$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: 4OKne3+RvF6m/9FlWcoEKbCL5PC2TsqZ9rVAyoG/v8k= Subject key identifier: B0:00:49:10:92:5D:F9:D5:39:52:79:62:9B:B3:2C:4E:EF:14:CA:07 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 56B87F399BA7DADCFF6026AF14D6C87208523133 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 019A Signing time: Sun 20 Jul 2025 13:52:07 +0000 Manifest this update: Sun 20 Jul 2025 13:47:07 +0000 Manifest next update: Wed 23 Jul 2025 17:43:07 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 2: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 3: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 4: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: KUQJ8kXt+oA68cS0tyQfwF3+zVdMjojIOtffk/egEZU=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b8:7f:39:9b:a7:da:dc:ff:60:26:af:14:d6:c8:72:08:52:31:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Jul 20 13:47:07 2025 GMT Not After : Jul 23 17:43:07 2025 GMT Subject: CN=B0004910925DF9D5395279629BB32C4EEF14CA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:01:4d:46:97:53:48:03:87:ea:8d:18:5b: 96:a2:b5:48:8c:02:69:ac:1c:5d:16:58:fd:c8:d2: 04:38:94:d0:e9:de:2c:42:bf:2c:28:6d:e3:4a:a8: db:f4:29:8b:91:46:e7:35:a4:f4:c3:b0:7a:14:87: 03:22:e4:d2:fd:ea:af:db:d9:ba:ef:83:df:4c:1e: b2:7a:01:18:49:56:23:91:bc:4d:a3:8c:82:77:01: 68:59:ed:80:95:10:16:d8:81:a2:19:80:0e:34:12: 39:e0:ba:94:96:f5:55:7f:fe:18:bf:e8:c4:51:b9: 86:a9:1c:dc:19:9f:5c:19:cd:25:38:44:9c:86:ae: c1:cc:f4:61:29:f6:77:2c:43:c3:78:da:83:72:c9: 38:61:54:68:fc:06:1a:25:e9:50:96:71:be:92:c2: f4:fd:a9:a8:46:34:1c:5b:39:17:e3:bf:5e:0c:24: 16:b4:75:01:d2:a1:d7:2d:1e:b8:b7:7d:1b:4b:ea: 99:44:0e:48:00:03:47:6b:e0:6f:e2:e2:b4:7c:ef: d9:18:a1:56:04:f2:8e:ff:ab:a3:92:2b:05:c4:75: 14:d6:a2:4b:41:bb:bb:80:b7:52:4d:96:e8:27:91: fa:ab:bd:26:9f:cc:bd:e0:4a:28:a0:18:54:57:13: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:49:10:92:5D:F9:D5:39:52:79:62:9B:B3:2C:4E:EF:14:CA:07 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:33:b8:b6:3e:5e:ba:6d:0b:f7:e4:b1:8e:5d:be:de:80: 34:98:6a:41:ed:7f:ae:05:a8:c5:60:5e:f2:47:4d:bc:52:57: 2b:77:5d:65:05:87:62:1a:96:dc:c7:20:90:89:3e:7f:06:67: 30:ae:21:d8:73:1b:15:e0:ce:fd:1a:4f:4d:36:38:1f:94:88: a4:43:22:f0:e0:6e:69:b2:26:4b:b6:d2:94:79:0d:10:a7:7c: 01:93:d3:77:09:73:a9:59:c1:38:ca:6a:15:c8:e0:23:f0:b8: ea:e7:fa:6f:a8:38:db:24:e0:3c:48:90:03:87:31:e6:0b:48: d1:72:91:b9:7d:a7:bf:a0:2b:62:c1:82:fe:14:ef:dd:a0:87: b1:28:7f:63:c5:73:41:46:b4:b5:25:9a:80:ac:7f:aa:6d:d0: 73:82:64:30:2f:94:04:60:2f:ca:77:1d:5c:0c:d0:09:2a:cb: 3d:bb:02:f3:02:f5:ce:44:43:6a:39:0f:e8:69:01:7c:6e:77: a6:d6:14:86:46:3a:f2:fe:1a:4d:b4:69:81:f2:d5:e0:71:c2: 84:da:d3:b1:be:18:4c:77:8b:ab:3d:3e:59:f3:37:0f:2e:12: 9b:e8:56:3e:8a:72:0d:d9:56:1c:79:96:c1:d0:9f:39:6e:8e: 82:a3:4c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrh/OZun2tz/YCavFNbIcghSMTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA3MjAxMzQ3MDdaFw0yNTA3MjMxNzQzMDdaMDMxMTAvBgNV BAMTKEIwMDA0OTEwOTI1REY5RDUzOTUyNzk2MjlCQjMyQzRFRUYxNENBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFwFNRpdTSAOH6o0YW5aitUiM AmmsHF0WWP3I0gQ4lNDp3ixCvywobeNKqNv0KYuRRuc1pPTDsHoUhwMi5NL96q/b 2brvg99MHrJ6ARhJViORvE2jjIJ3AWhZ7YCVEBbYgaIZgA40EjngupSW9VV//hi/ 6MRRuYapHNwZn1wZzSU4RJyGrsHM9GEp9ncsQ8N42oNyyThhVGj8Bhol6VCWcb6S wvT9qahGNBxbORfjv14MJBa0dQHSodctHri3fRtL6plEDkgAA0dr4G/i4rR879kY oVYE8o7/q6OSKwXEdRTWoktBu7uAt1JNlugnkfqrvSafzL3gSiigGFRXE4ZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsABJEJJd+dU5Unlim7MsTu8UygcwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD10M7i2Pl66bQv35LGOXb7egDSYakHtf64F qMVgXvJHTbxSVyt3XWUFh2IaltzHIJCJPn8GZzCuIdhzGxXgzv0aT002OB+UiKRD IvDgbmmyJku20pR5DRCnfAGT03cJc6lZwTjKahXI4CPwuOrn+m+oONsk4DxIkAOH MeYLSNFykbl9p7+gK2LBgv4U792gh7Eof2PFc0FGtLUlmoCsf6pt0HOCZDAvlARg L8p3HVwM0Akqyz27AvMC9c5EQ2o5D+hpAXxud6bWFIZGOvL+Gk20aYHy1eBxwoTa 07G+GEx3i6s9PlnzNw8uEpvoVj6Kcg3ZVhx5lsHQnzlujoKjTKY= -----END CERTIFICATE-----Generated at Mon Jul 21 12:24:21 2025 by rpki-client