$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: EZNXTC5ecSBNNmPZh7MZEQurNNs6mZy3QYXwOzSegnU= Subject key identifier: DD:06:EF:0B:22:19:C9:76:08:94:3F:B2:50:2F:64:10:64:53:BF:B6 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 1FDD89124EEE1D6F0BAC1F323FE44777D1BC6F3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: A3 Signing time: Fri 06 Jun 2025 10:30:43 +0000 Manifest this update: Fri 06 Jun 2025 10:25:43 +0000 Manifest next update: Mon 09 Jun 2025 12:27:43 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: Z8v0cWKOARYZI+1o5KFyyRpwwpHXFt9a+LtV9vajz0c=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:dd:89:12:4e:ee:1d:6f:0b:ac:1f:32:3f:e4:47:77:d1:bc:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Jun 6 10:25:43 2025 GMT Not After : Jun 9 12:27:43 2025 GMT Subject: CN=DD06EF0B2219C97608943FB2502F64106453BFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:d6:32:02:c4:3b:0f:cb:af:6e:38:06:6e: b1:01:f2:ed:65:24:79:b3:29:3a:a3:f7:c9:f5:da: e5:9d:70:6f:c2:05:0a:83:a2:ae:2f:55:41:3d:9c: 09:2c:ef:d1:f8:c3:b6:9d:b1:bb:23:e5:52:76:bd: 73:c0:a4:56:b0:a3:ae:c7:8a:82:98:86:c0:4f:25: a1:40:7c:4a:31:5b:94:13:31:a1:10:e1:d4:5d:8e: 60:e8:39:eb:e5:dd:c6:d9:2f:34:73:f1:37:98:b9: d7:4b:fc:68:3a:3d:34:3f:8c:61:84:c1:b5:49:e6: 23:18:3c:35:d5:23:f1:8d:3b:9e:90:79:11:63:b4: a7:0c:0a:da:79:f2:79:59:d9:8b:b4:6d:c3:1d:7b: 09:93:6d:56:4e:dc:39:65:cf:a2:77:ec:af:56:5d: ce:08:3c:c7:39:9e:34:4c:6e:87:81:65:7d:8f:6f: 76:8f:d9:b0:f3:f4:5b:06:2a:2c:b3:93:6f:c2:06: 29:b5:a4:13:0a:b7:a1:39:c4:1c:b5:11:66:70:26: 0a:fb:ca:d8:cd:47:fb:fc:df:b5:22:13:e1:7d:2d: 5e:a9:2e:98:3e:5b:ff:c6:15:b2:52:eb:68:38:63: 6d:8e:25:c4:a4:2f:6c:9f:82:b9:e5:d6:66:50:8b: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:06:EF:0B:22:19:C9:76:08:94:3F:B2:50:2F:64:10:64:53:BF:B6 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:46:bb:da:7b:6a:55:e8:46:91:7d:f9:04:07:e9:67:bd:a9: 5b:5a:67:cf:18:4e:2a:f4:ad:ee:41:1c:27:5c:d1:c6:ba:42: e3:e4:0d:9c:49:22:8f:74:dc:c8:96:b7:b2:83:f5:8d:2d:0e: c9:66:e7:64:a2:91:d4:d9:50:13:e4:6f:01:37:e3:fa:45:64: bc:8f:7f:49:34:ef:a2:cd:8c:c7:49:bc:c8:28:a6:c5:9e:03: d8:ae:b3:8f:68:e2:bc:ed:7d:ad:37:bb:55:92:cf:cc:92:b3: 18:36:6b:f3:e0:b3:99:d4:aa:c7:f6:f7:e2:00:24:a5:16:46: a8:e5:f2:bd:e1:86:87:83:bf:fb:24:65:eb:aa:43:d3:ce:58: 9c:5e:58:88:d3:2c:86:59:2a:63:17:9e:c3:55:44:29:a1:e3: d8:24:d2:77:ef:ee:ff:38:fa:28:09:c2:44:27:90:e2:aa:91: b9:eb:b6:a7:a3:eb:ce:bf:0b:24:95:0d:49:11:40:71:93:51: 01:eb:ab:95:8b:4a:2c:fb:87:fa:16:ba:96:4c:13:3a:da:71: 25:7c:45:8b:30:af:3b:9e:05:b9:32:f2:c4:14:89:a6:d4:ff: 1e:0a:2d:9b:59:17:42:1f:1d:41:3c:5e:92:8b:4f:f7:ca:10: d4:e5:49:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH92JEk7uHW8LrB8yP+RHd9G8bz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNTA2MDYxMDI1NDNaFw0yNTA2MDkxMjI3NDNaMDMxMTAvBgNV BAMTKEREMDZFRjBCMjIxOUM5NzYwODk0M0ZCMjUwMkY2NDEwNjQ1M0JGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwNYyAsQ7D8uvbjgGbrEB8u1l JHmzKTqj98n12uWdcG/CBQqDoq4vVUE9nAks79H4w7adsbsj5VJ2vXPApFawo67H ioKYhsBPJaFAfEoxW5QTMaEQ4dRdjmDoOevl3cbZLzRz8TeYuddL/Gg6PTQ/jGGE wbVJ5iMYPDXVI/GNO56QeRFjtKcMCtp58nlZ2Yu0bcMdewmTbVZO3Dllz6J37K9W Xc4IPMc5njRMboeBZX2Pb3aP2bDz9FsGKiyzk2/CBim1pBMKt6E5xBy1EWZwJgr7 ytjNR/v837UiE+F9LV6pLpg+W//GFbJS62g4Y22OJcSkL2yfgrnl1mZQi6kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QbvCyIZyXYIlD+yUC9kEGRTv7YwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVGu9p7alXoRpF9+QQH6We9qVtaZ88YTir0 re5BHCdc0ca6QuPkDZxJIo903MiWt7KD9Y0tDslm52SikdTZUBPkbwE34/pFZLyP f0k076LNjMdJvMgopsWeA9ius49o4rztfa03u1WSz8ySsxg2a/Pgs5nUqsf29+IA JKUWRqjl8r3hhoeDv/skZeuqQ9POWJxeWIjTLIZZKmMXnsNVRCmh49gk0nfv7v84 +igJwkQnkOKqkbnrtqej686/CySVDUkRQHGTUQHrq5WLSiz7h/oWupZMEzracSV8 RYswrzueBbky8sQUiabU/x4KLZtZF0IfHUE8XpKLT/fKENTlSdI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:54 2025 by rpki-client