$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: RRw/bdR8MaC418w5CSbBH5GCaDTeT8NPZtWmtqqT5p4= Subject key identifier: 54:64:BA:21:BE:BD:CB:04:D9:29:60:E9:1B:17:9A:55:8B:25:1F:98 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 23D260823A2D988F7F2E65E0340D5F2858426933 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0259 Signing time: Wed 25 Mar 2026 09:41:09 +0000 Manifest this update: Wed 25 Mar 2026 09:36:09 +0000 Manifest next update: Sat 28 Mar 2026 12:15:09 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: spnGlzzjcGr6NxVA2XA+FwYkZW3wBQsgYdUVaMjKl8A=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d2:60:82:3a:2d:98:8f:7f:2e:65:e0:34:0d:5f:28:58:42:69:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Mar 25 09:36:09 2026 GMT Not After : Mar 28 12:15:09 2026 GMT Subject: CN=5464BA21BEBDCB04D92960E91B179A558B251F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:b5:88:15:82:54:04:be:cd:da:84:a0:70: c8:47:a2:53:17:c2:d5:35:76:80:c8:3b:8a:5f:04: a3:d3:6b:a4:30:eb:d2:ae:fc:70:52:5b:2c:a2:2e: c6:43:45:5d:59:a4:79:c9:9b:f1:ef:6f:9f:76:b0: de:5c:ad:ed:72:47:bb:c0:82:b9:8d:0f:f8:35:e2: 95:b0:cc:2a:b9:32:3d:30:d7:c7:6d:e3:bf:2c:98: f8:e4:a3:6c:26:4a:66:bb:2d:d2:e0:d1:97:6b:96: 97:be:76:1b:14:80:cc:df:a0:2d:c8:b3:41:07:3d: fe:c6:a0:47:b4:15:45:76:c1:64:d0:49:3a:6e:f0: 5c:41:44:f3:b4:fd:71:56:32:5b:80:49:00:70:f9: d2:1a:6d:7f:0d:ba:c1:86:3a:c0:f0:eb:07:a7:f2: 91:4e:ef:34:6b:f7:79:b6:05:f8:67:ed:34:09:e0: 16:52:23:3b:c4:80:a0:12:93:a2:22:9e:99:e0:d9: 54:25:88:51:d7:54:09:3c:06:d5:1d:ac:ec:77:a8: 0a:58:7b:f3:22:9a:70:ea:84:f5:21:18:31:0e:91: 30:b0:eb:2d:dc:53:ac:9d:31:be:e0:c9:ec:13:89: c5:9d:51:79:a8:f9:f9:9b:e1:22:91:3a:5d:84:c6: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:64:BA:21:BE:BD:CB:04:D9:29:60:E9:1B:17:9A:55:8B:25:1F:98 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:95:3e:23:5a:8f:27:52:67:3d:23:79:d1:3b:56:e8:6b:66: a1:af:d1:0d:d0:53:93:9c:65:56:d4:0d:23:ec:ef:5d:31:85: 1f:49:78:27:d9:83:42:11:fd:cc:87:76:f2:05:f3:cb:a3:44: f2:97:cb:91:65:15:27:d9:20:47:53:5f:cd:d7:37:1d:56:79: 5a:90:dd:ed:1b:88:4a:de:5f:91:0f:e3:3c:81:26:d7:85:f0: 1f:f4:d3:49:33:94:c9:00:ce:0c:94:15:c3:f3:4a:14:74:74: 04:36:80:5a:7a:79:05:08:cb:01:2b:e9:20:36:c1:df:57:55: ec:0a:b5:6e:5d:b5:2f:87:42:b5:53:c0:5e:f7:33:c9:02:17: 33:fc:27:2e:83:cc:26:bb:65:eb:08:5e:31:ab:a3:80:62:bf: d8:c6:8b:1b:89:33:6c:92:c9:87:fe:cc:5f:3c:31:97:2c:3c: 0f:ee:82:32:d3:e1:99:79:be:d8:c4:b8:b7:96:b7:4a:c0:dc: 5e:86:93:3f:28:d4:b3:c9:58:2c:14:63:67:4e:9c:b6:05:02: 2e:b8:86:4e:68:b3:60:b4:6f:37:fb:4a:2a:48:c3:79:f5:6d: 04:77:c7:3a:ec:8c:29:69:ed:13:08:33:37:0c:38:50:73:80: c4:c1:7e:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9JggjotmI9/LmXgNA1fKFhCaTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNjAzMjUwOTM2MDlaFw0yNjAzMjgxMjE1MDlaMDMxMTAvBgNV BAMTKDU0NjRCQTIxQkVCRENCMDREOTI5NjBFOTFCMTc5QTU1OEIyNTFGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnbWIFYJUBL7N2oSgcMhHolMX wtU1doDIO4pfBKPTa6Qw69Ku/HBSWyyiLsZDRV1ZpHnJm/Hvb592sN5cre1yR7vA grmND/g14pWwzCq5Mj0w18dt478smPjko2wmSma7LdLg0Zdrlpe+dhsUgMzfoC3I s0EHPf7GoEe0FUV2wWTQSTpu8FxBRPO0/XFWMluASQBw+dIabX8NusGGOsDw6wen 8pFO7zRr93m2Bfhn7TQJ4BZSIzvEgKASk6Iinpng2VQliFHXVAk8BtUdrOx3qApY e/MimnDqhPUhGDEOkTCw6y3cU6ydMb7gyewTicWdUXmo+fmb4SKROl2ExjwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGS6Ib69ywTZKWDpGxeaVYslH5gwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmVPiNajydSZz0jedE7VuhrZqGv0Q3QU5Oc ZVbUDSPs710xhR9JeCfZg0IR/cyHdvIF88ujRPKXy5FlFSfZIEdTX83XNx1WeVqQ 3e0biEreX5EP4zyBJteF8B/000kzlMkAzgyUFcPzShR0dAQ2gFp6eQUIywEr6SA2 wd9XVewKtW5dtS+HQrVTwF73M8kCFzP8Jy6DzCa7ZesIXjGro4Biv9jGixuJM2yS yYf+zF88MZcsPA/ugjLT4Zl5vtjEuLeWt0rA3F6Gkz8o1LPJWCwUY2dOnLYFAi64 hk5os2C0bzf7SipIw3n1bQR3xzrsjClp7RMIMzcMOFBzgMTBflQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:17 2026 by rpki-client