$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: yK2ToTIyd5i6AZwO0zsiUAWT+0PAUhW5+rnIis2NGuk= Subject key identifier: E7:77:87:59:66:D6:9F:8E:24:07:49:3F:07:4B:93:F4:F2:FC:34:DC Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 592CF21DEFF7BE72D02B5737731518D007EDF0DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 0238 Signing time: Thu 26 Mar 2026 10:30:53 +0000 Manifest this update: Thu 26 Mar 2026 10:25:53 +0000 Manifest next update: Sun 29 Mar 2026 21:16:53 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: sgJZfuSfi7ibLZBeQWberD6z7a2h3yswtOxW9SIlJWQ=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2c:f2:1d:ef:f7:be:72:d0:2b:57:37:73:15:18:d0:07:ed:f0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Mar 26 10:25:53 2026 GMT Not After : Mar 29 21:16:53 2026 GMT Subject: CN=E777875966D69F8E2407493F074B93F4F2FC34DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:70:58:0b:a5:77:07:16:42:f0:f8:3e:aa: e2:ad:47:83:45:ce:f9:69:ca:0c:05:bd:6f:76:88: 63:65:ad:4e:c0:cf:67:70:d4:3d:9c:02:23:51:3f: 6b:97:81:36:4f:7c:69:0d:cc:bf:48:b8:a6:8b:bf: 95:0c:6f:4e:e1:1b:db:45:31:17:aa:82:ad:c0:d5: 00:64:62:70:df:fa:a1:b5:f7:cc:67:a8:78:86:52: c7:a3:65:40:fd:6c:10:ff:d1:80:19:a8:0a:e5:c4: 81:9d:c6:e7:ef:ea:92:4b:da:d3:ff:61:7f:c1:96: ff:5e:c4:a7:2b:96:a8:48:12:8f:4f:02:7e:eb:a1: ea:35:3c:7d:61:e6:af:89:48:f2:6f:b8:18:a5:c0: 77:0f:2a:26:2d:aa:2a:88:52:7d:62:0e:04:9a:2e: d5:80:be:5e:2b:2f:88:a3:05:55:d3:1a:67:57:8d: a4:6a:5a:54:24:64:39:fd:9e:9a:b6:24:89:3c:27: 65:08:59:6b:7a:c6:20:ba:6f:c9:0b:13:4b:59:dc: 4b:ef:a6:22:54:05:41:07:c6:ef:ea:b6:38:36:85: 30:9a:a0:3f:61:45:e4:76:87:f7:89:fe:df:d3:c5: 9f:68:0c:20:dd:ac:b5:7d:24:4b:70:0d:fa:f7:77: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:87:59:66:D6:9F:8E:24:07:49:3F:07:4B:93:F4:F2:FC:34:DC X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a8:94:7d:bc:ba:ef:61:ee:a5:fb:ef:18:bf:fc:b9:d6:25: 55:80:21:54:64:f8:bb:fb:32:99:17:21:eb:8f:87:f1:b7:5b: 68:e5:8b:99:8a:e5:89:36:fd:22:07:a7:e0:6d:eb:04:61:a5: 56:c1:be:83:90:7b:3b:74:87:3f:44:89:57:38:76:b0:b0:8b: bc:88:12:34:bf:34:4e:a4:2e:2b:bb:a6:f8:3f:5e:17:7d:86: 52:67:5d:aa:b6:76:70:f5:16:62:a8:b4:8c:64:b2:f0:bb:72: 46:18:cc:a0:29:6e:29:1b:82:3b:1f:c6:ba:94:49:7c:e1:76: 20:9e:53:73:87:e6:50:3e:bd:3b:35:c7:90:29:c4:6e:22:6d: c7:9f:69:8f:ec:c4:ea:b6:70:1c:33:4a:62:38:ee:f3:dc:52: 10:28:82:e0:d3:a9:84:46:d8:3d:00:f1:e7:b1:d0:d7:20:2c: 02:68:17:db:75:c4:dd:98:e2:b0:14:47:c2:84:83:ed:15:5a: a2:03:92:a2:ca:da:29:33:32:24:49:7d:7f:88:7e:25:5a:8c: 35:d8:2f:07:72:6b:ee:d4:d5:a6:fe:4f:b2:a8:72:16:1c:91: a6:e8:d4:3d:b8:f3:7e:58:31:5d:fc:00:29:ab:52:23:ad:67: 5f:f6:20:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSzyHe/3vnLQK1c3cxUY0Aft8N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNjAzMjYxMDI1NTNaFw0yNjAzMjkyMTE2NTNaMDMxMTAvBgNV BAMTKEU3Nzc4NzU5NjZENjlGOEUyNDA3NDkzRjA3NEI5M0Y0RjJGQzM0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrXBYC6V3BxZC8Pg+quKtR4NF zvlpygwFvW92iGNlrU7Az2dw1D2cAiNRP2uXgTZPfGkNzL9IuKaLv5UMb07hG9tF MReqgq3A1QBkYnDf+qG198xnqHiGUsejZUD9bBD/0YAZqArlxIGdxufv6pJL2tP/ YX/Blv9exKcrlqhIEo9PAn7roeo1PH1h5q+JSPJvuBilwHcPKiYtqiqIUn1iDgSa LtWAvl4rL4ijBVXTGmdXjaRqWlQkZDn9npq2JIk8J2UIWWt6xiC6b8kLE0tZ3Evv piJUBUEHxu/qtjg2hTCaoD9hReR2h/eJ/t/TxZ9oDCDdrLV9JEtwDfr3d7kfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53eHWWbWn44kB0k/B0uT9PL8NNwwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmolH28uu9h7qX77xi//LnWJVWAIVRk+Lv7 MpkXIeuPh/G3W2jli5mK5Yk2/SIHp+Bt6wRhpVbBvoOQezt0hz9EiVc4drCwi7yI EjS/NE6kLiu7pvg/Xhd9hlJnXaq2dnD1FmKotIxksvC7ckYYzKApbikbgjsfxrqU SXzhdiCeU3OH5lA+vTs1x5ApxG4ibcefaY/sxOq2cBwzSmI47vPcUhAoguDTqYRG 2D0A8eex0NcgLAJoF9t1xN2Y4rAUR8KEg+0VWqIDkqLK2ikzMiRJfX+IfiVajDXY Lwdya+7U1ab+T7KochYckabo1D24835YMV38ACmrUiOtZ1/2IB4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:31 2026 by rpki-client