$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: q7OEI63YnZ5ElyqmnWYpHLhQrzgL/s7ZVEKDe3mEjTs= Subject key identifier: 1D:7E:3E:71:5A:C7:66:50:90:3C:4F:A1:D6:72:BE:A8:C3:08:BB:F3 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 020F1BFDDA53ACA7A63EA8E9EFAE1C8186F9BA8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0106 Signing time: Sun 20 Jul 2025 17:31:52 +0000 Manifest this update: Sun 20 Jul 2025 17:26:52 +0000 Manifest next update: Wed 23 Jul 2025 17:31:52 +0000 Files and hashes: 1: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) 2: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: vqyk47XT/g2mS15TLtXwH3/9Volktle9SE5cEclW0CY=) 3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) 4: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0f:1b:fd:da:53:ac:a7:a6:3e:a8:e9:ef:ae:1c:81:86:f9:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Jul 20 17:26:52 2025 GMT Not After : Jul 23 17:31:52 2025 GMT Subject: CN=1D7E3E715AC76650903C4FA1D672BEA8C308BBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:64:e8:34:d3:66:aa:8c:89:6a:8b:38:4e: 08:1c:ce:b2:46:80:7a:9c:3a:48:60:e7:d4:49:7c: 1f:7c:42:35:29:64:a1:4a:8f:56:58:23:11:49:35: 68:b2:f5:25:3e:13:92:85:63:9c:35:bb:16:2e:7c: 77:a5:54:c2:e8:5b:63:49:5d:48:5f:48:d3:8a:0b: 1b:ff:b9:68:86:70:ed:e6:a2:4d:c6:52:50:b8:b3: 9b:4b:fa:f9:86:01:77:5b:1b:59:46:6e:3d:32:44: d6:2b:94:85:c9:a2:ea:a2:5b:e8:93:a7:f5:ab:05: 4d:63:0c:f8:9b:56:29:43:14:c9:5d:27:f3:d9:31: 5d:96:cf:6a:57:25:9a:91:f9:57:58:66:8c:34:ed: 93:53:e6:8d:40:9a:e2:07:48:0b:24:96:d1:2f:20: fe:27:cb:a1:d7:80:2b:0e:1e:21:59:dc:0f:07:bc: c2:8b:9b:15:f2:75:60:cd:cb:ed:b7:b2:f3:5e:d6: 14:54:60:db:f8:be:d4:98:32:63:f9:76:08:9f:6d: 19:59:9e:62:52:b2:8d:a9:6e:b7:b3:f3:eb:62:b7: 26:99:0b:b1:31:6b:41:08:9c:c7:03:28:69:25:e5: e7:50:85:c8:a4:6d:15:19:4c:d3:d2:1e:66:72:ed: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:3E:71:5A:C7:66:50:90:3C:4F:A1:D6:72:BE:A8:C3:08:BB:F3 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:92:a1:a7:c8:c2:84:93:42:d6:ec:27:ea:a2:be:b2:b5:0a: 2c:a5:c1:9f:4b:95:e1:9a:81:ba:61:5c:a1:2d:5d:f5:39:91: b5:da:5d:4d:3e:bd:6c:a7:ee:cc:92:dc:3e:28:70:3b:12:fc: e6:8d:61:ec:b5:33:03:20:69:22:a4:88:27:43:e9:66:a8:be: d7:b2:a4:c8:6f:87:c3:fc:d5:e7:1b:84:71:ad:5b:51:8b:9c: 38:24:e9:0c:dd:8a:cb:0b:b3:03:d2:c0:10:7c:bf:57:78:17: 95:6e:6a:97:20:bb:a2:42:56:00:21:6c:fb:95:78:9f:ff:44: 92:76:33:5f:16:7d:d5:80:89:57:71:03:ee:b0:19:85:e1:97: 7c:91:d7:ff:38:3d:38:6a:24:3f:84:a5:d6:02:2e:3c:73:c1: b5:82:48:8f:20:8e:b0:cc:fc:92:f8:52:70:58:e2:7d:ec:71: 13:23:2b:eb:4c:f7:aa:85:26:c6:b8:55:89:f3:b4:a9:af:26: e1:1e:44:7b:bd:75:25:29:78:18:6e:32:aa:38:9f:d6:d6:9f: 1b:91:ef:6d:75:04:a6:b9:66:f2:c3:fa:b7:74:ff:0e:c7:c8: 72:6f:5f:2e:c1:68:62:6c:ab:7b:6d:03:a7:66:21:10:69:4a: 15:7c:0e:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAg8b/dpTrKemPqjp764cgYb5uoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA3MjAxNzI2NTJaFw0yNTA3MjMxNzMxNTJaMDMxMTAvBgNV BAMTKDFEN0UzRTcxNUFDNzY2NTA5MDNDNEZBMUQ2NzJCRUE4QzMwOEJCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T2ToNNNmqoyJaos4TggczrJG gHqcOkhg59RJfB98QjUpZKFKj1ZYIxFJNWiy9SU+E5KFY5w1uxYufHelVMLoW2NJ XUhfSNOKCxv/uWiGcO3mok3GUlC4s5tL+vmGAXdbG1lGbj0yRNYrlIXJouqiW+iT p/WrBU1jDPibVilDFMldJ/PZMV2Wz2pXJZqR+VdYZow07ZNT5o1AmuIHSAskltEv IP4ny6HXgCsOHiFZ3A8HvMKLmxXydWDNy+23svNe1hRUYNv4vtSYMmP5dgifbRlZ nmJSso2pbrez8+tityaZC7Exa0EInMcDKGkl5edQhcikbRUZTNPSHmZy7XzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHX4+cVrHZlCQPE+h1nK+qMMIu/MwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADySoafIwoSTQtbsJ+qivrK1CiylwZ9LleGa gbphXKEtXfU5kbXaXU0+vWyn7syS3D4ocDsS/OaNYey1MwMgaSKkiCdD6Waovtey pMhvh8P81ecbhHGtW1GLnDgk6QzdissLswPSwBB8v1d4F5Vuapcgu6JCVgAhbPuV eJ//RJJ2M18WfdWAiVdxA+6wGYXhl3yR1/84PThqJD+EpdYCLjxzwbWCSI8gjrDM /JL4UnBY4n3scRMjK+tM96qFJsa4VYnztKmvJuEeRHu9dSUpeBhuMqo4n9bWnxuR 7211BKa5ZvLD+rd0/w7HyHJvXy7BaGJsq3ttA6dmIRBpShV8Dgs= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:27 2025 by rpki-client