$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: wGrRfwc1KelSC0O1C4PW/1GNqa8R7eSxqMCU9EnD5Cs= Subject key identifier: 33:CC:AC:9E:F8:C0:33:C1:CE:97:0E:BC:1C:20:6C:2D:32:22:BA:F5 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 2957B0555BD56EB67E11ED88D606A91A7A5F6A91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0141 Signing time: Wed 25 Mar 2026 03:12:35 +0000 Manifest this update: Wed 25 Mar 2026 03:07:35 +0000 Manifest next update: Sat 28 Mar 2026 11:25:35 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: zkuKMztQVpFbP+vk6UzTgul838fsU3IH99wSxRmRYwI=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=) 3: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: OLlIPWg/PVdzuc0FHLc/eBvQvEp2qGy7VbBx0k0ZTak=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:57:b0:55:5b:d5:6e:b6:7e:11:ed:88:d6:06:a9:1a:7a:5f:6a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Mar 25 03:07:35 2026 GMT Not After : Mar 28 11:25:35 2026 GMT Subject: CN=33CCAC9EF8C033C1CE970EBC1C206C2D3222BAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:bd:fc:1d:19:9a:2a:c5:bc:ac:9f:f0:ae: 43:4d:c8:2e:90:e3:62:96:9e:3b:b6:f5:c6:ef:bc: 6c:61:a6:09:95:80:70:82:6b:c5:3c:2c:d1:46:ad: 22:46:5f:df:e0:f3:d7:6e:d0:32:5a:db:ab:fc:71: d1:f6:61:01:55:ce:04:3f:72:89:1a:ef:a6:5b:97: 56:9a:cc:ca:6c:07:02:80:de:7c:76:86:3b:4e:57: 77:4a:52:82:34:e7:f2:63:f2:77:86:0e:93:f8:d6: 12:8f:33:5c:59:bc:58:07:cb:c2:08:de:2a:85:22: 48:51:d5:e1:c4:4b:dd:ee:5a:4b:f7:3b:c3:09:f2: 34:ec:6f:90:d6:3b:eb:94:f9:fd:83:86:b5:b4:1b: 3c:e1:ac:88:c5:aa:31:7f:46:e3:a3:58:03:6a:bf: ba:92:6e:ce:9d:c8:42:b9:bd:7f:f5:9f:5a:4e:d5: 07:0c:82:58:97:e0:6f:52:48:a0:f4:3e:55:c5:d7: e0:d4:42:7e:23:f5:a8:2a:a5:ff:07:0b:61:d7:d2: ac:0d:b1:27:e0:15:a5:80:06:f8:da:3f:50:fd:7b: a5:d2:57:29:04:08:54:6f:a0:ef:fe:1e:8d:bc:c0: 0e:c3:17:4f:b0:07:b2:c9:84:f5:ac:83:06:42:0e: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:AC:9E:F8:C0:33:C1:CE:97:0E:BC:1C:20:6C:2D:32:22:BA:F5 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:c3:1e:94:1f:38:eb:3b:17:96:39:4a:f6:c4:ad:31:23: 81:8c:69:4c:2c:5e:50:ae:f7:66:ff:bd:5a:21:3f:c6:bd:32: 83:80:11:e6:5d:8a:24:b1:79:43:37:26:0c:38:50:68:e5:d8: 4f:94:60:34:1a:2a:d2:08:24:21:f0:bd:4f:f1:ae:95:24:71: 57:b0:03:db:19:71:c5:e7:c6:45:70:ef:b1:a3:26:43:f0:5c: d3:21:c0:68:a6:56:f9:94:00:48:6c:d5:73:6d:9d:1c:b4:53: 1c:34:58:5f:d9:b2:ac:0f:6e:25:86:63:68:84:70:da:b3:2f: 65:bf:fb:17:b6:1a:10:8b:68:f0:1c:88:c9:8e:39:d0:95:14: 62:b1:8a:d4:ce:3e:2c:dd:ad:6c:fe:72:8c:cc:82:59:a5:f8: cf:5d:fa:c8:23:f3:a3:9d:da:ae:5e:f9:72:de:ab:d4:ff:3d: 01:14:28:c8:f3:f1:01:54:93:ab:8d:2b:1d:e7:1a:95:bf:4b: d2:ad:04:32:4e:c7:4f:14:8c:5b:3f:0f:5c:0c:cf:36:36:74: f6:74:63:5f:c9:e8:c3:2a:a7:1e:e6:c4:14:2d:86:e6:b9:fa: 09:08:85:04:af:6c:d5:7c:ec:90:5c:8a:e9:14:b2:c3:80:2f: ad:4b:62:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVewVVvVbrZ+Ee2I1gapGnpfapEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjAzMjUwMzA3MzVaFw0yNjAzMjgxMTI1MzVaMDMxMTAvBgNV BAMTKDMzQ0NBQzlFRjhDMDMzQzFDRTk3MEVCQzFDMjA2QzJEMzIyMkJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H738HRmaKsW8rJ/wrkNNyC6Q 42KWnju29cbvvGxhpgmVgHCCa8U8LNFGrSJGX9/g89du0DJa26v8cdH2YQFVzgQ/ coka76Zbl1aazMpsBwKA3nx2hjtOV3dKUoI05/Jj8neGDpP41hKPM1xZvFgHy8II 3iqFIkhR1eHES93uWkv3O8MJ8jTsb5DWO+uU+f2DhrW0GzzhrIjFqjF/RuOjWANq v7qSbs6dyEK5vX/1n1pO1QcMgliX4G9SSKD0PlXF1+DUQn4j9agqpf8HC2HX0qwN sSfgFaWABvjaP1D9e6XSVykECFRvoO/+Ho28wA7DF0+wB7LJhPWsgwZCDsxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8ysnvjAM8HOlw68HCBsLTIiuvUwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjgwx6UHzjrOxeWOUr2xK0xI4GMaUwsXlCu 92b/vVohP8a9MoOAEeZdiiSxeUM3Jgw4UGjl2E+UYDQaKtIIJCHwvU/xrpUkcVew A9sZccXnxkVw77GjJkPwXNMhwGimVvmUAEhs1XNtnRy0Uxw0WF/ZsqwPbiWGY2iE cNqzL2W/+xe2GhCLaPAciMmOOdCVFGKxitTOPizdrWz+cozMglml+M9d+sgj86Od 2q5e+XLeq9T/PQEUKMjz8QFUk6uNKx3nGpW/S9KtBDJOx08UjFs/D1wMzzY2dPZ0 Y1/J6MMqpx7mxBQthua5+gkIhQSvbNV87JBciukUssOAL61LYuk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:29 2026 by rpki-client