$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: NxcFE1/Fv+B5fWaMxQj0RBkfPdssw0sCYXkS0QE+W7c= Subject key identifier: 7B:6B:5F:4F:B2:53:19:90:B0:86:74:AE:4E:4D:D7:B1:BB:98:76:4F Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 06CA87A3A4D525C25690313E33C89E2B44CA9DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 011C Signing time: Sat 06 Sep 2025 11:21:55 +0000 Manifest this update: Sat 06 Sep 2025 11:16:55 +0000 Manifest next update: Tue 09 Sep 2025 19:59:55 +0000 Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 2: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) 3: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: 3ftETBCG2mc79QQUC2tWtNd4UotKkKJolawQmlFLdME=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ca:87:a3:a4:d5:25:c2:56:90:31:3e:33:c8:9e:2b:44:ca:9d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Sep 6 11:16:55 2025 GMT Not After : Sep 9 19:59:55 2025 GMT Subject: CN=7B6B5F4FB2531990B08674AE4E4DD7B1BB98764F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:14:08:13:8e:a6:4a:20:45:43:13:84:ac: b0:57:f6:1c:8e:ba:a5:5e:da:0e:66:be:6e:24:d0: d9:d5:87:17:f0:88:78:b6:78:df:66:3a:4a:63:4b: a4:d6:85:de:1d:f9:46:c9:d1:e6:df:4f:18:5f:fe: 3c:77:3a:74:bb:f3:0e:5d:78:3a:aa:5d:ca:0c:ac: a7:b5:5c:9b:8b:aa:55:34:22:41:a6:41:89:39:68: 55:fa:69:5c:a3:28:c5:f5:08:1d:7e:bd:97:b6:da: 10:40:12:97:09:86:6b:72:13:61:bd:1a:08:7e:df: 02:4f:a2:97:73:84:c4:42:7e:3e:6f:7d:05:10:f9: 27:eb:78:f6:bd:9c:90:60:1a:6c:66:16:4f:47:90: 67:05:5b:f9:20:8d:78:83:52:a0:b3:ff:f9:8d:a1: 6f:4e:84:de:ff:0c:52:f2:d7:ed:e0:85:59:21:f4: 6f:3e:a1:df:82:a3:92:8c:24:17:88:a5:9f:e7:8b: f0:2e:66:f3:20:a3:d5:47:39:e3:b0:db:24:49:09: 18:08:f2:57:62:13:f2:b1:47:89:5a:e2:f1:f5:ae: 86:00:d2:29:b3:85:9a:6a:85:78:fc:fb:67:1b:26: e1:f5:f1:d8:41:94:30:87:3a:d2:6a:2e:8b:d4:56: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6B:5F:4F:B2:53:19:90:B0:86:74:AE:4E:4D:D7:B1:BB:98:76:4F X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:96:df:17:23:4d:1c:53:b3:db:88:4e:aa:4d:dc:61:01:5f: 38:8e:d8:56:ce:03:6a:97:48:a7:65:60:f8:18:fa:a0:8d:16: 81:f5:02:bf:2f:4d:dc:8a:b5:e4:de:c6:29:16:ae:76:72:cb: 3d:ef:3b:d8:f3:ec:37:eb:c1:c3:92:b8:67:75:43:20:6b:39: 1a:79:48:25:73:4f:d5:23:68:61:5a:30:2a:7c:01:fe:eb:27: 73:18:8a:31:14:c7:70:51:d5:1c:52:b6:ea:0f:46:b4:27:cb: 2e:c7:b5:3c:e2:b3:37:28:b8:78:5d:c2:4a:26:25:58:0b:26: d4:40:a0:5b:cd:a5:36:84:53:46:79:d5:0e:8b:62:e8:a7:a4: 22:d2:8e:e4:c9:d3:14:ce:a9:da:75:4a:c2:9e:5c:82:08:ed: f8:66:d9:cb:a0:ed:7e:5b:25:28:b1:47:48:44:58:2b:1c:43: 66:e7:f6:3f:c0:50:e4:7f:df:bf:40:ca:2d:35:18:34:8f:7d: e9:de:e6:44:e8:a6:36:4f:7e:b1:fe:7b:55:99:5d:34:65:3d: 33:d0:39:eb:89:11:b6:80:8e:93:a6:af:5d:77:e9:ff:7e:46: c0:07:b4:2a:1a:3b:e8:e5:f4:64:3b:58:a3:cd:84:f3:22:d0: 81:4a:8d:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsqHo6TVJcJWkDE+M8ieK0TKndQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA5MDYxMTE2NTVaFw0yNTA5MDkxOTU5NTVaMDMxMTAvBgNV BAMTKDdCNkI1RjRGQjI1MzE5OTBCMDg2NzRBRTRFNEREN0IxQkI5ODc2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZBQIE46mSiBFQxOErLBX9hyO uqVe2g5mvm4k0NnVhxfwiHi2eN9mOkpjS6TWhd4d+UbJ0ebfTxhf/jx3OnS78w5d eDqqXcoMrKe1XJuLqlU0IkGmQYk5aFX6aVyjKMX1CB1+vZe22hBAEpcJhmtyE2G9 Ggh+3wJPopdzhMRCfj5vfQUQ+SfrePa9nJBgGmxmFk9HkGcFW/kgjXiDUqCz//mN oW9OhN7/DFLy1+3ghVkh9G8+od+Co5KMJBeIpZ/ni/AuZvMgo9VHOeOw2yRJCRgI 8ldiE/KxR4la4vH1roYA0imzhZpqhXj8+2cbJuH18dhBlDCHOtJqLovUVsw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2tfT7JTGZCwhnSuTk3XsbuYdk8wHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyW3xcjTRxTs9uITqpN3GEBXziO2FbOA2qX SKdlYPgY+qCNFoH1Ar8vTdyKteTexikWrnZyyz3vO9jz7DfrwcOSuGd1QyBrORp5 SCVzT9UjaGFaMCp8Af7rJ3MYijEUx3BR1RxStuoPRrQnyy7HtTziszcouHhdwkom JVgLJtRAoFvNpTaEU0Z51Q6LYuinpCLSjuTJ0xTOqdp1SsKeXIII7fhm2cug7X5b JSixR0hEWCscQ2bn9j/AUOR/379Ayi01GDSPfene5kTopjZPfrH+e1WZXTRlPTPQ OeuJEbaAjpOmr1136f9+RsAHtCoaO+jl9GQ7WKPNhPMi0IFKjYI= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:04 2025 by rpki-client