$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: htPfOHGlqsZ8pKH6xtoBR26lZPbi3AIAHLR/66jFO94= Subject key identifier: BF:5F:E3:28:DE:54:E0:84:3B:09:50:C9:17:8A:BA:79:52:C5:A0:55 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 48C9605FBC5C612D2063252DF35D45D0C86F2E98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02C5 Signing time: Sat 01 Nov 2025 16:32:05 +0000 Manifest this update: Sat 01 Nov 2025 16:27:05 +0000 Manifest next update: Tue 04 Nov 2025 21:55:05 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: OJVQsHQ4NCyzo7wah8oLEJETQKohCFpvcFy2+/E/LdA=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c9:60:5f:bc:5c:61:2d:20:63:25:2d:f3:5d:45:d0:c8:6f:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Nov 1 16:27:05 2025 GMT Not After : Nov 4 21:55:05 2025 GMT Subject: CN=BF5FE328DE54E0843B0950C9178ABA7952C5A055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:0c:23:97:8d:92:6b:cd:b8:c2:14:7c:c7: aa:57:b8:15:b3:5c:4b:7d:d5:1c:fe:05:e9:d8:7a: 54:63:ec:d1:c2:bf:a7:1e:e0:c0:25:36:6d:73:14: 6b:aa:a0:cc:a5:a7:cc:fd:92:37:08:c5:b7:e4:ed: 98:2e:ba:63:fa:d8:b0:6d:92:ed:9b:44:6f:2d:c8: a6:5b:29:2b:99:a4:99:9a:9c:83:9c:4f:03:e9:ab: 67:35:7f:67:af:48:77:c1:51:5a:57:23:ff:dd:e0: 8f:c4:d9:3f:1c:2b:3d:73:7a:89:f7:bc:db:de:4e: 2a:de:ac:79:23:53:a0:94:38:4b:76:a4:4c:50:41: d1:ec:b5:41:7f:7d:30:b4:e3:c7:f6:66:95:ed:df: e7:7e:1e:3e:34:f4:fa:cf:6f:32:9e:64:9d:43:fc: 79:f0:97:c3:80:6e:18:6d:cf:95:17:81:ec:ca:9a: 37:75:fb:49:4f:55:db:9e:83:53:69:b0:83:40:1b: d0:e5:1f:ec:9f:e3:3e:0e:fb:0e:31:2e:11:50:b1: d8:ce:eb:eb:8c:51:23:6a:d1:2d:d5:dd:17:28:7a: d6:89:3d:d3:5e:eb:68:91:47:2d:17:15:3b:9b:78: 58:93:90:ad:fd:f5:c8:c8:9b:10:5e:4e:8a:27:cc: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:E3:28:DE:54:E0:84:3B:09:50:C9:17:8A:BA:79:52:C5:A0:55 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:84:2e:1e:6f:15:f9:ac:13:20:6f:95:e0:54:17:17:26:05: 6a:77:eb:f2:2d:97:71:87:54:00:fd:8b:d9:de:af:e2:61:d9: 9c:a4:c7:3c:44:ae:2d:7e:9f:f5:db:d3:2f:8b:ab:14:04:0f: 21:2f:aa:7e:fc:09:d2:02:53:8d:17:64:c5:68:e7:49:2b:c4: c1:fb:9d:99:04:d1:3e:2a:10:7c:29:94:89:fe:8d:08:8b:8d: 72:66:14:54:f5:8d:b8:1e:15:3d:bc:c2:a9:f9:90:32:20:91: cd:aa:71:57:21:f6:91:21:4a:4f:fa:e5:73:6f:d9:7a:7d:2f: ed:0e:5c:3d:5d:47:6f:a0:51:b3:3e:0d:50:6a:09:1f:7d:10: a4:6a:1b:4e:eb:35:72:42:75:38:b3:b9:f2:a7:f0:67:52:c2: 22:5a:5f:2a:78:12:49:63:4b:fe:d6:14:15:cc:31:88:b5:1f: f1:d6:2e:91:20:0f:38:d3:f2:fa:52:d7:0a:6c:54:01:62:ab: df:1e:87:90:c5:4f:59:99:b9:91:41:bd:b2:54:47:21:61:ff: 53:ee:45:e5:4f:d7:a5:cd:6f:b9:6a:4c:72:53:ca:27:a5:bd: 7c:74:43:9e:2e:03:06:74:54:d6:81:81:45:c0:ad:2a:86:f1: a7:ea:d8:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMlgX7xcYS0gYyUt811F0MhvLpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTExMDExNjI3MDVaFw0yNTExMDQyMTU1MDVaMDMxMTAvBgNV BAMTKEJGNUZFMzI4REU1NEUwODQzQjA5NTBDOTE3OEFCQTc5NTJDNUEwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGggwjl42Sa824whR8x6pXuBWz XEt91Rz+BenYelRj7NHCv6ce4MAlNm1zFGuqoMylp8z9kjcIxbfk7ZguumP62LBt ku2bRG8tyKZbKSuZpJmanIOcTwPpq2c1f2evSHfBUVpXI//d4I/E2T8cKz1zeon3 vNveTirerHkjU6CUOEt2pExQQdHstUF/fTC048f2ZpXt3+d+Hj409PrPbzKeZJ1D /Hnwl8OAbhhtz5UXgezKmjd1+0lPVdueg1NpsINAG9DlH+yf4z4O+w4xLhFQsdjO 6+uMUSNq0S3V3RcoetaJPdNe62iRRy0XFTubeFiTkK399cjImxBeToonzEyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1/jKN5U4IQ7CVDJF4q6eVLFoFUwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSELh5vFfmsEyBvleBUFxcmBWp36/Itl3GH VAD9i9ner+Jh2ZykxzxEri1+n/Xb0y+LqxQEDyEvqn78CdICU40XZMVo50krxMH7 nZkE0T4qEHwplIn+jQiLjXJmFFT1jbgeFT28wqn5kDIgkc2qcVch9pEhSk/65XNv 2Xp9L+0OXD1dR2+gUbM+DVBqCR99EKRqG07rNXJCdTizufKn8GdSwiJaXyp4Eklj S/7WFBXMMYi1H/HWLpEgDzjT8vpS1wpsVAFiq98eh5DFT1mZuZFBvbJURyFh/1Pu ReVP16XNb7lqTHJTyielvXx0Q54uAwZ0VNaBgUXArSqG8afq2F0= -----END CERTIFICATE-----Generated at Sun Nov 2 04:52:54 2025 by rpki-client