$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: phDE8cjDtzqUKwlZU3PvTA61jNpumK6wu6V1OwvTKX8= Subject key identifier: A8:EC:CE:11:D3:37:24:A3:F3:A7:91:FD:09:8C:C9:57:B4:EF:31:E6 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 6F599D239F3F16A9B6B08E0CBF7B69132ADF8CBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: EA Signing time: Tue 09 Sep 2025 07:22:15 +0000 Manifest this update: Tue 09 Sep 2025 07:17:15 +0000 Manifest next update: Fri 12 Sep 2025 07:27:15 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 4: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: 7srGrvRnBvnUzvCQ4CrbLRK2v5d+rdHHT7k3hCVdRCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:59:9d:23:9f:3f:16:a9:b6:b0:8e:0c:bf:7b:69:13:2a:df:8c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Sep 9 07:17:15 2025 GMT Not After : Sep 12 07:27:15 2025 GMT Subject: CN=A8ECCE11D33724A3F3A791FD098CC957B4EF31E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:30:1f:03:81:b9:c8:69:44:88:ae:7f:d0: 48:12:ff:90:f8:9f:54:5c:69:54:e6:14:17:d6:d6: 4e:8b:86:10:3d:3f:d7:6e:b3:41:fa:bc:7d:ce:ed: ae:fc:b4:a1:c7:7b:8d:59:9d:4f:23:2f:b1:e7:1c: 2b:f4:0d:be:58:e3:c8:81:80:bf:ee:09:a4:51:d2: a0:61:ac:d7:38:13:f7:06:d8:e3:dc:3c:35:f4:03: f1:66:be:52:ce:7a:7f:0f:63:1b:66:c4:d4:4a:cc: e4:5d:28:72:59:cc:77:81:14:9f:fc:48:15:ba:93: 15:ef:7f:ac:d9:78:2a:d4:92:f8:81:da:2b:e5:c5: 74:df:f0:90:da:81:68:0e:0b:81:eb:3c:28:38:7c: 69:75:c7:e9:b0:e0:77:ee:5a:26:dd:5a:3a:31:c3: 8d:36:1d:cb:2b:6d:d6:60:42:b0:5b:15:28:63:8c: 81:4e:a9:53:b1:85:d6:a7:6c:eb:f5:24:48:82:8d: d8:5c:5f:d8:68:f1:be:2a:7f:24:6d:53:e8:e5:24: e7:89:58:06:71:eb:08:03:51:fa:1f:23:52:8d:19: 9c:6e:ec:4a:38:30:b0:4f:86:95:d8:9a:25:57:d4: 78:64:1a:50:c0:2e:96:4a:78:76:43:30:c1:9f:1d: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:CE:11:D3:37:24:A3:F3:A7:91:FD:09:8C:C9:57:B4:EF:31:E6 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:52:be:e3:6b:dd:71:db:c0:0a:24:9e:75:65:13:db:86:7e: 4f:aa:09:cc:b4:c5:c4:87:01:c1:ba:1e:0e:5e:51:82:ba:51: e8:60:93:8f:49:9a:d2:0e:c0:6c:ed:f0:73:e6:f9:70:b1:c1: 62:21:ab:bd:ad:8d:38:f8:0c:7d:e5:98:93:c9:9b:7e:fb:98: 7f:d9:c9:44:f8:e1:ec:84:27:f2:e0:1c:59:98:a2:4a:f0:12: ee:01:b6:b6:26:20:ff:e5:2e:22:5b:59:14:62:e1:4b:41:3e: d2:bc:97:fa:0b:5b:19:0f:a8:a1:2e:1c:a6:68:5f:40:02:a9: 55:99:78:4a:0b:b2:75:85:58:e8:25:2c:51:4c:00:b5:a9:db: ee:16:b2:2a:be:45:ef:11:35:3a:93:64:dd:09:57:29:7a:1a: 96:86:2a:84:1f:ac:35:06:37:17:bc:3a:1d:bf:a6:00:32:78: 7b:40:e6:8e:b1:d1:bf:47:82:4b:55:c0:29:86:1b:be:03:8d: 8f:25:24:92:e3:0c:67:81:71:7d:8c:54:52:9f:bb:3d:67:0d: a2:3d:0c:b9:4d:01:13:89:af:42:1c:12:a5:3b:7c:09:db:61: 6f:be:70:dc:cd:a0:a3:cc:ba:53:e1:18:24:57:d2:5c:20:3d: 42:fe:30:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1mdI58/Fqm2sI4Mv3tpEyrfjL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA5MDkwNzE3MTVaFw0yNTA5MTIwNzI3MTVaMDMxMTAvBgNV BAMTKEE4RUNDRTExRDMzNzI0QTNGM0E3OTFGRDA5OENDOTU3QjRFRjMxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iDAfA4G5yGlEiK5/0EgS/5D4 n1RcaVTmFBfW1k6LhhA9P9dus0H6vH3O7a78tKHHe41ZnU8jL7HnHCv0Db5Y48iB gL/uCaRR0qBhrNc4E/cG2OPcPDX0A/FmvlLOen8PYxtmxNRKzORdKHJZzHeBFJ/8 SBW6kxXvf6zZeCrUkviB2ivlxXTf8JDagWgOC4HrPCg4fGl1x+mw4HfuWibdWjox w402HcsrbdZgQrBbFShjjIFOqVOxhdanbOv1JEiCjdhcX9ho8b4qfyRtU+jlJOeJ WAZx6wgDUfofI1KNGZxu7Eo4MLBPhpXYmiVX1HhkGlDALpZKeHZDMMGfHShNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqOzOEdM3JKPzp5H9CYzJV7TvMeYwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlSvuNr3XHbwAoknnVlE9uGfk+qCcy0xcSH AcG6Hg5eUYK6Uehgk49JmtIOwGzt8HPm+XCxwWIhq72tjTj4DH3lmJPJm377mH/Z yUT44eyEJ/LgHFmYokrwEu4BtrYmIP/lLiJbWRRi4UtBPtK8l/oLWxkPqKEuHKZo X0ACqVWZeEoLsnWFWOglLFFMALWp2+4Wsiq+Re8RNTqTZN0JVyl6GpaGKoQfrDUG Nxe8Oh2/pgAyeHtA5o6x0b9HgktVwCmGG74DjY8lJJLjDGeBcX2MVFKfuz1nDaI9 DLlNAROJr0IcEqU7fAnbYW++cNzNoKPMulPhGCRX0lwgPUL+MMg= -----END CERTIFICATE-----Generated at Tue Sep 9 10:33:03 2025 by rpki-client