$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: uTVCEGW5sgo3/Cf2NmelfnoROE+TM3X//k1mFOwzkDU= Subject key identifier: AB:8C:07:17:58:24:9C:E1:3E:D7:B9:AA:EF:3A:83:A4:87:80:BB:CD Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 2E308C14A83251D9F310436197BF5E334B157497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: 011A Signing time: Mon 02 Mar 2026 03:00:50 +0000 Manifest this update: Mon 02 Mar 2026 02:55:49 +0000 Manifest next update: Thu 05 Mar 2026 05:58:49 +0000 Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=) 2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: o1oFb/DnmvCMSFto3iJxiiikxcCM2k9EegQhSEa5P+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:30:8c:14:a8:32:51:d9:f3:10:43:61:97:bf:5e:33:4b:15:74:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Mar 2 02:55:49 2026 GMT Not After : Mar 5 05:58:49 2026 GMT Subject: CN=AB8C071758249CE13ED7B9AAEF3A83A48780BBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:46:ed:52:13:e6:39:49:4c:63:74:8f:62: 70:6a:52:82:3e:34:10:da:e3:b8:e0:b5:5b:7e:73: 60:4a:5f:e3:aa:cd:7e:14:fe:f9:1b:1a:f0:38:d2: 1d:50:a0:8c:16:4e:fa:4b:18:c3:fe:8b:8e:6d:07: f0:ef:13:be:8f:95:f5:ea:e9:57:98:c2:bf:87:58: 7b:c6:f2:d9:a1:f9:a1:b6:1e:f6:f1:48:60:37:55: 9d:61:a0:ae:f7:86:32:c7:c5:a6:7d:c0:dd:1a:36: f6:79:15:cc:c6:36:14:14:ee:5f:83:8f:c0:04:8f: f0:ea:af:f9:95:39:c9:fa:21:5e:92:c6:d8:15:3a: 8e:fc:f9:ff:7a:11:dc:53:77:02:da:3d:af:90:37: 90:28:ae:bc:b8:f8:53:39:7c:53:a0:9c:99:d4:06: ee:9d:b0:c0:37:20:c6:6f:da:71:d6:29:a5:ad:c8: 6d:be:75:15:b5:94:53:a1:9f:cc:ba:94:e1:fb:3c: 02:fe:4a:80:5f:7d:89:1d:00:2e:06:a5:64:7b:1b: 60:7c:47:c6:96:f0:1d:bc:16:0a:fc:57:c6:72:a5: 48:c3:92:8d:7d:4f:82:95:45:c0:92:aa:4d:34:39: 3d:f5:16:d8:4a:1e:aa:29:11:93:29:7f:3b:0c:4d: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8C:07:17:58:24:9C:E1:3E:D7:B9:AA:EF:3A:83:A4:87:80:BB:CD X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:61:dc:0e:76:fa:77:ab:7b:97:4d:7f:e9:4b:c3:a2:8c:37: d5:71:60:6c:b6:51:3d:47:31:9e:1e:33:41:05:4d:ba:76:65: 0b:a7:e6:94:9b:60:db:a6:49:a1:fd:27:14:c6:28:0d:3d:d3: a8:2b:28:08:df:ea:5a:03:39:4e:65:5c:a8:32:ab:36:fd:e8: 17:a9:97:47:a2:53:7b:2a:bf:26:60:e4:cc:f7:ff:a8:13:25: 1c:d0:67:1c:c0:19:c1:cf:2c:96:6d:7c:f9:6d:95:3b:aa:4b: 6b:0a:60:84:da:25:4c:1c:aa:33:ac:a7:70:1a:21:8e:6e:34: b7:e0:1b:2a:97:63:a1:fb:1c:d7:05:76:76:44:f1:21:df:8b: 65:79:66:46:48:82:9c:1e:0d:9e:78:ca:4f:0c:39:ee:48:85: 1d:5b:0e:f7:75:88:3a:27:f8:f0:98:61:51:73:90:41:e2:97: 0b:dd:d2:c6:c6:8a:11:9f:fd:5b:e9:47:7b:47:37:b8:66:b4: 32:7f:b9:95:57:13:b4:2c:d3:fb:6c:91:99:cc:6d:2b:7a:75: 19:47:24:ec:6a:ac:b6:9f:76:4b:a2:b7:74:81:76:7d:a6:8e: b1:30:8d:9c:af:e4:30:88:7f:92:18:06:0c:29:a8:f3:c3:40: 71:bd:cd:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjCMFKgyUdnzEENhl79eM0sVdJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNjAzMDIwMjU1NDlaFw0yNjAzMDUwNTU4NDlaMDMxMTAvBgNV BAMTKEFCOEMwNzE3NTgyNDlDRTEzRUQ3QjlBQUVGM0E4M0E0ODc4MEJCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNkbtUhPmOUlMY3SPYnBqUoI+ NBDa47jgtVt+c2BKX+OqzX4U/vkbGvA40h1QoIwWTvpLGMP+i45tB/DvE76PlfXq 6VeYwr+HWHvG8tmh+aG2HvbxSGA3VZ1hoK73hjLHxaZ9wN0aNvZ5FczGNhQU7l+D j8AEj/Dqr/mVOcn6IV6SxtgVOo78+f96EdxTdwLaPa+QN5Aorry4+FM5fFOgnJnU Bu6dsMA3IMZv2nHWKaWtyG2+dRW1lFOhn8y6lOH7PAL+SoBffYkdAC4GpWR7G2B8 R8aW8B28Fgr8V8ZypUjDko19T4KVRcCSqk00OT31FthKHqopEZMpfzsMTR8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4wHF1gknOE+17mq7zqDpIeAu80wHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMth3A52+nere5dNf+lLw6KMN9VxYGy2UT1H MZ4eM0EFTbp2ZQun5pSbYNumSaH9JxTGKA0906grKAjf6loDOU5lXKgyqzb96Bep l0eiU3sqvyZg5Mz3/6gTJRzQZxzAGcHPLJZtfPltlTuqS2sKYITaJUwcqjOsp3Aa IY5uNLfgGyqXY6H7HNcFdnZE8SHfi2V5ZkZIgpweDZ54yk8MOe5IhR1bDvd1iDon +PCYYVFzkEHilwvd0sbGihGf/VvpR3tHN7hmtDJ/uZVXE7Qs0/tskZnMbSt6dRlH JOxqrLafdkuit3SBdn2mjrEwjZyv5DCIf5IYBgwpqPPDQHG9zZY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:10 2026 by rpki-client