$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: x/bZpgsezJt8UMWsA4G+RbarsCCvupLT3bNjbSax7Go= Subject key identifier: BB:22:F0:98:91:B4:74:8D:19:FE:17:02:9A:C4:66:2C:0D:EE:D6:4C Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 5D1527484B84EC3F3F844D17581652BD45CDDD49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01FF Signing time: Thu 04 Sep 2025 23:40:59 +0000 Manifest this update: Thu 04 Sep 2025 23:35:59 +0000 Manifest next update: Mon 08 Sep 2025 11:38:59 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: sjmOlitAdU4fJ7ZpNYHOLUf3VJDAV/r6fgnFVYpWy3s=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:15:27:48:4b:84:ec:3f:3f:84:4d:17:58:16:52:bd:45:cd:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Sep 4 23:35:59 2025 GMT Not After : Sep 8 11:38:59 2025 GMT Subject: CN=BB22F09891B4748D19FE17029AC4662C0DEED64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:45:73:10:df:21:1a:30:e7:c8:cf:07:5c: 64:3c:e8:3c:dd:08:34:48:52:b3:dd:d4:27:0a:a4: a3:6d:10:cf:d4:49:fb:83:6f:95:be:aa:51:aa:63: 9d:9d:ac:72:03:5e:63:21:d1:78:0b:6d:7f:3f:fb: b8:18:82:00:17:be:ae:42:55:43:12:bb:62:31:00: 80:2a:e6:c6:a9:40:3b:62:c9:81:d5:5b:b5:b9:4f: 11:26:c5:c2:13:87:2e:a5:40:3b:75:83:16:13:ff: 01:3a:67:02:48:55:48:42:0e:49:bc:65:b8:03:d8: 94:03:5e:71:fc:da:23:dd:e0:6c:f0:ff:4f:9b:50: a7:ad:12:ae:ed:f7:e4:b6:8d:55:dc:e5:10:c9:90: d0:87:56:41:08:59:c8:c2:6e:94:5b:56:e0:60:4d: 9b:c1:02:19:46:10:1b:0d:a1:a9:75:5e:70:f3:88: 78:12:5f:6b:10:a9:15:5d:4d:3a:a8:02:89:dc:df: 1b:0e:0c:91:1e:08:b8:bf:e4:5c:dc:b7:98:eb:ab: 96:00:d7:d4:e8:1e:63:d4:79:4d:5c:7c:5b:f0:74: 4f:81:52:10:fd:0c:73:57:19:a2:50:cc:95:87:4a: 44:28:2d:d2:0f:d0:ed:6e:f8:fd:5f:bb:f2:37:b0: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:F0:98:91:B4:74:8D:19:FE:17:02:9A:C4:66:2C:0D:EE:D6:4C X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:6a:3b:4b:c4:63:25:fe:53:6a:88:77:73:f7:a6:e2:7a: fa:b3:8e:06:77:cf:f4:67:f2:5d:d2:dc:87:bd:04:ca:88:54: 05:d0:f6:f0:38:05:07:26:f9:1f:15:1a:07:2b:c2:a6:da:42: a2:89:2b:f8:a8:92:0e:89:f1:8d:3a:e9:8b:f6:07:ff:1e:e3: ba:d1:d5:e2:40:0c:31:7a:55:e3:5f:6d:30:6f:55:66:1c:7c: 04:62:d9:09:49:2b:9d:a6:85:93:d5:15:36:06:a9:6b:49:66: 61:ba:fd:61:38:16:3d:d3:58:2c:88:07:1a:dc:24:c8:05:2e: 29:16:4a:1c:a4:fe:f8:00:db:04:92:81:e2:19:84:b1:63:98: c9:da:9e:7e:2b:81:b9:1c:36:ca:33:d2:2f:eb:32:d7:f6:cc: a0:d8:4f:53:44:52:88:c6:0c:ac:dc:23:01:30:57:17:c6:e6: 60:35:f2:9e:e4:09:e1:1d:df:26:aa:dd:9c:9e:10:7f:ce:79: 78:a5:f3:40:52:9e:09:79:2a:31:41:98:0e:1f:c7:c9:32:4a: f9:8b:69:62:cf:82:b7:de:20:b3:8f:d3:b5:fd:73:f2:3b:38: f2:35:17:eb:68:c1:11:fa:8b:40:0a:b1:e4:aa:9d:1e:81:56: f1:8d:7b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRUnSEuE7D8/hE0XWBZSvUXN3UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA5MDQyMzM1NTlaFw0yNTA5MDgxMTM4NTlaMDMxMTAvBgNV BAMTKEJCMjJGMDk4OTFCNDc0OEQxOUZFMTcwMjlBQzQ2NjJDMERFRUQ2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GEVzEN8hGjDnyM8HXGQ86Dzd CDRIUrPd1CcKpKNtEM/USfuDb5W+qlGqY52drHIDXmMh0XgLbX8/+7gYggAXvq5C VUMSu2IxAIAq5sapQDtiyYHVW7W5TxEmxcIThy6lQDt1gxYT/wE6ZwJIVUhCDkm8 ZbgD2JQDXnH82iPd4Gzw/0+bUKetEq7t9+S2jVXc5RDJkNCHVkEIWcjCbpRbVuBg TZvBAhlGEBsNoal1XnDziHgSX2sQqRVdTTqoAonc3xsODJEeCLi/5Fzct5jrq5YA 19ToHmPUeU1cfFvwdE+BUhD9DHNXGaJQzJWHSkQoLdIP0O1u+P1fu/I3sEuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyLwmJG0dI0Z/hcCmsRmLA3u1kwwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYXajtLxGMl/lNqiHdz96bievqzjgZ3z/Rn 8l3S3Ie9BMqIVAXQ9vA4BQcm+R8VGgcrwqbaQqKJK/iokg6J8Y066Yv2B/8e47rR 1eJADDF6VeNfbTBvVWYcfARi2QlJK52mhZPVFTYGqWtJZmG6/WE4Fj3TWCyIBxrc JMgFLikWShyk/vgA2wSSgeIZhLFjmMnann4rgbkcNsoz0i/rMtf2zKDYT1NEUojG DKzcIwEwVxfG5mA18p7kCeEd3yaq3ZyeEH/OeXil80BSngl5KjFBmA4fx8kySvmL aWLPgrfeILOP07X9c/I7OPI1F+towRH6i0AKseSqnR6BVvGNe9c= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:55 2025 by rpki-client