$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: nsbEd7do+qwu0LR58Gnoa0+HB30fBB9gcxn2XqxZ3ig= Subject key identifier: 3C:D4:1E:0C:58:83:0A:0B:91:E8:88:83:3E:27:18:45:90:B8:AA:F3 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 090DAA90E415CD204A7B8FABE84F366B09B7E585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 012E Signing time: Wed 25 Mar 2026 21:00:06 +0000 Manifest this update: Wed 25 Mar 2026 20:55:06 +0000 Manifest next update: Sat 28 Mar 2026 21:56:06 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: f1P6VE72BKVpqc1K9wim+T8T+Eg6ITsjeYU9I72DwWk=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: vGh2St9nX3pCTUIzzPcvPvpTzzNgw/FhkJ2xWSsEdQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0d:aa:90:e4:15:cd:20:4a:7b:8f:ab:e8:4f:36:6b:09:b7:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Mar 25 20:55:06 2026 GMT Not After : Mar 28 21:56:06 2026 GMT Subject: CN=3CD41E0C58830A0B91E888833E27184590B8AAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:b7:7d:4e:25:94:28:12:4c:af:76:af:a4: 0e:bb:19:aa:4a:59:b3:cd:6f:d9:3d:5e:7d:13:02: ec:a5:76:da:3b:d9:4b:1a:ac:2c:4e:33:76:80:89: dc:ee:3e:19:1b:45:a9:d4:f8:95:d2:f4:0f:70:53: 49:46:4c:b8:f1:20:56:e6:4e:12:2a:9c:0e:34:dc: 1d:f5:68:c8:2b:ad:dd:dc:6f:f3:e6:f8:f4:d9:e3: 1d:10:a4:a1:ac:04:6e:db:6d:cf:65:56:d3:7b:00: 3b:9c:09:80:12:5a:d6:50:ad:bb:7b:89:92:bd:c7: e8:8d:43:17:ea:c4:b5:be:19:c9:07:69:33:3d:b9: d4:2b:03:9c:99:af:66:34:82:67:23:cf:26:f4:77: 74:0d:9d:ad:3b:05:d2:8c:59:f0:4e:f4:ba:6d:f7: ea:29:75:ec:da:59:55:7a:52:6c:39:4f:1a:5f:dd: 6e:e9:5e:f1:4e:e4:eb:d1:b4:66:33:17:49:d0:5d: ee:3c:d4:5e:6b:2a:c6:cd:e4:27:1e:60:30:05:69: 83:a3:fc:36:46:10:f7:4f:85:7d:45:e4:58:d2:56: 61:1a:41:35:f2:8e:d9:be:6b:82:cd:4a:82:b7:b4: 71:1f:c6:31:3a:60:1d:9b:4a:9f:89:50:de:6a:fd: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:1E:0C:58:83:0A:0B:91:E8:88:83:3E:27:18:45:90:B8:AA:F3 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6f:3b:66:4c:4b:8e:a8:15:6a:3a:1f:8d:02:b2:a5:90:de: 79:e8:a0:b9:c6:76:5a:3d:a7:db:bd:b6:18:8a:34:77:52:cc: 6e:25:f0:40:9b:c2:90:ca:ec:3c:ea:8d:23:d9:26:31:24:54: 39:2f:a4:e8:5a:01:57:b4:60:df:6a:e3:8b:21:26:b6:cc:8e: 5e:de:cc:e5:a1:84:d0:09:2f:59:00:9c:9b:d0:d3:33:e1:8b: c3:23:71:2e:eb:99:91:42:3a:e4:91:92:a6:6b:1d:0b:ae:77: fb:ce:82:48:24:7b:85:f7:2f:38:a7:7b:e1:78:be:e1:2b:1b: 9f:5b:31:61:bf:e4:15:ce:01:05:16:ba:2b:76:b1:4d:b2:93: e6:7b:a8:c4:17:a3:40:71:76:bc:d8:cf:25:7a:c0:ec:47:8e: 29:8f:f7:39:c9:26:24:68:19:e1:8e:92:58:08:65:3a:66:09: 9e:60:17:ff:2d:cd:11:f2:ca:40:9a:1c:c2:23:e8:33:2a:29: 71:14:54:54:b6:ad:d2:52:5a:26:9f:6c:b7:7e:de:4b:e9:0f: 31:aa:47:19:b9:c2:5b:f2:ab:10:3e:d4:d7:97:b8:06:d0:6e: 84:80:87:ea:9b:ae:95:00:56:36:d9:48:32:76:0f:ae:ac:a1: 14:66:5e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQ2qkOQVzSBKe4+r6E82awm35YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjAzMjUyMDU1MDZaFw0yNjAzMjgyMTU2MDZaMDMxMTAvBgNV BAMTKDNDRDQxRTBDNTg4MzBBMEI5MUU4ODg4MzNFMjcxODQ1OTBCOEFBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJS7d9TiWUKBJMr3avpA67GapK WbPNb9k9Xn0TAuyldto72UsarCxOM3aAidzuPhkbRanU+JXS9A9wU0lGTLjxIFbm ThIqnA403B31aMgrrd3cb/Pm+PTZ4x0QpKGsBG7bbc9lVtN7ADucCYASWtZQrbt7 iZK9x+iNQxfqxLW+GckHaTM9udQrA5yZr2Y0gmcjzyb0d3QNna07BdKMWfBO9Lpt 9+opdezaWVV6Umw5Txpf3W7pXvFO5OvRtGYzF0nQXe481F5rKsbN5CceYDAFaYOj /DZGEPdPhX1F5FjSVmEaQTXyjtm+a4LNSoK3tHEfxjE6YB2bSp+JUN5q/RshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPNQeDFiDCguR6IiDPicYRZC4qvMwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdvO2ZMS46oFWo6H40CsqWQ3nnooLnGdlo9 p9u9thiKNHdSzG4l8ECbwpDK7DzqjSPZJjEkVDkvpOhaAVe0YN9q44shJrbMjl7e zOWhhNAJL1kAnJvQ0zPhi8MjcS7rmZFCOuSRkqZrHQuud/vOgkgke4X3Lzine+F4 vuErG59bMWG/5BXOAQUWuit2sU2yk+Z7qMQXo0BxdrzYzyV6wOxHjimP9znJJiRo GeGOklgIZTpmCZ5gF/8tzRHyykCaHMIj6DMqKXEUVFS2rdJSWiafbLd+3kvpDzGq Rxm5wlvyqxA+1NeXuAbQboSAh+qbrpUAVjbZSDJ2D66soRRmXhk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:50:59 2026 by rpki-client