$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: td2SGIxss9PkDZw8f0E/21cM6KULnKxW56srkYPFIw4= Subject key identifier: 09:0F:D4:02:34:0F:95:69:D1:F6:28:F1:71:85:B8:0A:22:FE:61:9B Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 0428A5D1DFB24404F7A88436596904482D03E643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 04DC Signing time: Fri 06 Jun 2025 14:21:25 +0000 Manifest this update: Fri 06 Jun 2025 14:16:25 +0000 Manifest next update: Mon 09 Jun 2025 23:50:25 +0000 Files and hashes: 1: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: +hHtMHqrRgOxnxPgQ1JDtVaqmRcnzLdlLvloLKvOcZA=) 2: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: dPLw8LfXbVT7lRnmrhiUkTjnwBC1ys2zfYt4iQtfVK8=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: qJMxf0aJqdHPfbLPNvUiMxKhq3U6DmyX3ZCQXdLa44w=) 5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: bj03wSoaB1PZHhqBBV4Wr4Sjs0onXCgWYauPl2mcWtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:28:a5:d1:df:b2:44:04:f7:a8:84:36:59:69:04:48:2d:03:e6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Jun 6 14:16:25 2025 GMT Not After : Jun 9 23:50:25 2025 GMT Subject: CN=090FD402340F9569D1F628F17185B80A22FE619B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:ff:00:d6:29:a6:ba:7c:9d:9f:0a:59:d0: 35:c5:bb:6c:97:3a:6d:27:04:3a:cd:d1:ef:54:2a: 67:95:03:e6:de:22:9d:91:54:1e:75:2e:e9:79:ab: cf:61:0f:cf:08:27:a9:93:31:af:e6:4b:44:24:11: 56:06:dc:db:3b:04:8d:ba:06:51:a3:a7:5c:97:6b: b8:1c:eb:5a:e1:ae:c7:c5:6e:0f:cf:7c:09:b7:50: 49:28:50:c9:97:4a:38:51:1b:a5:b4:6a:df:2b:a9: 12:be:6b:0a:d4:95:93:8e:d4:ec:01:f1:f2:05:c1: 60:b1:54:16:da:ad:15:a5:0c:6d:cc:f4:c1:79:f1: e3:64:75:2f:c4:1d:64:51:c2:6e:42:a0:e4:c5:56: d9:af:d0:c9:36:bc:1e:6c:ed:6b:28:56:bd:f0:92: f5:51:bb:69:43:7d:5e:b1:a4:ac:99:07:7b:4d:ac: d5:98:aa:5a:8f:f0:dc:3d:00:df:79:a9:47:db:dd: 28:ca:8a:31:62:c8:67:61:fa:2f:db:48:ac:b3:52: 63:24:bd:d7:79:69:ee:4b:cf:c2:6d:75:db:2c:f9: 66:28:ab:5b:8f:b3:e3:67:fa:83:41:14:aa:98:31: 6f:d8:f2:9d:7b:7e:3d:c2:f3:76:e8:2d:3b:81:27: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:D4:02:34:0F:95:69:D1:F6:28:F1:71:85:B8:0A:22:FE:61:9B X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fd:cc:c4:26:58:dd:0a:98:48:6d:8e:cf:ac:00:5a:7c:c6: 97:a2:e2:ff:ef:86:8c:48:04:c9:01:6a:89:ea:ad:33:e3:8c: 04:63:c3:58:62:f7:bb:1f:e3:28:a0:bf:17:8c:d0:90:0c:ec: a2:a7:e5:a9:4d:db:7c:4e:be:48:91:46:fc:53:74:5a:e2:78: 70:41:84:0f:ac:c4:43:cc:ad:7e:e8:4c:08:99:0b:91:be:b8: 52:4c:ef:ee:7f:40:82:10:75:40:01:8c:f1:6b:a1:b0:30:24: f4:7b:5e:ef:45:79:93:89:7b:f2:a1:4b:21:68:f0:51:1a:73: b0:6b:06:32:31:1c:0f:25:26:18:d3:84:59:fd:00:21:7d:fc: 42:a1:30:a5:e7:86:67:8f:05:23:29:b8:65:e7:ba:6b:20:41: 2c:95:dc:2b:ef:83:71:b3:43:4a:2e:2b:80:14:fc:1d:30:7f: 14:6d:4a:01:91:4b:f8:29:bd:93:ae:3d:e5:6a:65:b0:21:23: dc:1f:e5:8f:66:8c:03:7c:a1:ba:9c:75:bc:c2:ad:32:12:45: 35:64:01:cf:01:4b:78:93:28:8e:da:e0:e6:ab:82:5f:3a:7f: 2f:d6:9e:53:c4:f9:12:7f:13:ea:9b:2d:fc:02:70:3b:fb:da: f6:ad:de:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCil0d+yRAT3qIQ2WWkESC0D5kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTA2MDYxNDE2MjVaFw0yNTA2MDkyMzUwMjVaMDMxMTAvBgNV BAMTKDA5MEZENDAyMzQwRjk1NjlEMUY2MjhGMTcxODVCODBBMjJGRTYxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJP8A1immunydnwpZ0DXFu2yX Om0nBDrN0e9UKmeVA+beIp2RVB51Lul5q89hD88IJ6mTMa/mS0QkEVYG3Ns7BI26 BlGjp1yXa7gc61rhrsfFbg/PfAm3UEkoUMmXSjhRG6W0at8rqRK+awrUlZOO1OwB 8fIFwWCxVBbarRWlDG3M9MF58eNkdS/EHWRRwm5CoOTFVtmv0Mk2vB5s7WsoVr3w kvVRu2lDfV6xpKyZB3tNrNWYqlqP8Nw9AN95qUfb3SjKijFiyGdh+i/bSKyzUmMk vdd5ae5Lz8Jtddss+WYoq1uPs+Nn+oNBFKqYMW/Y8p17fj3C83boLTuBJ/x3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQ/UAjQPlWnR9ijxcYW4CiL+YZswHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf9zMQmWN0KmEhtjs+sAFp8xpei4v/vhoxI BMkBaonqrTPjjARjw1hi97sf4yigvxeM0JAM7KKn5alN23xOvkiRRvxTdFrieHBB hA+sxEPMrX7oTAiZC5G+uFJM7+5/QIIQdUABjPFrobAwJPR7Xu9FeZOJe/KhSyFo 8FEac7BrBjIxHA8lJhjThFn9ACF9/EKhMKXnhmePBSMpuGXnumsgQSyV3Cvvg3Gz Q0ouK4AU/B0wfxRtSgGRS/gpvZOuPeVqZbAhI9wf5Y9mjAN8obqcdbzCrTISRTVk Ac8BS3iTKI7a4Oargl86fy/WnlPE+RJ/E+qbLfwCcDv72vat3sM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:24:34 2025 by rpki-client