$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: yWudXZ1pQ4WiMqQMrET6+tldsvr1wVZu8IYhCD/WJMY= Subject key identifier: 48:4B:A2:E6:27:89:0E:97:2A:2D:90:E4:F5:2F:1C:B2:58:25:E9:A5 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 4CF668FA5BBCEBF36C9073A5F797A045AEDD5023 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: D4 Signing time: Tue 22 Jul 2025 01:52:13 +0000 Manifest this update: Tue 22 Jul 2025 01:47:13 +0000 Manifest next update: Fri 25 Jul 2025 04:27:13 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 3: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 4: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: HoXwaWj9FkYIzDGvYhGVO4OWXArhttIl7+tS5TudjMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 04:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f6:68:fa:5b:bc:eb:f3:6c:90:73:a5:f7:97:a0:45:ae:dd:50:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Jul 22 01:47:13 2025 GMT Not After : Jul 25 04:27:13 2025 GMT Subject: CN=484BA2E627890E972A2D90E4F52F1CB25825E9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:f7:74:84:a0:62:f2:d3:b9:e2:38:1e:0c: ff:47:c6:f7:06:77:1a:f9:47:69:8c:a0:96:a6:a8: a4:fb:e3:9f:ee:dd:dc:cd:67:54:01:85:50:cc:b9: 03:97:54:22:6e:11:24:6b:91:36:f8:dc:88:e8:4f: fb:fe:f1:6a:78:b7:dc:85:18:74:ec:ac:9d:e9:4d: 86:c4:5d:3c:8e:fc:ac:9c:f3:d5:62:bc:bf:cc:25: fc:d7:f0:bf:2e:02:dd:e7:99:16:e6:20:e3:62:f1: 89:48:fc:10:7d:7d:9a:57:8f:d3:49:59:22:82:ab: 18:31:51:af:fc:48:f1:c1:d0:29:dc:88:97:47:84: 6f:52:0d:d2:a3:83:ab:8d:7a:2e:46:6f:6b:bc:9e: 1d:0b:18:62:4f:42:0f:71:5c:cd:bb:0c:c4:f1:a4: 9a:e4:ab:65:ca:ff:d2:74:23:a6:6c:85:54:07:0e: 65:d0:42:56:bc:23:cf:57:7b:a9:18:da:0d:22:79: 72:34:66:98:66:d2:04:ef:9f:61:18:5f:ed:5d:66: c5:6d:3d:3d:3e:6c:d0:d0:7b:89:64:bb:bd:d1:c1: cc:fb:89:0a:93:53:ca:91:2f:45:45:d2:d9:e8:23: c2:58:96:92:eb:f0:47:be:6a:cf:67:13:4a:22:49: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:A2:E6:27:89:0E:97:2A:2D:90:E4:F5:2F:1C:B2:58:25:E9:A5 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:31:45:e0:e0:d1:60:68:6a:0a:39:16:da:12:8f:19:94:5f: 77:60:cd:4b:20:52:e5:84:c9:86:16:6e:06:25:96:0a:85:40: 37:7d:36:6a:c7:e4:60:5c:80:f8:8c:cf:f6:3c:c2:6a:7d:a5: 27:2a:87:a8:1f:9a:e1:17:b3:34:83:c6:76:6b:a6:11:57:81: 3e:39:df:08:4f:93:99:fa:8a:3b:70:f2:32:15:73:2b:20:a6: d7:ad:67:1b:a6:4e:9f:69:a1:5e:4d:87:85:15:01:da:4f:30: d5:d0:59:53:41:f8:bb:5d:48:3c:0b:0d:00:47:e0:85:3c:3d: 6b:3f:4b:6c:95:6d:f3:34:4c:c7:3e:35:9d:83:ff:24:53:c6: b0:03:85:a8:98:85:f6:c4:7c:7e:f7:39:95:eb:e1:e4:b6:09: 88:c1:a7:23:50:5d:4a:2d:90:6b:14:2e:d2:30:d2:11:41:94: aa:f3:3f:2c:92:23:56:37:12:cb:f5:25:4c:a6:ac:2f:66:37: 86:b9:d5:25:b8:92:82:9d:1d:02:f9:c8:41:30:f2:63:1f:b6: 81:d0:8f:d7:c9:e5:e3:69:9b:7b:3c:98:78:2b:83:70:57:81: 8b:76:2b:28:96:72:e9:7a:33:b4:35:1c:b3:df:7a:cd:44:63: b6:b6:de:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPZo+lu86/NskHOl95egRa7dUCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA3MjIwMTQ3MTNaFw0yNTA3MjUwNDI3MTNaMDMxMTAvBgNV BAMTKDQ4NEJBMkU2Mjc4OTBFOTcyQTJEOTBFNEY1MkYxQ0IyNTgyNUU5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuu/d0hKBi8tO54jgeDP9HxvcG dxr5R2mMoJamqKT745/u3dzNZ1QBhVDMuQOXVCJuESRrkTb43IjoT/v+8Wp4t9yF GHTsrJ3pTYbEXTyO/Kyc89VivL/MJfzX8L8uAt3nmRbmIONi8YlI/BB9fZpXj9NJ WSKCqxgxUa/8SPHB0CnciJdHhG9SDdKjg6uNei5Gb2u8nh0LGGJPQg9xXM27DMTx pJrkq2XK/9J0I6ZshVQHDmXQQla8I89Xe6kY2g0ieXI0Zphm0gTvn2EYX+1dZsVt PT0+bNDQe4lku73Rwcz7iQqTU8qRL0VF0tnoI8JYlpLr8Ee+as9nE0oiSVD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEui5ieJDpcqLZDk9S8cslgl6aUwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQxReDg0WBoago5FtoSjxmUX3dgzUsgUuWE yYYWbgYllgqFQDd9NmrH5GBcgPiMz/Y8wmp9pScqh6gfmuEXszSDxnZrphFXgT45 3whPk5n6ijtw8jIVcysgptetZxumTp9poV5Nh4UVAdpPMNXQWVNB+LtdSDwLDQBH 4IU8PWs/S2yVbfM0TMc+NZ2D/yRTxrADhaiYhfbEfH73OZXr4eS2CYjBpyNQXUot kGsULtIw0hFBlKrzPyySI1Y3Esv1JUymrC9mN4a51SW4koKdHQL5yEEw8mMftoHQ j9fJ5eNpm3s8mHgrg3BXgYt2KyiWcul6M7Q1HLPfes1EY7a23gk= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:51 2025 by rpki-client