$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: aTQaly0y9H2iR9Z2QFr8acXngvyHhMct0cXyZc9lW4c= Subject key identifier: 12:14:A6:F0:0A:D3:A4:93:B7:4F:BF:9B:EA:7F:98:6B:16:0F:9C:9D Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 178B57300FE660C4788590B1B73819879289D209 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: AB Signing time: Fri 06 Jun 2025 03:50:53 +0000 Manifest this update: Fri 06 Jun 2025 03:45:53 +0000 Manifest next update: Mon 09 Jun 2025 07:32:53 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: VVuW2yOhMNyUTX+L71aMhPRgRaQvP1j6Ru7diCHKwO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8b:57:30:0f:e6:60:c4:78:85:90:b1:b7:38:19:87:92:89:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Jun 6 03:45:53 2025 GMT Not After : Jun 9 07:32:53 2025 GMT Subject: CN=1214A6F00AD3A493B74FBF9BEA7F986B160F9C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:b2:b9:51:11:87:ec:a5:f6:29:90:20:5c: 85:5d:37:e9:20:e1:42:55:d8:23:80:8d:23:1e:2d: 67:d8:19:a7:b8:c1:d4:e4:bd:e9:2e:7e:9e:7f:a2: 39:6a:05:27:1f:10:75:d4:bc:fd:ff:bb:ca:fe:99: 81:e8:e5:3d:98:36:35:59:6b:cb:a7:91:f8:f6:83: a9:ac:b6:7d:0c:e3:03:d1:6d:e7:ed:c6:f8:7a:02: 4b:aa:73:68:3f:6b:52:06:d9:52:bb:ee:2c:00:ce: a9:b2:82:db:df:f9:e4:19:51:b4:2f:d3:3d:58:05: eb:e9:b9:8c:00:69:88:05:17:fb:90:95:a5:45:46: f8:cc:a9:4b:84:cc:a5:9d:6a:1a:d7:88:23:99:fc: 8b:db:da:c4:04:0b:b9:1c:34:dd:1e:86:84:c3:64: bf:f9:10:72:40:c5:2a:9b:28:bd:2c:80:9c:0d:fe: 5d:0a:2a:8d:5f:9d:33:39:ef:1e:37:ca:89:b2:1f: e6:9a:6f:ae:ea:05:e2:9b:ca:a3:fc:79:1b:9f:0c: 63:2d:ac:45:ce:d6:6e:2f:be:c6:06:22:7f:c2:9a: de:4b:72:bd:ec:bd:d9:61:4d:32:c4:a7:04:ac:df: e6:84:d3:2f:3b:8e:69:44:36:1b:36:b7:7b:15:be: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:14:A6:F0:0A:D3:A4:93:B7:4F:BF:9B:EA:7F:98:6B:16:0F:9C:9D X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:16:52:45:16:7a:7c:0b:f4:15:9f:ec:10:b9:2d:17:d2:16: 86:24:53:04:5a:f6:c8:5b:35:6a:8b:66:cc:7c:fc:02:0b:3a: 72:7c:28:93:a9:19:81:d6:90:29:8c:48:25:cc:7b:84:62:72: 86:a4:c0:6b:2b:98:4d:dd:b9:df:26:e5:34:98:67:da:5a:c6: 11:de:27:87:e0:fa:30:6b:0b:90:bf:08:99:9b:0e:40:98:bc: 5e:4f:10:24:21:86:c2:6b:a5:8e:82:2c:e3:09:c6:5c:d4:d2: 9f:95:49:3f:43:4c:66:f6:d5:f8:50:95:65:ff:ac:6b:79:97: 89:2f:5b:15:e8:5b:87:13:93:ff:bf:47:b2:b8:f0:4e:fe:7f: 80:fa:3d:ff:07:c4:c8:45:46:b5:2d:51:b9:87:72:c8:e8:43: 9e:14:94:1b:aa:53:a0:28:96:34:7d:dd:66:71:1a:ff:89:78: 6e:59:fd:65:4d:3d:36:fc:be:78:e4:87:1f:e0:b7:4e:3e:45: c3:7f:cb:73:84:b5:17:52:22:a6:66:d3:d0:be:73:0d:f1:1d: ea:2b:d5:1b:95:71:7c:40:d5:91:67:40:22:ac:d5:f8:26:62: a7:4d:f0:06:6b:4a:d1:eb:28:c8:4e:d3:37:29:f2:75:e5:d8: 8e:c0:f9:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4tXMA/mYMR4hZCxtzgZh5KJ0gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTA2MDYwMzQ1NTNaFw0yNTA2MDkwNzMyNTNaMDMxMTAvBgNV BAMTKDEyMTRBNkYwMEFEM0E0OTNCNzRGQkY5QkVBN0Y5ODZCMTYwRjlDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXB7K5URGH7KX2KZAgXIVdN+kg 4UJV2COAjSMeLWfYGae4wdTkvekufp5/ojlqBScfEHXUvP3/u8r+mYHo5T2YNjVZ a8unkfj2g6mstn0M4wPRbeftxvh6Akuqc2g/a1IG2VK77iwAzqmygtvf+eQZUbQv 0z1YBevpuYwAaYgFF/uQlaVFRvjMqUuEzKWdahrXiCOZ/Ivb2sQEC7kcNN0ehoTD ZL/5EHJAxSqbKL0sgJwN/l0KKo1fnTM57x43yomyH+aab67qBeKbyqP8eRufDGMt rEXO1m4vvsYGIn/Cmt5Lcr3svdlhTTLEpwSs3+aE0y87jmlENhs2t3sVvkpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEhSm8ArTpJO3T7+b6n+YaxYPnJ0wHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQWUkUWenwL9BWf7BC5LRfSFoYkUwRa9shb NWqLZsx8/AILOnJ8KJOpGYHWkCmMSCXMe4RicoakwGsrmE3dud8m5TSYZ9paxhHe J4fg+jBrC5C/CJmbDkCYvF5PECQhhsJrpY6CLOMJxlzU0p+VST9DTGb21fhQlWX/ rGt5l4kvWxXoW4cTk/+/R7K48E7+f4D6Pf8HxMhFRrUtUbmHcsjoQ54UlBuqU6Ao ljR93WZxGv+JeG5Z/WVNPTb8vnjkhx/gt04+RcN/y3OEtRdSIqZm09C+cw3xHeor 1RuVcXxA1ZFnQCKs1fgmYqdN8AZrStHrKMhO0zcp8nXl2I7A+b0= -----END CERTIFICATE-----Generated at Fri Jun 6 18:08:54 2025 by rpki-client