$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: BDMl2w5cItYbNq0Tcmnfqsu6gtWzXHKxxgjITAFeZkA= Subject key identifier: 17:7A:8C:13:0B:1C:41:43:1D:59:0C:5D:DB:A1:8F:F9:1B:0A:B5:E9 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 1F51AE729CA21A759C491091BE2E91B3969FAF31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:03:19 +0000 Manifest this update: Mon 02 Jun 2025 01:58:19 +0000 Manifest next update: Thu 05 Jun 2025 09:52:19 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: SknQClxe8QA4buRSHoOn1s1wYfRZ3OC4POKNKmGm6dY=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:51:ae:72:9c:a2:1a:75:9c:49:10:91:be:2e:91:b3:96:9f:af:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Jun 2 01:58:19 2025 GMT Not After : Jun 5 09:52:19 2025 GMT Subject: CN=177A8C130B1C41431D590C5DDBA18FF91B0AB5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:4b:ff:b5:f4:fb:98:72:0c:6e:db:bb:ac: 1f:1b:a2:14:63:c0:0c:35:44:0a:e0:86:fa:e8:a4: 8e:4c:47:b5:8e:c9:e3:d4:21:71:51:91:f7:96:c3: 0c:51:98:b4:24:22:35:12:c7:ea:9e:e1:bc:15:c5: 75:cc:93:35:cd:bd:96:9b:f1:6b:c2:30:8a:07:be: 2d:d0:45:66:8d:8f:ac:71:0c:96:2a:f4:2d:09:d1: 17:36:db:40:f8:2e:d6:61:94:74:30:3f:76:12:07: ef:3f:5e:d6:a2:7f:b4:93:58:6e:80:81:dc:8e:c3: e2:fa:5c:45:41:a9:ac:4b:c3:57:a4:b4:b3:32:e4: e6:76:9d:e0:e3:6a:11:9b:18:9c:5e:94:ed:7f:d3: 68:e6:22:e0:f2:57:f6:64:7a:09:56:f6:6e:15:09: 38:82:2f:ff:9a:b7:10:22:92:45:53:11:ca:86:2a: b2:d0:10:61:16:fa:2c:07:8c:01:89:00:af:ce:cb: 2e:44:aa:2d:28:d0:1f:bb:ee:85:93:2f:63:b2:48: 51:a2:3b:88:45:66:b3:16:5d:50:f9:1f:5a:37:67: a9:14:d9:0f:cd:f7:e2:cf:3f:35:86:1b:60:ed:2a: 6d:d8:f4:4b:c4:14:ea:03:2e:92:8e:32:a0:bf:35: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7A:8C:13:0B:1C:41:43:1D:59:0C:5D:DB:A1:8F:F9:1B:0A:B5:E9 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1f:c6:21:cd:8e:28:0f:50:57:52:46:17:87:67:7b:fd:dd: c4:e6:93:da:e3:69:0f:6b:20:9b:fa:ce:14:af:87:72:aa:a0: ea:43:71:53:de:e3:71:60:fc:32:78:9d:ff:a2:6e:96:2c:b2: 14:83:dc:47:8c:22:5a:c7:11:f7:e6:c5:0a:68:3f:5a:38:55: ea:fe:9a:96:0e:75:ea:3c:f6:2c:d3:a1:73:a2:7d:29:64:b8: f7:55:2a:b7:a9:62:d2:59:39:a6:8a:b0:36:bd:9a:26:e5:70: 79:2d:13:02:11:24:c0:fd:a7:f3:89:90:cc:72:8d:18:3b:08: 10:8e:4f:12:c7:ae:0d:52:73:86:1d:05:4b:9f:f6:19:75:1f: 4d:ae:2a:de:82:e2:12:06:1d:c8:16:19:5f:af:10:7a:4c:f8: c1:54:0f:eb:be:5f:a7:29:8d:ea:b8:81:cc:e2:0f:b1:1f:eb: 8a:1d:6e:99:70:e4:42:55:67:6d:2a:88:47:98:40:c5:91:3a: 12:4b:0d:92:5c:74:85:ac:af:33:d1:51:35:1e:13:39:16:b5: 1b:07:b7:aa:c4:73:39:0a:24:2f:69:07:ad:1f:53:35:f7:6a: 9e:c2:f9:ec:b4:6f:12:54:77:be:d3:0a:26:dc:ed:ac:c3:d5: ed:ab:20:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1GucpyiGnWcSRCRvi6Rs5afrzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA2MDIwMTU4MTlaFw0yNTA2MDUwOTUyMTlaMDMxMTAvBgNV BAMTKDE3N0E4QzEzMEIxQzQxNDMxRDU5MEM1RERCQTE4RkY5MUIwQUI1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDql0v/tfT7mHIMbtu7rB8bohRj wAw1RArghvropI5MR7WOyePUIXFRkfeWwwxRmLQkIjUSx+qe4bwVxXXMkzXNvZab 8WvCMIoHvi3QRWaNj6xxDJYq9C0J0Rc220D4LtZhlHQwP3YSB+8/Xtaif7STWG6A gdyOw+L6XEVBqaxLw1ektLMy5OZ2neDjahGbGJxelO1/02jmIuDyV/ZkeglW9m4V CTiCL/+atxAikkVTEcqGKrLQEGEW+iwHjAGJAK/Oyy5Eqi0o0B+77oWTL2OySFGi O4hFZrMWXVD5H1o3Z6kU2Q/N9+LPPzWGG2DtKm3Y9EvEFOoDLpKOMqC/NTCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3qMEwscQUMdWQxd26GP+RsKtekwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAfxiHNjigPUFdSRheHZ3v93cTmk9rjaQ9r IJv6zhSvh3KqoOpDcVPe43Fg/DJ4nf+ibpYsshSD3EeMIlrHEffmxQpoP1o4Ver+ mpYOdeo89izToXOifSlkuPdVKrepYtJZOaaKsDa9miblcHktEwIRJMD9p/OJkMxy jRg7CBCOTxLHrg1Sc4YdBUuf9hl1H02uKt6C4hIGHcgWGV+vEHpM+MFUD+u+X6cp jeq4gcziD7Ef64odbplw5EJVZ20qiEeYQMWROhJLDZJcdIWsrzPRUTUeEzkWtRsH t6rEczkKJC9pB60fUzX3ap7C+ey0bxJUd77TCibc7azD1e2rIDg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:56 2025 by rpki-client