$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: nyYq7BXhgQL8hz99WCoJE8n5gSR7fOOOS/Kw6xzc058= Subject key identifier: 74:F4:5E:54:B1:45:71:B2:F0:A7:D2:59:91:13:73:36:71:2F:A5:71 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 5F1481B60C9776433EECB180B0F44C518F54ED2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01B0 Signing time: Sun 07 Sep 2025 01:12:08 +0000 Manifest this update: Sun 07 Sep 2025 01:07:08 +0000 Manifest next update: Wed 10 Sep 2025 04:25:08 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 2: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: +TmiTVSLA4nc5iwWR7sQ8nj9lQbP6v4vAE3Myzffb7I=) 3: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 4: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) 5: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:81:b6:0c:97:76:43:3e:ec:b1:80:b0:f4:4c:51:8f:54:ed:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Sep 7 01:07:08 2025 GMT Not After : Sep 10 04:25:08 2025 GMT Subject: CN=74F45E54B14571B2F0A7D25991137336712FA571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:5b:33:eb:2c:6f:1c:bf:05:43:2a:fc:37: ab:76:5e:7a:e6:dc:bb:65:ae:50:19:fc:63:64:cf: 0d:5f:20:00:5c:5e:bc:08:dd:08:71:4e:70:2e:79: c5:21:8c:41:bb:b8:42:04:25:dd:09:20:3a:bd:f1: 41:00:c0:0e:f3:58:0e:cc:0a:62:7e:eb:60:a4:86: 3a:12:d4:44:18:8b:23:04:d1:b7:96:9c:2c:87:ef: bb:0b:49:54:a1:6d:77:6f:97:3d:2d:07:ad:6f:ff: 36:64:3e:ad:c0:d0:12:9d:93:da:ca:79:f4:0a:16: bf:5b:56:5b:69:5b:e5:b6:e1:ed:01:02:23:e1:06: ae:94:ae:38:20:0e:b6:68:f0:b8:42:38:46:b4:cd: 52:3e:76:a0:42:3a:99:a4:4e:97:9e:09:17:3d:f3: f6:28:7e:11:a7:c2:17:9b:44:b7:48:73:67:85:18: d6:93:c9:21:56:69:a1:80:0d:2e:f6:a0:d5:25:47: 24:c0:86:91:0e:65:73:e7:10:7a:c9:49:dd:d2:8c: b4:ef:f4:71:9c:4e:fc:72:49:c2:40:95:4c:ad:44: 0f:92:85:da:af:7a:5d:bc:5b:ea:e5:4c:28:d5:63: a2:69:12:f5:8b:fa:e5:ff:0b:63:f4:63:1b:f6:7a: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F4:5E:54:B1:45:71:B2:F0:A7:D2:59:91:13:73:36:71:2F:A5:71 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:c1:a2:5c:d0:1a:28:47:be:b5:e1:e9:8a:50:79:0b:0b: 4f:1e:f2:31:aa:11:c8:29:ab:92:ef:6b:79:b6:3d:3c:c1:87: be:f0:ba:76:be:3e:b3:2c:58:36:39:e5:23:ab:04:4b:dc:57: 7f:3e:9e:69:f1:ab:45:d2:92:6e:b5:ad:78:63:57:f8:53:d5: dd:8c:0b:0d:83:00:ee:9a:5d:0b:fc:f2:9a:11:68:8c:fe:1b: 6f:37:96:c5:96:50:0e:ef:62:17:f1:0b:3b:92:bc:cf:9e:83: f6:f8:4a:ba:1b:f2:89:2c:84:c3:9f:b0:24:52:34:54:11:09: 97:d6:e3:61:4e:0c:71:07:1a:5e:68:55:77:47:ac:26:8d:7d: b0:80:31:e4:f5:db:08:2f:5c:67:4e:d0:56:8d:5a:7f:67:fb: e3:e3:6c:31:7d:e8:bb:e0:81:7d:fa:51:4b:e9:5b:34:ca:ac: c0:69:93:be:e1:5e:25:de:9d:98:54:3c:d7:a9:c9:5f:b1:71: 45:59:f2:68:4a:90:56:03:f7:c0:95:fa:29:fa:ea:52:18:77: 45:ef:73:6a:d6:be:8a:bc:a8:ef:e6:5e:75:ce:d6:47:c1:0f: dc:73:be:92:40:d4:98:51:33:66:62:9d:f6:fe:41:9d:2b:97: 3b:75:bc:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxSBtgyXdkM+7LGAsPRMUY9U7S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA5MDcwMTA3MDhaFw0yNTA5MTAwNDI1MDhaMDMxMTAvBgNV BAMTKDc0RjQ1RTU0QjE0NTcxQjJGMEE3RDI1OTkxMTM3MzM2NzEyRkE1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgN1sz6yxvHL8FQyr8N6t2Xnrm 3LtlrlAZ/GNkzw1fIABcXrwI3QhxTnAuecUhjEG7uEIEJd0JIDq98UEAwA7zWA7M CmJ+62CkhjoS1EQYiyME0beWnCyH77sLSVShbXdvlz0tB61v/zZkPq3A0BKdk9rK efQKFr9bVltpW+W24e0BAiPhBq6UrjggDrZo8LhCOEa0zVI+dqBCOpmkTpeeCRc9 8/YofhGnwhebRLdIc2eFGNaTySFWaaGADS72oNUlRyTAhpEOZXPnEHrJSd3SjLTv 9HGcTvxyScJAlUytRA+Shdqvel28W+rlTCjVY6JpEvWL+uX/C2P0Yxv2ejNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdPReVLFFcbLwp9JZkRNzNnEvpXEwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4bwaJc0BooR7614emKUHkLC08e8jGqEcgp q5Lva3m2PTzBh77wuna+PrMsWDY55SOrBEvcV38+nmnxq0XSkm61rXhjV/hT1d2M Cw2DAO6aXQv88poRaIz+G283lsWWUA7vYhfxCzuSvM+eg/b4Srob8okshMOfsCRS NFQRCZfW42FODHEHGl5oVXdHrCaNfbCAMeT12wgvXGdO0FaNWn9n++PjbDF96Lvg gX36UUvpWzTKrMBpk77hXiXenZhUPNepyV+xcUVZ8mhKkFYD98CV+in66lIYd0Xv c2rWvoq8qO/mXnXO1kfBD9xzvpJA1JhRM2Zinfb+QZ0rlzt1vCU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:07 2025 by rpki-client