$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: joTsZGyrHhl+LulyA+l+UQ/T4Oc0Yzf/BjTqypnUG1s= Subject key identifier: 78:E9:37:65:D4:0B:FF:4E:D9:B9:A3:DA:19:2D:E0:37:E0:0E:40:89 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 056971ADE810CF8956F00E96D9551048B39245AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: EB Signing time: Sun 07 Sep 2025 12:21:01 +0000 Manifest this update: Sun 07 Sep 2025 12:16:01 +0000 Manifest next update: Wed 10 Sep 2025 23:59:01 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) 2: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: Zi5WoMgonKx1NjioxcUUzBagchNiFsn2QDdhrS3b6So=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 4: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 23:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:69:71:ad:e8:10:cf:89:56:f0:0e:96:d9:55:10:48:b3:92:45:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Sep 7 12:16:01 2025 GMT Not After : Sep 10 23:59:01 2025 GMT Subject: CN=78E93765D40BFF4ED9B9A3DA192DE037E00E4089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:7c:b8:c9:c2:17:bf:b2:c9:d9:37:98:17: 08:fa:4f:cd:63:a5:ef:84:c6:ae:9a:13:11:47:a3: 63:c5:66:49:d1:43:bf:3a:10:23:4d:0e:17:af:41: 01:5e:03:f7:23:18:26:ec:70:d5:9a:64:a8:cc:ec: 54:4a:d8:2d:83:03:49:74:ac:6d:65:82:3c:b8:28: 5c:6e:9c:fe:d6:71:d3:0f:e8:b8:21:38:67:75:5a: 5c:6f:19:17:b5:55:11:02:96:5e:e7:53:e9:08:21: 08:79:5a:1f:84:e1:f0:56:0b:28:ca:e0:cb:6e:e8: 9f:a5:38:16:91:6f:0c:a7:96:16:80:56:d5:f0:d3: 03:ec:91:8b:e9:5d:4a:ad:7b:47:41:0e:9c:73:9a: 6a:f8:0c:5d:6b:cd:25:01:56:c2:3a:ea:f8:cd:94: 01:29:a9:c6:6e:2b:a2:d2:df:3c:fd:cb:ae:5b:0f: 08:55:2e:c3:bd:1a:39:12:9a:5e:eb:e8:ba:e0:8b: 23:82:75:16:4c:55:2a:fd:64:52:98:2f:a0:c5:19: 85:82:45:b7:51:d9:fe:5d:f8:35:9f:48:fa:3a:a2: 0f:3b:a0:9d:cd:b7:49:ea:09:aa:0e:a4:11:4f:38: 34:ca:07:57:aa:3a:79:a9:d8:2e:25:3e:c8:7b:d9: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E9:37:65:D4:0B:FF:4E:D9:B9:A3:DA:19:2D:E0:37:E0:0E:40:89 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:42:ab:78:b9:88:12:59:19:9b:3c:0e:0f:f7:88:47:21:19: c1:d9:2c:16:df:78:ab:75:67:6f:c3:f9:cf:9f:51:7a:e9:92: 2c:02:c0:48:5e:8e:35:e2:60:c6:af:ad:af:fd:f5:b6:09:ad: f7:d3:3f:6a:e2:84:07:41:8c:f7:99:56:32:0a:27:c6:0b:68: 46:fe:dd:e5:50:ee:ed:75:66:48:98:dc:a4:2d:7b:b1:ef:b7: e7:13:d1:23:89:bb:e6:83:2a:92:b2:41:92:44:22:1a:c0:b3: ae:0f:d7:60:a3:94:3d:f0:bb:fd:d8:44:e8:01:af:27:21:9c: a8:22:3d:c7:1e:24:9c:c9:ff:74:dd:2f:a2:eb:09:f3:d8:07: 3f:44:f8:8a:bf:b6:13:19:18:ce:33:b0:22:64:5f:b9:6d:92: 0d:3e:63:14:fb:3b:63:6f:d0:43:2e:c5:36:4e:13:b2:09:19: 20:86:d4:69:09:ac:49:d3:ad:41:66:2a:e5:5a:47:f1:cc:28: b2:7c:a1:30:53:f9:a7:9a:8a:a6:fc:96:36:e2:ef:cd:aa:3d: c4:33:72:36:fe:c1:50:d4:61:af:0a:e9:87:ad:cb:45:79:e7: c4:76:11:71:ec:73:2a:8b:b0:f4:c8:4c:78:08:86:b2:57:6b: 51:3c:90:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWlxregQz4lW8A6W2VUQSLOSRawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTA5MDcxMjE2MDFaFw0yNTA5MTAyMzU5MDFaMDMxMTAvBgNV BAMTKDc4RTkzNzY1RDQwQkZGNEVEOUI5QTNEQTE5MkRFMDM3RTAwRTQwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2ny4ycIXv7LJ2TeYFwj6T81j pe+Exq6aExFHo2PFZknRQ786ECNNDhevQQFeA/cjGCbscNWaZKjM7FRK2C2DA0l0 rG1lgjy4KFxunP7WcdMP6LghOGd1WlxvGRe1VRECll7nU+kIIQh5Wh+E4fBWCyjK 4Mtu6J+lOBaRbwynlhaAVtXw0wPskYvpXUqte0dBDpxzmmr4DF1rzSUBVsI66vjN lAEpqcZuK6LS3zz9y65bDwhVLsO9GjkSml7r6LrgiyOCdRZMVSr9ZFKYL6DFGYWC RbdR2f5d+DWfSPo6og87oJ3Nt0nqCaoOpBFPODTKB1eqOnmp2C4lPsh72SH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeOk3ZdQL/07ZuaPaGS3gN+AOQIkwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpCq3i5iBJZGZs8Dg/3iEchGcHZLBbfeKt1 Z2/D+c+fUXrpkiwCwEhejjXiYMavra/99bYJrffTP2rihAdBjPeZVjIKJ8YLaEb+ 3eVQ7u11ZkiY3KQte7Hvt+cT0SOJu+aDKpKyQZJEIhrAs64P12CjlD3wu/3YROgB rychnKgiPcceJJzJ/3TdL6LrCfPYBz9E+Iq/thMZGM4zsCJkX7ltkg0+YxT7O2Nv 0EMuxTZOE7IJGSCG1GkJrEnTrUFmKuVaR/HMKLJ8oTBT+aeaiqb8ljbi782qPcQz cjb+wVDUYa8K6Yety0V558R2EXHscyqLsPTITHgIhrJXa1E8kHc= -----END CERTIFICATE-----Generated at Tue Sep 9 02:33:23 2025 by rpki-client