$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: 5kPJzjh4VSVwSyh+RvQ/t7fK874D/33yedkZj+7GDfE= Subject key identifier: D0:F9:E6:7C:5B:3B:0A:32:E1:72:B0:DF:6A:E6:CF:33:A3:7F:DE:48 Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 33CABEBDDA06522E5D67C6E053815B6DA25E6B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 06:51:15 +0000 Manifest this update: Tue 24 Mar 2026 06:46:15 +0000 Manifest next update: Fri 27 Mar 2026 08:10:15 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: /rdwUl2HAxGjtJyxvDNC2J95XYpKXNBUNIyKkcuv76s=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ca:be:bd:da:06:52:2e:5d:67:c6:e0:53:81:5b:6d:a2:5e:6b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Mar 24 06:46:15 2026 GMT Not After : Mar 27 08:10:15 2026 GMT Subject: CN=D0F9E67C5B3B0A32E172B0DF6AE6CF33A37FDE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:49:d5:55:2f:16:db:ef:b1:1d:97:fa:de: 2c:60:b1:3c:a1:d1:59:db:ec:de:07:41:52:44:de: 1d:71:3d:59:b5:af:ac:e1:33:46:6c:18:d4:f6:b1: 09:1a:21:83:c2:37:58:7f:bf:82:a8:0b:71:98:66: 9e:1e:a8:eb:1b:e2:ba:ce:82:50:e1:d2:ca:d5:d3: f7:f4:2a:dd:91:18:3a:fd:cc:98:a6:7f:1a:6e:fa: 81:dc:97:b8:be:74:c3:a1:2e:dd:7e:6a:5e:b8:6d: ef:b1:ea:27:f8:7f:77:9c:58:7c:fc:39:08:8d:69: 43:9d:09:6a:b1:95:42:d6:03:29:5b:7d:99:3e:82: ad:4c:07:3b:5a:13:ff:b6:6e:ea:6a:b3:fa:ba:97: 92:94:33:d7:e3:b1:10:0c:65:fb:db:9f:d0:7c:0f: cc:e2:e1:96:dc:90:13:0d:90:86:05:e0:27:d5:e5: 36:8a:1a:ac:0a:b4:ea:72:bc:2b:b3:bf:0d:a7:0b: 2b:42:a3:93:f7:d9:ae:ac:ad:e8:0d:4c:bc:d8:0c: 49:cf:9d:79:34:d5:0b:2f:9e:48:d3:95:a5:88:0d: d8:a4:83:76:c1:93:b0:95:c0:ee:f0:55:4b:2f:8c: 22:51:7c:94:30:31:ad:05:26:f9:64:d2:37:43:30: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:E6:7C:5B:3B:0A:32:E1:72:B0:DF:6A:E6:CF:33:A3:7F:DE:48 X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:06:3d:46:e6:54:5a:1d:11:b7:54:00:93:c9:32:25:48:67: 50:a2:90:da:da:84:f2:1a:18:e0:a6:f2:31:b9:67:d5:09:2a: 8d:c0:e0:9a:64:af:12:dd:06:7f:a4:9d:59:c9:42:92:48:29: a9:e9:d9:52:e5:71:5d:99:53:24:b8:58:f9:e3:b8:f3:e2:23: d1:aa:76:d7:94:52:e8:1a:cd:d5:41:50:0d:05:08:39:35:15: a4:5e:dc:73:af:99:df:40:be:31:55:36:a0:48:6f:5f:4c:6d: 50:ec:ce:8b:5d:02:13:1b:c2:29:ec:90:f9:c0:fd:82:19:4e: b5:67:a3:0b:84:1b:a6:ef:64:6e:74:5a:68:e8:c7:27:02:d8: 98:9c:18:ff:74:23:ac:72:a5:cb:1d:91:7a:1e:65:81:96:6a: 80:fe:ac:7d:c5:1a:64:c9:ed:74:6f:79:c3:28:0a:66:ce:42: 22:04:d7:3b:d7:a5:2a:56:6e:0c:1b:ef:d6:b6:ab:12:d8:35: 01:9e:29:92:8f:e8:55:a6:2c:3c:35:12:29:c2:4d:97:e1:6d: 1b:13:33:01:c1:6d:f7:e5:e2:1b:91:b3:1b:3d:46:2c:b0:5a: 89:3a:f1:54:3c:e4:fd:3c:d1:79:59:b6:31:d8:33:b5:d8:92: d8:a9:17:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8q+vdoGUi5dZ8bgU4FbbaJea38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNjAzMjQwNjQ2MTVaFw0yNjAzMjcwODEwMTVaMDMxMTAvBgNV BAMTKEQwRjlFNjdDNUIzQjBBMzJFMTcyQjBERjZBRTZDRjMzQTM3RkRFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXAknVVS8W2++xHZf63ixgsTyh 0Vnb7N4HQVJE3h1xPVm1r6zhM0ZsGNT2sQkaIYPCN1h/v4KoC3GYZp4eqOsb4rrO glDh0srV0/f0Kt2RGDr9zJimfxpu+oHcl7i+dMOhLt1+al64be+x6if4f3ecWHz8 OQiNaUOdCWqxlULWAylbfZk+gq1MBztaE/+2bupqs/q6l5KUM9fjsRAMZfvbn9B8 D8zi4ZbckBMNkIYF4CfV5TaKGqwKtOpyvCuzvw2nCytCo5P32a6sregNTLzYDEnP nXk01QsvnkjTlaWIDdikg3bBk7CVwO7wVUsvjCJRfJQwMa0FJvlk0jdDMJ1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0PnmfFs7CjLhcrDfaubPM6N/3kgwHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcGPUbmVFodEbdUAJPJMiVIZ1CikNrahPIa GOCm8jG5Z9UJKo3A4JpkrxLdBn+knVnJQpJIKanp2VLlcV2ZUyS4WPnjuPPiI9Gq dteUUugazdVBUA0FCDk1FaRe3HOvmd9AvjFVNqBIb19MbVDszotdAhMbwinskPnA /YIZTrVnowuEG6bvZG50WmjoxycC2JicGP90I6xypcsdkXoeZYGWaoD+rH3FGmTJ 7XRvecMoCmbOQiIE1zvXpSpWbgwb79a2qxLYNQGeKZKP6FWmLDw1EinCTZfhbRsT MwHBbffl4huRsxs9RiywWok68VQ85P080XlZtjHYM7XYktipF/8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:45 2026 by rpki-client