$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: GhsSsFl2+faaHks2a8KMdjiOwmktKzkvuKcfZdtpy3o= Subject key identifier: 00:40:D3:BA:D8:AC:7C:A6:D3:21:D8:99:F2:B6:59:3F:90:6C:02:65 Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 1B2FE10EA2CFF61BC7E9C8F35640C8AD009612CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 03:40:50 +0000 Manifest this update: Wed 25 Mar 2026 03:35:50 +0000 Manifest next update: Sat 28 Mar 2026 05:58:50 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: O8v2UPPua34zLVuz0b1YRi55ZI10ZETxRrNTn/mwAS8=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2f:e1:0e:a2:cf:f6:1b:c7:e9:c8:f3:56:40:c8:ad:00:96:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Mar 25 03:35:50 2026 GMT Not After : Mar 28 05:58:50 2026 GMT Subject: CN=0040D3BAD8AC7CA6D321D899F2B6593F906C0265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:fd:3b:77:0e:69:34:7d:7c:14:43:b8:3c: 20:0e:32:cb:e9:91:67:79:eb:d8:27:35:9d:b2:cc: f7:54:85:a8:42:d9:b6:26:b0:66:92:c2:6f:66:ab: c1:b6:4d:9e:b7:58:d0:4a:fa:52:17:83:03:ec:73: bd:6d:da:5d:bd:a7:3f:a3:5d:2c:4f:8f:68:43:5b: 26:e7:f5:47:c6:2d:8d:76:11:84:4f:8d:18:aa:f8: f1:a8:7c:7b:a0:af:d6:60:45:36:13:9b:8b:a5:11: e0:88:79:32:e0:85:43:24:4d:74:54:e8:ba:fd:0e: f3:3d:48:90:cf:74:30:f4:ac:8b:54:bb:5a:e0:fe: 48:11:17:ca:d0:a8:7f:d4:ac:e1:09:9b:97:21:a7: ca:f0:61:1b:7d:c9:dd:7c:c4:dd:e6:8a:78:a3:96: 9f:38:59:50:2d:37:36:c4:03:da:a2:fe:a2:34:a5: 94:12:0f:1e:96:14:88:83:45:26:56:98:c9:3e:60: b1:ab:b1:4c:7a:78:95:c2:74:b3:3f:7e:81:43:0a: 05:0f:1a:2f:a9:8a:16:ad:2b:99:25:83:ca:46:24: 5e:a1:e8:27:4c:6b:0a:24:a7:1b:9f:c2:f7:c5:1c: b8:54:d7:d3:d5:be:48:b9:31:ac:05:69:ed:fe:8f: cf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:D3:BA:D8:AC:7C:A6:D3:21:D8:99:F2:B6:59:3F:90:6C:02:65 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:70:26:62:72:48:82:e4:d6:02:e4:5d:ae:68:5f:cc:17: 73:72:11:ad:5a:af:5b:ba:9d:43:18:38:08:cb:18:ac:fd:8d: a0:33:da:a5:cb:11:54:82:54:88:77:9e:c3:d7:e1:c4:81:0e: 0e:4d:c5:0b:4c:97:da:ab:43:fb:49:d1:c2:ac:fd:60:3e:98: 49:16:b4:95:d1:20:38:a0:21:a5:92:10:d5:1c:7b:12:49:a2: b4:de:7e:2e:75:c8:bf:7c:ba:49:55:3f:d0:c1:07:eb:35:e3: c3:1a:e8:91:66:7b:06:82:43:7c:6d:c6:93:c9:d0:5f:00:f8: 94:df:fe:e7:5e:0e:6c:b2:12:8b:66:41:ec:42:ec:1f:4f:f8: 12:96:8d:16:fb:39:b0:e3:60:ab:f3:f3:b9:46:36:bd:71:3d: ec:98:8e:13:25:a1:be:9e:d3:e3:b0:71:de:b4:a1:f9:8c:a6: 97:89:14:4b:cc:d5:b0:07:9e:d2:ec:45:63:6d:42:57:35:7c: 5b:0f:33:dc:dd:d7:3e:a8:7a:ab:fd:3e:47:a4:a4:f3:d3:87: 66:5b:e7:62:53:c7:0a:9d:90:ca:d8:71:16:64:6c:90:92:91: 4c:5a:13:81:14:18:37:58:58:aa:9a:53:ad:91:e6:4a:98:ba: ab:15:13:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGy/hDqLP9hvH6cjzVkDIrQCWEsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNjAzMjUwMzM1NTBaFw0yNjAzMjgwNTU4NTBaMDMxMTAvBgNV BAMTKDAwNDBEM0JBRDhBQzdDQTZEMzIxRDg5OUYyQjY1OTNGOTA2QzAyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCka/07dw5pNH18FEO4PCAOMsvp kWd569gnNZ2yzPdUhahC2bYmsGaSwm9mq8G2TZ63WNBK+lIXgwPsc71t2l29pz+j XSxPj2hDWybn9UfGLY12EYRPjRiq+PGofHugr9ZgRTYTm4ulEeCIeTLghUMkTXRU 6Lr9DvM9SJDPdDD0rItUu1rg/kgRF8rQqH/UrOEJm5chp8rwYRt9yd18xN3minij lp84WVAtNzbEA9qi/qI0pZQSDx6WFIiDRSZWmMk+YLGrsUx6eJXCdLM/foFDCgUP Gi+pihatK5klg8pGJF6h6CdMawokpxufwvfFHLhU19PVvki5MawFae3+j8/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEDTutisfKbTIdiZ8rZZP5BsAmUwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/3cCZickiC5NYC5F2uaF/MF3NyEa1ar1u6 nUMYOAjLGKz9jaAz2qXLEVSCVIh3nsPX4cSBDg5NxQtMl9qrQ/tJ0cKs/WA+mEkW tJXRIDigIaWSENUcexJJorTefi51yL98uklVP9DBB+s148Ma6JFmewaCQ3xtxpPJ 0F8A+JTf/udeDmyyEotmQexC7B9P+BKWjRb7ObDjYKvz87lGNr1xPeyYjhMlob6e 0+Owcd60ofmMppeJFEvM1bAHntLsRWNtQlc1fFsPM9zd1z6oeqv9PkekpPPTh2Zb 52JTxwqdkMrYcRZkbJCSkUxaE4EUGDdYWKqaU62R5kqYuqsVE8o= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:21 2026 by rpki-client