$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: ekROFtwYU8givBhm7sm8wHUoSpDoQ7KADJKcZ408KAs= Subject key identifier: B5:50:B8:FF:8E:EB:35:EE:93:06:D4:C4:FE:99:EA:05:78:96:F5:BF Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 4D6CF593DD2A1FEB5723EFDC6C3C8D84B111BD66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: BF Signing time: Wed 04 Jun 2025 05:02:16 +0000 Manifest this update: Wed 04 Jun 2025 04:57:16 +0000 Manifest next update: Sat 07 Jun 2025 12:18:16 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: xwLDawiFEOXxZ9J7WyajQSD7wyjS3IPnAtXKBDTuYGo=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 3: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6c:f5:93:dd:2a:1f:eb:57:23:ef:dc:6c:3c:8d:84:b1:11:bd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Jun 4 04:57:16 2025 GMT Not After : Jun 7 12:18:16 2025 GMT Subject: CN=B550B8FF8EEB35EE9306D4C4FE99EA057896F5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:dd:94:01:20:7c:10:13:c7:e7:b9:75:90: 9d:46:d6:b4:15:47:a6:65:f1:aa:57:18:7e:23:4d: 21:89:94:33:00:1b:5b:f0:ba:c7:41:d9:74:44:7b: 2a:41:4c:5d:79:d8:d5:f3:0e:a6:fa:98:08:a3:4a: 92:bc:b9:26:6b:48:7b:58:c4:aa:cc:77:8a:3d:46: 71:45:56:98:ba:7d:0b:00:17:e9:c0:36:cf:1b:e2: 91:9d:fa:f9:55:96:da:71:12:5d:1b:4b:e4:5b:97: 3e:2b:a4:f3:a8:35:d9:77:50:1e:f1:d1:24:e1:3b: 9b:88:f4:14:1b:1a:93:ea:99:a0:53:09:f8:20:c1: fc:5a:c9:da:de:01:31:d7:33:2b:31:48:54:47:fa: 42:a8:98:0f:7b:db:b2:eb:f2:c3:d9:8a:3f:79:19: 85:99:63:8a:c9:71:e0:3d:c2:03:6d:7e:7b:86:2b: 96:fe:64:44:6d:9b:31:47:ca:30:e4:74:b9:65:1a: 7a:ae:31:d5:13:d7:34:37:43:83:36:a3:57:82:03: 51:3e:22:d8:b3:e6:6b:5c:b5:af:c1:af:f1:56:31: 07:cc:bf:db:86:0b:e7:4f:8a:82:1d:a3:23:0b:7f: 28:0d:90:88:26:4a:45:e8:d0:a9:16:c5:8d:98:26: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:B8:FF:8E:EB:35:EE:93:06:D4:C4:FE:99:EA:05:78:96:F5:BF X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:cc:9e:7c:2b:db:dd:e4:a0:c3:39:c9:b4:96:bd:53:8a: b5:88:2b:fd:e8:a9:c1:59:89:21:fb:87:cc:a2:ad:5a:52:81: ec:27:31:75:6d:5e:48:f9:7f:9c:0d:af:91:39:25:52:77:0c: 75:02:71:06:83:8f:2e:92:95:05:bb:d6:ae:df:aa:44:b8:f6: a9:65:96:e8:49:3f:7f:3a:d9:51:fd:5a:3a:68:e4:17:e4:3c: f9:f8:fb:40:aa:d7:8c:2c:c9:ab:09:a8:19:a9:c9:9f:26:ec: dd:44:74:00:2f:e1:77:8f:d9:3e:0c:c9:2d:04:4a:4c:b3:c5: 87:1e:10:3e:c9:9e:d3:41:56:3a:10:c2:c4:a7:05:b0:aa:8c: 7f:6a:03:ab:60:53:27:a5:b0:4a:41:53:62:c8:81:c2:3a:ee: c4:ab:92:07:8b:7e:f9:bd:b4:0d:1f:cf:f1:8f:b2:29:a7:9e: c1:37:fa:f5:f2:7f:44:82:4a:27:46:b5:68:cb:a9:1d:fe:45: 4a:fd:71:50:4b:f7:3d:5a:4e:e6:b7:62:5a:8b:49:60:96:85: 57:81:d9:8e:b8:90:b9:80:aa:ce:fe:68:0b:7b:ce:0c:c2:48: af:66:a1:5d:ea:7e:d1:26:37:4b:c1:39:e3:5a:fd:3d:cc:28: 4f:d8:dd:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWz1k90qH+tXI+/cbDyNhLERvWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA2MDQwNDU3MTZaFw0yNTA2MDcxMjE4MTZaMDMxMTAvBgNV BAMTKEI1NTBCOEZGOEVFQjM1RUU5MzA2RDRDNEZFOTlFQTA1Nzg5NkY1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZd2UASB8EBPH57l1kJ1G1rQV R6Zl8apXGH4jTSGJlDMAG1vwusdB2XREeypBTF152NXzDqb6mAijSpK8uSZrSHtY xKrMd4o9RnFFVpi6fQsAF+nANs8b4pGd+vlVltpxEl0bS+Rblz4rpPOoNdl3UB7x 0SThO5uI9BQbGpPqmaBTCfggwfxaydreATHXMysxSFRH+kKomA9727Lr8sPZij95 GYWZY4rJceA9wgNtfnuGK5b+ZERtmzFHyjDkdLllGnquMdUT1zQ3Q4M2o1eCA1E+ Itiz5mtcta/Br/FWMQfMv9uGC+dPioIdoyMLfygNkIgmSkXo0KkWxY2YJgzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVC4/47rNe6TBtTE/pnqBXiW9b8wHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3pzJ58K9vd5KDDOcm0lr1TirWIK/3oqcFZ iSH7h8yirVpSgewnMXVtXkj5f5wNr5E5JVJ3DHUCcQaDjy6SlQW71q7fqkS49qll luhJP3862VH9Wjpo5BfkPPn4+0Cq14wsyasJqBmpyZ8m7N1EdAAv4XeP2T4MyS0E SkyzxYceED7JntNBVjoQwsSnBbCqjH9qA6tgUyelsEpBU2LIgcI67sSrkgeLfvm9 tA0fz/GPsimnnsE3+vXyf0SCSidGtWjLqR3+RUr9cVBL9z1aTua3YlqLSWCWhVeB 2Y64kLmAqs7+aAt7zgzCSK9moV3qftEmN0vBOeNa/T3MKE/Y3aU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:53 2025 by rpki-client