$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: TLU98rVdx0Iz+ytu7mM5lUS/3bQYbIolvIqvU3dRfQc= Subject key identifier: A2:B3:64:B1:82:5A:20:C9:60:21:58:B7:A7:77:F4:D7:5B:E9:CF:14 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 5C933BFA971E9F2740F977655636435865C85EC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0175 Signing time: Wed 25 Mar 2026 10:12:11 +0000 Manifest this update: Wed 25 Mar 2026 10:07:11 +0000 Manifest next update: Sat 28 Mar 2026 21:14:11 +0000 Files and hashes: 1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 2: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: SIgxKpsbLRpQSt4/WqquHuaCkJxV9PrEXOAEV/18bOI=) 3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:93:3b:fa:97:1e:9f:27:40:f9:77:65:56:36:43:58:65:c8:5e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Mar 25 10:07:11 2026 GMT Not After : Mar 28 21:14:11 2026 GMT Subject: CN=A2B364B1825A20C9602158B7A777F4D75BE9CF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:be:6e:59:33:c6:1f:e8:66:7a:25:e1:3a: 67:8f:4f:62:45:af:fe:76:26:f3:da:98:eb:be:e8: 7c:9a:20:74:3b:66:97:0f:9d:3f:50:df:79:d2:db: 18:c6:a4:87:c7:f7:a8:5a:f3:4a:62:a5:c2:ef:2b: 68:a8:5d:34:ad:26:16:56:5c:37:4b:e7:ad:08:bc: 46:ed:c0:b4:3c:7b:9b:e3:ae:e7:0a:19:07:ab:d3: 46:4f:ac:e6:4a:40:9e:f0:77:f7:09:9c:d4:fc:e0: 90:56:54:5f:18:a0:c4:64:b0:1e:5f:ae:48:64:4f: b4:f9:94:7c:43:ee:f1:f3:a0:9f:93:76:60:29:33: 74:06:5e:df:ea:a4:1b:03:92:06:8e:1c:d1:74:a4: 34:69:8e:49:a4:ec:f4:57:fc:85:10:f6:ed:c5:6a: 24:da:ae:d9:4f:8a:a2:a5:b9:98:c5:61:33:f6:3b: 13:c8:b1:cd:7a:13:20:f2:b9:34:c4:ab:6f:4d:ff: 85:1c:8a:65:a1:34:c0:65:a7:fd:74:1c:e6:c1:12: 4c:62:41:76:00:bd:ed:3b:ff:dd:d9:d8:1e:73:c5: e1:00:4a:9c:c6:a5:45:0f:99:89:8b:b9:b5:79:49: a4:76:74:36:e9:01:5d:74:bd:d4:e8:b9:b7:50:db: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:64:B1:82:5A:20:C9:60:21:58:B7:A7:77:F4:D7:5B:E9:CF:14 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:30:d8:b9:9f:ec:b7:20:b0:d8:78:65:65:3e:8a:d0:ff: 1e:be:a1:9f:ce:8c:e3:6a:1c:5a:fc:d3:f7:64:0b:33:97:7c: 82:67:10:c9:ca:3c:57:be:d2:4a:18:2b:75:86:90:a3:af:b0: 87:61:75:16:c8:fc:e1:35:dc:60:8a:70:c6:72:c7:f9:a8:8b: 2c:6e:f8:f9:ea:6e:af:69:81:82:5c:97:54:d0:97:a9:fb:62: a3:7b:1d:48:ea:6f:72:a8:c0:5f:14:a4:3d:ab:ca:94:9f:0e: d5:08:19:54:91:b6:56:9c:35:87:da:34:b1:63:92:fd:46:bf: 28:24:46:68:9d:48:f7:d2:0c:c4:e7:bf:1d:20:49:10:66:a0: e9:b6:f0:2e:5d:8d:67:c0:5e:ea:3b:d2:bf:97:8a:47:b4:52: 9f:cb:66:6d:37:04:92:2a:a5:62:b5:21:77:0b:85:79:c2:ad: 55:7a:b2:a4:9e:19:5d:6b:a0:0b:21:04:ee:98:f0:7b:b3:7c: 23:65:a3:08:37:c7:09:4a:4d:ba:c7:99:b7:38:08:e6:3a:e6: 30:75:78:00:55:3c:45:90:62:95:42:cd:6e:00:91:98:ca:ad: 95:a6:68:61:1c:c1:8b:28:61:42:73:fe:c2:63:aa:65:de:30: 09:ae:09:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJM7+pcenydA+XdlVjZDWGXIXskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNjAzMjUxMDA3MTFaFw0yNjAzMjgyMTE0MTFaMDMxMTAvBgNV BAMTKEEyQjM2NEIxODI1QTIwQzk2MDIxNThCN0E3NzdGNEQ3NUJFOUNGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1b5uWTPGH+hmeiXhOmePT2JF r/52JvPamOu+6HyaIHQ7ZpcPnT9Q33nS2xjGpIfH96ha80pipcLvK2ioXTStJhZW XDdL560IvEbtwLQ8e5vjrucKGQer00ZPrOZKQJ7wd/cJnNT84JBWVF8YoMRksB5f rkhkT7T5lHxD7vHzoJ+TdmApM3QGXt/qpBsDkgaOHNF0pDRpjkmk7PRX/IUQ9u3F aiTartlPiqKluZjFYTP2OxPIsc16EyDyuTTEq29N/4UcimWhNMBlp/10HObBEkxi QXYAve07/93Z2B5zxeEASpzGpUUPmYmLubV5SaR2dDbpAV10vdToubdQ2yULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUorNksYJaIMlgIVi3p3f011vpzxQwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvaMNi5n+y3ILDYeGVlPorQ/x6+oZ/OjONq HFr80/dkCzOXfIJnEMnKPFe+0koYK3WGkKOvsIdhdRbI/OE13GCKcMZyx/moiyxu +Pnqbq9pgYJcl1TQl6n7YqN7HUjqb3KowF8UpD2rypSfDtUIGVSRtlacNYfaNLFj kv1GvygkRmidSPfSDMTnvx0gSRBmoOm28C5djWfAXuo70r+Xike0Up/LZm03BJIq pWK1IXcLhXnCrVV6sqSeGV1roAshBO6Y8HuzfCNlowg3xwlKTbrHmbc4COY65jB1 eABVPEWQYpVCzW4AkZjKrZWmaGEcwYsoYUJz/sJjqmXeMAmuCRM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:23 2026 by rpki-client