$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: 93jS1xSDbTPx8TKCOZkqRvIkAYjq4HLXqAGpgVezUNw= Subject key identifier: 6B:FC:10:59:05:E3:26:CC:3A:D4:58:65:A7:A0:60:09:A9:93:08:71 Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 02138CA0ADCD00A453BC19323C2989766F8DD55B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02DC Signing time: Wed 25 Mar 2026 15:51:45 +0000 Manifest this update: Wed 25 Mar 2026 15:46:45 +0000 Manifest next update: Sat 28 Mar 2026 17:31:45 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: HLjgyNt9tZU9OtPCA0uthE0ZfCpeljKBUIAJxFsDky0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:13:8c:a0:ad:cd:00:a4:53:bc:19:32:3c:29:89:76:6f:8d:d5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Mar 25 15:46:45 2026 GMT Not After : Mar 28 17:31:45 2026 GMT Subject: CN=6BFC105905E326CC3AD45865A7A06009A9930871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:77:1a:90:1c:86:54:d0:b3:b1:3d:f7:e9: 3f:42:98:c3:7b:8b:0f:45:d7:70:9a:03:5d:6e:eb: f5:fe:84:b1:f5:dd:67:41:da:59:09:14:30:52:e1: 93:10:46:69:a1:3b:76:e8:3c:c5:bd:44:d0:d6:97: fc:10:40:60:1e:30:9e:1a:c3:d4:fc:fe:fa:b3:a8: 61:0f:0d:a5:9c:33:c4:d2:f9:89:45:61:2c:a8:ef: a4:e5:5e:2f:b1:72:97:fd:52:75:5e:02:da:bc:51: d0:45:41:ad:be:72:dc:15:2b:68:c3:4e:cd:bf:d8: a4:08:65:a6:b5:a8:69:6a:10:4a:c2:32:3f:fa:87: fb:bb:e6:db:ea:3e:5b:55:5e:4b:77:ae:7a:a1:83: aa:86:65:c2:2e:aa:89:3e:86:f4:52:bb:b7:6d:27: b6:6b:1c:4a:2c:26:81:36:d1:ff:77:8e:82:06:c9: 18:b7:55:91:d9:47:75:57:c7:03:5a:35:34:26:7a: cf:9f:ec:61:37:30:80:08:b5:67:fc:84:c3:e4:4f: cf:0b:30:6a:c2:40:47:de:54:44:21:17:6b:73:c4: 61:d3:a5:49:ed:99:48:4c:13:d7:45:fb:69:44:02: 5c:88:05:27:28:a8:c1:ef:92:4c:58:9e:ae:ac:7a: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:10:59:05:E3:26:CC:3A:D4:58:65:A7:A0:60:09:A9:93:08:71 X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:72:dd:90:26:57:2b:20:15:14:c0:12:5e:ef:56:6b:9f:2f: f0:cf:e4:f4:a8:68:c4:16:86:91:05:7f:1b:9c:b8:f7:ff:0e: e3:d1:c3:46:9b:f6:e5:32:79:ca:1f:d6:3b:40:c3:c8:92:f3: b9:2e:33:d2:2a:8a:b3:ce:73:84:83:0e:b0:1e:42:12:c5:a2: 99:0b:46:23:c5:f5:df:93:e5:74:a0:62:01:b7:c8:48:ae:93: 86:9e:c0:dd:58:19:b6:b9:06:67:7d:78:6e:2b:94:90:e7:31: 5d:91:25:45:8c:2c:80:f6:61:2d:3b:16:f9:1b:15:b3:0d:6d: 3c:c2:62:21:7f:f9:b4:e3:36:1a:db:26:d9:52:2c:9f:ea:8a: 25:38:0e:b9:94:b4:8d:eb:af:79:a8:56:3a:c6:9c:be:08:2f: 02:94:25:b3:33:59:95:60:b9:8b:8b:a0:7d:e2:7c:11:cb:5e: 25:59:4f:77:91:23:35:5b:1e:d6:9f:84:65:93:67:c2:69:a1: b8:7d:fb:59:a5:17:24:ef:90:16:8f:55:25:c5:bb:7b:83:03: 9a:a0:cf:a8:77:07:51:8c:c6:1b:72:08:47:10:54:e7:2a:ad: d2:ad:5f:1f:33:8f:b1:01:f7:3e:35:d7:4a:16:f6:41:6d:8f: 33:5a:34:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhOMoK3NAKRTvBkyPCmJdm+N1VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNjAzMjUxNTQ2NDVaFw0yNjAzMjgxNzMxNDVaMDMxMTAvBgNV BAMTKDZCRkMxMDU5MDVFMzI2Q0MzQUQ0NTg2NUE3QTA2MDA5QTk5MzA4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1HcakByGVNCzsT336T9CmMN7 iw9F13CaA11u6/X+hLH13WdB2lkJFDBS4ZMQRmmhO3boPMW9RNDWl/wQQGAeMJ4a w9T8/vqzqGEPDaWcM8TS+YlFYSyo76TlXi+xcpf9UnVeAtq8UdBFQa2+ctwVK2jD Ts2/2KQIZaa1qGlqEErCMj/6h/u75tvqPltVXkt3rnqhg6qGZcIuqok+hvRSu7dt J7ZrHEosJoE20f93joIGyRi3VZHZR3VXxwNaNTQmes+f7GE3MIAItWf8hMPkT88L MGrCQEfeVEQhF2tzxGHTpUntmUhME9dF+2lEAlyIBScoqMHvkkxYnq6sej4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/wQWQXjJsw61Fhlp6BgCamTCHEwHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRy3ZAmVysgFRTAEl7vVmufL/DP5PSoaMQW hpEFfxucuPf/DuPRw0ab9uUyecof1jtAw8iS87kuM9IqirPOc4SDDrAeQhLFopkL RiPF9d+T5XSgYgG3yEiuk4aewN1YGba5Bmd9eG4rlJDnMV2RJUWMLID2YS07Fvkb FbMNbTzCYiF/+bTjNhrbJtlSLJ/qiiU4DrmUtI3rr3moVjrGnL4ILwKUJbMzWZVg uYuLoH3ifBHLXiVZT3eRIzVbHtafhGWTZ8Jpobh9+1mlFyTvkBaPVSXFu3uDA5qg z6h3B1GMxhtyCEcQVOcqrdKtXx8zj7EB9z4110oW9kFtjzNaNMs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:44 2026 by rpki-client