$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: /ak/Xoo/B/CPUDyph8JiGvoEoXcQrq+0bO8qb3jwdME= Subject key identifier: 3F:20:75:88:15:4C:CA:36:FE:A7:96:E9:AA:92:44:24:7A:3D:78:20 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 347DF5055EFBA5C3B21D63D0840DB3DCD624A6BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 10:40:52 +0000 Manifest this update: Sat 06 Sep 2025 10:35:52 +0000 Manifest next update: Tue 09 Sep 2025 18:34:52 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: IeAw+KMw0Ieferr9iYLOG0AMrTxThOzEX5shGIf56lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7d:f5:05:5e:fb:a5:c3:b2:1d:63:d0:84:0d:b3:dc:d6:24:a6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Sep 6 10:35:52 2025 GMT Not After : Sep 9 18:34:52 2025 GMT Subject: CN=3F207588154CCA36FEA796E9AA9244247A3D7820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:1c:a2:32:5f:71:0a:5d:2f:3c:78:ee:33: d7:43:5e:ca:06:6a:64:ce:2d:39:4f:dc:75:8a:3d: 9c:09:a4:f5:ab:46:2f:31:89:ef:9a:2b:4a:ba:9a: f9:23:34:a1:99:8e:a0:0e:fb:b9:0f:29:fd:2f:74: 89:a5:8c:3d:3a:d9:a4:e1:03:2b:f3:f1:f8:7f:ec: d6:ec:6d:64:45:d3:a7:03:44:9b:08:e2:5d:c3:16: 3a:6f:99:b4:0f:01:5b:ea:0b:38:ff:88:a2:59:07: 3e:8a:45:97:dd:cd:a1:cf:29:05:3c:19:86:90:8c: e8:c2:e1:d9:88:52:2c:2b:b7:0b:49:a3:fc:17:15: bb:90:dd:21:5f:33:47:95:0d:60:ce:e3:93:66:c1: ce:96:05:9d:e8:59:cd:d2:c9:fd:86:01:bd:9b:10: 88:ba:e0:5e:9f:65:45:13:df:4f:0f:5d:4a:6e:33: e4:4e:8f:9b:ad:cd:fc:86:fc:ab:67:4d:c6:eb:15: 66:ca:d4:c0:2b:56:33:79:b8:79:af:a1:db:7e:89: 88:99:81:f8:de:d7:2b:e1:43:fb:7c:25:ae:8d:96: d1:8b:cd:c6:59:72:e2:f5:2b:64:2f:47:ac:1e:9b: 24:a3:5a:a2:3c:a2:e0:24:3e:57:f8:0e:08:91:d6: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:75:88:15:4C:CA:36:FE:A7:96:E9:AA:92:44:24:7A:3D:78:20 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:50:02:88:a0:bb:30:18:f6:ac:ac:10:fd:c1:f5:0d:55:9f: 48:4d:4f:c0:91:dd:b5:ef:fd:20:5c:06:e2:6b:7d:12:2f:ae: 4d:9a:0d:83:03:56:ee:ed:b2:bf:d6:d1:8d:65:4f:71:0a:23: 5f:eb:ab:0c:68:60:f2:ba:33:cd:aa:65:c1:07:57:da:3d:57: 49:a0:ba:c2:5c:4d:06:7d:bb:5e:e0:a9:33:e0:24:af:23:8e: 61:c2:bd:a8:28:4a:56:2e:2e:3c:c3:a2:58:06:f1:8d:f1:c8: b2:df:99:15:5f:ba:e5:bb:41:ec:e9:75:50:13:50:5e:9e:d9: fd:2b:fd:bb:01:6f:b1:b9:1e:18:65:95:f0:ef:df:4c:8c:24: 85:ea:b7:da:a1:c6:ac:7e:2a:1f:2c:e1:ea:cf:61:90:97:a0: cd:ad:5a:20:9f:0c:52:27:29:9f:3f:ba:ff:3f:14:2d:cc:da: fa:5a:02:a4:bb:fd:6e:86:5b:c3:12:15:d0:af:4f:23:15:36: a7:63:45:1b:1c:11:8a:de:2c:18:91:5d:4e:1a:5d:48:3a:14: b4:5e:4b:1e:ea:3a:16:fc:3c:4d:4c:e7:7e:fc:ce:bd:15:eb: 84:d2:41:48:71:15:90:0b:8f:95:a8:9a:76:f5:dc:b7:7c:38: 7d:20:31:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNH31BV77pcOyHWPQhA2z3NYkprowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA5MDYxMDM1NTJaFw0yNTA5MDkxODM0NTJaMDMxMTAvBgNV BAMTKDNGMjA3NTg4MTU0Q0NBMzZGRUE3OTZFOUFBOTI0NDI0N0EzRDc4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNByiMl9xCl0vPHjuM9dDXsoG amTOLTlP3HWKPZwJpPWrRi8xie+aK0q6mvkjNKGZjqAO+7kPKf0vdImljD062aTh Ayvz8fh/7NbsbWRF06cDRJsI4l3DFjpvmbQPAVvqCzj/iKJZBz6KRZfdzaHPKQU8 GYaQjOjC4dmIUiwrtwtJo/wXFbuQ3SFfM0eVDWDO45Nmwc6WBZ3oWc3Syf2GAb2b EIi64F6fZUUT308PXUpuM+ROj5utzfyG/KtnTcbrFWbK1MArVjN5uHmvodt+iYiZ gfje1yvhQ/t8Ja6NltGLzcZZcuL1K2QvR6wemySjWqI8ouAkPlf4DgiR1i87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyB1iBVMyjb+p5bpqpJEJHo9eCAwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVQAoiguzAY9qysEP3B9Q1Vn0hNT8CR3bXv /SBcBuJrfRIvrk2aDYMDVu7tsr/W0Y1lT3EKI1/rqwxoYPK6M82qZcEHV9o9V0mg usJcTQZ9u17gqTPgJK8jjmHCvagoSlYuLjzDolgG8Y3xyLLfmRVfuuW7QezpdVAT UF6e2f0r/bsBb7G5HhhllfDv30yMJIXqt9qhxqx+Kh8s4erPYZCXoM2tWiCfDFIn KZ8/uv8/FC3M2vpaAqS7/W6GW8MSFdCvTyMVNqdjRRscEYreLBiRXU4aXUg6FLRe Sx7qOhb8PE1M5378zr0V64TSQUhxFZALj5Womnb13Ld8OH0gMUA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:49 2025 by rpki-client