$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: ceO2xkjtlCpFRWbcR696PftSqQ9rUmpJlyd7GYLZO4k= Subject key identifier: CE:09:90:03:EF:C3:15:21:FB:20:68:19:C3:D4:BD:F0:E3:0A:F0:DF Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 4A7C24CA95CF5ED1AB78B16A233B8E2CB404798C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 04D5 Signing time: Sat 06 Sep 2025 00:41:48 +0000 Manifest this update: Sat 06 Sep 2025 00:36:48 +0000 Manifest next update: Tue 09 Sep 2025 06:47:48 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: UaGmn4kTfe+1TDn5eCuN9O53yKjU57F4Hz3jxRXHWWY=) 2: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: d5EvhibW+8tZignuG/RkAy4GzK+UJTrpSuPPM7CR2BY=) 3: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: uhbTS40xOE2iorcFCGhU6uKqyXCDewHO7yiFkBSc5gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7c:24:ca:95:cf:5e:d1:ab:78:b1:6a:23:3b:8e:2c:b4:04:79:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Sep 6 00:36:48 2025 GMT Not After : Sep 9 06:47:48 2025 GMT Subject: CN=CE099003EFC31521FB206819C3D4BDF0E30AF0DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:14:c7:67:f6:bd:31:85:7a:c2:b4:21:60: c6:2b:52:ea:70:fc:6f:b9:44:33:a9:ae:3c:1e:96: 19:a2:cd:08:91:92:8a:3f:c4:b5:48:64:57:5b:6f: 81:ba:4b:b7:27:d1:44:9e:3c:f2:9f:d2:b4:5d:0f: 31:ac:17:a5:e2:a1:20:21:fc:f6:fe:30:3e:db:b8: 02:91:87:a4:b9:c2:92:0e:5a:9e:fe:cd:c7:26:9a: 71:21:4a:4e:71:5a:73:60:54:94:e3:48:32:9e:dd: 15:d5:3f:67:4c:b8:29:39:48:5f:c0:b6:ac:7e:fe: f5:d7:55:e4:89:34:7e:56:3f:65:34:b9:5b:3d:4a: 8f:ce:54:d5:60:6f:e1:5d:98:be:7e:97:c2:1d:a9: 8b:16:12:19:92:ed:85:c4:b1:8b:63:df:b8:69:0c: 9e:b3:b3:01:08:16:4c:65:6b:96:f1:51:34:4c:9c: 9a:02:2c:ea:e1:a2:11:b0:b0:52:b7:d2:f5:9f:a7: dd:85:a3:1a:aa:71:3a:7c:6c:79:eb:f1:8e:d2:ac: be:8f:6e:70:fc:51:9f:5e:b8:f0:40:d2:69:a4:ef: 8a:d2:e1:2b:48:8e:f8:ff:0b:77:c6:47:d8:ef:d3: 6e:01:7a:61:6f:8f:9d:b2:b6:17:3a:6a:05:bb:d0: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:90:03:EF:C3:15:21:FB:20:68:19:C3:D4:BD:F0:E3:0A:F0:DF X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9e:bb:07:49:85:92:b2:e1:be:db:34:e5:a9:0c:c6:6a:b3: db:89:8d:53:70:43:f0:51:23:af:8f:a6:2b:39:b0:8d:71:77: 37:8b:da:9a:4a:eb:d7:5e:91:c2:39:ff:38:a0:d0:23:2b:97: 07:f6:60:52:05:ca:6a:41:38:c8:5f:a9:d6:b0:a0:ae:ce:eb: 4f:94:50:30:ff:d9:e1:86:2b:ea:20:49:f0:75:68:50:49:7e: 3d:a6:dc:1c:39:16:8a:fe:77:ea:15:ee:96:81:96:a5:b4:08: 7f:f4:3c:5e:ca:2b:98:dd:10:1c:3c:84:16:5d:dd:0e:f2:6b: 25:fd:37:fb:2a:56:86:e5:3f:05:d9:89:68:ab:42:3c:3b:1b: 5a:2a:9a:a3:56:86:d4:2b:b5:04:6b:9b:2b:90:d3:e0:f3:6a: 22:7e:57:5e:75:f8:64:2a:1a:21:a4:a0:87:b6:fd:3b:e9:11: 9a:02:19:7d:27:f7:2f:4d:af:b6:99:83:df:4d:59:ba:93:ab: ee:a7:39:44:26:14:6e:f2:e3:d0:cb:67:0f:00:cd:f8:45:89: 6e:95:5e:86:05:c9:a8:94:40:af:1e:6f:12:9d:58:46:7f:ed: 9a:03:58:41:aa:9f:ee:c0:b4:8d:7d:be:cd:1a:29:7f:e7:e1: df:dc:39:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnwkypXPXtGreLFqIzuOLLQEeYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTA5MDYwMDM2NDhaFw0yNTA5MDkwNjQ3NDhaMDMxMTAvBgNV BAMTKENFMDk5MDAzRUZDMzE1MjFGQjIwNjgxOUMzRDRCREYwRTMwQUYwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFxTHZ/a9MYV6wrQhYMYrUupw /G+5RDOprjwelhmizQiRkoo/xLVIZFdbb4G6S7cn0USePPKf0rRdDzGsF6XioSAh /Pb+MD7buAKRh6S5wpIOWp7+zccmmnEhSk5xWnNgVJTjSDKe3RXVP2dMuCk5SF/A tqx+/vXXVeSJNH5WP2U0uVs9So/OVNVgb+FdmL5+l8IdqYsWEhmS7YXEsYtj37hp DJ6zswEIFkxla5bxUTRMnJoCLOrhohGwsFK30vWfp92FoxqqcTp8bHnr8Y7SrL6P bnD8UZ9euPBA0mmk74rS4StIjvj/C3fGR9jv024BemFvj52ythc6agW70O6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgmQA+/DFSH7IGgZw9S98OMK8N8wHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACueuwdJhZKy4b7bNOWpDMZqs9uJjVNwQ/BR I6+Ppis5sI1xdzeL2ppK69dekcI5/zig0CMrlwf2YFIFympBOMhfqdawoK7O60+U UDD/2eGGK+ogSfB1aFBJfj2m3Bw5For+d+oV7paBlqW0CH/0PF7KK5jdEBw8hBZd 3Q7yayX9N/sqVoblPwXZiWirQjw7G1oqmqNWhtQrtQRrmyuQ0+DzaiJ+V151+GQq GiGkoIe2/TvpEZoCGX0n9y9Nr7aZg99NWbqTq+6nOUQmFG7y49DLZw8AzfhFiW6V XoYFyaiUQK8ebxKdWEZ/7ZoDWEGqn+7AtI19vs0aKX/n4d/cOaA= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:48 2025 by rpki-client