$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: n4LCM8VWBM1QrfzIXF9NAAiy5r4I11ocyrahjMRDmOs= Subject key identifier: 48:4C:E3:ED:FC:B3:1B:54:2C:5F:B0:8A:C2:32:9E:9D:98:05:77:49 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 77A3AC126695C393E4F6E6574937000DE63D62E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 014B Signing time: Fri 17 Apr 2026 01:22:33 +0000 Manifest this update: Fri 17 Apr 2026 01:17:33 +0000 Manifest next update: Mon 20 Apr 2026 09:38:33 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: zkuKMztQVpFbP+vk6UzTgul838fsU3IH99wSxRmRYwI=) 2: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: xcCSIa0biyjxFlMtRquNHw18rPNfOGqpjKNccbP3+M4=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a3:ac:12:66:95:c3:93:e4:f6:e6:57:49:37:00:0d:e6:3d:62:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Apr 17 01:17:33 2026 GMT Not After : Apr 20 09:38:33 2026 GMT Subject: CN=484CE3EDFCB31B542C5FB08AC2329E9D98057749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:b2:4e:a1:a5:f7:ea:1a:25:81:4c:6e:5f: a6:2a:c5:6d:98:eb:f3:a6:e8:48:8b:ac:78:03:15: 67:9b:f3:75:60:cf:72:41:8d:e0:cb:9c:dd:02:5a: 13:bb:bd:60:5f:9c:fb:85:67:4b:cb:29:e8:11:26: e8:b6:d0:eb:c4:c8:d6:e3:94:9c:23:fe:3e:20:1a: d5:ce:7b:d4:df:28:ca:59:b9:f4:00:45:2c:c3:94: e9:5b:2b:1e:11:c1:5d:37:44:d3:5e:bb:53:98:54: 2f:20:df:48:39:5e:40:2d:e9:8d:8a:1e:a6:1a:c0: c4:3d:f9:18:9d:68:3a:92:41:b5:d6:c8:f6:18:c8: 70:4f:89:35:5a:af:22:d0:a1:75:e0:c8:49:75:5a: 85:fd:53:d4:1f:33:0a:a6:41:f5:b7:83:48:49:9b: dc:7f:34:e6:72:fc:d4:82:93:49:49:d1:8f:ad:0e: 5e:02:a3:22:cb:a9:c2:0d:1a:d7:98:2f:72:21:59: 0b:6e:d0:02:58:9f:c0:9b:2f:a1:18:10:dc:8a:f6: ae:0c:ff:ad:57:c3:27:af:be:ef:4a:9f:45:d1:aa: a7:29:c1:f2:74:84:1b:5f:3d:fc:c9:a7:5a:1b:64: 5b:5c:f6:06:5c:e3:97:4a:d9:0b:4a:78:5d:20:1f: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:E3:ED:FC:B3:1B:54:2C:5F:B0:8A:C2:32:9E:9D:98:05:77:49 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:e6:a7:96:b2:ac:6e:71:af:33:9b:61:00:9b:37:35:7d: 64:2a:68:86:ac:88:a0:3d:fe:1b:89:45:01:d4:17:e5:c3:7e: f6:23:eb:a7:06:f3:7f:f9:2c:8f:8a:e0:0e:30:a5:85:88:a5: c3:38:55:3d:e7:11:e6:ce:09:d8:d7:d2:f9:ac:ef:cd:22:a2: 8b:2f:c1:aa:7f:06:40:e6:b5:40:ff:fd:b6:71:a5:bb:4f:36: 0b:91:5c:d3:23:7b:31:ff:3c:fa:61:1e:a6:78:df:7b:52:26: f9:3f:0b:3e:95:58:34:de:fe:56:6b:be:49:bd:d0:b5:d2:10: b6:57:53:f4:fd:3a:dc:d8:a8:b9:fc:1b:78:1c:b9:36:e5:ea: 4b:9d:9f:13:4d:63:c4:1b:bc:34:cb:09:a8:ae:bb:01:0a:67: 2e:01:20:4a:cf:33:09:37:c0:cf:24:05:95:2c:60:2e:b3:88: 33:b5:a5:8d:67:0d:0e:88:96:dc:ce:1a:b1:a0:03:8b:04:5d: ba:06:8c:f5:88:9a:7c:71:f2:fa:d3:74:00:7a:d7:65:cd:6f: c1:3d:a8:48:f5:17:65:99:c4:b4:0e:5f:71:27:18:bc:0c:2e: 48:12:91:4d:65:df:21:90:22:bb:4f:b0:d5:07:77:04:bf:a9: 49:08:b5:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6OsEmaVw5Pk9uZXSTcADeY9YuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjA0MTcwMTE3MzNaFw0yNjA0MjAwOTM4MzNaMDMxMTAvBgNV BAMTKDQ4NENFM0VERkNCMzFCNTQyQzVGQjA4QUMyMzI5RTlEOTgwNTc3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41bJOoaX36holgUxuX6YqxW2Y 6/Om6EiLrHgDFWeb83Vgz3JBjeDLnN0CWhO7vWBfnPuFZ0vLKegRJui20OvEyNbj lJwj/j4gGtXOe9TfKMpZufQARSzDlOlbKx4RwV03RNNeu1OYVC8g30g5XkAt6Y2K HqYawMQ9+RidaDqSQbXWyPYYyHBPiTVaryLQoXXgyEl1WoX9U9QfMwqmQfW3g0hJ m9x/NOZy/NSCk0lJ0Y+tDl4CoyLLqcINGteYL3IhWQtu0AJYn8CbL6EYENyK9q4M /61Xwyevvu9Kn0XRqqcpwfJ0hBtfPfzJp1obZFtc9gZc45dK2QtKeF0gH5UpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEzj7fyzG1QsX7CKwjKenZgFd0kwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdP5qeWsqxuca8zm2EAmzc1fWQqaIasiKA9 /huJRQHUF+XDfvYj66cG83/5LI+K4A4wpYWIpcM4VT3nEebOCdjX0vms780ioosv wap/BkDmtUD//bZxpbtPNguRXNMjezH/PPphHqZ433tSJvk/Cz6VWDTe/lZrvkm9 0LXSELZXU/T9OtzYqLn8G3gcuTbl6kudnxNNY8QbvDTLCaiuuwEKZy4BIErPMwk3 wM8kBZUsYC6ziDO1pY1nDQ6IltzOGrGgA4sEXboGjPWImnxx8vrTdAB612XNb8E9 qEj1F2WZxLQOX3EnGLwMLkgSkU1l3yGQIrtPsNUHdwS/qUkItdw= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:53 2026 by rpki-client