$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: 0gUJhCmauDg6LtO0TRu0n7L5QUSS7QiFW3xu2wznMQk= Subject key identifier: 69:A4:88:2F:B3:72:BA:8B:CB:36:1A:A1:A6:C9:BD:61:5B:1F:82:FB Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 40A859DD68BB47883097B5390818445F62B5B6E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 00:40:59 +0000 Manifest this update: Wed 25 Mar 2026 00:35:59 +0000 Manifest next update: Sat 28 Mar 2026 10:24:59 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: /4dfZEAkfP3D8tobTVbViy1XKojj0CjpkUSHp6q7CAY=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a8:59:dd:68:bb:47:88:30:97:b5:39:08:18:44:5f:62:b5:b6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Mar 25 00:35:59 2026 GMT Not After : Mar 28 10:24:59 2026 GMT Subject: CN=69A4882FB372BA8BCB361AA1A6C9BD615B1F82FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ad:bb:66:64:a2:e4:15:8f:3f:31:9b:9b:c4: 0e:3d:b8:f5:25:0b:10:72:fb:cf:e7:34:56:25:c0: dd:24:8f:4b:e0:85:25:9c:0d:0a:c1:4f:7f:fc:1f: ae:58:68:99:c5:d9:30:3d:04:b0:11:d6:43:ff:ef: d4:3d:d9:06:c8:cd:98:41:32:52:22:aa:7f:d1:59: a5:09:15:bc:1c:5a:73:5d:38:66:33:4c:04:d4:d0: 37:0e:6c:eb:83:b1:2a:97:f4:43:df:62:db:79:ac: b2:0b:e4:0d:d1:4a:61:db:ce:e7:9c:c9:3f:77:0d: a8:c6:ba:55:c9:8b:54:a9:d3:b3:44:7d:d3:0d:1d: dc:1f:37:91:b2:4f:6e:b5:91:28:ae:44:9c:bd:28: d6:07:d1:a3:d0:ce:8a:6a:64:14:4b:92:22:13:3b: 57:86:44:34:e9:65:2f:f1:7c:84:0c:74:a7:f4:3b: a2:61:fa:8d:97:04:84:d5:ff:a9:da:8b:99:15:19: f9:84:da:c9:e0:c6:bc:c0:db:16:ed:b1:26:af:19: 10:3d:c7:e3:d6:91:49:2b:a3:60:7f:95:74:59:9d: 29:c5:f9:b3:86:f2:c6:59:73:6c:4d:f2:40:44:50: 8a:ff:87:68:8e:96:2a:fb:36:86:32:8b:94:0d:75: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:88:2F:B3:72:BA:8B:CB:36:1A:A1:A6:C9:BD:61:5B:1F:82:FB X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1d:c7:36:6c:fb:31:52:9f:99:ed:49:9b:ca:97:28:01:44: 35:50:64:ed:98:d1:08:84:c0:b1:11:b7:02:88:68:27:87:bb: d4:39:91:dc:f8:42:d1:a7:a3:03:34:68:2a:cf:31:be:e7:68: e1:4b:cf:13:82:f4:ac:49:9c:0a:3f:f2:d3:8a:ad:7f:b6:ba: 2b:b9:dd:02:a7:63:c0:6f:7a:23:3c:1f:fb:8d:96:44:4f:72: e6:37:86:9b:78:7b:f3:1a:e1:3d:cc:09:b2:91:6e:7a:44:4f: 2b:1d:eb:d8:16:52:3b:00:d8:8e:0f:90:42:e0:6f:88:74:53: 7d:ed:f7:b9:25:18:95:02:b5:19:6e:b3:54:43:32:d1:c8:87: 86:92:0d:a4:84:07:09:30:aa:c0:87:bb:a7:41:eb:22:d7:66: 99:b2:e3:9f:6a:f3:e5:88:4c:73:c1:a8:e5:fd:b1:e8:6b:95: d8:73:f8:a5:06:b9:09:9f:84:40:85:96:ab:5f:61:64:24:3a: 8f:99:21:e4:71:57:98:08:0b:0f:77:e0:01:ee:98:32:54:2f: 4b:fc:dc:fa:46:78:58:c5:a1:92:73:96:cc:69:a1:d7:25:17: 73:35:49:3c:9d:95:de:af:83:6d:29:e5:17:3c:a1:4d:10:b4: 52:7d:49:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKhZ3Wi7R4gwl7U5CBhEX2K1tucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNjAzMjUwMDM1NTlaFw0yNjAzMjgxMDI0NTlaMDMxMTAvBgNV BAMTKDY5QTQ4ODJGQjM3MkJBOEJDQjM2MUFBMUE2QzlCRDYxNUIxRjgyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrbtmZKLkFY8/MZubxA49uPUl CxBy+8/nNFYlwN0kj0vghSWcDQrBT3/8H65YaJnF2TA9BLAR1kP/79Q92QbIzZhB MlIiqn/RWaUJFbwcWnNdOGYzTATU0DcObOuDsSqX9EPfYtt5rLIL5A3RSmHbzuec yT93DajGulXJi1Sp07NEfdMNHdwfN5GyT261kSiuRJy9KNYH0aPQzopqZBRLkiIT O1eGRDTpZS/xfIQMdKf0O6Jh+o2XBITV/6nai5kVGfmE2sngxrzA2xbtsSavGRA9 x+PWkUkro2B/lXRZnSnF+bOG8sZZc2xN8kBEUIr/h2iOlir7NoYyi5QNddcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaaSIL7NyuovLNhqhpsm9YVsfgvswHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEdxzZs+zFSn5ntSZvKlygBRDVQZO2Y0QiE wLERtwKIaCeHu9Q5kdz4QtGnowM0aCrPMb7naOFLzxOC9KxJnAo/8tOKrX+2uiu5 3QKnY8BveiM8H/uNlkRPcuY3hpt4e/Ma4T3MCbKRbnpETysd69gWUjsA2I4PkELg b4h0U33t97klGJUCtRlus1RDMtHIh4aSDaSEBwkwqsCHu6dB6yLXZpmy459q8+WI THPBqOX9sehrldhz+KUGuQmfhECFlqtfYWQkOo+ZIeRxV5gICw934AHumDJUL0v8 3PpGeFjFoZJzlsxpodclF3M1STydld6vg20p5Rc8oU0QtFJ9SbY= -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:09 2026 by rpki-client