$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: Cs7joVAtF6EYd9w7e+aE04WCCSFVkHUCtwxtZdgcVgs= Subject key identifier: 0C:70:44:B6:4E:95:A8:47:F9:49:D8:55:16:A4:39:FC:48:17:53:55 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 6311DDF7FBDEB5A02F066BF0FFEF642603757133 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: D6 Signing time: Tue 22 Jul 2025 09:51:01 +0000 Manifest this update: Tue 22 Jul 2025 09:46:01 +0000 Manifest next update: Fri 25 Jul 2025 10:54:01 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 3: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: XBGa4TLP1h4QpPN68O/mlXZJ9PiE2IB9OprLYUzE2c4=) 4: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:11:dd:f7:fb:de:b5:a0:2f:06:6b:f0:ff:ef:64:26:03:75:71:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Jul 22 09:46:01 2025 GMT Not After : Jul 25 10:54:01 2025 GMT Subject: CN=0C7044B64E95A847F949D85516A439FC48175355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:04:5d:bc:44:ac:d0:e8:91:0a:b5:3f:e8: 44:54:91:de:52:ad:1c:a4:00:d9:72:d9:cc:24:0f: 5a:dc:89:e3:37:74:5f:bc:36:56:43:85:af:b8:0d: e1:0a:db:b5:08:85:9e:94:15:57:0c:0c:b5:31:33: 08:2f:6e:07:93:56:f3:31:76:e7:85:5d:c8:4c:2a: e3:06:28:d5:c6:76:99:d8:07:15:9c:45:cf:10:42: 79:08:5b:cd:d7:4e:57:82:c9:29:5b:b0:04:7f:b5: 25:5b:cb:d4:fa:9f:7d:c2:11:74:4a:f9:99:f5:7e: cc:59:66:01:58:99:18:2a:1a:bd:44:25:05:05:15: 89:51:d0:ce:5a:14:58:af:2b:f6:ff:0b:95:bb:fd: 59:db:71:a0:f6:84:bc:12:f1:a1:4d:eb:6d:78:06: 78:35:1d:7b:3e:69:fd:fe:5c:a4:a1:82:39:56:6e: 81:d3:38:38:f4:88:a3:32:3a:61:7a:94:b2:28:68: 82:41:68:66:14:c0:0b:4e:7a:54:d0:08:68:f8:d4: ab:57:a7:4c:96:66:9a:63:0a:3e:bc:df:92:08:1d: fa:4c:f2:67:c3:eb:d8:85:66:c7:6d:d6:5a:0b:92: d7:f8:48:34:d6:bf:26:a2:37:8c:53:c4:8c:0e:d4: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:44:B6:4E:95:A8:47:F9:49:D8:55:16:A4:39:FC:48:17:53:55 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9f:f7:6c:83:d4:33:2d:27:b7:bd:52:ef:8e:31:f7:49:3e: 37:85:57:06:83:e2:60:81:24:65:86:b5:73:7c:67:ef:88:d6: dc:c5:e8:6a:30:78:85:f6:0f:51:b8:39:48:4f:a9:0f:f8:d3: f2:e8:26:47:fb:68:de:4a:24:06:7f:1f:11:95:bd:c7:dc:b6: 1f:77:06:93:a5:ca:3a:b3:8c:6c:83:a5:ff:4d:d1:ef:c7:ca: fa:4f:e8:11:c2:94:db:fc:88:6d:e6:2b:d1:dc:18:6f:2e:b7: 3c:98:a1:bd:d9:86:20:6c:dc:87:6a:30:27:89:9e:8a:64:d8: 7f:82:b8:5e:0c:6a:72:7c:d3:8b:12:3d:c5:c6:9a:bf:a9:e6: d0:86:9b:25:98:43:82:3a:7e:5c:76:df:1f:e0:d1:18:5d:7a: 8a:91:63:7f:4e:08:5e:cd:38:5b:ed:5c:3c:6f:09:9c:a5:cc: 6d:35:8c:49:4b:9a:4c:7c:53:71:1b:98:ab:20:68:36:2f:c7: 6a:d6:d2:ca:25:09:35:88:8c:41:8c:c2:f0:76:21:fe:73:07: a1:af:39:9f:85:d2:3b:50:1a:7d:de:21:9f:ac:6c:09:9e:0a: 60:a8:d7:d7:0e:a4:27:47:6e:4e:97:7f:a7:3e:81:25:04:30: dd:0d:e1:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxHd9/vetaAvBmvw/+9kJgN1cTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA3MjIwOTQ2MDFaFw0yNTA3MjUxMDU0MDFaMDMxMTAvBgNV BAMTKDBDNzA0NEI2NEU5NUE4NDdGOTQ5RDg1NTE2QTQzOUZDNDgxNzUzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7ARdvESs0OiRCrU/6ERUkd5S rRykANly2cwkD1rcieM3dF+8NlZDha+4DeEK27UIhZ6UFVcMDLUxMwgvbgeTVvMx dueFXchMKuMGKNXGdpnYBxWcRc8QQnkIW83XTleCySlbsAR/tSVby9T6n33CEXRK +Zn1fsxZZgFYmRgqGr1EJQUFFYlR0M5aFFivK/b/C5W7/VnbcaD2hLwS8aFN6214 Bng1HXs+af3+XKShgjlWboHTODj0iKMyOmF6lLIoaIJBaGYUwAtOelTQCGj41KtX p0yWZppjCj6835IIHfpM8mfD69iFZsdt1loLktf4SDTWvyaiN4xTxIwO1F3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHBEtk6VqEf5SdhVFqQ5/EgXU1UwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqf92yD1DMtJ7e9Uu+OMfdJPjeFVwaD4mCB JGWGtXN8Z++I1tzF6GoweIX2D1G4OUhPqQ/40/LoJkf7aN5KJAZ/HxGVvcfcth93 BpOlyjqzjGyDpf9N0e/HyvpP6BHClNv8iG3mK9HcGG8utzyYob3ZhiBs3IdqMCeJ nopk2H+CuF4ManJ804sSPcXGmr+p5tCGmyWYQ4I6flx23x/g0RhdeoqRY39OCF7N OFvtXDxvCZylzG01jElLmkx8U3EbmKsgaDYvx2rW0solCTWIjEGMwvB2If5zB6Gv OZ+F0jtQGn3eIZ+sbAmeCmCo19cOpCdHbk6Xf6c+gSUEMN0N4VA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:11 2025 by rpki-client