$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: CpKo7CHgU8P6OObUohoS9VLY2D6nBtwW9EKhxdn5tL0= Subject key identifier: 02:A9:F1:8A:03:01:E8:15:11:61:E5:9E:20:C4:CA:F0:67:9B:F9:0C Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 6F02F93A91C4F923225C50EBE904FC8110601FD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 0282 Signing time: Fri 05 Sep 2025 09:11:38 +0000 Manifest this update: Fri 05 Sep 2025 09:06:38 +0000 Manifest next update: Mon 08 Sep 2025 15:43:38 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: rXS3wemDLcCbNbf5r4jAwRcX/BkvH2v6yUv+IqfjkzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:f9:3a:91:c4:f9:23:22:5c:50:eb:e9:04:fc:81:10:60:1f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Sep 5 09:06:38 2025 GMT Not After : Sep 8 15:43:38 2025 GMT Subject: CN=02A9F18A0301E8151161E59E20C4CAF0679BF90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:32:bf:3e:20:5e:90:6e:50:d2:b2:d6:53: ce:07:ec:c7:54:5c:1b:c5:ce:e3:91:8e:0c:54:c7: f8:fd:e3:60:30:bf:a6:ef:dd:7f:d7:5b:36:f7:87: 9f:33:0f:05:92:53:fd:8e:e7:cf:11:2c:ea:78:e8: 5d:c5:21:08:f3:d2:22:ec:89:f9:d2:83:7a:54:11: 8e:c2:13:3c:76:d6:0e:68:4b:4c:e7:4b:72:0e:62: 26:c4:10:99:2c:fd:36:85:b0:c4:94:68:33:95:87: 1c:41:53:98:3a:d1:18:4f:11:0d:e5:03:4b:3d:e5: 11:03:24:d8:81:5a:7c:95:f4:02:a8:c5:3c:50:a0: e7:1e:05:8f:14:bb:49:aa:96:79:77:dd:b5:a6:f4: ec:52:7f:3e:95:75:23:47:f7:39:5f:0b:70:0f:57: 3a:95:a6:77:7f:30:32:3a:9c:6d:da:d3:cb:ab:13: 2b:f2:b9:c8:75:fb:a0:8e:41:6f:6f:70:dc:65:f6: 87:da:7c:5e:bc:c5:ee:f8:1b:46:32:19:6c:ff:43: 1b:17:99:ee:2b:ed:a3:be:43:d0:0e:7a:b1:72:b2: 23:d7:07:13:4f:af:99:89:63:28:25:64:ca:99:53: 89:fa:2a:f2:64:2d:8e:e2:fa:ce:c9:2b:7c:bf:33: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:F1:8A:03:01:E8:15:11:61:E5:9E:20:C4:CA:F0:67:9B:F9:0C X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:eb:08:09:06:a1:be:7b:67:01:73:35:fd:2b:fe:ae:b1:5a: 12:74:d2:28:f0:38:04:6e:9f:0c:fc:e1:11:17:2a:19:cb:77: 32:8c:76:db:16:e1:d5:be:6e:24:aa:8f:7f:0d:de:0a:fe:62: 6e:ab:a5:2a:4d:b3:5d:e3:fc:8b:96:f7:8e:29:b8:71:30:96: 17:1c:b9:13:08:39:6b:e4:ab:5c:41:f1:76:e7:02:50:76:0c: f8:92:b7:56:41:c6:eb:37:7d:04:50:b7:16:75:7a:65:0e:c9: 4f:fa:53:8d:25:db:9c:77:2d:ed:03:de:66:6e:8a:e1:6f:e9: 21:eb:ed:63:c3:a9:c8:ac:0a:7f:7e:ad:a8:27:93:33:aa:29: e1:72:49:d5:73:e9:fe:35:e4:ec:7f:09:6e:42:1c:00:ed:a3: 66:a1:67:d7:28:0d:b3:87:db:70:3f:f7:48:6b:3a:ab:69:89: 07:e2:46:23:04:8d:6a:b5:7c:f6:65:ce:11:b5:0f:e8:98:9f: 85:cc:3b:91:1c:37:4c:6f:9b:1e:82:0e:26:f1:ec:27:f8:5e: 86:00:71:31:39:9c:7f:e3:c8:05:16:2d:17:eb:8c:ea:9e:9d: ab:b4:c6:92:dc:bd:d6:cf:de:39:16:a7:98:96:47:2a:6a:0d: b6:40:99:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwL5OpHE+SMiXFDr6QT8gRBgH9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA5MDUwOTA2MzhaFw0yNTA5MDgxNTQzMzhaMDMxMTAvBgNV BAMTKDAyQTlGMThBMDMwMUU4MTUxMTYxRTU5RTIwQzRDQUYwNjc5QkY5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+DK/PiBekG5Q0rLWU84H7MdU XBvFzuORjgxUx/j942Awv6bv3X/XWzb3h58zDwWSU/2O588RLOp46F3FIQjz0iLs ifnSg3pUEY7CEzx21g5oS0znS3IOYibEEJks/TaFsMSUaDOVhxxBU5g60RhPEQ3l A0s95REDJNiBWnyV9AKoxTxQoOceBY8Uu0mqlnl33bWm9OxSfz6VdSNH9zlfC3AP VzqVpnd/MDI6nG3a08urEyvyuch1+6COQW9vcNxl9ofafF68xe74G0YyGWz/QxsX me4r7aO+Q9AOerFysiPXBxNPr5mJYyglZMqZU4n6KvJkLY7i+s7JK3y/M5AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqnxigMB6BURYeWeIMTK8Geb+QwwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTrCAkGob57ZwFzNf0r/q6xWhJ00ijwOARu nwz84REXKhnLdzKMdtsW4dW+biSqj38N3gr+Ym6rpSpNs13j/IuW944puHEwlhcc uRMIOWvkq1xB8XbnAlB2DPiSt1ZBxus3fQRQtxZ1emUOyU/6U40l25x3Le0D3mZu iuFv6SHr7WPDqcisCn9+ragnkzOqKeFySdVz6f415Ox/CW5CHADto2ahZ9coDbOH 23A/90hrOqtpiQfiRiMEjWq1fPZlzhG1D+iYn4XMO5EcN0xvmx6CDibx7Cf4XoYA cTE5nH/jyAUWLRfrjOqenau0xpLcvdbP3jkWp5iWRypqDbZAmT4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:10 2025 by rpki-client