$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: uEXs5qev5ZCNEfQJHNQuk0DGZ1t8gYow/96vS2RR1qg= Subject key identifier: 79:DB:C7:EA:86:0A:A4:1C:0E:09:79:A6:59:B5:CD:6E:40:79:D9:0D Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 24A85E7368C08A1FE9C22F3E417E13498672BE42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 0505 Signing time: Sat 06 Sep 2025 03:31:25 +0000 Manifest this update: Sat 06 Sep 2025 03:26:25 +0000 Manifest next update: Tue 09 Sep 2025 12:04:25 +0000 Files and hashes: 1: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 2: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: b/Xhz2yCeUnYcKj8HbrfI5RkJmD268UwRnQpyrQ2Rg4=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 5: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a8:5e:73:68:c0:8a:1f:e9:c2:2f:3e:41:7e:13:49:86:72:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Sep 6 03:26:25 2025 GMT Not After : Sep 9 12:04:25 2025 GMT Subject: CN=79DBC7EA860AA41C0E0979A659B5CD6E4079D90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:b9:f2:0e:71:3e:5f:cd:1f:59:2c:01:8c: 2c:93:3f:01:22:a8:f9:e3:5e:17:88:59:64:8e:a9: 5f:7a:9b:ef:41:a1:21:b0:44:7c:9d:89:aa:1e:98: 99:74:de:dd:a8:94:e2:e3:4d:36:5c:6c:8e:e4:4d: 51:72:a5:18:b4:0d:d7:15:cf:9c:c1:0d:c6:c5:c6: d8:82:79:bd:f3:eb:ba:c4:82:89:06:e2:a3:15:0d: 01:99:b6:86:e8:71:06:2c:c8:88:3a:a9:12:34:72: 6d:c2:f5:11:3d:32:17:1d:24:21:ec:c8:ae:d0:56: cc:a3:be:c9:7e:28:e3:b0:0e:4b:2f:00:9b:39:2a: b2:16:64:95:e6:5d:68:86:91:34:09:3b:f8:b1:db: f4:8a:5e:73:a0:86:31:22:8f:c9:1c:79:71:e0:1f: e4:d4:d0:c4:b1:69:b3:1e:1e:23:a8:a6:cf:88:ef: 69:b0:55:cd:a5:9d:9f:d3:b4:a0:58:fd:dc:0f:fb: d2:d3:79:6f:a0:33:c1:9c:22:90:33:64:cf:80:2c: 4e:1c:4b:54:dc:b5:77:a1:a1:e0:e0:77:51:fd:e6: 7b:a7:ca:89:3c:87:f3:ea:69:57:24:3b:69:9d:e2: 2a:25:ab:bf:27:d8:44:7d:73:27:09:3c:b1:62:2a: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:C7:EA:86:0A:A4:1C:0E:09:79:A6:59:B5:CD:6E:40:79:D9:0D X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:45:4b:05:0b:f6:99:62:33:78:2a:be:06:27:0e:9e:5f:92: c9:21:98:79:0f:95:90:c3:1e:a7:c8:72:6d:5c:d7:ad:83:6c: 87:65:1b:13:24:2f:39:78:77:fa:40:34:99:5a:d8:c9:6e:2a: 69:0c:37:0f:7e:16:81:3f:38:32:a0:4e:c3:16:9e:a9:01:d4: 4d:fb:d7:2d:59:cb:ba:1e:d4:c2:4d:d1:9f:82:c4:23:fd:e2: b4:0e:e7:46:49:7a:82:5a:36:17:20:c4:7b:70:91:aa:e4:56: 56:1b:f7:19:d0:8d:ff:23:0f:82:14:63:90:86:78:83:e5:e0: e0:1f:96:95:19:8a:1c:7b:df:f3:5e:7f:37:c3:1f:6a:ed:4c: f4:4c:44:4d:d4:7c:db:d9:75:6a:bf:2e:3f:b4:c6:0b:24:49: 6e:07:c6:77:ad:3c:9d:e6:8d:ac:c7:76:c8:43:7b:f5:49:40: d3:5f:e9:53:3d:2b:00:59:71:a5:6f:92:b8:b2:5e:80:f7:c2: c6:9b:85:8e:ab:c4:59:cf:d5:50:da:4b:dd:31:73:64:4b:3c: d4:37:f9:02:b2:74:36:fa:fc:87:9a:08:f7:09:38:41:53:4e: 82:33:0d:fb:82:4e:5b:d9:63:74:20:b0:53:e1:42:4e:d0:39: 73:ab:ae:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKhec2jAih/pwi8+QX4TSYZyvkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTA5MDYwMzI2MjVaFw0yNTA5MDkxMjA0MjVaMDMxMTAvBgNV BAMTKDc5REJDN0VBODYwQUE0MUMwRTA5NzlBNjU5QjVDRDZFNDA3OUQ5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKLnyDnE+X80fWSwBjCyTPwEi qPnjXheIWWSOqV96m+9BoSGwRHydiaoemJl03t2olOLjTTZcbI7kTVFypRi0DdcV z5zBDcbFxtiCeb3z67rEgokG4qMVDQGZtobocQYsyIg6qRI0cm3C9RE9MhcdJCHs yK7QVsyjvsl+KOOwDksvAJs5KrIWZJXmXWiGkTQJO/ix2/SKXnOghjEij8kceXHg H+TU0MSxabMeHiOops+I72mwVc2lnZ/TtKBY/dwP+9LTeW+gM8GcIpAzZM+ALE4c S1TctXehoeDgd1H95nunyok8h/PqaVckO2md4iolq78n2ER9cycJPLFiKhCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedvH6oYKpBwOCXmmWbXNbkB52Q0wHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENFSwUL9pliM3gqvgYnDp5fkskhmHkPlZDD HqfIcm1c162DbIdlGxMkLzl4d/pANJla2MluKmkMNw9+FoE/ODKgTsMWnqkB1E37 1y1Zy7oe1MJN0Z+CxCP94rQO50ZJeoJaNhcgxHtwkarkVlYb9xnQjf8jD4IUY5CG eIPl4OAflpUZihx73/NefzfDH2rtTPRMRE3UfNvZdWq/Lj+0xgskSW4HxnetPJ3m jazHdshDe/VJQNNf6VM9KwBZcaVvkriyXoD3wsabhY6rxFnP1VDaS90xc2RLPNQ3 +QKydDb6/IeaCPcJOEFTToIzDfuCTlvZY3QgsFPhQk7QOXOrrhM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:28 2025 by rpki-client