$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: iurPtgghFLAmv/LxXJN1nXBOBYD3m0PWfazFv2UO7+0= Subject key identifier: B8:1A:4C:98:B0:19:62:FC:BA:0B:0E:0F:01:F3:3D:1E:23:B5:EB:28 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 155683AC1AF9A465898F6449F08B024746996395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: F1 Signing time: Mon 02 Jun 2025 15:11:53 +0000 Manifest this update: Mon 02 Jun 2025 15:06:53 +0000 Manifest next update: Thu 05 Jun 2025 16:22:53 +0000 Files and hashes: 1: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: jF0J1mCHOq6CJdPLUcSElUAi5V50y5IW6bPxPxoCn7c=) 2: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=) 3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 16:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:56:83:ac:1a:f9:a4:65:89:8f:64:49:f0:8b:02:47:46:99:63:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Jun 2 15:06:53 2025 GMT Not After : Jun 5 16:22:53 2025 GMT Subject: CN=B81A4C98B01962FCBA0B0E0F01F33D1E23B5EB28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:b9:9d:93:cc:c3:23:82:41:93:54:04:fb: 02:f1:10:74:75:0d:46:6d:20:06:e7:c2:93:04:bb: 1a:b2:12:9a:7a:d6:a0:20:2b:db:d6:06:19:8a:98: e8:7f:36:42:fe:1e:65:1a:29:fe:5b:15:54:b3:94: 44:63:d5:8b:27:dd:c2:30:7e:a9:6f:f1:86:ef:46: fd:48:26:86:ce:0f:c9:3a:ed:92:93:c9:36:aa:a8: 5b:34:df:dd:de:79:9f:a6:5d:0d:94:15:36:cc:09: 25:16:0c:75:b5:eb:ae:89:e7:ec:80:81:20:ff:09: 74:db:d8:9e:ce:d7:b8:ce:10:73:c4:a7:3a:11:6d: 52:57:91:80:db:8f:80:01:2b:0f:41:d6:86:d8:99: f9:c2:2d:9f:ef:86:ba:d7:58:d9:05:63:3c:f6:75: ab:c9:3f:21:68:7b:ec:52:10:cb:d1:53:15:95:02: c3:ad:81:f7:68:32:71:2b:05:49:5f:54:24:93:f1: 25:91:13:13:64:17:3e:29:3b:9f:a9:01:ae:7f:fc: b1:eb:ff:1e:ca:9d:65:d8:a5:0f:9c:05:be:ff:65: 43:ff:d7:4f:71:c5:7c:fb:a0:5a:d9:b7:6d:8c:23: 6c:03:a8:3a:02:18:2b:4b:64:c9:1c:71:47:bb:28: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1A:4C:98:B0:19:62:FC:BA:0B:0E:0F:01:F3:3D:1E:23:B5:EB:28 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:c9:4b:94:b5:ba:ce:61:f6:5f:23:8e:fe:16:14:ee:a6: 96:78:ea:86:80:ca:69:71:1c:0d:33:de:19:4e:28:0b:03:60: bf:88:fa:d8:6f:b1:26:04:c6:46:7c:c9:5d:7f:54:79:84:56: a4:d9:72:d8:e7:57:ad:3f:32:bd:9c:18:a1:b4:04:37:e5:c8: e2:c0:37:56:76:00:bd:de:9e:3a:3e:73:6c:ea:cc:de:7c:b7: 5d:06:af:76:1c:18:c5:0a:70:8d:b3:e9:25:56:84:19:9f:45: 31:82:ae:f2:75:f2:e5:c7:d8:47:ce:2b:aa:bf:52:89:3b:d3: 02:b9:a6:76:8b:72:b5:4b:7e:e1:be:21:7a:35:2c:54:3e:02: 89:87:da:7f:cf:67:a0:cc:57:6d:63:9a:49:da:30:25:17:c7: ed:94:e2:f5:c4:b5:2b:98:a8:c8:24:88:fa:54:77:c4:a0:9d: ea:ee:b8:6e:c4:4b:07:c3:6f:3d:1b:43:13:b3:47:81:20:55: 18:97:04:4c:cb:d4:95:51:34:58:2b:25:54:72:13:af:cd:4e: f9:96:76:f6:2e:ad:3e:33:b0:ca:94:52:75:2e:6e:24:8b:20: 15:81:3b:f4:a0:d6:ef:8f:d7:ca:48:52:59:5b:11:99:f0:fe: db:97:b0:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVaDrBr5pGWJj2RJ8IsCR0aZY5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTA2MDIxNTA2NTNaFw0yNTA2MDUxNjIyNTNaMDMxMTAvBgNV BAMTKEI4MUE0Qzk4QjAxOTYyRkNCQTBCMEUwRjAxRjMzRDFFMjNCNUVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlfLmdk8zDI4JBk1QE+wLxEHR1 DUZtIAbnwpMEuxqyEpp61qAgK9vWBhmKmOh/NkL+HmUaKf5bFVSzlERj1Ysn3cIw fqlv8YbvRv1IJobOD8k67ZKTyTaqqFs0393eeZ+mXQ2UFTbMCSUWDHW1666J5+yA gSD/CXTb2J7O17jOEHPEpzoRbVJXkYDbj4ABKw9B1obYmfnCLZ/vhrrXWNkFYzz2 davJPyFoe+xSEMvRUxWVAsOtgfdoMnErBUlfVCST8SWRExNkFz4pO5+pAa5//LHr /x7KnWXYpQ+cBb7/ZUP/109xxXz7oFrZt22MI2wDqDoCGCtLZMkccUe7KBzFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBpMmLAZYvy6Cw4PAfM9HiO16ygwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUdyUuUtbrOYfZfI47+FhTuppZ46oaAymlx HA0z3hlOKAsDYL+I+thvsSYExkZ8yV1/VHmEVqTZctjnV60/Mr2cGKG0BDflyOLA N1Z2AL3enjo+c2zqzN58t10Gr3YcGMUKcI2z6SVWhBmfRTGCrvJ18uXH2EfOK6q/ Uok70wK5pnaLcrVLfuG+IXo1LFQ+AomH2n/PZ6DMV21jmknaMCUXx+2U4vXEtSuY qMgkiPpUd8SgneruuG7ESwfDbz0bQxOzR4EgVRiXBEzL1JVRNFgrJVRyE6/NTvmW dvYurT4zsMqUUnUubiSLIBWBO/Sg1u+P18pIUllbEZnw/tuXsCU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:12 2025 by rpki-client