$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: n+wDUtMWZlVHUfLpY1qlFzVQVgkRZYm0ccdYpTdkEQA= Subject key identifier: DA:48:F2:68:43:AF:39:72:AA:24:48:DC:82:43:9F:E3:60:69:CA:BD Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 35DD8F23CA97791B54963AE7168278A7F4797226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 0209 Signing time: Wed 25 Mar 2026 15:32:30 +0000 Manifest this update: Wed 25 Mar 2026 15:27:30 +0000 Manifest next update: Sat 28 Mar 2026 17:11:30 +0000 Files and hashes: 1: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: MvNAxDryuDvdC/WDLR5YnHjUvZvTh0MkWzmjs/aLUl4=) 2: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: mw/3oGCmZT108E8Q0g0zeYGFegTybaMOkZzsMlFtGQ8=) 3: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 4: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: QMffE6ZO0oIBD+UPOSpX/URye6oY0aJnDmCuAJpKngs=) 5: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:dd:8f:23:ca:97:79:1b:54:96:3a:e7:16:82:78:a7:f4:79:72:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Mar 25 15:27:30 2026 GMT Not After : Mar 28 17:11:30 2026 GMT Subject: CN=DA48F26843AF3972AA2448DC82439FE36069CABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:0b:44:d6:c0:db:87:71:70:0e:95:39:bf: 36:42:8c:95:6f:66:73:d0:9a:66:6c:c3:48:79:7b: 32:f3:7c:eb:ac:38:de:3b:d2:d5:29:0f:d1:55:08: 73:c7:08:43:16:9f:40:14:9a:da:af:61:ae:23:d4: 07:27:4d:82:c2:96:b1:c9:8e:4f:d9:db:c5:bb:9d: 06:26:1b:c3:8c:75:2b:64:0b:84:70:31:85:38:c3: db:98:5c:cf:c4:04:d6:9f:ea:d1:62:58:98:06:f2: a4:5b:99:b6:24:0f:84:f4:88:2a:a6:72:f4:cd:ae: f4:70:91:15:dc:dc:7f:63:97:08:23:6c:1f:fd:73: bd:90:22:82:a1:89:da:2f:21:6b:4b:14:25:57:ef: 09:1a:8f:ae:95:17:8d:fb:22:a2:ae:d5:e1:c9:4e: 4b:3c:dc:9d:db:fd:9c:04:9b:80:6c:04:8e:18:7b: 57:99:79:eb:fc:db:09:69:42:4a:d0:db:f0:11:46: 9e:f4:18:50:d9:62:6f:69:b0:7c:35:df:73:a8:64: c0:ac:77:ff:0d:c7:76:ce:d8:b0:9c:83:55:00:e2: 84:53:b5:b6:6a:58:42:87:aa:41:4b:05:12:6f:a4: d9:cc:09:75:6b:fc:32:05:97:88:a1:1c:25:46:69: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:F2:68:43:AF:39:72:AA:24:48:DC:82:43:9F:E3:60:69:CA:BD X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:0d:a8:d0:40:6b:b6:79:28:ea:ab:2b:c6:4e:38:74:4d: 07:aa:3a:ec:b6:56:4a:ec:6c:51:25:12:53:be:dd:c9:f4:86: f2:1f:56:c6:fc:a4:a7:4c:ff:88:b3:a7:ed:03:47:71:ef:8a: db:05:c4:23:53:70:63:34:8b:c9:ec:72:5a:e9:9d:31:87:16: 66:33:d2:12:3e:4b:85:5a:a7:6e:b3:21:50:88:43:6e:c3:67: 57:99:a0:3e:83:7d:76:e7:13:e2:98:fd:1d:de:07:c2:b4:05: e5:2f:8e:0c:3c:23:74:c9:f2:da:29:9b:0e:32:68:51:20:b9: 13:54:47:2e:bf:77:dd:41:a8:ba:4c:7a:be:e5:d3:3d:2e:56: bb:ad:f8:cd:e4:2f:d9:46:0c:5d:8c:9d:07:1a:c3:cd:f7:66: a0:ae:d8:c4:07:42:de:25:b2:f1:e5:55:85:b0:30:05:6d:96: 6e:80:8c:b5:bf:ca:9c:91:03:94:70:95:6a:b6:48:ff:46:25: 0c:12:4a:98:72:97:97:e5:f6:08:53:88:fc:a9:df:45:d2:84: 64:cc:e2:8f:66:da:d6:f4:2c:fd:08:28:60:c7:87:00:90:4e: bd:ad:27:d3:2b:4c:d9:f8:da:81:c5:1b:f2:aa:6b:27:6b:40: 80:7c:3a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNd2PI8qXeRtUljrnFoJ4p/R5ciYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNjAzMjUxNTI3MzBaFw0yNjAzMjgxNzExMzBaMDMxMTAvBgNV BAMTKERBNDhGMjY4NDNBRjM5NzJBQTI0NDhEQzgyNDM5RkUzNjA2OUNBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1AtE1sDbh3FwDpU5vzZCjJVv ZnPQmmZsw0h5ezLzfOusON470tUpD9FVCHPHCEMWn0AUmtqvYa4j1AcnTYLClrHJ jk/Z28W7nQYmG8OMdStkC4RwMYU4w9uYXM/EBNaf6tFiWJgG8qRbmbYkD4T0iCqm cvTNrvRwkRXc3H9jlwgjbB/9c72QIoKhidovIWtLFCVX7wkaj66VF437IqKu1eHJ Tks83J3b/ZwEm4BsBI4Ye1eZeev82wlpQkrQ2/ARRp70GFDZYm9psHw133OoZMCs d/8Nx3bO2LCcg1UA4oRTtbZqWEKHqkFLBRJvpNnMCXVr/DIFl4ihHCVGaU3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kjyaEOvOXKqJEjcgkOf42Bpyr0wHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVODajQQGu2eSjqqyvGTjh0TQeqOuy2Vkrs bFElElO+3cn0hvIfVsb8pKdM/4izp+0DR3HvitsFxCNTcGM0i8nsclrpnTGHFmYz 0hI+S4Vap26zIVCIQ27DZ1eZoD6DfXbnE+KY/R3eB8K0BeUvjgw8I3TJ8topmw4y aFEguRNURy6/d91BqLpMer7l0z0uVrut+M3kL9lGDF2MnQcaw833ZqCu2MQHQt4l svHlVYWwMAVtlm6AjLW/ypyRA5RwlWq2SP9GJQwSSphyl5fl9ghTiPyp30XShGTM 4o9m2tb0LP0IKGDHhwCQTr2tJ9MrTNn42oHFG/KqaydrQIB8OpM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:13 2026 by rpki-client