$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: EFel2T7oHox+J4Uvwgiv31mhU2YCWXCb6l4iF79mI5M= Subject key identifier: 98:8E:27:FA:04:9B:4E:78:BF:97:54:99:E9:35:22:5B:ED:44:32:18 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 7D91D7A1A6505B479FF75AE559392627CB5B2E2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: CC Signing time: Mon 08 Sep 2025 02:00:43 +0000 Manifest this update: Mon 08 Sep 2025 01:55:43 +0000 Manifest next update: Thu 11 Sep 2025 03:15:43 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: abRXNQ5et5UU2CKExwZeuIVzwhPyXFxeu4IxIOii2io=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 03:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:91:d7:a1:a6:50:5b:47:9f:f7:5a:e5:59:39:26:27:cb:5b:2e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Sep 8 01:55:43 2025 GMT Not After : Sep 11 03:15:43 2025 GMT Subject: CN=988E27FA049B4E78BF975499E935225BED443218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:43:24:2d:7d:f5:3a:7f:12:03:c0:fe:73:6d: a9:e3:08:72:c2:26:95:51:dd:ad:b7:1b:f7:e7:68: f5:68:b6:e1:8a:00:e2:99:d8:34:93:54:60:6c:a7: e6:51:c2:5a:9a:07:a5:8d:f2:98:84:c2:35:32:74: 9f:f9:f1:f3:bc:97:81:c8:5b:93:b5:0e:7a:33:47: 24:58:70:f6:c0:a5:b7:2b:59:bf:d0:83:3c:96:bf: 0c:28:80:37:7d:c4:87:3f:09:dc:2a:36:b8:23:3a: 9d:6d:c5:e0:a2:88:e4:ed:8f:28:db:52:ed:48:2d: d5:7d:1f:f8:4d:79:4b:18:e7:96:98:90:f7:ac:df: 20:71:d5:ca:06:9c:0f:1f:da:35:9e:02:e5:75:f8: 88:a1:92:ae:87:1e:d1:52:75:61:a6:f9:9c:9b:25: 91:d9:33:58:64:2a:03:bc:73:3e:b8:f3:da:e1:9b: d9:73:fc:c1:02:77:e0:90:49:83:cb:9f:08:24:70: 39:b4:62:17:ec:c8:a1:7e:7b:68:08:71:b2:e2:5f: d4:0a:13:70:b0:d4:dd:28:80:ac:58:01:6c:53:61: 2d:2d:96:64:29:88:2f:4c:d8:b9:d7:49:43:8c:b7: f4:dc:d4:c0:85:37:9b:83:3e:fa:ae:75:9d:33:38: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:27:FA:04:9B:4E:78:BF:97:54:99:E9:35:22:5B:ED:44:32:18 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:de:f8:91:98:53:42:8e:08:ad:f9:db:08:16:dd:5e:1f:24: c9:5a:0a:cb:19:3d:09:40:5f:7d:f4:e1:8f:36:49:45:05:07: 2c:41:d6:76:56:db:b1:e3:a5:d2:53:14:34:37:a6:bc:cd:17: 4b:64:91:bc:9b:c9:b1:76:95:07:24:5f:8c:5a:40:7a:e4:7d: c8:f5:85:07:49:b0:35:12:19:50:8a:f6:49:3c:ba:ee:2e:3f: 4f:8e:77:18:3f:ef:c0:b6:ab:36:e3:c7:0f:0f:df:df:e4:51: e3:6f:7c:e1:d6:0a:fa:a6:54:47:14:db:e3:70:94:4e:5c:23: 05:94:ec:44:32:81:d3:80:d9:2f:2a:82:98:58:aa:c8:92:84: fd:c0:ae:2a:a2:2c:2b:55:53:58:85:3e:9e:98:ce:98:29:10: 0c:50:7b:a3:bf:b9:ba:a0:1d:21:06:93:75:b2:42:b4:8a:ef: 2e:73:6d:ec:82:59:47:cb:a0:cc:79:49:d9:2f:03:09:4d:ab: e2:4a:e3:e3:26:58:e4:56:87:a3:68:83:0f:3b:ab:c3:01:94: da:cb:cf:5d:d4:85:ab:b0:4e:bc:f6:a2:6b:0e:57:71:00:ec: a1:a6:08:33:d2:d5:64:ae:1c:fd:a0:66:00:59:ee:52:f2:8a: 3c:dc:ae:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZHXoaZQW0ef91rlWTkmJ8tbLi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTA5MDgwMTU1NDNaFw0yNTA5MTEwMzE1NDNaMDMxMTAvBgNV BAMTKDk4OEUyN0ZBMDQ5QjRFNzhCRjk3NTQ5OUU5MzUyMjVCRUQ0NDMyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQyQtffU6fxIDwP5zbanjCHLC JpVR3a23G/fnaPVotuGKAOKZ2DSTVGBsp+ZRwlqaB6WN8piEwjUydJ/58fO8l4HI W5O1DnozRyRYcPbApbcrWb/QgzyWvwwogDd9xIc/CdwqNrgjOp1txeCiiOTtjyjb Uu1ILdV9H/hNeUsY55aYkPes3yBx1coGnA8f2jWeAuV1+Iihkq6HHtFSdWGm+Zyb JZHZM1hkKgO8cz6489rhm9lz/MECd+CQSYPLnwgkcDm0YhfsyKF+e2gIcbLiX9QK E3Cw1N0ogKxYAWxTYS0tlmQpiC9M2LnXSUOMt/Tc1MCFN5uDPvqudZ0zOEoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmI4n+gSbTni/l1SZ6TUiW+1EMhgwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3e+JGYU0KOCK352wgW3V4fJMlaCssZPQlA X3304Y82SUUFByxB1nZW27HjpdJTFDQ3przNF0tkkbybybF2lQckX4xaQHrkfcj1 hQdJsDUSGVCK9kk8uu4uP0+Odxg/78C2qzbjxw8P39/kUeNvfOHWCvqmVEcU2+Nw lE5cIwWU7EQygdOA2S8qgphYqsiShP3AriqiLCtVU1iFPp6YzpgpEAxQe6O/ubqg HSEGk3WyQrSK7y5zbeyCWUfLoMx5SdkvAwlNq+JK4+MmWORWh6Nogw87q8MBlNrL z13UhauwTrz2omsOV3EA7KGmCDPS1WSuHP2gZgBZ7lLyijzcrsU= -----END CERTIFICATE-----Generated at Tue Sep 9 14:24:55 2025 by rpki-client