$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: HWYcAWhzSRrR8wAL4+LNi/HeG5j19zJMF5h0GNelrGM= Subject key identifier: 9A:66:86:0B:8F:C6:50:B7:8A:77:14:B9:CE:E7:28:71:BB:27:63:EF Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 782513724F64192BBC5D2384BF72DD43376ED992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 12:50:51 +0000 Manifest this update: Fri 06 Jun 2025 12:45:51 +0000 Manifest next update: Mon 09 Jun 2025 17:41:51 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: MwiQ+OYBcS9EckAlxpo/87ig3KtsAWNSZwW+jUXJ0Qk=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:25:13:72:4f:64:19:2b:bc:5d:23:84:bf:72:dd:43:37:6e:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Jun 6 12:45:51 2025 GMT Not After : Jun 9 17:41:51 2025 GMT Subject: CN=9A66860B8FC650B78A7714B9CEE72871BB2763EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:31:2f:55:94:a6:55:26:58:46:8f:30:56: 11:41:7a:66:9d:b4:c4:61:a9:9d:ce:58:c6:2a:af: c5:77:48:cd:1a:73:2b:a9:ea:11:f4:76:fa:e2:cd: ea:0a:ee:26:9f:a4:fa:62:b0:36:99:6e:23:da:ef: dc:cf:cb:0d:85:12:7e:4a:64:96:b6:75:d1:48:58: 5a:fd:6a:97:a8:17:bb:f9:ba:14:de:19:a8:22:4a: 3c:79:25:dc:c5:97:a1:a4:10:20:57:a2:12:67:d2: 16:f9:37:ab:e6:3e:b8:3e:a8:77:57:19:6c:b3:8d: 81:26:f9:c9:67:21:73:c5:28:1c:79:42:10:e6:6c: 53:f7:a6:92:c6:5b:71:af:ba:5b:d0:d6:11:4e:20: fa:fa:dd:c5:1d:a9:53:a9:63:94:42:47:90:9a:90: 07:b1:96:6a:60:30:84:58:ae:69:01:88:c3:38:d7: 89:d7:5e:c0:33:fb:73:a7:56:11:ee:66:4c:44:8f: 34:44:a7:4a:20:9d:98:a1:68:dc:f5:ab:19:af:72: bc:38:e2:3e:9d:cf:fc:0b:bc:6e:55:ac:e8:ec:1b: 0a:39:d9:60:1f:20:2b:e4:ab:fa:37:59:f8:08:db: 4a:17:54:f8:8f:21:9f:11:07:40:5b:f3:f0:6b:1b: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:66:86:0B:8F:C6:50:B7:8A:77:14:B9:CE:E7:28:71:BB:27:63:EF X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f9:06:31:d3:fe:87:70:29:5c:ea:1b:ad:94:7e:82:4a:08: 44:55:50:8e:71:08:61:ef:fb:72:5f:94:63:34:62:a2:a6:c8: 83:e7:8d:9f:22:5b:15:a0:28:d3:a2:43:67:1b:ec:8c:69:4a: bf:80:ce:7b:fc:7a:98:ea:5f:ac:47:ca:93:01:58:15:31:02: ef:62:31:2f:f1:03:69:20:7c:a2:37:c9:77:06:ba:c6:be:2b: 65:3f:c0:d4:e9:b8:50:0b:38:83:11:13:20:93:98:c7:6a:24: 97:e3:38:da:4d:0a:f3:51:fa:d7:a0:3d:dd:45:3f:09:8b:7c: 1d:f4:ab:cf:54:ee:df:f1:2e:b4:bb:b8:94:d5:21:25:4a:20: 83:7e:ab:d2:ed:20:c9:3d:ba:d5:40:04:5c:9e:a5:27:ae:da: 78:7f:be:76:a9:e6:d0:e7:ee:44:08:1b:60:19:2b:17:b9:45: c1:3c:50:e7:5a:0d:b9:0a:e5:4a:32:79:5c:d9:da:b8:ea:fc: 84:89:4a:72:0c:00:8b:7c:fd:d8:f5:ef:f1:e0:f8:e3:6d:9a: 61:75:ec:d2:27:bc:2e:8c:24:46:56:f2:ec:30:b2:0a:f6:c3: e9:8c:91:3b:fa:3e:47:f9:74:50:b2:74:25:a9:4f:eb:19:31: 91:61:0d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCUTck9kGSu8XSOEv3LdQzdu2ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA2MDYxMjQ1NTFaFw0yNTA2MDkxNzQxNTFaMDMxMTAvBgNV BAMTKDlBNjY4NjBCOEZDNjUwQjc4QTc3MTRCOUNFRTcyODcxQkIyNzYzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOTEvVZSmVSZYRo8wVhFBemad tMRhqZ3OWMYqr8V3SM0acyup6hH0dvrizeoK7iafpPpisDaZbiPa79zPyw2FEn5K ZJa2ddFIWFr9apeoF7v5uhTeGagiSjx5JdzFl6GkECBXohJn0hb5N6vmPrg+qHdX GWyzjYEm+clnIXPFKBx5QhDmbFP3ppLGW3GvulvQ1hFOIPr63cUdqVOpY5RCR5Ca kAexlmpgMIRYrmkBiMM414nXXsAz+3OnVhHuZkxEjzREp0ognZihaNz1qxmvcrw4 4j6dz/wLvG5VrOjsGwo52WAfICvkq/o3WfgI20oXVPiPIZ8RB0Bb8/BrG47bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmmaGC4/GULeKdxS5zucocbsnY+8wHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv5BjHT/odwKVzqG62UfoJKCERVUI5xCGHv +3JflGM0YqKmyIPnjZ8iWxWgKNOiQ2cb7IxpSr+Aznv8epjqX6xHypMBWBUxAu9i MS/xA2kgfKI3yXcGusa+K2U/wNTpuFALOIMREyCTmMdqJJfjONpNCvNR+tegPd1F PwmLfB30q89U7t/xLrS7uJTVISVKIIN+q9LtIMk9utVABFyepSeu2nh/vnap5tDn 7kQIG2AZKxe5RcE8UOdaDbkK5UoyeVzZ2rjq/ISJSnIMAIt8/dj17/Hg+ONtmmF1 7NInvC6MJEZW8uwwsgr2w+mMkTv6Pkf5dFCydCWpT+sZMZFhDbU= -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:12 2025 by rpki-client