$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: OU+E/C+4VCMDNED+fm+bwSYhtDmFoZ4Zih0XH/zEMA0= Subject key identifier: 8B:4C:3F:50:09:9E:2D:4B:3A:93:CD:63:BD:2C:97:7C:19:15:84:1B Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 08D7BAD081CEFFC601295900777743EDB044F6CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: C1 Signing time: Thu 05 Jun 2025 17:01:08 +0000 Manifest this update: Thu 05 Jun 2025 16:56:08 +0000 Manifest next update: Sun 08 Jun 2025 23:35:08 +0000 Files and hashes: 1: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 2: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: eNHXVnb6B4x/JZz+wvrkaqqDtQp7AXXaVZQJwHXOSVM=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 23:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d7:ba:d0:81:ce:ff:c6:01:29:59:00:77:77:43:ed:b0:44:f6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Jun 5 16:56:08 2025 GMT Not After : Jun 8 23:35:08 2025 GMT Subject: CN=8B4C3F50099E2D4B3A93CD63BD2C977C1915841B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4d:e9:2c:0a:ae:b9:df:53:f9:0c:69:0a:ab: 25:79:0e:36:58:90:10:0c:7f:16:76:b6:02:e5:ed: 0e:b3:e8:29:85:1b:8c:76:b8:d6:3c:87:36:0e:d1: 00:dc:a8:a5:db:94:17:b9:98:a0:94:8b:0f:e7:3b: 2c:19:43:44:3a:47:5d:5d:69:92:f3:b6:a0:6a:75: 78:67:26:d8:31:02:2c:3a:b8:37:d5:d7:6e:6b:f9: 81:cd:c7:23:8e:4f:14:c8:bb:4e:8b:28:de:e8:8e: 8d:00:d2:99:43:ab:e5:5b:97:f2:ec:95:9a:2a:60: 30:5a:1f:be:e4:b2:3d:a1:3e:80:20:a2:da:bb:6e: b1:2e:64:2c:43:be:7b:31:be:2d:f2:fe:a0:21:08: c5:a9:b2:ce:ac:2e:fe:b4:5a:ba:6a:78:c3:35:8b: 01:f3:31:7f:1d:49:bc:7f:77:02:b9:31:38:ab:e4: 0d:6d:e8:de:91:30:9c:d3:17:b9:bc:e0:27:93:ae: 35:3a:33:7d:84:8c:33:59:c2:f1:bf:d2:66:4e:af: 0f:0c:e3:cc:06:6a:57:ea:91:f6:2b:19:76:f9:fe: 69:43:78:b4:a3:c8:28:d9:f8:ed:5e:5b:9b:1c:25: b0:cc:d1:b0:f0:b7:ab:16:ee:08:b9:82:42:94:72: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4C:3F:50:09:9E:2D:4B:3A:93:CD:63:BD:2C:97:7C:19:15:84:1B X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d6:3a:4c:5f:07:ec:42:62:7b:ca:5f:3a:17:4a:5f:a0:06: c0:4a:dc:89:7e:3b:1a:20:b3:a6:43:1b:18:c0:ce:6c:1f:c9: 11:dd:79:d3:e9:7d:48:49:6d:22:55:a4:d0:23:03:22:09:10: 77:27:14:c7:42:6f:12:c6:10:1d:6d:23:4e:dd:ab:c2:7e:4f: 4b:dd:c1:c1:51:60:d7:cb:ae:bb:0a:af:da:11:ee:a4:6a:c9: da:43:c3:2b:a1:9f:ff:fb:cc:fc:fa:fa:7f:04:3d:b9:85:c6: be:65:ff:ef:02:bc:59:be:7d:07:ce:63:dd:70:97:fb:4a:87: cb:a2:30:e7:a5:ba:8c:00:66:23:77:c3:0b:33:fe:f7:68:d2: 00:8d:51:16:7c:ed:06:32:3f:7f:fc:30:fa:a1:82:62:64:ec: 58:d3:c1:33:ec:57:a3:e1:27:91:4b:2a:b7:a1:a0:57:e6:2f: 1f:01:f1:7d:37:21:12:af:ab:36:22:64:e5:76:f7:a1:5a:ef: d6:8e:8b:3e:2b:e6:43:92:21:fb:70:da:f7:7e:33:3f:ab:75: ad:f9:ab:bc:07:e0:e3:3d:38:e8:2f:09:84:5b:66:f7:21:53: b0:19:69:a3:a5:3d:7d:5c:96:0a:5f:b2:b1:46:b8:77:e0:80: e5:e2:98:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNe60IHO/8YBKVkAd3dD7bBE9swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA2MDUxNjU2MDhaFw0yNTA2MDgyMzM1MDhaMDMxMTAvBgNV BAMTKDhCNEMzRjUwMDk5RTJENEIzQTkzQ0Q2M0JEMkM5NzdDMTkxNTg0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTeksCq6531P5DGkKqyV5DjZY kBAMfxZ2tgLl7Q6z6CmFG4x2uNY8hzYO0QDcqKXblBe5mKCUiw/nOywZQ0Q6R11d aZLztqBqdXhnJtgxAiw6uDfV125r+YHNxyOOTxTIu06LKN7ojo0A0plDq+Vbl/Ls lZoqYDBaH77ksj2hPoAgotq7brEuZCxDvnsxvi3y/qAhCMWpss6sLv60WrpqeMM1 iwHzMX8dSbx/dwK5MTir5A1t6N6RMJzTF7m84CeTrjU6M32EjDNZwvG/0mZOrw8M 48wGalfqkfYrGXb5/mlDeLSjyCjZ+O1eW5scJbDM0bDwt6sW7gi5gkKUckXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0w/UAmeLUs6k81jvSyXfBkVhBswHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjWOkxfB+xCYnvKXzoXSl+gBsBK3Il+Oxog s6ZDGxjAzmwfyRHdedPpfUhJbSJVpNAjAyIJEHcnFMdCbxLGEB1tI07dq8J+T0vd wcFRYNfLrrsKr9oR7qRqydpDwyuhn//7zPz6+n8EPbmFxr5l/+8CvFm+fQfOY91w l/tKh8uiMOeluowAZiN3wwsz/vdo0gCNURZ87QYyP3/8MPqhgmJk7FjTwTPsV6Ph J5FLKrehoFfmLx8B8X03IRKvqzYiZOV296Fa79aOiz4r5kOSIftw2vd+Mz+rda35 q7wH4OM9OOgvCYRbZvchU7AZaaOlPX1clgpfsrFGuHfggOXimAc= -----END CERTIFICATE-----Generated at Fri Jun 6 17:12:51 2025 by rpki-client