$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: TZ2gdc3h1cWn/vLt9IIBifU+OBxwP42RxZVL2bFVsOs= Subject key identifier: D9:93:FC:DB:92:99:83:2D:4D:B6:96:AD:49:FA:78:36:45:30:CC:A1 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 043A83FDD5B2C20438120261A577362453553D14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 65 Signing time: Wed 25 Mar 2026 08:01:57 +0000 Manifest this update: Wed 25 Mar 2026 07:56:57 +0000 Manifest next update: Sat 28 Mar 2026 15:16:57 +0000 Files and hashes: 1: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) 2: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: 9JMfHuqVmvD3Rv1jk8hbsiLAdg2rqyc/P3FH8a16jzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3a:83:fd:d5:b2:c2:04:38:12:02:61:a5:77:36:24:53:55:3d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Mar 25 07:56:57 2026 GMT Not After : Mar 28 15:16:57 2026 GMT Subject: CN=D993FCDB9299832D4DB696AD49FA78364530CCA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:bd:45:b8:6d:80:c2:db:d5:97:54:44:6a: 4e:01:93:0b:57:6c:eb:4c:a1:d7:9b:dc:a0:dc:d9: 81:89:1c:bc:81:b8:09:6f:e7:b2:dd:f1:f4:85:51: 32:1e:e1:be:09:96:cc:fb:90:58:ff:9b:66:a7:90: b1:9a:57:50:d4:8c:9d:2c:3f:5e:27:ee:80:54:0c: cc:5c:39:96:a4:b7:a2:3b:0c:60:fa:9b:f7:9b:64: a8:26:8d:20:7c:e9:93:63:1c:8b:3a:b2:d0:b0:b8: f9:38:e5:ad:b9:2c:67:42:38:e2:9d:b3:ca:e9:c4: 99:e3:f8:40:e3:fd:80:14:ee:35:36:1e:43:55:ab: 55:ef:15:3d:d6:25:6b:ea:6a:6a:d9:de:fc:30:eb: ef:b7:c1:50:47:d5:03:f4:42:54:b2:64:1f:2c:a6: 6b:f9:66:3a:4a:78:ab:68:dd:96:7a:d4:9b:a1:3f: 8e:32:51:3a:6e:fc:b7:33:53:7f:a9:6b:83:a7:63: 9b:dd:dc:ec:69:bc:4b:28:f4:28:be:ae:04:12:04: 9d:bb:db:81:65:26:f0:1f:c9:cb:6a:fa:80:58:3a: 3a:85:16:40:b8:62:fd:b6:19:97:50:2a:4d:2d:e1: 3a:af:6f:94:34:56:51:14:9b:de:d4:1d:66:87:d8: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:FC:DB:92:99:83:2D:4D:B6:96:AD:49:FA:78:36:45:30:CC:A1 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:87:ec:75:d3:65:75:43:6c:66:0f:a2:de:a4:1f:cd:8d:3c: cc:78:f3:f9:ee:16:07:08:a6:7b:1a:76:50:81:9d:94:f8:7d: 88:dc:0c:a2:56:12:9e:a9:b5:7e:ec:37:65:31:b1:30:9a:e4: d5:bd:59:d3:c3:48:b1:b9:bc:7d:78:e5:76:0d:88:16:f7:1c: 12:1b:5a:29:17:e6:d5:00:39:35:3f:3f:19:ae:7b:90:95:4a: 18:e1:7c:33:2b:e2:08:10:87:90:82:e6:21:e7:a8:08:de:6f: d0:31:ee:f9:7f:14:b5:c8:ce:72:d3:15:37:18:ec:13:c1:36: 92:a2:79:27:45:da:42:a2:92:ae:cf:4b:40:f1:07:2d:e9:44: ca:05:a6:61:22:e6:6a:c7:3f:8e:22:b4:f9:37:c6:79:d7:f2: 3e:80:ba:9f:9b:2c:a6:77:55:0e:ed:6a:c9:ea:5a:38:32:b5: 44:9c:dd:d4:d7:a7:64:85:b0:13:16:0b:57:d5:aa:dc:19:3d: d3:a8:7d:13:5d:01:13:16:8f:2c:a8:74:d2:c5:e2:ab:ac:1c: 9c:1b:61:65:ee:24:4d:ca:71:28:e0:6e:9f:6c:03:e4:e0:d0: 5d:c4:cf:40:b9:d5:24:4f:64:bc:df:58:5a:e1:94:fa:ac:dc: a9:0e:54:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDqD/dWywgQ4EgJhpXc2JFNVPRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNjAzMjUwNzU2NTdaFw0yNjAzMjgxNTE2NTdaMDMxMTAvBgNV BAMTKEQ5OTNGQ0RCOTI5OTgzMkQ0REI2OTZBRDQ5RkE3ODM2NDUzMENDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOk71FuG2AwtvVl1REak4BkwtX bOtModeb3KDc2YGJHLyBuAlv57Ld8fSFUTIe4b4Jlsz7kFj/m2ankLGaV1DUjJ0s P14n7oBUDMxcOZakt6I7DGD6m/ebZKgmjSB86ZNjHIs6stCwuPk45a25LGdCOOKd s8rpxJnj+EDj/YAU7jU2HkNVq1XvFT3WJWvqamrZ3vww6++3wVBH1QP0QlSyZB8s pmv5ZjpKeKto3ZZ61JuhP44yUTpu/LczU3+pa4OnY5vd3OxpvEso9Ci+rgQSBJ27 24FlJvAfyctq+oBYOjqFFkC4Yv22GZdQKk0t4Tqvb5Q0VlEUm97UHWaH2O0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZP825KZgy1NtpatSfp4NkUwzKEwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqH7HXTZXVDbGYPot6kH82NPMx48/nuFgcI pnsadlCBnZT4fYjcDKJWEp6ptX7sN2UxsTCa5NW9WdPDSLG5vH145XYNiBb3HBIb WikX5tUAOTU/Pxmue5CVShjhfDMr4ggQh5CC5iHnqAjeb9Ax7vl/FLXIznLTFTcY 7BPBNpKieSdF2kKikq7PS0DxBy3pRMoFpmEi5mrHP44itPk3xnnX8j6Aup+bLKZ3 VQ7tasnqWjgytUSc3dTXp2SFsBMWC1fVqtwZPdOofRNdARMWjyyodNLF4qusHJwb YWXuJE3KcSjgbp9sA+Tg0F3Ez0C51SRPZLzfWFrhlPqs3KkOVPc= -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:58 2026 by rpki-client