$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: Uw6rFrYI0SkkxaJMkI4LT/Z2j+ieoEYnq8vwwd8LbQw= Subject key identifier: 13:47:61:B0:25:DE:39:8F:B2:A2:96:0E:DC:58:3B:0F:F4:75:C3:98 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 7B69800BB614C535F34ADD6A4C80F387CFC5CCE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 0283 Signing time: Thu 05 Jun 2025 23:52:03 +0000 Manifest this update: Thu 05 Jun 2025 23:47:03 +0000 Manifest next update: Mon 09 Jun 2025 06:18:03 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: l/UB2rc1GjNCtTBhp8k1Y9gCJ0Zplp8NYcAVhwim5/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:69:80:0b:b6:14:c5:35:f3:4a:dd:6a:4c:80:f3:87:cf:c5:cc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Jun 5 23:47:03 2025 GMT Not After : Jun 9 06:18:03 2025 GMT Subject: CN=134761B025DE398FB2A2960EDC583B0FF475C398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:f5:ab:fd:b7:25:8f:1b:de:3b:75:81:65: 0b:0c:a3:15:30:dc:66:41:d0:c4:55:fb:7e:7f:68: a5:b5:76:06:58:15:dd:88:b0:36:5b:db:eb:91:ab: bf:59:4b:99:6a:75:e0:92:f7:7a:0b:a3:9e:d9:55: ba:47:9e:88:f9:80:7d:e7:a3:0e:cd:1b:0a:f3:1c: 16:75:4f:4f:3e:d2:77:11:05:3b:68:cc:ce:81:8d: cc:c3:fb:c9:d1:cc:27:3a:48:03:93:fe:b8:1d:39: b1:51:2f:d2:4f:d9:00:28:08:e7:63:ba:20:1f:5e: 80:ae:2e:40:00:49:7d:6f:0a:fc:a2:1f:dc:80:b4: 7f:2c:4c:aa:6c:1b:6e:f1:40:26:88:14:39:df:7a: 01:68:ab:46:ae:7a:e1:ff:69:16:7e:c5:95:cb:c6: 9e:34:42:4f:74:fd:d7:3d:d9:0a:22:c3:4a:fe:77: 32:75:fd:90:ff:f1:9a:b7:c7:11:f6:b5:d2:ee:d8: d1:84:15:90:f1:af:9a:98:ac:be:df:12:56:ee:41: fb:6e:50:21:55:b1:bd:2f:cd:71:51:8f:41:dc:21: 57:4b:83:11:fd:67:8b:d8:3d:69:18:76:c7:e6:24: 97:cd:f6:57:9c:9e:92:75:1f:75:90:ce:f5:81:8f: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:47:61:B0:25:DE:39:8F:B2:A2:96:0E:DC:58:3B:0F:F4:75:C3:98 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:2d:4b:87:b2:94:84:4f:ca:ef:76:e5:de:21:a7:d6:e1: ea:65:b9:a3:b0:61:dd:1d:b1:21:4e:81:23:d3:ae:3e:2d:d5: 8f:af:9f:1e:b8:1b:e5:eb:ea:d0:3d:09:86:21:9e:f7:44:30: 38:fe:6f:e5:7c:ea:6d:55:3b:a8:19:62:57:8a:87:67:16:8c: 6f:c9:a5:a9:fe:81:ff:af:fc:fc:54:5a:96:5b:97:f8:ef:6c: 5f:cb:18:42:22:90:95:e0:9d:61:12:86:e7:94:cb:20:d7:79: 47:04:11:fd:19:65:a7:21:5a:d8:69:64:14:fa:ab:d6:07:d1: 36:85:0c:49:9d:04:bd:e6:96:23:9f:fa:c0:3d:ab:55:ca:f4: 0e:8e:b2:f1:a1:e6:ac:d6:c3:4d:fb:38:a9:a0:03:8c:bc:7c: f8:0a:72:c5:ad:8f:3c:34:dc:2e:c9:5e:3b:e8:07:29:cd:bd: f0:87:2e:84:2f:ed:04:c5:a4:aa:c9:83:87:e0:5f:49:14:44: 68:9e:bb:98:60:e0:92:8d:e3:8c:d8:5b:1e:14:33:b7:13:63: 60:f1:29:be:df:36:69:3c:bc:12:65:f9:88:27:65:c6:83:cb: 2a:f2:8f:a0:b5:ae:75:d5:6f:ad:01:c4:fa:9a:08:a9:25:a2: c6:a8:4e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2mAC7YUxTXzSt1qTIDzh8/FzOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA2MDUyMzQ3MDNaFw0yNTA2MDkwNjE4MDNaMDMxMTAvBgNV BAMTKDEzNDc2MUIwMjVERTM5OEZCMkEyOTYwRURDNTgzQjBGRjQ3NUMzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw/Wr/bcljxveO3WBZQsMoxUw 3GZB0MRV+35/aKW1dgZYFd2IsDZb2+uRq79ZS5lqdeCS93oLo57ZVbpHnoj5gH3n ow7NGwrzHBZ1T08+0ncRBTtozM6BjczD+8nRzCc6SAOT/rgdObFRL9JP2QAoCOdj uiAfXoCuLkAASX1vCvyiH9yAtH8sTKpsG27xQCaIFDnfegFoq0aueuH/aRZ+xZXL xp40Qk90/dc92Qoiw0r+dzJ1/ZD/8Zq3xxH2tdLu2NGEFZDxr5qYrL7fElbuQftu UCFVsb0vzXFRj0HcIVdLgxH9Z4vYPWkYdsfmJJfN9lecnpJ1H3WQzvWBjyl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0dhsCXeOY+yopYO3Fg7D/R1w5gwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwoLUuHspSET8rvduXeIafW4epluaOwYd0d sSFOgSPTrj4t1Y+vnx64G+Xr6tA9CYYhnvdEMDj+b+V86m1VO6gZYleKh2cWjG/J pan+gf+v/PxUWpZbl/jvbF/LGEIikJXgnWEShueUyyDXeUcEEf0ZZachWthpZBT6 q9YH0TaFDEmdBL3mliOf+sA9q1XK9A6OsvGh5qzWw037OKmgA4y8fPgKcsWtjzw0 3C7JXjvoBynNvfCHLoQv7QTFpKrJg4fgX0kURGieu5hg4JKN44zYWx4UM7cTY2Dx Kb7fNmk8vBJl+YgnZcaDyyryj6C1rnXVb60BxPqaCKklosaoToQ= -----END CERTIFICATE-----Generated at Sat Jun 7 18:32:32 2025 by rpki-client