$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: J4xUesD8gv9zcXzn+TG39yT7rpLSS9OvtTj9qcvNf1c= Subject key identifier: 99:54:F9:76:06:E7:2B:30:E0:12:D0:8F:B4:83:23:94:91:64:0A:B4 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 6F041FCEAEA04D1DE9E65C2AAECCE8D2719E8151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01D5 Signing time: Mon 02 Jun 2025 12:30:59 +0000 Manifest this update: Mon 02 Jun 2025 12:25:59 +0000 Manifest next update: Thu 05 Jun 2025 14:00:59 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: tRTwP1P4GXooAQoJ579sKZRaF4pCChP/U1DnOF/xa1E=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:04:1f:ce:ae:a0:4d:1d:e9:e6:5c:2a:ae:cc:e8:d2:71:9e:81:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Jun 2 12:25:59 2025 GMT Not After : Jun 5 14:00:59 2025 GMT Subject: CN=9954F97606E72B30E012D08FB483239491640AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:31:55:f3:b8:0b:72:ac:2b:72:95:a4:da: 5f:78:22:ee:48:53:b7:fb:78:a2:7f:3c:ab:96:3c: 2c:b2:f1:17:44:50:e1:d7:58:c0:4d:14:23:17:d0: 70:94:08:15:2e:32:3b:02:32:8d:e0:00:32:71:62: 6b:20:44:33:5b:a7:bd:99:36:b0:65:c4:0d:41:99: 3b:81:7b:96:65:d2:58:cd:70:a7:3f:74:9f:4d:ba: da:76:9d:68:39:10:25:fa:fa:44:58:bd:23:27:ee: 29:cc:1e:a9:a8:2e:46:cc:a4:85:58:60:d9:3b:9a: fa:1a:e2:a2:59:bb:bc:b0:fc:b0:20:fe:18:18:71: a6:5a:56:a2:9a:cb:51:1a:58:4f:c8:e4:a9:80:89: 40:94:50:18:27:07:e6:55:21:ec:0c:73:4d:92:cd: 2a:77:f7:c7:cc:ed:7f:be:46:89:da:d3:6b:46:26: 8e:72:af:ce:c1:78:69:7e:fb:21:1f:67:92:38:45: 7b:fc:d9:88:51:c3:3f:a3:1f:c1:79:94:98:66:61: 2d:84:ec:a0:4b:11:a8:6b:db:7e:43:6c:d9:66:61: 72:c6:78:0a:61:96:1b:e2:b7:fe:ba:7e:8a:aa:30: f0:06:cc:2f:fd:5f:9e:f2:a3:2d:de:ac:44:b1:6c: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:54:F9:76:06:E7:2B:30:E0:12:D0:8F:B4:83:23:94:91:64:0A:B4 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5e:b4:3c:27:f4:fb:e7:9a:44:ff:3e:d0:ad:8d:3b:6c:f8: 96:00:00:c9:b8:64:f0:a2:71:09:7a:42:c9:b6:93:6d:8f:7e: 22:fc:74:15:6b:ec:91:05:57:44:d4:6f:ce:dd:9d:e5:2f:86: 3c:dc:00:32:12:be:a6:92:f0:66:bc:29:61:0f:e6:61:f6:95: 66:03:95:31:53:d4:f0:ec:3f:6f:c0:ff:c2:44:06:05:50:60: 02:7b:e2:34:6f:8e:23:fc:30:47:70:6b:9b:c6:c2:d4:d4:1b: 58:6c:98:75:64:4c:c1:f3:4c:0f:e8:aa:1c:46:96:6e:70:f8: 2c:dc:4e:17:61:5b:19:e3:3a:ca:5a:6a:9c:75:dc:93:01:14: e4:e9:a2:b7:aa:d8:41:c1:b6:a0:07:5a:3b:c4:c7:50:23:fb: f2:fa:b8:44:9c:8e:cd:52:a4:02:04:66:60:90:e3:16:dd:05: 25:87:a9:c3:54:2a:97:8c:eb:ef:e8:af:fa:91:a1:6f:da:4e: df:66:6f:a8:53:c3:14:a8:f5:1e:f0:46:f7:69:ce:4a:70:02: 76:e2:fe:88:d3:d4:ea:24:47:0d:18:8e:aa:ef:aa:49:cd:a6: f2:ed:dd:c7:33:0b:44:f5:62:95:41:a8:3a:13:3a:07:ad:23: 13:26:87:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwQfzq6gTR3p5lwqrszo0nGegVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA2MDIxMjI1NTlaFw0yNTA2MDUxNDAwNTlaMDMxMTAvBgNV BAMTKDk5NTRGOTc2MDZFNzJCMzBFMDEyRDA4RkI0ODMyMzk0OTE2NDBBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREjFV87gLcqwrcpWk2l94Iu5I U7f7eKJ/PKuWPCyy8RdEUOHXWMBNFCMX0HCUCBUuMjsCMo3gADJxYmsgRDNbp72Z NrBlxA1BmTuBe5Zl0ljNcKc/dJ9Nutp2nWg5ECX6+kRYvSMn7inMHqmoLkbMpIVY YNk7mvoa4qJZu7yw/LAg/hgYcaZaVqKay1EaWE/I5KmAiUCUUBgnB+ZVIewMc02S zSp398fM7X++Rona02tGJo5yr87BeGl++yEfZ5I4RXv82YhRwz+jH8F5lJhmYS2E 7KBLEahr235DbNlmYXLGeAphlhvit/66foqqMPAGzC/9X57yoy3erESxbEEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmVT5dgbnKzDgEtCPtIMjlJFkCrQwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBetDwn9PvnmkT/PtCtjTts+JYAAMm4ZPCi cQl6Qsm2k22PfiL8dBVr7JEFV0TUb87dneUvhjzcADISvqaS8Ga8KWEP5mH2lWYD lTFT1PDsP2/A/8JEBgVQYAJ74jRvjiP8MEdwa5vGwtTUG1hsmHVkTMHzTA/oqhxG lm5w+CzcThdhWxnjOspaapx13JMBFOTporeq2EHBtqAHWjvEx1Aj+/L6uEScjs1S pAIEZmCQ4xbdBSWHqcNUKpeM6+/or/qRoW/aTt9mb6hTwxSo9R7wRvdpzkpwAnbi /ojT1OokRw0YjqrvqknNpvLt3cczC0T1YpVBqDoTOgetIxMmh5g= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:28 2025 by rpki-client