$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: crjNhXj96efy5msDQtM7BLpMQN+/5aEy5hxHwrNjV1g= Subject key identifier: 00:19:E6:16:04:99:E5:61:AD:82:DA:06:A7:4C:CB:85:92:22:3A:6F Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 5CC4AE482853099FE20305D5D076576D516CB88A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02AC Signing time: Fri 05 Sep 2025 03:52:03 +0000 Manifest this update: Fri 05 Sep 2025 03:47:03 +0000 Manifest next update: Mon 08 Sep 2025 15:29:03 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: bMAOEyLg9FQlATfmakciaA2YhWIK2KDZdetxsJcg/Vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c4:ae:48:28:53:09:9f:e2:03:05:d5:d0:76:57:6d:51:6c:b8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Sep 5 03:47:03 2025 GMT Not After : Sep 8 15:29:03 2025 GMT Subject: CN=0019E6160499E561AD82DA06A74CCB8592223A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:d3:30:ad:b0:d6:aa:c5:31:8e:3a:61:ba: 4f:40:4a:a2:27:66:33:f2:14:b0:3b:17:74:78:a2: cf:37:24:77:03:7b:bf:6e:b3:03:e6:27:5e:2b:c3: 09:a2:10:15:dd:38:bc:58:3c:e6:da:b4:70:21:14: 08:5f:84:90:8d:85:9e:a4:48:48:5b:78:4d:9a:ba: 3e:45:c7:7c:5e:6f:38:eb:ad:9d:b4:3e:ea:f5:5a: 32:9d:a0:a7:c1:4d:6f:13:89:b1:a8:56:7c:07:c9: 71:ea:39:a7:97:0e:37:87:08:37:00:dc:4d:06:cb: be:a8:07:b8:32:f4:ae:ec:ea:65:b2:23:66:9d:10: 13:cc:87:1c:87:9d:33:85:0d:f8:22:16:e5:73:38: ed:0f:80:e9:e8:00:86:4a:cd:64:c1:ff:d9:fa:66: 36:ed:82:89:cc:33:4a:d2:8c:02:0f:95:0b:76:42: 73:d4:86:36:0f:a7:03:1d:bd:86:86:fe:fb:4a:ba: 69:1b:99:e0:48:a4:97:f0:23:d8:12:82:5b:f4:66: 60:af:96:92:56:dd:f0:dd:96:b4:b0:ec:f3:6d:d3: 84:fd:f9:35:31:29:60:3a:ee:eb:12:3a:3b:52:64: 68:9f:e6:93:9b:bb:50:ec:1a:dc:d2:71:c3:00:bf: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:19:E6:16:04:99:E5:61:AD:82:DA:06:A7:4C:CB:85:92:22:3A:6F X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ab:1b:d1:40:b6:46:19:c4:8d:4f:d9:27:35:6f:66:8f:0a: ab:14:bf:09:9b:5d:2f:bb:c0:74:28:c8:98:9f:b3:b6:cc:bd: 76:83:4a:9c:a6:12:e6:1a:7c:ae:13:34:16:38:09:fe:82:65: 16:c9:9e:29:41:88:10:89:3f:3f:15:c7:0c:94:60:3b:5b:3f: f5:6d:78:ee:51:ce:9b:d4:34:ba:f9:0d:b5:47:b1:06:97:b5: 1b:20:6b:14:37:e1:1b:7c:d3:92:e4:a9:d4:ef:83:36:b3:61: ab:90:72:f7:33:c2:0a:0b:65:ac:36:0a:ac:c2:21:cc:d2:89: 27:fc:da:25:64:95:0b:92:d3:ea:4b:a5:08:04:da:44:d5:a5: 05:23:43:9e:3d:99:fa:36:2c:54:41:ca:5b:fc:fa:f0:be:63: e3:cd:d1:ee:54:22:84:fa:28:07:c9:2d:5e:26:a3:5c:83:d5: a5:89:5c:97:2e:53:bb:d7:dc:c3:72:1d:15:7c:13:f6:4e:9b: f8:35:a0:53:c2:d1:26:29:68:04:95:c5:90:9a:b3:23:fe:5a: 3a:1d:b5:82:48:eb:68:72:77:89:2c:66:9a:62:87:81:1b:70: a3:22:50:aa:50:ac:7f:25:ea:4c:af:73:33:ff:d1:bd:c9:c3: d8:b9:4c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMSuSChTCZ/iAwXV0HZXbVFsuIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA5MDUwMzQ3MDNaFw0yNTA5MDgxNTI5MDNaMDMxMTAvBgNV BAMTKDAwMTlFNjE2MDQ5OUU1NjFBRDgyREEwNkE3NENDQjg1OTIyMjNBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LtMwrbDWqsUxjjphuk9ASqIn ZjPyFLA7F3R4os83JHcDe79uswPmJ14rwwmiEBXdOLxYPObatHAhFAhfhJCNhZ6k SEhbeE2auj5Fx3xebzjrrZ20Pur1WjKdoKfBTW8TibGoVnwHyXHqOaeXDjeHCDcA 3E0Gy76oB7gy9K7s6mWyI2adEBPMhxyHnTOFDfgiFuVzOO0PgOnoAIZKzWTB/9n6 ZjbtgonMM0rSjAIPlQt2QnPUhjYPpwMdvYaG/vtKumkbmeBIpJfwI9gSglv0ZmCv lpJW3fDdlrSw7PNt04T9+TUxKWA67usSOjtSZGif5pObu1DsGtzSccMAv+cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABnmFgSZ5WGtgtoGp0zLhZIiOm8wHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSrG9FAtkYZxI1P2Sc1b2aPCqsUvwmbXS+7 wHQoyJifs7bMvXaDSpymEuYafK4TNBY4Cf6CZRbJnilBiBCJPz8VxwyUYDtbP/Vt eO5RzpvUNLr5DbVHsQaXtRsgaxQ34Rt805LkqdTvgzazYauQcvczwgoLZaw2CqzC IczSiSf82iVklQuS0+pLpQgE2kTVpQUjQ549mfo2LFRBylv8+vC+Y+PN0e5UIoT6 KAfJLV4mo1yD1aWJXJcuU7vX3MNyHRV8E/ZOm/g1oFPC0SYpaASVxZCasyP+Wjod tYJI62hyd4ksZppih4EbcKMiUKpQrH8l6kyvczP/0b3Jw9i5TKY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:24 2025 by rpki-client