$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 6BaPTqkgePNp3OajGoXN8pELfAWnc3irRTq+JgzhufY= Subject key identifier: 96:F5:90:5E:D1:1E:80:BF:D0:94:08:0C:78:37:C6:2D:E8:4D:44:E7 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 05B0B41472433CEB1D96E2340095FDFBF0922239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04EF Signing time: Tue 22 Jul 2025 19:21:18 +0000 Manifest this update: Tue 22 Jul 2025 19:16:18 +0000 Manifest next update: Sat 26 Jul 2025 07:15:18 +0000 Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: TDzQ/NSFFhq6VjzcUPK+HSNdBqi6F8bY7N0Jiyj4SD4=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b0:b4:14:72:43:3c:eb:1d:96:e2:34:00:95:fd:fb:f0:92:22:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Jul 22 19:16:18 2025 GMT Not After : Jul 26 07:15:18 2025 GMT Subject: CN=96F5905ED11E80BFD094080C7837C62DE84D44E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:95:07:21:22:9c:f8:ab:5e:f4:c2:19:04: f1:37:70:4b:02:ad:d2:13:c9:bb:87:df:4f:1e:f7: 84:73:67:71:b6:cc:1c:b4:db:01:de:d9:f5:32:7d: 7f:74:07:1f:46:30:37:29:62:85:01:5f:51:26:d9: 6d:a7:01:34:ac:72:a3:43:26:cb:f3:c5:b9:14:51: f9:cd:a0:ee:27:01:50:1f:8d:07:51:60:8f:5d:ae: 03:4c:b5:4c:09:87:77:0d:df:f5:0a:6f:71:80:c3: 9d:f4:3c:8a:d3:c7:ca:07:72:26:a1:95:87:68:53: c9:04:56:6b:ba:75:7a:26:ba:ff:e1:64:68:a5:31: fc:fe:62:14:3b:07:4c:10:76:8b:69:cd:c4:2a:34: 17:d3:01:20:07:76:13:bb:ab:45:15:47:83:eb:e3: 7a:de:8f:22:6c:7d:8b:dd:f4:81:28:21:30:b5:db: 9f:a0:62:08:b6:ec:2e:ea:cd:d6:27:d1:5e:d6:21: 30:18:56:f1:7e:ba:e9:cf:73:61:be:69:e7:f4:1c: 79:74:11:52:d3:4a:a9:ce:bf:97:3f:80:56:a8:a6: 48:6e:1c:0a:a5:39:58:1e:95:f2:07:77:cd:52:ad: 4b:5b:19:e8:b7:64:85:96:90:f2:31:64:16:d2:2b: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:90:5E:D1:1E:80:BF:D0:94:08:0C:78:37:C6:2D:E8:4D:44:E7 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:50:5f:cc:92:b4:e8:6f:d4:24:56:69:d0:e2:5e:9e:5f:0f: 0b:c3:44:25:50:45:9d:e3:c7:35:ad:2f:a0:ed:e0:b5:d7:54: f1:80:1c:07:ea:3f:69:f0:7c:77:cd:3b:b8:1a:ca:f1:00:7c: c8:06:96:8e:e8:1a:ee:39:b8:c3:9c:dc:0d:d8:51:df:b7:e8: dc:d2:20:a2:13:85:d6:14:a9:0e:81:7b:47:f8:74:5e:5e:9c: 12:03:6e:09:00:7b:56:81:86:54:be:65:10:53:fb:25:65:68: b1:a2:c4:3d:35:56:80:b3:9a:7f:5e:a4:f0:10:00:86:2a:11: a3:42:90:5f:78:6b:2b:b7:b3:e1:d1:f0:8d:f9:5e:94:da:01: dc:a0:0c:a2:cd:1d:c9:b4:1d:b3:af:b2:59:b8:c0:d4:3c:6b: 8c:80:27:f2:04:fd:cb:8b:5a:e5:39:37:1a:9c:11:70:41:c8: d0:d7:38:bb:94:f6:82:00:e7:6d:88:3b:1f:9d:85:cd:91:2e: 8d:52:21:c2:44:79:3e:a1:2c:88:19:9d:e1:61:19:fa:bf:ae: da:20:e8:18:ed:49:7d:2a:9d:64:6e:94:4e:b5:28:c8:e0:ee: 23:19:e9:ca:2a:d8:e8:74:fd:bc:9e:ba:2c:7a:2e:1b:8e:dc: a9:a7:6e:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbC0FHJDPOsdluI0AJX9+/CSIjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA3MjIxOTE2MThaFw0yNTA3MjYwNzE1MThaMDMxMTAvBgNV BAMTKDk2RjU5MDVFRDExRTgwQkZEMDk0MDgwQzc4MzdDNjJERTg0RDQ0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3pUHISKc+Kte9MIZBPE3cEsC rdITybuH308e94RzZ3G2zBy02wHe2fUyfX90Bx9GMDcpYoUBX1Em2W2nATSscqND JsvzxbkUUfnNoO4nAVAfjQdRYI9drgNMtUwJh3cN3/UKb3GAw530PIrTx8oHciah lYdoU8kEVmu6dXomuv/hZGilMfz+YhQ7B0wQdotpzcQqNBfTASAHdhO7q0UVR4Pr 43rejyJsfYvd9IEoITC125+gYgi27C7qzdYn0V7WITAYVvF+uunPc2G+aef0HHl0 EVLTSqnOv5c/gFaopkhuHAqlOVgelfIHd81SrUtbGei3ZIWWkPIxZBbSK5g5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvWQXtEegL/QlAgMeDfGLehNROcwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5QX8yStOhv1CRWadDiXp5fDwvDRCVQRZ3j xzWtL6Dt4LXXVPGAHAfqP2nwfHfNO7gayvEAfMgGlo7oGu45uMOc3A3YUd+36NzS IKIThdYUqQ6Be0f4dF5enBIDbgkAe1aBhlS+ZRBT+yVlaLGixD01VoCzmn9epPAQ AIYqEaNCkF94ayu3s+HR8I35XpTaAdygDKLNHcm0HbOvslm4wNQ8a4yAJ/IE/cuL WuU5NxqcEXBByNDXOLuU9oIA522IOx+dhc2RLo1SIcJEeT6hLIgZneFhGfq/rtog 6BjtSX0qnWRulE61KMjg7iMZ6coq2Oh0/byeuix6LhuO3Kmnbvo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:49:03 2025 by rpki-client