TCklBGjhKx8X2AZBqqy3 98S1UxYF5SABIv+Or1v+uTK8/Fpj1MWfyrgu2TmVvj63g+9Nyd6fg2UVb5yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3VJhqAuxQAE15kfCN34efglvkswHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXiZoRosRwaYKETnBE88qyKIqCZhxQrFYYM GgETpM+IXmxq4tvWDI9JbSKmzy0j6u+APBCX5j+uT2bxVKuWUBmrM0arxCmFjukd r6hlBEMLen86rxgy3fsRF6BCvIZ+UfNXTrGLmIdT4jj94nX51Bwwg79HXHFbga76 xZyQLko8wCXTar1bhiuFzXd6dL1pdctxnDmUb2EPuC5h+3mqmPdqNZNcJvlx+FrY txZafwfuRlSjhirVExR9XDrtWtwysn+v9Ue96ZytqbIiiEF5BsfeZkUKKcZohMHo DweIyT9uiaJ1ED9asC30ZMrEco76XI/RvzPCA7KF1jFQGp/4G8Y= -----END CERTIFICATE-----Generated at Tue Jun 17 17:49:58 2025 by rpki-client