$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: cQ5d4XE0e3ijw3F8IT+SNS7D12+LczOi+GloEIRZtnA= Subject key identifier: CF:D8:1C:DA:83:4A:83:51:F4:47:6B:72:A7:58:BD:13:10:0D:EC:38 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 33E689161F977E12F8D57726DF3417F19EFB756D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 026D Signing time: Sat 19 Jul 2025 04:01:31 +0000 Manifest this update: Sat 19 Jul 2025 03:56:31 +0000 Manifest next update: Tue 22 Jul 2025 13:44:31 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 19PeKSzh6Kj0jCn9U+9Y4ujJccIgZHVg/pdYCsg5Ik0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e6:89:16:1f:97:7e:12:f8:d5:77:26:df:34:17:f1:9e:fb:75:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Jul 19 03:56:31 2025 GMT Not After : Jul 22 13:44:31 2025 GMT Subject: CN=CFD81CDA834A8351F4476B72A758BD13100DEC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:51:8b:4f:9b:09:5d:c2:84:7b:65:2c:84: f0:21:6f:e5:98:91:4b:a5:3b:8c:1e:9d:b4:05:15: af:d9:04:ff:1b:ce:4e:6c:36:25:62:25:54:aa:2a: 6c:b4:04:78:72:10:df:c8:a7:fe:0d:b2:ea:c1:67: 68:f5:65:ec:8f:60:a3:63:cf:42:26:bc:82:33:88: 95:1d:12:b7:af:f3:e9:21:49:93:7f:fc:bc:e2:d8: f0:63:8a:d8:84:fc:ec:e1:7e:c1:b0:a3:f9:18:b9: f8:d5:85:82:52:c6:24:c9:32:fb:e0:62:43:d0:dd: a9:ad:ed:bd:dc:7a:b0:73:2b:e3:79:dc:2b:9b:91: f6:56:6e:45:15:1d:76:a1:6a:00:7c:40:3a:37:c9: 2e:2c:a7:f7:0b:26:47:82:62:9d:97:22:ff:a2:6b: f1:b2:fb:61:a7:fe:fa:ee:5c:fc:f6:ed:66:90:c7: f0:9b:96:b5:0b:b2:20:9d:33:25:07:87:91:53:97: 9e:03:ba:90:fa:e8:89:dd:c1:bf:57:c9:78:6e:9f: 3b:25:b6:4e:e4:2b:20:6d:24:69:3f:81:41:1b:64: 5a:96:c7:e0:30:77:e5:89:5a:fe:98:21:70:1b:0c: 34:4b:c8:b6:c0:8e:f7:97:49:5e:33:bd:57:fa:41: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D8:1C:DA:83:4A:83:51:F4:47:6B:72:A7:58:BD:13:10:0D:EC:38 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:cf:0c:5d:ba:ce:de:ee:bf:d1:9c:21:0c:96:c0:3d:22: 2d:23:11:ee:67:9b:8a:90:c0:a5:c5:a7:41:9a:86:9c:9f:80: c4:5f:0c:4b:59:fe:de:88:38:49:93:14:55:6e:50:f3:c6:5b: 96:f5:b4:b7:9d:ef:8f:08:61:f2:7f:b6:0f:35:67:e4:94:0e: b6:42:48:95:3a:d8:29:8b:27:a5:a1:1c:7e:0f:f1:a1:86:38: e5:73:be:7f:c3:c8:80:02:f6:fe:b6:56:79:00:c5:77:72:b6: 67:bb:1d:19:6e:40:e5:3c:96:37:06:a7:ce:86:6a:10:3d:4b: 5f:9b:f8:eb:59:37:b1:c0:33:38:62:8f:e4:0a:3c:89:73:f3: ae:cb:02:73:12:c1:bc:e4:58:e1:37:20:a8:89:46:77:13:0e: 49:74:8f:c5:0d:78:6a:21:d3:25:6f:ad:d5:03:6a:9c:db:22: f2:f9:ac:4a:71:a3:d2:d9:d8:9f:44:9f:c2:ed:a2:60:2a:4f: 6c:6b:1f:5f:36:98:36:99:d9:9e:97:7e:21:96:b1:61:8f:66: 18:fd:51:49:45:46:50:e7:9c:fd:1b:9a:11:dc:7e:26:42:9a: e2:8c:98:9e:91:64:bb:85:21:db:43:2f:e0:bc:d6:aa:54:e6: a3:56:bc:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+aJFh+XfhL41Xcm3zQX8Z77dW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA3MTkwMzU2MzFaFw0yNTA3MjIxMzQ0MzFaMDMxMTAvBgNV BAMTKENGRDgxQ0RBODM0QTgzNTFGNDQ3NkI3MkE3NThCRDEzMTAwREVDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaoVGLT5sJXcKEe2UshPAhb+WY kUulO4wenbQFFa/ZBP8bzk5sNiViJVSqKmy0BHhyEN/Ip/4NsurBZ2j1ZeyPYKNj z0ImvIIziJUdErev8+khSZN//Lzi2PBjitiE/OzhfsGwo/kYufjVhYJSxiTJMvvg YkPQ3amt7b3cerBzK+N53CubkfZWbkUVHXahagB8QDo3yS4sp/cLJkeCYp2XIv+i a/Gy+2Gn/vruXPz27WaQx/CblrULsiCdMyUHh5FTl54DupD66Indwb9XyXhunzsl tk7kKyBtJGk/gUEbZFqWx+Awd+WJWv6YIXAbDDRLyLbAjveXSV4zvVf6QeM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9gc2oNKg1H0R2typ1i9ExAN7DgwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQWzwxdus7e7r/RnCEMlsA9Ii0jEe5nm4qQ wKXFp0GahpyfgMRfDEtZ/t6IOEmTFFVuUPPGW5b1tLed748IYfJ/tg81Z+SUDrZC SJU62CmLJ6WhHH4P8aGGOOVzvn/DyIAC9v62VnkAxXdytme7HRluQOU8ljcGp86G ahA9S1+b+OtZN7HAMzhij+QKPIlz867LAnMSwbzkWOE3IKiJRncTDkl0j8UNeGoh 0yVvrdUDapzbIvL5rEpxo9LZ2J9En8LtomAqT2xrH182mDaZ2Z6XfiGWsWGPZhj9 UUlFRlDnnP0bmhHcfiZCmuKMmJ6RZLuFIdtDL+C81qpU5qNWvCs= -----END CERTIFICATE-----Generated at Sun Jul 20 21:20:03 2025 by rpki-client